This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft File: FSj8hxfpGa4HJhquKNjIRWTIpxI.mft (raw, json) Hash identifier: JbvRVpLfQgq+Kh0E8VDsLHWCMoPjHoLkdN8Qq39Qs9w= Subject key identifier: 99:AD:D5:70:38:63:B1:DD:A8:97:E2:ED:16:5D:18:C9:9A:0B:E0:8C Authority key identifier: 15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12 Certificate issuer: /CN=1528fc8717e919ae07261aae28d8c84564c8a712 Certificate serial: 019AF1D26912C1AB0CEF911D342F2DDAA891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft Manifest number: 10C1 Signing time: Sat 06 Dec 2025 04:01:29 +0000 Manifest this update: Sat 06 Dec 2025 04:01:29 +0000 Manifest next update: Sun 07 Dec 2025 04:01:29 +0000 Files and hashes: 1: FSj8hxfpGa4HJhquKNjIRWTIpxI.crl (hash: W3cDwUqA97afMmdboQpxomqWqbk7qgQVV5NpsbVSXLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:69:12:c1:ab:0c:ef:91:1d:34:2f:2d:da:a8:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1528fc8717e919ae07261aae28d8c84564c8a712 Validity Not Before: Dec 6 04:01:29 2025 GMT Not After : Dec 7 04:01:29 2025 GMT Subject: CN=99add5703863b1dda897e2ed165d18c99a0be08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:70:2a:a9:ba:0e:d2:90:76:f3:07:63:72: 44:cd:dc:d6:8f:5a:23:44:cf:fa:67:eb:25:6f:8e: 13:20:68:13:53:2e:3b:b8:90:a7:de:61:95:aa:b9: c9:f1:74:df:7b:1e:40:58:72:3f:33:e4:c9:11:f0: 47:c0:e6:2c:01:9d:d7:24:cf:38:48:f7:56:f2:76: f1:76:28:38:e6:00:bc:0c:da:f7:42:87:7e:e9:e8: 24:da:c2:de:bd:15:d1:74:47:89:18:00:f2:f2:7e: 58:2a:7a:ab:60:f3:54:ec:51:af:bd:23:a0:97:4d: 5d:ef:53:be:a1:42:20:0c:cf:23:48:1c:41:e6:35: 9a:4a:ff:07:7a:19:41:25:33:3b:5c:8b:01:8c:9a: 04:5b:e1:8b:b9:cb:1b:5e:b5:9a:d7:24:a4:07:a8: 4b:07:35:ca:c3:ce:1b:24:21:3d:0b:55:48:51:8a: aa:37:e4:46:43:69:36:76:8e:e6:b2:4e:87:b8:f2: 28:18:86:a5:fc:12:e9:fe:35:88:62:62:ee:09:38: ed:c1:a1:64:f9:1d:04:97:4a:84:64:d0:dd:36:93: b0:87:4c:2d:af:ab:1b:1c:f2:38:f9:65:c9:75:98: 28:b0:d9:1b:23:f4:ae:27:26:09:27:42:d5:45:ac: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AD:D5:70:38:63:B1:DD:A8:97:E2:ED:16:5D:18:C9:9A:0B:E0:8C X509v3 Authority Key Identifier: keyid:15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:70:1b:d4:1f:d7:81:8d:d3:60:b5:72:d8:62:cc:1d:68:4e: c8:10:04:01:c9:1a:2d:d9:48:e0:4a:5d:d6:7d:64:28:40:8d: 0a:d8:b2:76:72:dd:e8:50:c2:77:ef:8c:ec:d9:53:56:f3:87: 1f:4c:7d:ad:c4:25:09:da:4a:ba:f2:77:2a:4b:26:bf:fc:e0: 6c:1b:fc:b7:7c:dd:65:37:22:f7:0b:7b:f0:1e:d5:65:c4:6a: c9:67:80:78:22:a8:eb:93:91:23:24:5c:72:6d:b0:66:d3:ad: 88:29:56:ed:88:6d:27:a0:8e:81:64:35:63:04:e8:ca:48:c2: 79:8c:e4:97:40:3b:da:b2:32:13:9c:b0:cf:6d:b9:4e:b4:b8: e1:77:c9:88:1e:e8:47:96:e0:1a:70:2b:61:44:f5:08:89:24: 96:07:05:ba:3a:d7:ee:29:68:b3:c1:73:50:2b:61:72:96:49: 31:70:8d:3f:f9:d4:4f:9f:8e:7b:9b:55:75:90:53:e2:a9:12: bf:14:9b:6b:e0:81:11:87:87:40:f4:9e:95:32:d1:16:a0:41: 2a:59:a8:88:03:dd:fb:3a:92:11:50:18:f6:82:26:f4:85:53: 98:51:e1:fa:41:68:a3:73:c4:0a:d7:a4:54:5a:2f:0e:38:f1: dc:02:ba:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mkSwasM75EdNC8t2qiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MjhmYzg3MTdlOTE5YWUwNzI2MWFhZTI4ZDhjODQ1NjRj OGE3MTIwHhcNMjUxMjA2MDQwMTI5WhcNMjUxMjA3MDQwMTI5WjAzMTEwLwYDVQQD Eyg5OWFkZDU3MDM4NjNiMWRkYTg5N2UyZWQxNjVkMThjOTlhMGJlMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0twKqm6DtKQdvMHY3JEzdzWj1oj RM/6Z+slb44TIGgTUy47uJCn3mGVqrnJ8XTfex5AWHI/M+TJEfBHwOYsAZ3XJM84 SPdW8nbxdig45gC8DNr3Qod+6egk2sLevRXRdEeJGADy8n5YKnqrYPNU7FGvvSOg l01d71O+oUIgDM8jSBxB5jWaSv8HehlBJTM7XIsBjJoEW+GLucsbXrWa1ySkB6hL BzXKw84bJCE9C1VIUYqqN+RGQ2k2do7msk6HuPIoGIal/BLp/jWIYmLuCTjtwaFk +R0El0qEZNDdNpOwh0wtr6sbHPI4+WXJdZgosNkbI/SuJyYJJ0LVRayoowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmt1XA4Y7HdqJfi7RZdGMmaC+CMMB8GA1UdIwQY MBaAFBUo/IcX6RmuByYarijYyEVkyKcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZGZiYjYtNGFmYS00YmJjLTlkMTkt NjcxMDcyZjkxYTEzLzEvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82ZGZiYjYtNGFmYS00YmJjLTlkMTktNjcxMDcyZjkxYTEz LzEvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHAb1B/X gY3TYLVy2GLMHWhOyBAEAckaLdlI4Epd1n1kKECNCtiydnLd6FDCd++M7NlTVvOH H0x9rcQlCdpKuvJ3Kksmv/zgbBv8t3zdZTci9wt78B7VZcRqyWeAeCKo65ORIyRc cm2wZtOtiClW7YhtJ6COgWQ1YwToykjCeYzkl0A72rIyE5ywz225TrS44XfJiB7o R5bgGnArYUT1CIkklgcFujrX7ilos8FzUCthcpZJMXCNP/nUT5+Oe5tVdZBT4qkS vxSba+CBEYeHQPSelTLRFqBBKlmoiAPd+zqSEVAY9oIm9IVTmFHh+kFoo3PECtek VFovDjjx3AK6CQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:23 2025 by rpki-client