This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json) Hash identifier: MioBFL85aeUNPEV4mX0OUfV7Gg6Yp2bqHzgpCExj+rk= Subject key identifier: 66:D7:3F:BA:A3:4F:33:8E:91:51:94:09:56:BD:31:E5:3C:34:C2:BF Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5 Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5 Certificate serial: 019AF0BEF1348EA7570AA16C3A42A3813D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft Manifest number: 046D Signing time: Fri 05 Dec 2025 23:00:36 +0000 Manifest this update: Fri 05 Dec 2025 23:00:36 +0000 Manifest next update: Sat 06 Dec 2025 23:00:36 +0000 Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: rUKWHZNZMt6NMBY5+6qX+w5txx++5QHOf02xNEIvdjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f1:34:8e:a7:57:0a:a1:6c:3a:42:a3:81:3d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5 Validity Not Before: Dec 5 23:00:36 2025 GMT Not After : Dec 6 23:00:36 2025 GMT Subject: CN=66d73fbaa34f338e9151940956bd31e53c34c2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:f8:43:d4:1f:3f:01:e4:40:bc:53:0b:ae: 4f:e2:a9:61:62:56:4b:56:a3:6b:be:e1:8b:36:1b: 0c:d0:ea:31:d9:cd:4a:eb:0e:41:f9:38:38:48:96: ba:b8:6c:b5:5a:08:09:af:31:29:02:64:ed:a2:2a: 61:d3:18:7e:a9:26:99:14:e8:f3:ff:85:44:e0:02: eb:ea:83:77:b2:48:a4:14:c3:c4:3c:92:97:b7:62: 0b:67:9b:06:79:48:c4:93:49:29:37:0d:8a:e5:41: 58:90:e9:7f:c6:fb:23:7b:34:c6:b1:53:28:2a:08: d8:9c:0b:b9:54:34:3b:13:f8:f1:50:b4:d8:d1:f8: f8:09:f1:06:8b:3f:28:12:a0:aa:8b:a2:3a:4a:eb: 04:66:de:ee:1a:35:61:68:c8:27:50:0b:ca:f1:72: 66:9c:ba:40:d9:95:6f:f9:78:4f:2e:2c:00:32:37: 8d:89:6e:6f:8b:ce:63:47:7f:5a:af:86:fc:bd:c7: 08:d6:8b:4c:68:81:75:5a:37:de:37:56:64:33:ed: 54:04:bb:9e:6f:85:25:0b:87:2b:2c:3f:13:72:23: ef:57:a2:00:48:10:b0:a9:49:aa:61:52:b0:f1:9a: 3c:59:29:f5:46:d3:12:9c:40:06:01:16:fe:5d:5e: 74:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D7:3F:BA:A3:4F:33:8E:91:51:94:09:56:BD:31:E5:3C:34:C2:BF X509v3 Authority Key Identifier: keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fd:fb:74:04:6a:9d:cb:56:f9:79:00:6e:13:de:a9:d4:d5: ae:2b:3b:23:35:e7:ac:6e:18:07:57:bc:97:4a:db:57:90:20: e8:78:8c:63:9a:6b:49:dd:dd:0d:c8:a3:b4:bd:51:f6:ef:c4: e2:ae:8a:69:42:7c:7d:ba:10:af:65:da:8f:9d:cf:9e:b0:d4: 58:81:71:6c:a8:4f:b7:f0:1b:9e:8b:e1:54:de:68:ff:ed:82: da:9c:18:e1:62:6a:ff:72:98:66:a7:22:09:83:b0:a9:fb:7f: 44:ae:3a:04:f6:ae:a0:38:ca:63:3c:60:70:c7:78:c6:f0:79: 82:40:95:46:de:2f:7e:0c:25:3b:9a:1f:61:93:43:c7:f7:1d: 52:5e:94:16:eb:86:f8:bd:db:23:32:b4:af:80:9d:0f:3c:30: c7:f0:7a:76:72:c9:f0:71:c2:03:8e:2e:bf:6a:13:c9:f8:18: a7:32:82:37:98:e7:39:da:7b:d3:ff:03:b0:05:ff:cb:9c:70: fb:3b:97:02:05:cd:44:3b:28:74:51:c6:58:6d:1b:b9:bf:38: 47:a2:10:de:92:72:22:57:f8:76:8e:b4:e0:de:6e:8a:0d:7b: 22:15:35:1b:d6:36:18:c3:98:df:97:3a:ce:c1:04:fd:1c:78: 74:dc:74:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvE0jqdXCqFsOkKjgT2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzU1ZGRkYTQxNDI0MDI2OWYwNWJmOGU4Y2Q3MDgxMzVk ZDdkZTUwHhcNMjUxMjA1MjMwMDM2WhcNMjUxMjA2MjMwMDM2WjAzMTEwLwYDVQQD Eyg2NmQ3M2ZiYWEzNGYzMzhlOTE1MTk0MDk1NmJkMzFlNTNjMzRjMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyj4Q9QfPwHkQLxTC65P4qlhYlZL VqNrvuGLNhsM0Oox2c1K6w5B+Tg4SJa6uGy1WggJrzEpAmTtoiph0xh+qSaZFOjz /4VE4ALr6oN3skikFMPEPJKXt2ILZ5sGeUjEk0kpNw2K5UFYkOl/xvsjezTGsVMo KgjYnAu5VDQ7E/jxULTY0fj4CfEGiz8oEqCqi6I6SusEZt7uGjVhaMgnUAvK8XJm nLpA2ZVv+XhPLiwAMjeNiW5vi85jR39ar4b8vccI1otMaIF1WjfeN1ZkM+1UBLue b4UlC4crLD8TciPvV6IASBCwqUmqYVKw8Zo8WSn1RtMSnEAGARb+XV50NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbXP7qjTzOOkVGUCVa9MeU8NMK/MB8GA1UdIwQY MBaAFH3FXd2kFCQCafBb+OjNcIE13X3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNWZDNhUVVKQUpwOEZ2NDZNMXdnVFhkZmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ODBmMjktZjYxNC00ZjAyLTkxZTAt NWQxNDNlNTZhZjY4LzEvZmNWZDNhUVVKQUpwOEZ2NDZNMXdnVFhkZmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ODBmMjktZjYxNC00ZjAyLTkxZTAtNWQxNDNlNTZhZjY4 LzEvZmNWZDNhUVVKQUpwOEZ2NDZNMXdnVFhkZmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/37dARq nctW+XkAbhPeqdTVris7IzXnrG4YB1e8l0rbV5Ag6HiMY5prSd3dDcijtL1R9u/E 4q6KaUJ8fboQr2Xaj53PnrDUWIFxbKhPt/AbnovhVN5o/+2C2pwY4WJq/3KYZqci CYOwqft/RK46BPauoDjKYzxgcMd4xvB5gkCVRt4vfgwlO5ofYZNDx/cdUl6UFuuG +L3bIzK0r4CdDzwwx/B6dnLJ8HHCA44uv2oTyfgYpzKCN5jnOdp70/8DsAX/y5xw +zuXAgXNRDsodFHGWG0bub84R6IQ3pJyIlf4do604N5uig17IhU1G9Y2GMOY35c6 zsEE/Rx4dNx0jw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:54:07 2025 by rpki-client