This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json) Hash identifier: astimITedND3BvYcRj0IvEo0pbP3fgaqJ87cw2FG6bI= Subject key identifier: 50:12:5D:B3:DD:68:C1:A0:4F:72:83:8D:5A:ED:CF:4C:09:BA:BA:EF Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Certificate serial: 019AF49C7BD18212FE34B5300A57205BFD62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:27 +0000 Manifest this update: Sat 06 Dec 2025 17:01:27 +0000 Manifest next update: Sun 07 Dec 2025 17:01:27 +0000 Files and hashes: 1: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: /dPh6TB92kYIEqCqBG0h2wrXeA7v6JRlYb7QieUbC/w=) 2: c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa (hash: IVR9qhn2n9gPQEgDnZi5eZBL8Hlmr2T2MC2szELxnvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:7b:d1:82:12:fe:34:b5:30:0a:57:20:5b:fd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Validity Not Before: Dec 6 17:01:27 2025 GMT Not After : Dec 7 17:01:27 2025 GMT Subject: CN=50125db3dd68c1a04f72838d5aedcf4c09babaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:ca:44:9a:4c:01:d4:c3:8d:32:6d:6c:1c: 52:8e:31:ff:59:f9:8d:39:fc:96:3e:c8:c6:21:b6: 29:b5:6d:59:90:75:65:aa:83:5c:7c:1b:87:6e:b0: 34:ac:43:c9:e1:56:b5:71:bd:27:63:cc:f7:f1:39: 84:43:52:f5:db:5d:bc:eb:30:4f:10:78:95:7c:c2: 30:9d:7a:cf:6a:3f:51:31:97:57:ac:22:4a:58:57: 71:cf:81:36:00:3b:e2:0e:56:ac:0d:82:72:da:a8: 21:6e:59:99:04:ac:2b:af:2a:84:b3:95:9f:3d:98: c1:6a:19:af:60:70:1b:c7:06:ba:fc:8a:a5:33:58: 2c:8f:30:28:97:02:c6:e4:81:9d:b0:d7:14:03:42: c4:40:7e:20:15:b6:af:e2:a4:98:9d:31:80:06:1a: f3:a8:9d:17:86:ba:f2:2b:33:f2:fe:68:1d:82:6f: ca:59:c8:e8:7c:d1:66:d7:1c:1c:6b:16:a0:32:a1: 57:b8:e9:40:a9:6e:bd:b4:9a:ef:cc:a9:55:73:ad: 62:d1:24:3e:77:00:20:62:48:aa:29:60:b0:ef:3b: 82:6f:67:71:c0:d0:e6:d8:5e:58:92:a9:d4:82:12: 48:37:44:05:0a:1f:82:44:5f:9e:70:12:ab:ea:96: e1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:12:5D:B3:DD:68:C1:A0:4F:72:83:8D:5A:ED:CF:4C:09:BA:BA:EF X509v3 Authority Key Identifier: keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:72:4d:8a:d2:63:86:48:dc:b9:48:ec:19:35:d0:bf:04:7b: 04:98:a0:7c:05:0f:21:9c:ba:9c:6b:87:46:86:27:cd:d4:89: e7:71:29:94:32:ab:59:a9:15:69:87:9c:b4:10:9f:6d:48:16: 3c:e8:7d:a4:ec:bd:ef:dd:b6:da:84:0b:62:30:9f:16:16:6b: 8b:05:79:9d:a1:7c:1f:93:75:89:bc:26:31:b7:e7:10:eb:b3: b9:00:0b:c1:28:d6:42:2f:dd:54:fa:45:06:73:51:1c:c4:51: aa:3b:5a:44:65:79:e8:c3:fb:08:89:a6:36:15:36:36:20:0b: 81:20:6c:4c:2f:97:2c:a9:2e:18:58:37:9b:68:95:91:04:f3: c4:a3:3c:f5:18:85:99:08:5f:dc:f1:7f:4b:d4:55:d4:c0:ae: ce:b8:15:27:a2:ba:a4:c2:35:c1:c8:87:58:1a:3a:74:bf:15: 85:da:1a:77:b2:f1:0d:c3:5c:74:bf:d6:bd:05:aa:f4:21:54: bd:e5:4c:d1:ad:2d:9e:a5:3e:df:ee:fa:81:3e:85:59:ea:26: a0:46:c6:74:46:06:40:87:cd:d0:be:85:7a:3e:11:30:e4:5b: a6:d2:b7:a0:02:ac:a3:d8:d1:29:1d:b5:b5:d4:59:a1:40:1c: 4f:de:d7:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nHvRghL+NLUwClcgW/1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm OTlhYTgwHhcNMjUxMjA2MTcwMTI3WhcNMjUxMjA3MTcwMTI3WjAzMTEwLwYDVQQD Eyg1MDEyNWRiM2RkNjhjMWEwNGY3MjgzOGQ1YWVkY2Y0YzA5YmFiYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXvKRJpMAdTDjTJtbBxSjjH/WfmN OfyWPsjGIbYptW1ZkHVlqoNcfBuHbrA0rEPJ4Va1cb0nY8z38TmEQ1L121286zBP EHiVfMIwnXrPaj9RMZdXrCJKWFdxz4E2ADviDlasDYJy2qghblmZBKwrryqEs5Wf PZjBahmvYHAbxwa6/IqlM1gsjzAolwLG5IGdsNcUA0LEQH4gFbav4qSYnTGABhrz qJ0XhrryKzPy/mgdgm/KWcjofNFm1xwcaxagMqFXuOlAqW69tJrvzKlVc61i0SQ+ dwAgYkiqKWCw7zuCb2dxwNDm2F5YkqnUghJIN0QFCh+CRF+ecBKr6pbhUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFASXbPdaMGgT3KDjVrtz0wJurrvMB8GA1UdIwQY MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHJNitJj hkjcuUjsGTXQvwR7BJigfAUPIZy6nGuHRoYnzdSJ53EplDKrWakVaYectBCfbUgW POh9pOy979222oQLYjCfFhZriwV5naF8H5N1ibwmMbfnEOuzuQALwSjWQi/dVPpF BnNRHMRRqjtaRGV56MP7CImmNhU2NiALgSBsTC+XLKkuGFg3m2iVkQTzxKM89RiF mQhf3PF/S9RV1MCuzrgVJ6K6pMI1wciHWBo6dL8Vhdoad7LxDcNcdL/WvQWq9CFU veVM0a0tnqU+3+76gT6FWeomoEbGdEYGQIfN0L6Fej4RMORbptK3oAKso9jRKR21 tdRZoUAcT97XmA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:12 2025 by rpki-client