This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json) Hash identifier: +NRlZYN5ya5rxp/ux2dIouCsJ4G2uKwDykXnsZaCSDE= Subject key identifier: 95:44:39:5E:3C:46:ED:DC:B7:8C:C3:E1:81:0C:42:2E:6C:7F:29:0E Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17 Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917 Certificate serial: 019AF12D9A5FAAF3574043BCDA31C5DBA7EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: 6nuHbySg+2Z7cr989iVkKJ8wSEivCq2fLGNi9/L6BlQ=) 2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9a:5f:aa:f3:57:40:43:bc:da:31:c5:db:a7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=9544395e3c46eddcb78cc3e1810c422e6c7f290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:59:b4:8a:7f:8f:a7:b5:87:6b:d9:cb:cf: 39:57:74:09:7e:23:41:9e:a4:74:59:ce:c1:3d:85: e7:d6:17:7c:86:a7:b2:48:aa:6f:5a:51:3c:7b:82: 61:0e:30:21:d6:cb:c2:ad:9e:bc:94:d7:f8:b6:60: 9c:32:8e:79:75:f3:c1:d1:e1:fd:8d:c9:f2:a3:d4: 6f:38:32:2d:2c:72:32:9e:81:a4:dd:d9:ec:e7:6e: 15:b6:7c:06:4d:d5:71:39:df:a7:e1:eb:52:e1:ab: ba:76:49:60:99:20:7f:90:e8:f2:7e:50:93:3b:4c: 70:35:fa:4a:61:66:66:90:78:85:d9:7f:8f:48:2c: 64:a9:8f:12:14:a1:39:34:e3:0d:98:d3:ef:a1:1f: 94:19:d5:dd:1f:be:b0:66:00:25:80:00:4a:fc:cf: e2:9c:7c:7b:7c:0b:9a:f7:e9:a4:e6:71:63:e9:1d: 53:22:19:60:1b:b1:e3:8f:03:89:7f:52:10:99:55: f3:79:0c:ec:8c:cd:53:57:c5:54:51:a2:85:d8:03: 4c:92:40:22:37:b0:b4:8f:46:5f:93:b2:77:cb:0d: fd:a2:11:a2:92:97:9f:ae:12:e8:3a:07:f7:1d:4d: 58:26:d0:4c:b1:ae:d8:f1:d0:b3:a7:e8:71:c1:6b: 5d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:44:39:5E:3C:46:ED:DC:B7:8C:C3:E1:81:0C:42:2E:6C:7F:29:0E X509v3 Authority Key Identifier: keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:77:f5:36:12:95:4b:ab:b9:ce:a5:89:8a:b3:9b:3d:f0:17: d2:c5:dd:17:14:b4:b2:89:e2:97:d0:39:e1:97:90:cb:59:34: a9:aa:ec:94:c5:ec:4e:04:02:ac:3d:a4:d2:50:67:78:cd:b4: 8a:37:24:07:83:73:0b:26:58:10:6d:44:73:66:cc:31:ad:d4: e7:ed:72:2b:a2:1b:5f:54:3e:d6:3d:10:2e:31:0b:11:d5:d5: bf:da:52:d1:f1:b7:be:92:81:a6:db:17:dc:5e:e4:e0:c9:cc: 83:8d:b7:79:58:07:38:b3:fd:30:4d:ef:db:12:a6:0c:65:5d: 4b:9c:7a:80:47:bf:35:76:c6:a2:d2:6b:76:b9:49:d8:40:df: b9:58:8a:cf:84:b2:cf:c0:39:27:a5:c8:fa:66:aa:24:a0:81: 9b:bb:c2:cd:02:12:6b:21:69:14:9f:39:7c:4a:13:22:89:12: a5:8c:2a:ab:c6:a1:09:78:e4:71:b1:d2:00:e3:ce:f7:0d:47: 13:84:a6:a9:e0:ae:45:8b:00:86:89:3e:20:6d:94:01:e8:63: e1:50:76:9a:f0:e9:95:cc:aa:81:2d:99:78:ed:e3:fb:eb:10: 39:24:39:07:e2:c9:84:b0:5c:2d:21:e5:c0:03:66:12:c2:e5: c1:7e:e9:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZpfqvNXQEO82jHF26frMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MmZlZGIwMjVhNmNiZDI0ODY4NDE5YTBjYjU2MjlkNDg2 MzU5MTcwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD Eyg5NTQ0Mzk1ZTNjNDZlZGRjYjc4Y2MzZTE4MTBjNDIyZTZjN2YyOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEJZtIp/j6e1h2vZy885V3QJfiNB nqR0Wc7BPYXn1hd8hqeySKpvWlE8e4JhDjAh1svCrZ68lNf4tmCcMo55dfPB0eH9 jcnyo9RvODItLHIynoGk3dns524VtnwGTdVxOd+n4etS4au6dklgmSB/kOjyflCT O0xwNfpKYWZmkHiF2X+PSCxkqY8SFKE5NOMNmNPvoR+UGdXdH76wZgAlgABK/M/i nHx7fAua9+mk5nFj6R1TIhlgG7HjjwOJf1IQmVXzeQzsjM1TV8VUUaKF2ANMkkAi N7C0j0Zfk7J3yw39ohGikpefrhLoOgf3HU1YJtBMsa7Y8dCzp+hxwWtdCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVEOV48Ru3ct4zD4YEMQi5sfykOMB8GA1UdIwQY MBaAFBUv7bAlpsvSSGhBmgy1Yp1IY1kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmIt MWEyMTIxOWU5MTAwLzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmItMWEyMTIxOWU5MTAw LzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHf1NhKV S6u5zqWJirObPfAX0sXdFxS0sonil9A54ZeQy1k0qarslMXsTgQCrD2k0lBneM20 ijckB4NzCyZYEG1Ec2bMMa3U5+1yK6IbX1Q+1j0QLjELEdXVv9pS0fG3vpKBptsX 3F7k4MnMg423eVgHOLP9ME3v2xKmDGVdS5x6gEe/NXbGotJrdrlJ2EDfuViKz4Sy z8A5J6XI+maqJKCBm7vCzQISayFpFJ85fEoTIokSpYwqq8ahCXjkcbHSAOPO9w1H E4SmqeCuRYsAhok+IG2UAehj4VB2mvDplcyqgS2ZeO3j++sQOSQ5B+LJhLBcLSHl wANmEsLlwX7pXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:13 2025 by rpki-client