This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json) Hash identifier: dO7bJJmTDPtbnuXp4uADRwI91PmHacauMBpuTHRqg4g= Subject key identifier: F1:78:21:F9:CA:D8:2B:3F:16:C4:CB:F2:FD:F1:6A:79:A0:45:7D:D5 Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f Certificate serial: 019B2551C7BE4E5DF2BEF0483779F29F143C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft Manifest number: 1038 Signing time: Tue 16 Dec 2025 04:01:15 +0000 Manifest this update: Tue 16 Dec 2025 04:01:15 +0000 Manifest next update: Wed 17 Dec 2025 04:01:15 +0000 Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: OEUp28zjSmiGXzE3PWIDebC0xroGqNEP5j9cNLcWgRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:c7:be:4e:5d:f2:be:f0:48:37:79:f2:9f:14:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f Validity Not Before: Dec 16 04:01:15 2025 GMT Not After : Dec 17 04:01:15 2025 GMT Subject: CN=f17821f9cad82b3f16c4cbf2fdf16a79a0457dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:99:ec:f2:f4:9a:b8:2e:c0:33:6e:15:85:ed: 69:b9:68:12:40:d6:51:e8:3e:76:7a:45:38:28:67: 69:5f:e1:b0:37:d6:d7:87:24:e7:0d:85:8b:e6:c2: 11:0e:9b:0a:fd:b7:51:92:da:b6:46:d8:fa:07:87: de:68:38:8e:fc:3d:3e:82:5b:e6:21:3e:02:ba:62: 8e:7a:03:4b:13:00:f5:6b:31:88:61:07:d1:24:4e: fe:a0:6c:7d:6f:83:e6:4a:66:5b:9e:7b:42:37:fa: 78:eb:5e:5e:99:21:a9:6b:1b:36:61:6e:37:a1:e8: 38:e6:2d:ab:cc:aa:b8:3a:a9:f2:9b:84:09:47:8a: f0:90:67:b6:28:74:49:65:02:59:57:7f:9a:93:02: fb:31:4c:a6:48:cb:b0:80:f3:12:4d:0d:b5:38:e6: 64:6f:4a:40:13:e1:fe:b9:4a:32:1c:ef:89:8f:ee: 46:62:6b:10:75:c2:69:ab:dc:ec:26:1b:45:9b:10: 9e:09:9d:6a:57:2b:08:22:3b:9e:66:6f:11:64:a9: f8:13:7d:e2:1b:9b:8d:03:c0:7b:65:b6:76:6f:2b: cb:0e:b4:81:63:fb:aa:c2:8c:b4:44:7c:d8:4c:3a: 7c:67:c9:87:13:79:8d:78:29:98:06:0c:73:93:ba: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:78:21:F9:CA:D8:2B:3F:16:C4:CB:F2:FD:F1:6A:79:A0:45:7D:D5 X509v3 Authority Key Identifier: keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e8:89:0a:3c:2d:08:38:e7:21:13:e2:97:11:b6:bf:44:30: 66:ac:ad:74:de:fb:17:1e:4f:33:54:d1:11:01:a4:29:1b:8f: 55:30:83:9a:65:30:74:ab:f2:2e:d1:4f:3b:98:26:c5:00:7a: dd:21:b2:df:b4:c4:af:e9:7b:16:34:51:36:12:b4:0b:f0:b1: af:dc:13:aa:f5:47:b4:e7:24:57:5d:69:87:6a:02:35:87:42: 21:26:98:74:e6:55:54:f3:75:f4:86:0d:fa:a3:64:d8:cf:88: 5b:62:77:90:c3:55:8c:3d:fd:1f:0f:55:93:a9:c8:66:05:0c: 80:05:c7:5a:3b:36:60:68:ad:67:8a:84:c1:3c:e0:00:3f:9a: 45:08:77:7c:fc:e3:b0:09:0c:c4:b8:eb:21:7d:72:c9:65:f4: 8b:f6:98:f2:f4:ab:67:ee:d6:2a:cc:b8:89:98:8a:ef:b2:c5: a0:bc:23:67:e9:8e:f9:ec:dd:2e:b7:35:3b:da:c5:de:77:35: fd:d2:1e:1c:dd:09:e2:f4:49:2f:28:c3:c2:65:9d:40:84:69: 46:b7:3f:d1:b1:48:2a:a9:5d:69:96:ab:b6:74:7b:ca:23:31: 14:74:f2:47:11:9c:f3:aa:20:31:64:26:ce:9b:bd:7d:4f:bc: 6b:ac:42:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUce+Tl3yvvBIN3nynxQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTRjZTgxMDNiNzg1ZjM1MDRiYzRiMzJmMWY0YzliNzBj ZTNmN2YwHhcNMjUxMjE2MDQwMTE1WhcNMjUxMjE3MDQwMTE1WjAzMTEwLwYDVQQD EyhmMTc4MjFmOWNhZDgyYjNmMTZjNGNiZjJmZGYxNmE3OWEwNDU3ZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJns8vSauC7AM24Vhe1puWgSQNZR 6D52ekU4KGdpX+GwN9bXhyTnDYWL5sIRDpsK/bdRktq2Rtj6B4feaDiO/D0+glvm IT4CumKOegNLEwD1azGIYQfRJE7+oGx9b4PmSmZbnntCN/p4615emSGpaxs2YW43 oeg45i2rzKq4Oqnym4QJR4rwkGe2KHRJZQJZV3+akwL7MUymSMuwgPMSTQ21OOZk b0pAE+H+uUoyHO+Jj+5GYmsQdcJpq9zsJhtFmxCeCZ1qVysIIjueZm8RZKn4E33i G5uNA8B7ZbZ2byvLDrSBY/uqwoy0RHzYTDp8Z8mHE3mNeCmYBgxzk7q/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPF4IfnK2Cs/FsTL8v3xanmgRX3VMB8GA1UdIwQY MBaAFH8UzoEDt4XzUEvEsy8fTJtwzj9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2It ZjYxNjBmYTFmYjAyLzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2ItZjYxNjBmYTFmYjAy LzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+iJCjwt CDjnIRPilxG2v0QwZqytdN77Fx5PM1TREQGkKRuPVTCDmmUwdKvyLtFPO5gmxQB6 3SGy37TEr+l7FjRRNhK0C/Cxr9wTqvVHtOckV11ph2oCNYdCISaYdOZVVPN19IYN +qNk2M+IW2J3kMNVjD39Hw9Vk6nIZgUMgAXHWjs2YGitZ4qEwTzgAD+aRQh3fPzj sAkMxLjrIX1yyWX0i/aY8vSrZ+7WKsy4iZiK77LFoLwjZ+mO+ezdLrc1O9rF3nc1 /dIeHN0J4vRJLyjDwmWdQIRpRrc/0bFIKqldaZartnR7yiMxFHTyRxGc86ogMWQm zpu9fU+8a6xCRg== -----END CERTIFICATE-----Generated at Tue Dec 16 10:51:05 2025 by rpki-client