This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json) Hash identifier: lRIB+GVDrLVmB6BA8IheWNndQ0kwyLmtq7MoJKUpuXM= Subject key identifier: 22:A6:C8:D1:42:5E:18:B5:67:A3:30:7C:24:53:B6:7D:09:08:55:ED Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055 Certificate serial: 019AF12DB8D328CF0D725DBFDB74989D8918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft Manifest number: 13CC Signing time: Sat 06 Dec 2025 01:01:36 +0000 Manifest this update: Sat 06 Dec 2025 01:01:36 +0000 Manifest next update: Sun 07 Dec 2025 01:01:36 +0000 Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: NRUF9gt5qh2KjzcmoFy6hNmL4hdFzCLuWrXnmFnE1hQ=) 2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=) 3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b8:d3:28:cf:0d:72:5d:bf:db:74:98:9d:89:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45bab208653d4261ebf202f6036334119846055 Validity Not Before: Dec 6 01:01:36 2025 GMT Not After : Dec 7 01:01:36 2025 GMT Subject: CN=22a6c8d1425e18b567a3307c2453b67d090855ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:19:d1:03:5c:67:17:2a:b5:22:2b:a3:16:75: a0:e2:1e:fb:59:95:77:7f:d3:c8:42:f0:55:fd:4d: 97:80:e3:a3:de:46:1c:91:0d:5a:b3:70:08:3b:be: 1f:66:28:ed:9e:19:45:b5:2e:26:41:ad:44:9d:07: 44:d4:ea:4e:e3:83:6f:8b:4f:92:92:19:d9:3e:27: b0:cb:f8:21:f6:67:73:5e:f0:c5:47:35:f6:50:6f: 30:f4:4f:6d:18:f0:a7:c0:49:64:b1:36:45:f4:07: 8f:53:ad:63:e3:49:cc:8f:e7:e6:8e:5a:93:da:1e: 08:b4:98:15:c9:ce:90:ab:65:68:36:18:08:cc:67: a4:65:b1:fa:68:91:bb:28:e9:db:72:02:b9:b2:9e: ca:ee:bc:56:b8:21:6f:a7:a9:ba:72:e9:9c:03:0f: 98:c0:2a:c3:1a:0c:6d:76:94:8e:76:b5:6c:2e:8e: f7:24:b1:be:d3:1d:cc:25:70:f4:e3:d4:60:78:4d: f9:89:91:aa:58:71:a6:87:6b:71:80:8a:4e:47:e1: c5:83:a7:47:6c:b9:6d:4e:cf:c7:af:98:41:25:a7: a1:26:4e:ff:a4:b7:85:2b:de:88:a4:62:37:7f:d1: d6:7d:f7:4a:69:04:dd:05:ae:ee:e8:af:5e:6a:56: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A6:C8:D1:42:5E:18:B5:67:A3:30:7C:24:53:B6:7D:09:08:55:ED X509v3 Authority Key Identifier: keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ff:e3:c0:85:89:eb:68:e2:a3:3f:ce:6e:d1:4e:44:03:c2: 41:bb:e0:dd:7f:9f:2a:9a:3e:60:47:2e:92:c0:a7:d3:10:4f: 42:bd:41:8d:67:3c:1c:61:fc:fa:13:7b:39:ad:ba:23:ec:a9: 26:ef:97:89:d2:89:7a:26:be:82:53:8f:59:85:f0:05:9c:e9: 9b:72:cb:a0:00:78:40:69:9f:22:cc:ae:1e:f6:c2:16:36:2e: 69:19:56:44:21:f6:4d:f3:62:b4:b1:9c:14:30:0e:5b:f3:25: 9c:59:9a:1c:bc:15:66:46:89:1f:fd:9d:f2:38:da:cd:f7:61: 88:4e:68:8c:26:1b:49:5d:ac:16:98:e5:0e:6f:83:b8:59:ce: bf:6e:42:36:a6:55:9f:0b:0b:44:c0:3c:a9:2a:aa:c8:6f:b2: 41:f3:ca:ca:e1:44:91:00:a0:bd:e5:5f:5d:c0:64:87:0d:df: 94:3b:a6:2d:23:47:5e:28:03:e5:44:78:b2:b0:45:72:f3:38: d6:18:1a:18:15:9b:02:1d:9e:58:d5:f4:52:18:be:e0:7f:41: ad:ae:d3:8b:08:e7:7a:f2:8a:64:ee:f7:de:a6:be:48:f7:b3: 64:7f:6e:cb:ba:43:fb:a5:f6:e6:77:af:c7:84:d0:47:1b:b4: 26:3a:ff:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbjTKM8Ncl2/23SYnYkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4 NDYwNTUwHhcNMjUxMjA2MDEwMTM2WhcNMjUxMjA3MDEwMTM2WjAzMTEwLwYDVQQD EygyMmE2YzhkMTQyNWUxOGI1NjdhMzMwN2MyNDUzYjY3ZDA5MDg1NWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xnRA1xnFyq1IiujFnWg4h77WZV3 f9PIQvBV/U2XgOOj3kYckQ1as3AIO74fZijtnhlFtS4mQa1EnQdE1OpO44Nvi0+S khnZPiewy/gh9mdzXvDFRzX2UG8w9E9tGPCnwElksTZF9AePU61j40nMj+fmjlqT 2h4ItJgVyc6Qq2VoNhgIzGekZbH6aJG7KOnbcgK5sp7K7rxWuCFvp6m6cumcAw+Y wCrDGgxtdpSOdrVsLo73JLG+0x3MJXD049RgeE35iZGqWHGmh2txgIpOR+HFg6dH bLltTs/Hr5hBJaehJk7/pLeFK96IpGI3f9HWffdKaQTdBa7u6K9ealZ+WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKmyNFCXhi1Z6MwfCRTtn0JCFXtMB8GA1UdIwQY MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATf/jwIWJ 62jioz/ObtFORAPCQbvg3X+fKpo+YEcuksCn0xBPQr1BjWc8HGH8+hN7Oa26I+yp Ju+XidKJeia+glOPWYXwBZzpm3LLoAB4QGmfIsyuHvbCFjYuaRlWRCH2TfNitLGc FDAOW/MlnFmaHLwVZkaJH/2d8jjazfdhiE5ojCYbSV2sFpjlDm+DuFnOv25CNqZV nwsLRMA8qSqqyG+yQfPKyuFEkQCgveVfXcBkhw3flDumLSNHXigD5UR4srBFcvM4 1hgaGBWbAh2eWNX0Uhi+4H9Bra7TiwjnevKKZO733qa+SPezZH9uy7pD+6X25nev x4TQRxu0Jjr/Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:37 2025 by rpki-client