This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json) Hash identifier: lF/39MXdEB8DyDHLcpzPPU9JKS1MA0gD2yVZNJMJLGY= Subject key identifier: 3B:40:37:C0:DB:3C:10:B2:EE:81:1F:70:67:04:DE:7E:3F:F9:81:04 Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb Certificate serial: 019AF49BEDC3C9AA224F8ADCB7392F6765B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft Manifest number: 1502 Signing time: Sat 06 Dec 2025 17:00:50 +0000 Manifest this update: Sat 06 Dec 2025 17:00:50 +0000 Manifest next update: Sun 07 Dec 2025 17:00:50 +0000 Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=) 2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: rnItuKAEoZYcmNazMaCVbeJSDnjee1IYpg2pPpcO0Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ed:c3:c9:aa:22:4f:8a:dc:b7:39:2f:67:65:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb Validity Not Before: Dec 6 17:00:50 2025 GMT Not After : Dec 7 17:00:50 2025 GMT Subject: CN=3b4037c0db3c10b2ee811f706704de7e3ff98104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3c:e0:c0:1c:c7:c9:18:ba:3f:6e:c7:ca:2c: e9:bb:fc:47:0b:d0:97:bc:79:6b:46:d3:98:78:fb: 6f:61:78:c7:dc:fd:1b:4d:c5:18:4d:42:a0:2b:7c: 89:5c:1e:3d:6c:4e:ca:75:44:ef:ff:90:52:74:a7: ff:d2:90:ff:b8:ba:8d:18:18:ff:69:bc:da:58:33: d9:20:c9:03:df:37:fc:32:f2:2c:7e:f2:65:5b:4d: b9:69:af:d4:14:f0:e7:32:10:af:86:be:3c:60:7d: c7:63:42:e6:a0:4a:98:a4:b6:8e:92:3d:b7:e5:b6: 6f:14:a8:3c:92:3e:78:b2:36:eb:b7:2e:5f:86:78: 37:65:61:63:53:ad:ee:5a:7a:90:d6:e9:fd:62:26: 0b:74:30:6f:09:e0:ac:95:f3:f7:78:3d:65:53:e8: bf:ab:24:e7:f7:a3:80:a2:84:f2:de:d0:2a:96:6c: 88:90:de:f4:cb:2d:81:6a:86:63:3f:89:a4:7c:19: cf:f2:50:80:d8:eb:f3:39:9b:1b:43:81:ce:0d:e2: 0d:9b:13:2a:ed:85:d5:c7:ed:b5:58:85:5e:9a:db: 5e:d8:48:34:e1:3f:78:6a:0d:29:1c:af:a6:cc:cc: 03:dd:36:7e:1a:e4:ec:ef:9b:e7:97:19:63:5f:00: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:40:37:C0:DB:3C:10:B2:EE:81:1F:70:67:04:DE:7E:3F:F9:81:04 X509v3 Authority Key Identifier: keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:85:73:fc:91:a1:a0:1f:38:2d:25:53:d0:c2:51:b5:ad:43: 46:2e:25:af:f3:ab:68:05:ea:4b:74:33:56:43:3d:91:ef:16: 30:a9:7a:a7:0d:db:c0:cb:2c:a3:3e:92:84:e6:b1:47:f9:b1: 84:d4:84:d7:9c:a8:d8:ae:61:50:97:57:93:63:5c:de:96:53: 79:54:48:74:97:ae:b0:55:72:02:49:f4:06:66:8b:e8:80:b2: 14:10:92:bb:c4:aa:18:5d:f6:b6:07:9f:02:23:aa:e6:aa:4d: 18:67:cc:94:7b:e6:b2:1b:e3:49:f6:db:c7:36:1b:bb:64:7a: 21:ac:2a:1f:13:b0:42:c9:00:55:84:e4:c4:4d:9e:2f:c9:72: 81:db:67:16:df:92:1e:1f:26:df:16:e6:47:6c:7b:bf:35:65: 53:08:b8:7e:ad:b6:08:3c:68:67:2c:68:72:85:e4:62:99:ef: 24:23:31:9d:a7:53:31:4d:0b:3d:4f:e5:93:7b:e4:5e:c2:5e: 2f:67:8e:ec:37:1e:59:b8:e7:9b:64:3d:f3:f9:53:4c:c4:2c: a1:95:d5:e3:0d:9f:97:de:37:f0:09:d3:f1:de:d6:a5:74:2d: e0:9e:bf:06:4e:ad:31:84:40:46:00:9e:d2:80:0d:6b:aa:c4: 02:c9:82:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+3DyaoiT4rctzkvZ2W2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTQ3ODBmNWNkMDdlOTQ4YmU2ZmE0YjQ5MjVhNzMxMzkw NmQ1ZWIwHhcNMjUxMjA2MTcwMDUwWhcNMjUxMjA3MTcwMDUwWjAzMTEwLwYDVQQD EygzYjQwMzdjMGRiM2MxMGIyZWU4MTFmNzA2NzA0ZGU3ZTNmZjk4MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DzgwBzHyRi6P27Hyizpu/xHC9CX vHlrRtOYePtvYXjH3P0bTcUYTUKgK3yJXB49bE7KdUTv/5BSdKf/0pD/uLqNGBj/ abzaWDPZIMkD3zf8MvIsfvJlW025aa/UFPDnMhCvhr48YH3HY0LmoEqYpLaOkj23 5bZvFKg8kj54sjbrty5fhng3ZWFjU63uWnqQ1un9YiYLdDBvCeCslfP3eD1lU+i/ qyTn96OAooTy3tAqlmyIkN70yy2BaoZjP4mkfBnP8lCA2OvzOZsbQ4HODeINmxMq 7YXVx+21WIVemtte2Eg04T94ag0pHK+mzMwD3TZ+GuTs75vnlxljXwBECQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtAN8DbPBCy7oEfcGcE3n4/+YEEMB8GA1UdIwQY MBaAFBSkeA9c0H6Ui+b6S0klpzE5BtXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80MmNkYWItMjAyOS00NjI0LTlmNGIt OTkzMjM2ODYyMTZkLzEvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80MmNkYWItMjAyOS00NjI0LTlmNGItOTkzMjM2ODYyMTZk LzEvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYVz/JGh oB84LSVT0MJRta1DRi4lr/OraAXqS3QzVkM9ke8WMKl6pw3bwMssoz6ShOaxR/mx hNSE15yo2K5hUJdXk2Nc3pZTeVRIdJeusFVyAkn0BmaL6ICyFBCSu8SqGF32tgef AiOq5qpNGGfMlHvmshvjSfbbxzYbu2R6IawqHxOwQskAVYTkxE2eL8lygdtnFt+S Hh8m3xbmR2x7vzVlUwi4fq22CDxoZyxocoXkYpnvJCMxnadTMU0LPU/lk3vkXsJe L2eO7DceWbjnm2Q98/lTTMQsoZXV4w2fl9438AnT8d7WpXQt4J6/Bk6tMYRARgCe 0oANa6rEAsmCnA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:40 2025 by rpki-client