This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft File: Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json) Hash identifier: R/x0fIBDNCKTwuBDZJj5m6GrFPP8M8r0WTKqDxUB+gE= Subject key identifier: 59:E3:0B:65:1F:D2:F8:70:0C:CF:67:39:34:2C:8E:7E:CD:08:89:8A Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07 Certificate issuer: /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307 Certificate serial: 019AF276DB436DF33AB46862084771CDB8EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft Manifest number: 102E Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: ZZB4NVurORRRlJfyQy2tKTXjMLf+hE4EtNnloa+VogA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:db:43:6d:f3:3a:b4:68:62:08:47:71:cd:b8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307 Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=59e30b651fd2f8700ccf6739342c8e7ecd08898a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:72:c0:55:e0:54:89:7d:6d:97:12:fa:e1: 1c:33:d5:bc:39:b1:cb:9f:14:6c:7b:1a:b6:97:db: cb:9d:3f:49:89:e2:0e:58:bc:f9:ad:33:da:21:7b: 44:f1:ae:21:ba:8c:4a:d8:93:d8:84:7e:7f:22:3e: a9:3b:65:85:83:77:d1:e7:40:a4:54:08:50:ed:50: 85:a8:cb:d0:90:6f:5f:68:01:ad:f7:f8:4c:e6:47: 26:d1:2d:dd:06:ec:be:a6:8c:55:c1:69:31:35:61: f2:c9:d7:5e:d5:53:d2:d4:7b:fc:85:d9:d0:93:b7: 17:a4:0a:19:db:9a:e9:32:60:63:0b:c1:7f:4f:1b: 05:e0:45:20:22:13:2e:41:e1:44:1b:7d:85:f5:f4: e2:56:12:c2:7f:93:57:aa:03:c7:29:59:f8:2c:8b: f0:de:5d:51:e0:7a:21:43:34:af:64:70:5b:05:d9: 19:4a:2f:98:4f:69:3f:e4:42:4b:35:07:d0:5f:30: 9d:c0:d3:aa:7e:90:a7:a7:b6:3d:9d:72:4a:17:93: 2c:fe:2d:41:cf:0f:80:68:62:30:b3:38:19:3f:2c: af:f1:80:d4:e7:61:67:64:b7:67:d2:23:35:35:f9: f1:09:ed:81:bc:f9:c6:a1:b0:a1:8b:0a:e1:99:8a: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E3:0B:65:1F:D2:F8:70:0C:CF:67:39:34:2C:8E:7E:CD:08:89:8A X509v3 Authority Key Identifier: keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ad:3d:36:ca:f6:40:8e:72:8f:ac:6e:d8:a4:01:c1:0c:1d: 7d:a0:1c:3c:1a:ac:4a:b7:61:75:4d:a7:d1:30:f9:1d:06:4a: 81:20:4f:d3:e9:52:50:63:06:69:bc:da:80:c2:bb:fa:13:71: 8c:c9:48:f7:5f:50:b7:7d:20:41:dc:c0:39:1b:c9:f0:2f:ed: 20:1b:8d:45:e0:ae:6d:63:fe:0f:6f:84:ad:0e:6a:3a:95:95: 39:b2:7b:bb:d4:70:9b:e0:4e:44:c7:91:a2:3c:7d:55:ac:c7: 0b:69:85:9e:0b:d6:d6:e5:06:83:26:9d:e2:e3:36:9e:13:a5: 81:0e:b2:bb:90:bb:c2:61:3f:71:84:a3:ae:2a:64:29:6d:2d: 6a:1a:19:bc:e5:b5:5d:61:02:ea:84:ed:9e:d4:68:51:20:4b: 20:92:9d:4a:43:1d:f7:8f:85:63:14:c5:40:92:92:18:e1:a6: d8:de:bb:9e:d9:25:31:17:05:3f:6b:da:7a:9e:86:c3:3e:28: d1:06:fb:2b:b4:b1:92:6d:f2:79:ac:c4:cc:69:6a:0e:92:3c: ee:7f:03:49:eb:f7:d5:2c:f0:16:b5:95:cc:ad:d4:cf:40:67: 4d:5e:08:3b:10:90:b7:3f:ff:05:49:56:07:fe:4b:1b:52:7a: 49:24:0b:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydttDbfM6tGhiCEdxzbjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZDdiNWZkMmIyOWM2Njg1ZDdhZTI3NmFkZTcwNGI1ODY2 YzczMDcwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD Eyg1OWUzMGI2NTFmZDJmODcwMGNjZjY3MzkzNDJjOGU3ZWNkMDg4OThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjdywFXgVIl9bZcS+uEcM9W8ObHL nxRsexq2l9vLnT9JieIOWLz5rTPaIXtE8a4huoxK2JPYhH5/Ij6pO2WFg3fR50Ck VAhQ7VCFqMvQkG9faAGt9/hM5kcm0S3dBuy+poxVwWkxNWHyydde1VPS1Hv8hdnQ k7cXpAoZ25rpMmBjC8F/TxsF4EUgIhMuQeFEG32F9fTiVhLCf5NXqgPHKVn4LIvw 3l1R4HohQzSvZHBbBdkZSi+YT2k/5EJLNQfQXzCdwNOqfpCnp7Y9nXJKF5Ms/i1B zw+AaGIwszgZPyyv8YDU52FnZLdn0iM1NfnxCe2BvPnGobChiwrhmYojqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnjC2Uf0vhwDM9nOTQsjn7NCImKMB8GA1UdIwQY MBaAFBXXtf0rKcZoXXridq3nBLWGbHMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEt OWM3MTY3ZDgyZjU2LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEtOWM3MTY3ZDgyZjU2 LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK09Nsr2 QI5yj6xu2KQBwQwdfaAcPBqsSrdhdU2n0TD5HQZKgSBP0+lSUGMGabzagMK7+hNx jMlI919Qt30gQdzAORvJ8C/tIBuNReCubWP+D2+ErQ5qOpWVObJ7u9Rwm+BORMeR ojx9VazHC2mFngvW1uUGgyad4uM2nhOlgQ6yu5C7wmE/cYSjripkKW0tahoZvOW1 XWEC6oTtntRoUSBLIJKdSkMd94+FYxTFQJKSGOGm2N67ntklMRcFP2vaep6Gwz4o 0Qb7K7Sxkm3yeazEzGlqDpI87n8DSev31SzwFrWVzK3Uz0BnTV4IOxCQtz//BUlW B/5LG1J6SSQLGA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:11 2025 by rpki-client