This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json) Hash identifier: 9I7nBhFCSaN+22iGZyr8pSdy7i7Ag6frtpftR77vjV8= Subject key identifier: 93:82:79:DF:91:A6:58:C3:A5:F2:F3:66:B8:9F:0D:06:10:FF:6A:9A Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58 Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58 Certificate serial: 019AF209A0DAC4A6AC3FCCD22E078E1CA6EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft Manifest number: 1638 Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=) 2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: ydwYPHoVlRtRxuDa7HjjeTIpmaWaKy8eXrCW9pDOtvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a0:da:c4:a6:ac:3f:cc:d2:2e:07:8e:1c:a6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58 Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=938279df91a658c3a5f2f366b89f0d0610ff6a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:74:71:36:79:7f:c7:ba:ae:4f:7e:26:46: 13:65:07:47:2b:95:06:ed:c8:6b:12:1f:b2:32:07: f7:2e:53:e1:7b:5b:5d:06:4b:fc:dd:a0:e1:9f:0d: d2:f2:6d:f8:20:02:35:d3:3b:b5:bc:54:3f:a9:f1: a0:bf:1b:3a:6b:2a:f7:75:7a:5c:52:e9:57:06:96: 06:bd:4c:62:69:cd:6d:17:de:5a:ad:1e:42:c0:f7: 1f:fb:e6:95:3b:04:77:93:ec:b5:6e:68:ee:37:15: 35:76:42:e9:a7:1f:b1:d3:44:11:8b:9b:46:57:70: 4d:9e:42:2d:d0:b0:d2:90:19:0e:2f:77:9c:76:0d: 1c:9e:35:7a:71:c3:11:40:16:b6:05:84:c2:0f:72: 62:25:b5:69:e5:41:d6:b7:6b:bf:e9:35:fa:6f:0f: fd:e8:f2:ca:2e:79:02:06:8b:6d:f5:b0:5d:42:12: 99:1b:9e:d5:ca:84:f7:27:db:0d:87:fd:46:80:83: 92:0a:97:6e:19:5b:c6:03:12:0d:8d:47:f2:6c:58: 2e:a8:13:a9:e3:02:cf:39:30:5e:2e:91:54:1e:bd: fd:98:97:39:e7:19:6d:38:f9:1c:fd:5f:07:7f:84: 4f:f8:c0:ad:ea:cc:52:87:af:a0:7a:af:7e:46:69: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:82:79:DF:91:A6:58:C3:A5:F2:F3:66:B8:9F:0D:06:10:FF:6A:9A X509v3 Authority Key Identifier: keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f2:c8:c9:88:09:d3:d0:ab:4d:e2:36:65:0b:07:fd:ec:ef: c7:f2:28:38:df:a8:95:c7:66:ed:73:ae:e9:8c:0b:52:76:92: fe:01:b7:f4:1d:42:fa:02:86:45:4d:65:c8:07:11:0f:d2:95: 4d:7a:cb:38:12:f7:2a:0c:5f:bb:69:14:21:2d:8e:06:41:24: 58:77:91:a6:52:42:27:57:9c:f8:b2:b9:ac:f2:31:91:39:b4: 28:9b:d4:59:2d:5a:5e:1f:e6:04:99:3d:c3:5b:79:21:f9:44: f3:42:d9:8a:74:11:7b:e1:9b:00:c2:31:0a:27:11:3c:a4:46: 32:3c:7e:f5:cf:3d:b3:4e:ea:93:1a:42:ea:e2:f7:41:40:c0: c9:94:99:29:04:b5:64:55:bd:7d:11:8a:c9:0e:70:b8:4a:a5: 08:41:c0:78:da:ae:43:2f:3b:c7:23:99:0f:f6:58:23:a3:a6: 66:52:4f:e8:a8:44:d6:4d:ea:e4:95:77:80:23:6f:33:23:30: 2d:57:65:d0:f0:80:60:46:fc:0d:94:81:f8:ed:bc:47:4f:46: 7c:3c:56:4e:ae:35:6c:f2:09:c7:4d:45:e2:f6:6a:6f:5b:b9: 00:7c:b1:73:3d:88:14:0e:12:ee:7e:2b:1a:91:4d:9b:b0:d4: 18:60:b7:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaDaxKasP8zSLgeOHKbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDljMjRkYWUzZWVmZmNiZWZhMzdhNjg4NjY0YWM5MzMw MGVmNTgwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD Eyg5MzgyNzlkZjkxYTY1OGMzYTVmMmYzNjZiODlmMGQwNjEwZmY2YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnZ0cTZ5f8e6rk9+JkYTZQdHK5UG 7chrEh+yMgf3LlPhe1tdBkv83aDhnw3S8m34IAI10zu1vFQ/qfGgvxs6ayr3dXpc UulXBpYGvUxiac1tF95arR5CwPcf++aVOwR3k+y1bmjuNxU1dkLppx+x00QRi5tG V3BNnkIt0LDSkBkOL3ecdg0cnjV6ccMRQBa2BYTCD3JiJbVp5UHWt2u/6TX6bw/9 6PLKLnkCBott9bBdQhKZG57VyoT3J9sNh/1GgIOSCpduGVvGAxINjUfybFguqBOp 4wLPOTBeLpFUHr39mJc55xltOPkc/V8Hf4RP+MCt6sxSh6+geq9+RmkY1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOCed+RpljDpfLzZrifDQYQ/2qaMB8GA1UdIwQY MBaAFBYJwk2uPu/8vvo3pohmSskzAO9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjIt YmY0Yjc1ZTIwMGE3LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjItYmY0Yjc1ZTIwMGE3 LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/LIyYgJ 09CrTeI2ZQsH/ezvx/IoON+olcdm7XOu6YwLUnaS/gG39B1C+gKGRU1lyAcRD9KV TXrLOBL3Kgxfu2kUIS2OBkEkWHeRplJCJ1ec+LK5rPIxkTm0KJvUWS1aXh/mBJk9 w1t5IflE80LZinQRe+GbAMIxCicRPKRGMjx+9c89s07qkxpC6uL3QUDAyZSZKQS1 ZFW9fRGKyQ5wuEqlCEHAeNquQy87xyOZD/ZYI6OmZlJP6KhE1k3q5JV3gCNvMyMw LVdl0PCAYEb8DZSB+O28R09GfDxWTq41bPIJx01F4vZqb1u5AHyxcz2IFA4S7n4r GpFNm7DUGGC3Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:09 2025 by rpki-client