This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft File: Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json) Hash identifier: 6elIGWUGW3GmAi8FFUl2IJxh5NSHFr5L2SI7vg3PjmI= Subject key identifier: 0A:4C:23:AD:C8:1D:5E:E8:CD:CF:0F:C3:A8:57:CB:6E:B0:3D:08:23 Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07 Certificate issuer: /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307 Certificate serial: 019B2C664DB77317BB3B26A8C03ED85591CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft Manifest number: 104C Signing time: Wed 17 Dec 2025 13:01:00 +0000 Manifest this update: Wed 17 Dec 2025 13:01:00 +0000 Manifest next update: Thu 18 Dec 2025 13:01:00 +0000 Files and hashes: 1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: XI1WX9P/Nu5ct7j9bSAYuriS50nbWbIfDOqxIN91YoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:4d:b7:73:17:bb:3b:26:a8:c0:3e:d8:55:91:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307 Validity Not Before: Dec 17 13:01:00 2025 GMT Not After : Dec 18 13:01:00 2025 GMT Subject: CN=0a4c23adc81d5ee8cdcf0fc3a857cb6eb03d0823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6f:05:0e:f2:9c:4d:03:e4:e4:e5:78:31:77: f7:e9:ad:10:69:33:15:74:26:96:e1:dd:ac:e2:22: 94:1b:14:9e:c5:6f:fe:b6:f8:38:c9:fc:ea:6d:14: 03:9c:78:d7:73:bd:12:ce:24:d9:23:6e:06:c8:d6: 83:ae:ae:4e:e9:dd:0b:44:27:5a:7d:18:ca:35:92: 95:a1:88:e7:d1:6c:a4:ff:05:cc:00:eb:cf:5f:dc: 4d:99:65:f4:25:2d:28:f9:c1:9c:86:c8:47:5c:26: ca:f7:dc:7f:c2:b7:a5:b7:4f:e7:70:17:6d:f4:83: 25:12:85:cc:6d:f8:24:9e:ee:1e:91:1c:4b:e3:70: 79:99:00:9f:45:fd:13:f8:1f:0f:4a:dd:8c:cc:fc: 34:2c:08:a9:b1:d7:04:8f:ab:0c:58:b8:6f:ac:81: 45:93:a7:33:a4:f0:71:59:7f:75:2e:ea:b5:59:e1: 5c:94:d8:98:f3:21:fb:5e:4b:cf:68:a1:82:31:ce: 02:d6:f2:0c:b2:e3:f5:93:6b:30:c1:c6:ef:b1:80: f5:4e:fa:c5:95:35:81:71:63:a2:5f:4c:fd:3b:ed: 4f:fe:ec:2f:58:73:95:0c:ac:55:91:dd:11:be:35: 9f:19:5f:c4:75:25:d6:a2:6e:6d:5c:0d:5d:6c:38: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4C:23:AD:C8:1D:5E:E8:CD:CF:0F:C3:A8:57:CB:6E:B0:3D:08:23 X509v3 Authority Key Identifier: keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d4:91:2c:fc:95:cb:d2:35:83:09:f1:2d:c8:e2:ed:a9:4d: 81:af:e9:74:d6:22:d9:95:8c:e7:5e:2b:a5:a8:c2:48:ea:e8: c6:df:b4:cc:7f:7e:65:ad:d9:57:1f:b9:14:6c:51:0b:81:22: 5e:96:18:97:17:0e:ea:95:ae:32:0e:0d:c4:c6:47:73:0c:74: 48:f7:d7:77:98:d4:c4:ab:e8:84:d9:04:65:4d:61:1d:ca:62: a1:1b:d5:67:ba:d3:b3:0c:8d:eb:2b:31:40:cd:e3:9e:86:82: 44:11:6f:d3:52:61:ac:84:62:d0:42:d8:b1:e8:b8:ab:37:a1: 4a:96:f1:eb:cb:93:1f:47:96:40:c1:80:25:ee:c4:c9:49:cb: 22:ef:15:ab:84:14:09:94:66:0e:d1:21:71:18:eb:33:90:ca: 6c:0d:94:8f:1b:cb:88:a3:86:8c:9c:9a:cd:12:ef:43:1d:e5: 29:dc:1d:b9:bb:96:63:c0:73:79:0d:10:66:e4:9d:83:cb:9a: 22:9a:d5:4c:20:ff:38:da:eb:dd:52:85:b1:9a:81:8a:21:3a: db:d4:76:1f:ed:18:14:55:66:24:21:88:3e:53:55:ca:f3:19: 85:fc:f0:dd:c5:f9:b3:ba:b7:cf:17:18:5b:12:b6:04:2e:ce: b3:20:c1:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZk23cxe7OyaowD7YVZHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZDdiNWZkMmIyOWM2Njg1ZDdhZTI3NmFkZTcwNGI1ODY2 YzczMDcwHhcNMjUxMjE3MTMwMTAwWhcNMjUxMjE4MTMwMTAwWjAzMTEwLwYDVQQD EygwYTRjMjNhZGM4MWQ1ZWU4Y2RjZjBmYzNhODU3Y2I2ZWIwM2QwODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W8FDvKcTQPk5OV4MXf36a0QaTMV dCaW4d2s4iKUGxSexW/+tvg4yfzqbRQDnHjXc70SziTZI24GyNaDrq5O6d0LRCda fRjKNZKVoYjn0Wyk/wXMAOvPX9xNmWX0JS0o+cGchshHXCbK99x/wrelt0/ncBdt 9IMlEoXMbfgknu4ekRxL43B5mQCfRf0T+B8PSt2MzPw0LAipsdcEj6sMWLhvrIFF k6czpPBxWX91Luq1WeFclNiY8yH7XkvPaKGCMc4C1vIMsuP1k2swwcbvsYD1TvrF lTWBcWOiX0z9O+1P/uwvWHOVDKxVkd0RvjWfGV/EdSXWom5tXA1dbDidxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApMI63IHV7ozc8Pw6hXy26wPQgjMB8GA1UdIwQY MBaAFBXXtf0rKcZoXXridq3nBLWGbHMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEt OWM3MTY3ZDgyZjU2LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEtOWM3MTY3ZDgyZjU2 LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9SRLPyV y9I1gwnxLcji7alNga/pdNYi2ZWM514rpajCSOroxt+0zH9+Za3ZVx+5FGxRC4Ei XpYYlxcO6pWuMg4NxMZHcwx0SPfXd5jUxKvohNkEZU1hHcpioRvVZ7rTswyN6ysx QM3jnoaCRBFv01JhrIRi0ELYsei4qzehSpbx68uTH0eWQMGAJe7EyUnLIu8Vq4QU CZRmDtEhcRjrM5DKbA2UjxvLiKOGjJyazRLvQx3lKdwdubuWY8BzeQ0QZuSdg8ua IprVTCD/ONrr3VKFsZqBiiE629R2H+0YFFVmJCGIPlNVyvMZhfzw3cX5s7q3zxcY WxK2BC7OsyDBPg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:20:45 2025 by rpki-client