This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft File: FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json) Hash identifier: rSJ8yzKhYXMliRF06BC9/LBVT4Vh75uyOj9LGHMky1w= Subject key identifier: A0:6F:4E:E9:93:39:67:C4:54:A7:D2:B8:83:43:38:5D:B1:CA:12:7C Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2 Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2 Certificate serial: 019AF2ADD75CA667D2011D6B72FB710286BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:01:10 +0000 Manifest this update: Sat 06 Dec 2025 08:01:10 +0000 Manifest next update: Sun 07 Dec 2025 08:01:10 +0000 Files and hashes: 1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: 3JvkHM+qWNJWvRQmJIvw2RDoMXxIWS6IUVwzQFafll4=) 2: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d7:5c:a6:67:d2:01:1d:6b:72:fb:71:02:86:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2 Validity Not Before: Dec 6 08:01:10 2025 GMT Not After : Dec 7 08:01:10 2025 GMT Subject: CN=a06f4ee9933967c454a7d2b88343385db1ca127c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fc:dc:73:96:1e:7e:e9:21:98:b8:e3:c0:18: 41:87:80:ce:05:3f:1d:5c:a1:d8:74:b3:64:81:86: 76:e8:a0:77:0a:f9:ad:28:e4:05:ea:5e:42:c2:69: 5b:db:7e:1b:55:be:35:69:d1:24:c5:72:62:ae:0f: 23:d4:e9:46:a2:25:1f:e0:31:3a:d2:b7:b6:f5:ae: 61:29:a3:d3:56:ac:0e:ce:95:f1:b0:8b:bc:58:98: 9b:f2:3c:72:eb:d1:5e:28:06:f6:dc:3a:f6:b1:51: d3:26:33:95:ab:86:9a:c2:d5:0c:7b:8f:17:fb:d7: 03:d1:0a:e1:8d:55:78:d5:45:c1:7e:24:bb:e3:ef: df:5c:ab:5e:89:b1:fe:56:38:2d:15:a1:e6:b7:98: 34:d0:df:1b:60:69:a4:b5:52:8a:f9:21:a8:55:d3: 92:5c:ad:27:c5:cd:aa:34:ef:80:d9:26:42:af:dd: c4:64:92:f6:35:57:48:54:58:ae:23:44:45:62:e3: 59:d8:32:5c:18:c7:8e:10:db:33:8c:f2:c6:ac:2e: 96:9c:72:5a:f1:97:af:fd:d8:49:d4:92:2b:f5:1d: dc:5c:88:30:86:42:6f:90:0d:56:f2:a9:e3:37:c9: cf:47:2c:f0:c6:61:68:9b:b7:44:23:74:58:f4:65: 7c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6F:4E:E9:93:39:67:C4:54:A7:D2:B8:83:43:38:5D:B1:CA:12:7C X509v3 Authority Key Identifier: keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:29:fe:8e:df:a2:01:b7:14:e8:41:ca:a5:92:3e:43:21:40: f1:92:72:5b:58:e0:3e:15:da:ba:cc:26:2a:a3:11:10:a7:8c: eb:cf:74:18:2c:49:e3:9e:82:3a:43:69:38:7c:d2:d0:22:14: 7c:22:d4:cc:b4:1c:d0:4f:44:26:a2:9e:8e:7d:d4:9c:f3:68: d6:a1:33:70:7f:c5:2f:13:f9:4a:e8:b0:7a:d3:d4:18:f9:82: 2e:fc:85:10:15:fe:b5:60:6b:a7:38:7f:44:cf:59:41:85:62: da:21:9c:ba:42:c3:b6:33:cb:d7:a4:e7:73:3a:29:ea:bc:94: b7:f1:1a:4b:96:28:88:d8:3e:84:7a:09:e4:ed:fe:b2:e4:84: 6a:6a:de:3e:33:8f:77:1f:a9:3f:1c:92:13:53:20:1e:bb:d1: 73:82:a0:9d:bb:ef:fd:bd:c7:96:0a:b0:d7:c4:a9:c2:4f:a6: f4:aa:b3:fc:a0:55:20:5e:03:1e:3f:d9:b1:eb:a5:98:38:9d: 56:7b:e6:24:42:ae:8b:3d:d8:31:54:3c:49:56:32:ce:26:e2: 83:bd:c9:21:ed:ce:e7:73:68:09:64:9e:e7:1f:12:ad:3a:4f: da:ec:03:f7:bb:c8:89:17:a5:06:03:33:09:6e:10:ba:b8:4c: 89:87:d6:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrddcpmfSAR1rcvtxAoa6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MDRlMThlODYxNjcwNWVjMGYyOTBlNTdjYTgyOWE4MmY1 Zjk2YzIwHhcNMjUxMjA2MDgwMTEwWhcNMjUxMjA3MDgwMTEwWjAzMTEwLwYDVQQD EyhhMDZmNGVlOTkzMzk2N2M0NTRhN2QyYjg4MzQzMzg1ZGIxY2ExMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPzcc5YefukhmLjjwBhBh4DOBT8d XKHYdLNkgYZ26KB3CvmtKOQF6l5Cwmlb234bVb41adEkxXJirg8j1OlGoiUf4DE6 0re29a5hKaPTVqwOzpXxsIu8WJib8jxy69FeKAb23Dr2sVHTJjOVq4aawtUMe48X +9cD0QrhjVV41UXBfiS74+/fXKteibH+VjgtFaHmt5g00N8bYGmktVKK+SGoVdOS XK0nxc2qNO+A2SZCr93EZJL2NVdIVFiuI0RFYuNZ2DJcGMeOENszjPLGrC6WnHJa 8Zev/dhJ1JIr9R3cXIgwhkJvkA1W8qnjN8nPRyzwxmFom7dEI3RY9GV81QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBvTumTOWfEVKfSuINDOF2xyhJ8MB8GA1UdIwQY MBaAFBQE4Y6GFnBewPKQ5XyoKagvX5bCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEt ZTM2ZThkMjkzYWUwLzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEtZTM2ZThkMjkzYWUw LzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACn+jt+i AbcU6EHKpZI+QyFA8ZJyW1jgPhXauswmKqMREKeM6890GCxJ456COkNpOHzS0CIU fCLUzLQc0E9EJqKejn3UnPNo1qEzcH/FLxP5SuiwetPUGPmCLvyFEBX+tWBrpzh/ RM9ZQYVi2iGcukLDtjPL16Tnczop6ryUt/EaS5YoiNg+hHoJ5O3+suSEamrePjOP dx+pPxySE1MgHrvRc4Kgnbvv/b3Hlgqw18Spwk+m9Kqz/KBVIF4DHj/ZseulmDid VnvmJEKuiz3YMVQ8SVYyzibig73JIe3O53NoCWSe5x8SrTpP2uwD97vIiRelBgMz CW4QurhMiYfWZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:53 2025 by rpki-client