This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft File: FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json) Hash identifier: WsD9tyQSu5XW5Vz26iZZqZX+b4LAiCcpty/8geUJBzw= Subject key identifier: D5:2C:CE:AE:BA:9E:EE:51:04:18:F4:29:5E:E7:18:D6:16:2C:F7:16 Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72 Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972 Certificate serial: 019AF389C4FAC22E82CA0AE6D8B5C2211533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft Manifest number: 0597 Signing time: Sat 06 Dec 2025 12:01:23 +0000 Manifest this update: Sat 06 Dec 2025 12:01:23 +0000 Manifest next update: Sun 07 Dec 2025 12:01:23 +0000 Files and hashes: 1: 5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa (hash: 2S+nSZvpWE37VjSR3BnNzUoM6C8tVAdRbE/bGKNExEc=) 2: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: wgKTNAijHfLIMkld0CGhQsSXaQGPklL6xj7/1cvnsN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c4:fa:c2:2e:82:ca:0a:e6:d8:b5:c2:21:15:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972 Validity Not Before: Dec 6 12:01:23 2025 GMT Not After : Dec 7 12:01:23 2025 GMT Subject: CN=d52cceaeba9eee510418f4295ee718d6162cf716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:5f:d8:f9:05:e8:96:a1:ff:20:0e:1a:a5: 18:7d:bb:f7:c2:9f:2b:d8:44:32:63:ec:b1:0c:86: e0:45:64:28:8a:80:a4:7a:97:bd:16:56:3a:45:c3: 62:df:25:34:39:7f:39:6f:5e:23:42:bb:67:43:4e: a8:6a:10:f4:9d:47:02:25:25:cb:24:ef:c2:a4:4e: ea:5f:79:21:8b:4e:41:9a:a3:6d:1f:fa:b2:1e:bf: 86:dc:15:23:62:0c:59:74:09:54:a6:6e:e2:d7:ce: 4c:c3:11:d7:c0:bb:2e:0a:86:29:52:46:91:ce:60: d8:d4:49:81:80:fb:1c:2f:68:e7:95:89:99:c3:56: c4:88:ca:54:3c:9f:ee:6f:e5:ab:36:cc:1b:3e:9d: 1a:05:25:65:30:9c:40:2f:c7:69:24:54:e6:23:7d: aa:96:c0:72:35:43:e1:02:89:c3:17:a5:39:7f:cd: 22:22:af:ed:ad:2b:f5:f0:61:04:ea:ba:7d:7b:af: 04:ab:9a:9b:76:96:0a:ff:b8:25:46:9e:7d:85:bf: 32:e6:83:7f:5a:eb:42:de:a5:19:96:8a:10:fd:09: 94:8e:c3:1f:75:27:b8:64:53:da:88:c4:73:eb:e3: ed:d2:71:74:0d:0b:d3:d7:99:b9:d5:95:91:93:99: a8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2C:CE:AE:BA:9E:EE:51:04:18:F4:29:5E:E7:18:D6:16:2C:F7:16 X509v3 Authority Key Identifier: keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:ca:39:24:20:54:95:3d:86:9e:37:bf:9f:01:5d:4b:46:7a: 70:7e:8c:79:7b:81:30:38:bb:57:9b:8a:48:e9:83:c3:67:f3: 00:b7:3b:95:14:1a:b1:9e:fe:40:44:96:10:ff:cd:a6:23:6c: d8:20:55:f2:65:88:a3:0f:da:0d:4d:6b:e3:df:3f:f4:43:88: b4:64:a8:74:a3:cf:df:36:be:23:f5:3c:9b:28:73:cc:6b:f7: f6:0e:08:55:1b:45:2b:de:59:7e:5a:47:36:9c:09:45:99:3c: 62:c6:7f:22:f9:71:b1:bc:4a:72:ff:c9:37:66:fd:95:5d:6d: 87:5b:28:af:2d:a2:2b:79:d9:64:e6:a7:81:e7:78:64:0a:8e: 10:46:2d:bb:ee:52:cf:38:3c:0c:6c:21:1c:79:c7:49:78:61: 95:71:df:d2:b0:45:de:50:48:76:0a:33:36:ae:00:d9:3f:34: 1d:58:03:51:e9:42:f9:5e:0d:a6:85:87:b6:48:9e:20:bd:89: 0f:ff:77:d8:46:63:cd:74:b6:bd:42:63:ab:c5:b8:09:4c:9e: 18:40:2f:33:b3:26:3e:72:a1:5a:87:53:0a:14:f4:41:b9:a5: 0b:36:8d:4b:44:8d:be:d2:db:7a:43:eb:43:32:eb:f6:52:5c: bd:89:21:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicT6wi6Cygrm2LXCIRUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OWZhNmQ0ZmUwZWQwZTAxMmViM2JjZmZkZjJiZjllMWY3 NDc5NzIwHhcNMjUxMjA2MTIwMTIzWhcNMjUxMjA3MTIwMTIzWjAzMTEwLwYDVQQD EyhkNTJjY2VhZWJhOWVlZTUxMDQxOGY0Mjk1ZWU3MThkNjE2MmNmNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlupf2PkF6Jah/yAOGqUYfbv3wp8r 2EQyY+yxDIbgRWQoioCkepe9FlY6RcNi3yU0OX85b14jQrtnQ06oahD0nUcCJSXL JO/CpE7qX3khi05BmqNtH/qyHr+G3BUjYgxZdAlUpm7i185MwxHXwLsuCoYpUkaR zmDY1EmBgPscL2jnlYmZw1bEiMpUPJ/ub+WrNswbPp0aBSVlMJxAL8dpJFTmI32q lsByNUPhAonDF6U5f80iIq/trSv18GEE6rp9e68Eq5qbdpYK/7glRp59hb8y5oN/ WutC3qUZlooQ/QmUjsMfdSe4ZFPaiMRz6+Pt0nF0DQvT15m51ZWRk5mo4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUszq66nu5RBBj0KV7nGNYWLPcWMB8GA1UdIwQY MBaAFBSfptT+DtDgEus7z/3yv54fdHlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEt NzM3ODQwZTI3ZWE2LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEtNzM3ODQwZTI3ZWE2 LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8o5JCBU lT2Gnje/nwFdS0Z6cH6MeXuBMDi7V5uKSOmDw2fzALc7lRQasZ7+QESWEP/NpiNs 2CBV8mWIow/aDU1r498/9EOItGSodKPP3za+I/U8myhzzGv39g4IVRtFK95ZflpH NpwJRZk8YsZ/IvlxsbxKcv/JN2b9lV1th1sory2iK3nZZOanged4ZAqOEEYtu+5S zzg8DGwhHHnHSXhhlXHf0rBF3lBIdgozNq4A2T80HVgDUelC+V4NpoWHtkieIL2J D/932EZjzXS2vUJjq8W4CUyeGEAvM7MmPnKhWodTChT0QbmlCzaNS0SNvtLbekPr QzLr9lJcvYkhug== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:23 2025 by rpki-client