This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft File: fmT8p3Ppn2rcgao85cY2I-4rHdc.mft (raw, json) Hash identifier: 75ZWSuijbxlUDX2Vxwrn6J43ro3tnAv56luUDXRty+s= Subject key identifier: 68:DB:0E:63:5C:01:37:13:3B:BD:DB:00:95:77:60:34:53:57:27:01 Authority key identifier: 7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7 Certificate issuer: /CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7 Certificate serial: 019AF0BF44A863507A6EB80F87AED48B8AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft Manifest number: 69 Signing time: Fri 05 Dec 2025 23:00:57 +0000 Manifest this update: Fri 05 Dec 2025 23:00:57 +0000 Manifest next update: Sat 06 Dec 2025 23:00:57 +0000 Files and hashes: 1: HqvZQvxiyKL1MboaLwDryLqqUFg.roa (hash: mT+u/6z5BYwjN/Vy/gZNBZTVxwODTZlmFaA5Aqiy6/E=) 2: fmT8p3Ppn2rcgao85cY2I-4rHdc.crl (hash: N3EbtPjSYvnqhRDf12LjzjmhaDRmeZ/whkiDQf6RjH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:44:a8:63:50:7a:6e:b8:0f:87:ae:d4:8b:8a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7 Validity Not Before: Dec 5 23:00:57 2025 GMT Not After : Dec 6 23:00:57 2025 GMT Subject: CN=68db0e635c0137133bbddb009577603453572701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f2:95:5b:8a:4e:43:fb:06:fe:ae:ef:7a:00: ce:5a:c6:89:34:49:ad:06:7f:0a:5c:98:2d:e6:5d: 10:8c:6f:79:ed:dd:01:dc:a6:6d:87:25:43:09:60: 68:57:b3:75:13:8c:68:6c:37:03:79:0f:de:00:70: 82:c4:af:aa:12:7d:1b:0b:f0:8f:ba:2b:18:92:e4: 64:59:76:99:89:85:b0:9f:2f:17:b5:87:ef:34:85: e9:21:81:ac:93:3a:9a:6f:d9:7d:4d:d1:f6:99:98: 93:2b:d3:7d:7f:57:c0:52:89:be:61:b4:c5:36:88: e0:fc:ed:fb:b1:c2:1e:71:d0:65:2a:eb:eb:e3:68: 77:9d:2e:45:e8:d8:a6:89:50:1c:e1:52:7b:b5:d8: 6c:47:b5:86:09:aa:e7:4f:91:25:aa:c9:1d:41:af: ba:e1:1d:42:ff:0f:ba:27:d2:1c:ce:e2:93:67:04: b1:75:39:95:5c:3b:ed:c0:40:78:ee:a5:4c:a2:92: c3:fd:85:6d:13:f8:83:29:10:2a:0b:a7:e2:ef:09: ba:15:5d:bb:24:a0:28:2e:7b:54:0e:5e:d5:e6:5f: f5:3a:62:fe:73:e5:bf:76:d7:ca:54:98:c2:fe:bc: 14:cf:45:3c:12:28:13:8b:6f:84:e6:b5:d7:cc:5a: 46:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DB:0E:63:5C:01:37:13:3B:BD:DB:00:95:77:60:34:53:57:27:01 X509v3 Authority Key Identifier: keyid:7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:b2:58:47:93:4f:87:64:13:7d:d0:ef:0a:01:80:10:36:21: d3:9b:3c:2e:c6:75:f0:a7:54:9b:20:87:68:e8:df:8a:7d:bc: 29:22:87:ae:6d:25:04:38:c5:6f:4d:dd:be:a4:91:59:8b:16: 2b:30:2e:08:9a:39:0f:fc:ab:bd:5a:1f:90:a4:81:56:91:9e: b7:74:0a:11:6b:ae:ec:59:83:4d:f0:4c:70:df:93:7c:6c:2b: 6c:0f:e3:75:03:84:cc:6e:1f:99:db:a5:d7:24:09:c8:45:a8: d1:69:1d:c7:32:c7:f2:23:92:44:de:c9:e0:e0:de:ab:fc:c9: 19:8f:48:3a:46:06:58:7b:2b:45:a4:24:8e:7c:60:5a:e9:a5: fc:af:96:aa:06:0b:65:b5:7c:be:92:2d:77:c3:c5:8a:4f:2c: 54:6c:d4:09:be:0c:48:25:01:43:5a:bf:50:42:d2:6b:e2:89: 7a:89:e1:e3:4b:fe:b7:c6:e8:31:09:51:2b:dd:bd:b3:98:d8: fb:6f:27:ab:4e:ee:05:19:2e:ef:65:08:1c:a9:aa:e0:fe:b7: 4b:19:77:d0:83:29:70:63:df:a9:af:30:b3:84:eb:8b:d5:e0: 3c:ce:d2:0c:ae:1a:e2:9a:57:5b:3a:a3:b7:9f:37:ee:bc:23: df:37:87:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0SoY1B6brgPh67Ui4rXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjRmY2E3NzNlOTlmNmFkYzgxYWEzY2U1YzYzNjIzZWUy YjFkZDcwHhcNMjUxMjA1MjMwMDU3WhcNMjUxMjA2MjMwMDU3WjAzMTEwLwYDVQQD Eyg2OGRiMGU2MzVjMDEzNzEzM2JiZGRiMDA5NTc3NjAzNDUzNTcyNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fKVW4pOQ/sG/q7vegDOWsaJNEmt Bn8KXJgt5l0QjG957d0B3KZthyVDCWBoV7N1E4xobDcDeQ/eAHCCxK+qEn0bC/CP uisYkuRkWXaZiYWwny8XtYfvNIXpIYGskzqab9l9TdH2mZiTK9N9f1fAUom+YbTF Nojg/O37scIecdBlKuvr42h3nS5F6NimiVAc4VJ7tdhsR7WGCarnT5ElqskdQa+6 4R1C/w+6J9IczuKTZwSxdTmVXDvtwEB47qVMopLD/YVtE/iDKRAqC6fi7wm6FV27 JKAoLntUDl7V5l/1OmL+c+W/dtfKVJjC/rwUz0U8EigTi2+E5rXXzFpGRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjbDmNcATcTO73bAJV3YDRTVycBMB8GA1UdIwQY MBaAFH5k/Kdz6Z9q3IGqPOXGNiPuKx3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1UOHAzUHBuMnJjZ2FvODVjWTJJLTRySGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80ODBkMzYtZDFmZC00ZWViLWI5Yjgt YzUyZGZiMjg5ODQzLzEvZm1UOHAzUHBuMnJjZ2FvODVjWTJJLTRySGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80ODBkMzYtZDFmZC00ZWViLWI5YjgtYzUyZGZiMjg5ODQz LzEvZm1UOHAzUHBuMnJjZ2FvODVjWTJJLTRySGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6bJYR5NP h2QTfdDvCgGAEDYh05s8LsZ18KdUmyCHaOjfin28KSKHrm0lBDjFb03dvqSRWYsW KzAuCJo5D/yrvVofkKSBVpGet3QKEWuu7FmDTfBMcN+TfGwrbA/jdQOEzG4fmdul 1yQJyEWo0WkdxzLH8iOSRN7J4ODeq/zJGY9IOkYGWHsrRaQkjnxgWuml/K+WqgYL ZbV8vpItd8PFik8sVGzUCb4MSCUBQ1q/UELSa+KJeonh40v+t8boMQlRK929s5jY +28nq07uBRku72UIHKmq4P63Sxl30IMpcGPfqa8ws4Tri9XgPM7SDK4a4ppXWzqj t5837rwj3zeHDg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:02 2025 by rpki-client