This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json) Hash identifier: DTJyFKVE8GuvhWNMhwizak/cvTkbpQ/O9VGv9/VGUZU= Subject key identifier: A6:ED:AB:E0:01:41:98:B3:FA:E7:BF:AB:BA:E2:6E:3F:AE:0F:9C:D5 Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Certificate serial: 019AF5779A821CBFD9AC8D12D6ABD26F3D01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft Manifest number: 12A8 Signing time: Sat 06 Dec 2025 21:00:47 +0000 Manifest this update: Sat 06 Dec 2025 21:00:47 +0000 Manifest next update: Sun 07 Dec 2025 21:00:47 +0000 Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: cP52ATgOlCmcW2P0HLWahkKmI5hQpC1H/vKT6rQphdo=) 2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=) 3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:9a:82:1c:bf:d9:ac:8d:12:d6:ab:d2:6f:3d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Validity Not Before: Dec 6 21:00:47 2025 GMT Not After : Dec 7 21:00:47 2025 GMT Subject: CN=a6edabe0014198b3fae7bfabbae26e3fae0f9cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:02:6b:41:71:8e:10:e2:70:75:f3:37:ca: 2e:45:1d:a3:6e:ab:3e:66:41:29:c3:45:fd:ba:18: 46:45:a8:eb:c9:3a:11:73:1a:47:30:86:57:b3:bb: cc:c8:5a:53:0b:15:b9:16:d2:88:cb:8f:d8:bb:72: 1d:61:c3:ee:12:fd:4d:05:29:0c:ea:62:55:38:82: 75:8a:f8:37:40:2b:f4:a8:0e:ee:ae:97:c7:af:c4: 3d:5e:c0:14:81:cc:76:02:46:e0:a8:ff:0f:2f:8c: 87:0f:2a:ab:67:f0:ca:84:9c:c4:e2:af:07:44:63: 80:4e:3d:d9:35:f1:49:e2:75:45:14:7a:15:9b:e9: 4e:3d:17:98:09:79:99:a6:8c:12:9a:28:51:3f:44: bb:28:46:e6:3e:b7:43:5a:99:f7:2f:79:20:a1:b7: cf:48:e8:70:39:c1:95:be:e9:f6:04:4c:a7:40:47: 5d:3c:e8:67:04:48:73:3c:58:29:74:58:8c:13:1f: d2:33:22:3c:78:b3:3f:c6:47:d7:e5:52:e9:15:14: 54:86:01:4f:45:38:3d:97:27:62:dc:e6:4c:bd:24: 68:10:5f:79:af:9a:50:71:74:21:15:f3:e0:e5:2d: 39:74:58:8c:bc:11:47:b8:6b:af:93:fd:b8:d6:a0: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:AB:E0:01:41:98:B3:FA:E7:BF:AB:BA:E2:6E:3F:AE:0F:9C:D5 X509v3 Authority Key Identifier: keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:85:40:5c:89:39:a2:25:46:6d:38:13:8f:08:26:71:b3:5f: 59:da:ca:d8:1e:4e:41:08:49:b2:52:19:9c:03:76:eb:1b:c4: 67:58:a5:a5:b0:04:a2:47:67:bf:9c:9a:da:55:8b:a9:95:c0: 49:40:2d:ab:8d:d8:4b:1d:7b:74:31:53:bd:70:1b:8a:bc:da: b8:33:76:04:c2:19:f3:a6:c4:1c:73:6f:52:35:0b:dc:4c:1d: 6a:1a:35:ed:e8:33:8b:e3:4c:41:60:8b:17:42:b0:ca:ef:20: aa:73:97:00:a4:32:cb:6d:54:2d:f6:02:22:d1:58:66:fa:51: 0c:fd:c5:61:20:00:c5:4d:81:46:dd:40:36:4b:78:e8:7e:94: ec:92:d2:95:d7:b4:0b:04:26:69:5e:6a:04:57:ee:e3:ce:1c: 87:be:8e:a6:40:10:17:77:3d:d0:5a:78:94:a3:f7:a3:fe:9d: b3:ec:60:0f:2a:48:d7:35:4d:c3:ba:03:1a:db:15:b0:c6:11: 18:30:5d:aa:60:03:56:b5:42:89:e4:85:fd:2e:49:4c:92:d6: 74:32:fe:1a:c0:fa:88:cc:9d:2c:27:25:5f:11:41:fa:71:3b: 67:34:db:69:e6:1a:f0:1b:15:eb:78:18:64:9f:5d:69:85:24: 85:d9:d4:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5qCHL/ZrI0S1qvSbz0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw ZGQ0OGQwHhcNMjUxMjA2MjEwMDQ3WhcNMjUxMjA3MjEwMDQ3WjAzMTEwLwYDVQQD EyhhNmVkYWJlMDAxNDE5OGIzZmFlN2JmYWJiYWUyNmUzZmFlMGY5Y2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxykCa0FxjhDicHXzN8ouRR2jbqs+ ZkEpw0X9uhhGRajryToRcxpHMIZXs7vMyFpTCxW5FtKIy4/Yu3IdYcPuEv1NBSkM 6mJVOIJ1ivg3QCv0qA7urpfHr8Q9XsAUgcx2AkbgqP8PL4yHDyqrZ/DKhJzE4q8H RGOATj3ZNfFJ4nVFFHoVm+lOPReYCXmZpowSmihRP0S7KEbmPrdDWpn3L3kgobfP SOhwOcGVvun2BEynQEddPOhnBEhzPFgpdFiMEx/SMyI8eLM/xkfX5VLpFRRUhgFP RTg9lydi3OZMvSRoEF95r5pQcXQhFfPg5S05dFiMvBFHuGuvk/241qD2sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbtq+ABQZiz+ue/q7ribj+uD5zVMB8GA1UdIwQY MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt NThlZWZjZDY1MmQ4LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4 LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooVAXIk5 oiVGbTgTjwgmcbNfWdrK2B5OQQhJslIZnAN26xvEZ1ilpbAEokdnv5ya2lWLqZXA SUAtq43YSx17dDFTvXAbirzauDN2BMIZ86bEHHNvUjUL3Ewdaho17egzi+NMQWCL F0Kwyu8gqnOXAKQyy21ULfYCItFYZvpRDP3FYSAAxU2BRt1ANkt46H6U7JLSlde0 CwQmaV5qBFfu484ch76OpkAQF3c90Fp4lKP3o/6ds+xgDypI1zVNw7oDGtsVsMYR GDBdqmADVrVCieSF/S5JTJLWdDL+GsD6iMydLCclXxFB+nE7ZzTbaeYa8BsV63gY ZJ9daYUkhdnUNw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:32 2025 by rpki-client