This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft File: Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json) Hash identifier: 3va6I1EbwR5q9dWgfIatcmpv7RJ0ncsNkuCmsa5CbRQ= Subject key identifier: 54:BF:86:29:49:D4:68:1E:58:B9:D0:62:BF:D0:6D:1E:F2:9B:4D:04 Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD Certificate issuer: /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd Certificate serial: 019AF12D030D5AD94573D2190373631675D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: OQQHG2RNn0FhAfhxfFU1Dm8o6Tzh78pCS89+bPKp9uQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:03:0d:5a:d9:45:73:d2:19:03:73:63:16:75:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=54bf862949d4681e58b9d062bfd06d1ef29b4d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:b5:47:64:6f:ad:98:6d:a8:74:e3:45:4c: 62:d7:32:66:8c:ac:ce:8c:99:8a:b3:05:c6:18:08: bb:d1:fc:6c:fa:6f:78:40:14:ac:a5:18:45:3c:f5: 93:ef:ad:b5:57:85:82:5c:88:fa:3b:72:01:51:de: 7d:26:67:30:71:df:da:5a:1b:cd:5a:b7:98:96:ae: 60:ca:46:6b:f1:02:18:48:a8:14:b7:18:70:14:cd: e0:01:ee:4d:84:e8:7f:1f:f9:ad:ba:47:cb:20:1d: c5:d5:9a:fc:c7:67:23:5b:8a:89:8d:f2:97:36:fe: e4:b3:72:0a:db:2d:73:05:9d:91:61:27:d0:4f:b8: 82:d2:b0:01:57:4e:fc:c3:db:af:24:17:45:65:23: 80:cb:a0:c9:24:a2:71:57:c8:05:15:a5:6a:96:a9: 03:1e:86:9b:75:bb:a2:50:fa:41:64:c8:66:45:2c: 2d:87:59:ab:72:54:f6:d2:fa:88:57:ef:aa:19:9c: 9d:9d:fd:78:44:e4:6c:4c:49:91:4f:8e:0c:ae:c8: 81:2c:45:ee:e7:1d:1e:45:f4:70:59:5e:53:74:3c: 56:ef:93:70:21:f3:38:79:87:db:02:3a:8d:05:19: 21:ad:df:b7:9b:e8:6d:52:09:1a:b1:74:1d:12:70: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BF:86:29:49:D4:68:1E:58:B9:D0:62:BF:D0:6D:1E:F2:9B:4D:04 X509v3 Authority Key Identifier: keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:96:14:62:1d:d9:a8:8c:70:e2:b3:8c:e8:1f:9a:89:a6:87: 38:d1:b6:9e:97:f8:dc:86:9c:b2:52:a4:ce:cb:ba:90:a9:40: 3f:ab:35:12:fd:e4:14:62:64:50:be:39:1f:80:1e:dc:50:04: 0c:cd:55:82:2e:2d:25:78:12:1e:ce:34:7b:03:da:96:8a:ee: 38:ea:0f:ce:19:53:28:24:b3:79:9c:d4:c8:cd:d2:ca:c5:eb: a4:29:3a:83:8f:b4:6c:1e:c8:b4:f5:72:1a:60:10:6c:45:35: 3a:be:5a:ab:d6:9b:bb:10:9d:c8:4d:b1:94:ec:71:45:e4:84: 60:91:0a:e9:29:26:72:af:ab:8e:ec:90:4d:80:90:06:b0:2a: b9:57:da:c9:ff:e8:d5:40:4f:a8:20:f0:37:fc:4d:01:23:9e: 6d:d3:59:f2:22:d9:36:0f:d3:7e:d4:95:a4:99:49:13:09:de: 84:8f:a2:da:22:5e:61:47:40:ca:45:86:96:e9:47:d5:67:29: 53:56:23:d3:fb:44:9b:b3:05:0e:29:95:0f:27:bb:73:97:ba: 9a:50:4e:62:f5:25:fb:7d:a5:e5:be:f5:50:58:80:a3:06:23: 9a:9d:5a:49:c6:06:78:06:94:6b:52:b0:d3:a2:70:40:42:a0: e3:25:37:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQMNWtlFc9IZA3NjFnXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MGE1YzZhMWQ4YzIwNjUxZDU2M2UzZjEwYmJhM2E4M2Rm OGUwYmQwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD Eyg1NGJmODYyOTQ5ZDQ2ODFlNThiOWQwNjJiZmQwNmQxZWYyOWI0ZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNS1R2RvrZhtqHTjRUxi1zJmjKzO jJmKswXGGAi70fxs+m94QBSspRhFPPWT7621V4WCXIj6O3IBUd59Jmcwcd/aWhvN WreYlq5gykZr8QIYSKgUtxhwFM3gAe5NhOh/H/mtukfLIB3F1Zr8x2cjW4qJjfKX Nv7ks3IK2y1zBZ2RYSfQT7iC0rABV078w9uvJBdFZSOAy6DJJKJxV8gFFaVqlqkD HoabdbuiUPpBZMhmRSwth1mrclT20vqIV++qGZydnf14RORsTEmRT44MrsiBLEXu 5x0eRfRwWV5TdDxW75NwIfM4eYfbAjqNBRkhrd+3m+htUgkasXQdEnD6rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS/hilJ1GgeWLnQYr/QbR7ym00EMB8GA1UdIwQY MBaAFBcKXGodjCBlHVY+PxC7o6g9+OC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YjE0ZGEtODMxMS00MmIyLWE2NTEt MDk2ZjZjZTllZDZjLzEvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YjE0ZGEtODMxMS00MmIyLWE2NTEtMDk2ZjZjZTllZDZj LzEvRndwY2FoMk1JR1VkVmo0X0VMdWpxRDM0NEwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZYUYh3Z qIxw4rOM6B+aiaaHONG2npf43IacslKkzsu6kKlAP6s1Ev3kFGJkUL45H4Ae3FAE DM1Vgi4tJXgSHs40ewPaloruOOoPzhlTKCSzeZzUyM3SysXrpCk6g4+0bB7ItPVy GmAQbEU1Or5aq9abuxCdyE2xlOxxReSEYJEK6Skmcq+rjuyQTYCQBrAquVfayf/o 1UBPqCDwN/xNASOebdNZ8iLZNg/TftSVpJlJEwnehI+i2iJeYUdAykWGlulH1Wcp U1Yj0/tEm7MFDimVDye7c5e6mlBOYvUl+32l5b71UFiAowYjmp1aScYGeAaUa1Kw 06JwQEKg4yU3Yw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:14 2025 by rpki-client