This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json) Hash identifier: Em+6gkRlrQIxQp9N+qWv8x919/I725fjyxFHF+Fsi0E= Subject key identifier: 9F:D0:00:84:0A:EF:3B:2D:9F:08:FE:77:99:3F:51:39:96:A7:1D:7E Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96 Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96 Certificate serial: 019AF3523250CD99D8BC9167AFE0968F60F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft Manifest number: 0D51 Signing time: Sat 06 Dec 2025 11:00:41 +0000 Manifest this update: Sat 06 Dec 2025 11:00:41 +0000 Manifest next update: Sun 07 Dec 2025 11:00:41 +0000 Files and hashes: 1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=) 2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: vRv8e08XUF1ZLsptYEWNSicLEqCDp/RL2jEPl2wkn4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:32:50:cd:99:d8:bc:91:67:af:e0:96:8f:60:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96 Validity Not Before: Dec 6 11:00:41 2025 GMT Not After : Dec 7 11:00:41 2025 GMT Subject: CN=9fd000840aef3b2d9f08fe77993f513996a71d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:e2:ad:b3:88:97:bf:e2:30:6d:b7:dc:07: 3e:0d:9f:e4:25:d2:ed:17:40:01:32:0d:8f:42:38: c7:57:0b:7a:8b:c5:99:26:0a:fb:76:e8:b5:76:07: 04:35:d3:59:9f:30:84:ea:e3:02:a0:ab:23:57:a7: a8:78:d5:e9:9a:d3:94:37:e9:cb:28:23:1d:9b:81: 50:4e:9f:e9:6b:70:44:e1:b7:37:93:d5:6d:76:4e: 2c:52:dd:18:a4:75:25:5f:59:ae:50:c6:c3:d3:1d: fa:97:49:74:52:59:94:39:b1:a7:5c:bb:6e:3c:7e: fb:f2:b8:65:2e:c7:d1:9e:30:45:6e:01:08:48:ab: 17:02:4e:71:2e:3f:a7:89:42:01:bc:e0:6a:9c:3c: 12:e7:26:e1:c2:8a:92:6b:8e:13:37:7b:6e:cb:6e: 7f:b8:64:71:c5:31:10:32:c8:20:4a:6f:67:58:b4: c8:46:03:f7:b8:3d:e6:6f:38:4c:b1:e9:61:8f:6e: ca:a2:24:35:73:82:36:e0:96:82:92:52:aa:84:0b: d0:a8:17:02:55:1d:08:86:1b:e1:b4:bf:04:41:fe: 02:9a:85:5b:8f:8d:82:65:a0:fb:e5:b6:65:4d:cb: c6:45:e1:c9:5a:67:7f:1f:94:21:44:34:b3:a7:da: 1c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D0:00:84:0A:EF:3B:2D:9F:08:FE:77:99:3F:51:39:96:A7:1D:7E X509v3 Authority Key Identifier: keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:18:c2:3b:ce:2c:e9:30:26:7d:90:40:a7:be:3c:ab:5b:10: b1:c3:73:f8:3c:4b:a9:2e:e4:59:f2:1e:09:55:27:8b:99:5b: 55:49:a7:44:1a:72:95:22:1f:ba:49:6a:68:bb:58:ad:f3:47: 0b:0e:2b:49:17:b1:8a:e4:a7:87:fa:8f:a6:9e:5e:fa:65:b2: 9e:86:66:ca:4d:f0:c5:43:13:96:17:d7:52:3b:e0:74:56:5a: c3:50:70:39:b9:5b:e0:91:3a:a6:ee:85:4c:f6:b0:d4:96:70: 11:45:f4:2e:8d:6e:5c:92:5c:d3:bf:07:ad:0e:62:25:39:60: 82:88:e4:94:fb:a5:a6:f1:1e:91:fc:0a:2a:a3:3c:b4:7e:8a: 5c:15:5c:e0:20:0e:86:22:70:21:94:b1:35:38:d7:42:3b:bc: 4c:54:89:01:df:72:a2:39:9c:eb:c2:33:43:ca:8b:a1:7d:d3: 39:c7:a6:96:22:6f:58:e3:28:3d:1d:ec:03:c8:7c:75:55:ac: ab:b5:c0:8e:e1:9a:5b:a7:9c:d5:02:56:dc:1b:14:7a:0c:f5: f0:f5:fb:8d:52:04:fe:98:51:c7:d9:29:f3:99:2e:6b:94:99: 71:5b:d6:95:e4:e8:c5:ea:ae:87:1d:dc:3e:13:03:82:d2:1b: ec:b0:20:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjJQzZnYvJFnr+CWj2D5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMzUzMmU1MmVhYWZlZjk0OGM0MmM4YjFkNTExNDVjYWM5 ZDRjOTYwHhcNMjUxMjA2MTEwMDQxWhcNMjUxMjA3MTEwMDQxWjAzMTEwLwYDVQQD Eyg5ZmQwMDA4NDBhZWYzYjJkOWYwOGZlNzc5OTNmNTEzOTk2YTcxZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzevirbOIl7/iMG233Ac+DZ/kJdLt F0ABMg2PQjjHVwt6i8WZJgr7dui1dgcENdNZnzCE6uMCoKsjV6eoeNXpmtOUN+nL KCMdm4FQTp/pa3BE4bc3k9Vtdk4sUt0YpHUlX1muUMbD0x36l0l0UlmUObGnXLtu PH778rhlLsfRnjBFbgEISKsXAk5xLj+niUIBvOBqnDwS5ybhwoqSa44TN3tuy25/ uGRxxTEQMsggSm9nWLTIRgP3uD3mbzhMselhj27KoiQ1c4I24JaCklKqhAvQqBcC VR0IhhvhtL8EQf4CmoVbj42CZaD75bZlTcvGReHJWmd/H5QhRDSzp9ocsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/QAIQK7zstnwj+d5k/UTmWpx1+MB8GA1UdIwQY MBaAFHw1MuUuqv75SMQsix1RFFysnUyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUt NTY0ZWJkY2YzZjk2LzEvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUtNTY0ZWJkY2YzZjk2 LzEvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhjCO84s 6TAmfZBAp748q1sQscNz+DxLqS7kWfIeCVUni5lbVUmnRBpylSIfuklqaLtYrfNH Cw4rSRexiuSnh/qPpp5e+mWynoZmyk3wxUMTlhfXUjvgdFZaw1BwOblb4JE6pu6F TPaw1JZwEUX0Lo1uXJJc078HrQ5iJTlggojklPulpvEekfwKKqM8tH6KXBVc4CAO hiJwIZSxNTjXQju8TFSJAd9yojmc68IzQ8qLoX3TOcemliJvWOMoPR3sA8h8dVWs q7XAjuGaW6ec1QJW3BsUegz18PX7jVIE/phRx9kp85kua5SZcVvWleToxequhx3c PhMDgtIb7LAggQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:08 2025 by rpki-client