This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft File: fzdyg9fCNak9x70rgxeydI8oX_c.mft (raw, json) Hash identifier: G6WDPs2+o9yP6KZHb7SlXyIwD0pDSlLL0AwiHOoAUOc= Subject key identifier: 5A:EE:E2:FB:DC:B5:48:8E:ED:68:FF:8B:0B:4C:59:74:84:CA:B1:E9 Authority key identifier: 7F:37:72:83:D7:C2:35:A9:3D:C7:BD:2B:83:17:B2:74:8F:28:5F:F7 Certificate issuer: /CN=7f377283d7c235a93dc7bd2b8317b2748f285ff7 Certificate serial: 019AF16418CF5001ABA74C686479C4B0553A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft Manifest number: 52 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: fzdyg9fCNak9x70rgxeydI8oX_c.crl (hash: /EdVcIaPiYH83s5mx4ywPLSMx0q93Q9TpJwGEWFn7gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:18:cf:50:01:ab:a7:4c:68:64:79:c4:b0:55:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f377283d7c235a93dc7bd2b8317b2748f285ff7 Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=5aeee2fbdcb5488eed68ff8b0b4c597484cab1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2e:e6:2f:0d:eb:c9:fd:0a:4c:fa:4c:50:70: 1e:7e:e9:d4:e1:d1:09:5b:06:3a:67:76:49:80:20: ab:69:8c:6f:43:36:a1:ec:25:73:4e:1f:e8:a3:79: b7:8f:a8:bc:27:1f:60:01:f9:00:29:91:8e:ae:92: b3:c0:1c:df:b4:52:f5:d0:05:e7:69:8c:5a:77:d2: c4:11:bf:c0:36:7e:2b:e1:9b:19:65:65:3c:95:f3: ed:7a:2d:07:79:c6:96:28:a6:12:3c:5a:9b:63:57: 5f:33:86:a7:c5:c7:40:3b:f0:f8:2b:eb:90:5f:06: 04:3b:75:8c:fd:c5:bf:a1:ec:c9:ad:cd:be:b1:d9: 7d:78:37:fb:3a:76:78:2d:70:90:a8:f3:64:bb:37: db:a6:b9:4d:2e:49:d7:cc:cb:a9:0b:9e:ec:97:d5: af:cd:7f:d4:b8:14:05:52:15:c3:f5:7e:5d:62:b3: 41:45:a5:ef:a5:ff:72:bf:be:33:04:71:36:11:fd: 98:8b:b4:cf:06:91:96:7d:2e:0e:f7:58:91:ed:e5: f4:75:eb:bf:c0:02:66:57:31:b7:39:e1:6e:9f:7e: ec:45:b9:ad:d4:1c:7b:71:5d:69:9a:a6:25:54:cf: 2b:4a:4c:14:56:d5:c4:e1:95:f7:cb:6d:75:21:45: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EE:E2:FB:DC:B5:48:8E:ED:68:FF:8B:0B:4C:59:74:84:CA:B1:E9 X509v3 Authority Key Identifier: keyid:7F:37:72:83:D7:C2:35:A9:3D:C7:BD:2B:83:17:B2:74:8F:28:5F:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e2:57:66:88:50:aa:f9:5a:78:64:40:0f:20:aa:0b:f4:35: a5:04:02:f0:da:16:48:d5:d1:75:05:6c:d6:14:d7:f0:cc:48: d1:f6:0c:52:f4:29:d3:c6:46:59:87:47:55:42:70:dc:bf:c2: 24:bf:4a:2f:6b:d4:d2:5c:2f:ee:82:12:55:1d:a7:7b:a0:6a: b4:b5:c4:d5:aa:9e:64:c8:3a:89:66:5f:86:55:7d:f2:23:e5: a7:b8:48:b0:4f:26:a2:7c:48:c0:07:ce:51:ec:1b:e5:b9:e4: c2:c0:49:a3:36:38:1f:92:ec:ab:d3:a3:99:15:3b:1c:26:ab: 9d:66:72:0c:7e:e0:1c:33:48:18:5b:94:81:ac:69:23:0d:16: 81:c3:07:0b:d8:d3:ab:3c:f4:73:64:8b:98:05:bb:f6:c7:21: 4a:8b:c4:a9:2d:ab:11:36:5c:b8:ea:cf:90:6c:79:52:ab:21: 0f:0d:89:e4:1a:55:fb:c6:ab:94:91:e5:d6:10:c4:eb:10:5b: 12:ee:2e:71:13:3c:42:29:30:ea:11:4e:d1:35:4c:05:06:6c: d5:e7:9d:1c:70:de:35:9c:47:fb:03:f5:03:e4:77:dc:33:71: 34:ef:40:a0:ac:ba:95:09:03:b7:d9:ca:9d:56:ac:ec:86:17: e3:2c:cd:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBjPUAGrp0xoZHnEsFU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMzc3MjgzZDdjMjM1YTkzZGM3YmQyYjgzMTdiMjc0OGYy ODVmZjcwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD Eyg1YWVlZTJmYmRjYjU0ODhlZWQ2OGZmOGIwYjRjNTk3NDg0Y2FiMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki7mLw3ryf0KTPpMUHAefunU4dEJ WwY6Z3ZJgCCraYxvQzah7CVzTh/oo3m3j6i8Jx9gAfkAKZGOrpKzwBzftFL10AXn aYxad9LEEb/ANn4r4ZsZZWU8lfPtei0HecaWKKYSPFqbY1dfM4anxcdAO/D4K+uQ XwYEO3WM/cW/oezJrc2+sdl9eDf7OnZ4LXCQqPNkuzfbprlNLknXzMupC57sl9Wv zX/UuBQFUhXD9X5dYrNBRaXvpf9yv74zBHE2Ef2Yi7TPBpGWfS4O91iR7eX0deu/ wAJmVzG3OeFun37sRbmt1Bx7cV1pmqYlVM8rSkwUVtXE4ZX3y211IUXMXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFru4vvctUiO7Wj/iwtMWXSEyrHpMB8GA1UdIwQY MBaAFH83coPXwjWpPce9K4MXsnSPKF/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnpkeWc5ZkNOYWs5eDcwcmd4ZXlkSThvWF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wZmFkZmMtZjQ5Yi00M2U4LWI2MjEt ODMxZTI5NDRmOGZhLzEvZnpkeWc5ZkNOYWs5eDcwcmd4ZXlkSThvWF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wZmFkZmMtZjQ5Yi00M2U4LWI2MjEtODMxZTI5NDRmOGZh LzEvZnpkeWc5ZkNOYWs5eDcwcmd4ZXlkSThvWF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuJXZohQ qvlaeGRADyCqC/Q1pQQC8NoWSNXRdQVs1hTX8MxI0fYMUvQp08ZGWYdHVUJw3L/C JL9KL2vU0lwv7oISVR2ne6BqtLXE1aqeZMg6iWZfhlV98iPlp7hIsE8monxIwAfO Uewb5bnkwsBJozY4H5Lsq9OjmRU7HCarnWZyDH7gHDNIGFuUgaxpIw0WgcMHC9jT qzz0c2SLmAW79schSovEqS2rETZcuOrPkGx5UqshDw2J5BpV+8arlJHl1hDE6xBb Eu4ucRM8Qikw6hFO0TVMBQZs1eedHHDeNZxH+wP1A+R33DNxNO9AoKy6lQkDt9nK nVas7IYX4yzNBA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:22 2025 by rpki-client