This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json) Hash identifier: 6I/oGrIf8FO9bBlwbE9jZVcjKQq+3yVpfVYDylLJ96E= Subject key identifier: 7B:87:D9:CC:1C:0A:0F:A0:EA:C8:9A:2B:43:5F:F1:A1:CE:31:42:7A Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7 Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7 Certificate serial: 019AF1D1BBD31FE0E472DC98A440AD98375A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft Manifest number: 1460 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=) 2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: MbfwvLL7TXIOsSKBAzswbCicNJAXig93tEZyLkh5RBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bb:d3:1f:e0:e4:72:dc:98:a4:40:ad:98:37:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7 Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=7b87d9cc1c0a0fa0eac89a2b435ff1a1ce31427a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:67:eb:a9:f7:4c:36:2d:6f:44:d3:2a:bc: 17:33:27:f8:08:05:86:c8:ba:e9:68:0a:a8:e1:1d: 00:31:9e:80:85:ce:8f:99:88:d6:03:18:2a:07:fa: 3a:a1:db:67:f5:56:03:03:44:e7:44:27:b2:75:d2: c5:68:1b:f3:05:98:d4:27:e4:5a:97:63:74:63:1c: c7:0f:99:35:06:0b:2f:d1:b6:70:c9:b8:7a:45:fc: 2a:07:e7:ae:cc:b2:a6:59:48:1a:13:db:6c:ad:8b: 03:14:c4:7f:6e:3f:34:5c:82:a3:0f:45:74:67:a0: e9:de:db:72:5c:d2:f5:11:a0:74:07:43:ab:34:72: 77:9d:ba:6a:6f:78:25:3a:99:8f:f0:7f:f3:47:e3: bb:1c:8f:9e:6d:98:f9:21:da:8d:ff:9a:1e:65:e5: bb:c9:8d:2d:92:73:64:38:1d:d8:43:73:34:2c:18: b8:92:39:02:f4:0b:7e:d9:d5:93:ca:3b:f4:a0:95: b7:95:f1:ce:7e:a6:e7:62:21:53:53:78:42:46:3d: 30:6f:ad:75:10:a9:1c:75:0b:37:52:0a:de:f0:a0: c1:9d:2f:d4:19:90:7a:f6:fc:ae:4a:0c:19:85:0e: fd:e8:16:75:1c:24:27:98:9f:f1:58:34:2a:a5:51: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:87:D9:CC:1C:0A:0F:A0:EA:C8:9A:2B:43:5F:F1:A1:CE:31:42:7A X509v3 Authority Key Identifier: keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2f:4a:a3:bf:2d:48:13:79:8b:57:3a:cd:26:03:96:47:33: b6:3a:2f:36:53:92:ff:1c:58:3a:76:43:2d:71:e2:6e:f0:81: bb:48:2d:fe:bb:e1:9a:36:5e:bb:ad:4b:81:a6:e3:a1:90:ad: 81:70:1e:0b:5c:73:89:e8:4b:1d:31:ff:b9:8b:02:c0:ed:1a: 56:e6:4f:51:7e:2d:0d:3a:d8:6d:aa:41:51:0d:34:a9:91:a8: d0:75:c4:dd:d3:a9:26:27:f7:b6:1e:b5:f0:84:bd:76:64:80: 4b:8e:24:d7:12:bc:7e:93:59:9a:19:d4:5d:af:ec:5b:31:b6: 56:f6:5e:54:60:05:1b:d7:55:14:9d:cd:74:77:77:14:c0:81: f6:07:1d:32:9b:81:c3:40:17:4f:73:63:2b:aa:52:fa:e2:90: ec:fb:5a:b1:d2:db:2c:97:a1:48:2a:e8:32:3c:37:fa:a8:35: 45:fa:3c:00:69:77:db:19:18:96:1f:6e:96:7c:c4:a2:6d:1b: e2:6d:2c:68:10:45:8c:60:43:95:51:33:03:0e:fa:d0:0c:32: e2:73:cd:8f:b3:5d:cc:4c:af:75:bf:5c:08:01:af:47:bb:af: 3c:cb:40:d7:2f:26:e7:f8:b4:38:80:e0:dd:32:0c:7c:05:a5: 6f:95:e8:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bvTH+DkctyYpECtmDdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2M2QyNTcyMTgwZjRiNzg0ZmI0ZjJhNWVkNTBlOWZlNWU2 YmU2YTcwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD Eyg3Yjg3ZDljYzFjMGEwZmEwZWFjODlhMmI0MzVmZjFhMWNlMzE0MjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuVn66n3TDYtb0TTKrwXMyf4CAWG yLrpaAqo4R0AMZ6Ahc6PmYjWAxgqB/o6odtn9VYDA0TnRCeyddLFaBvzBZjUJ+Ra l2N0YxzHD5k1Bgsv0bZwybh6RfwqB+euzLKmWUgaE9tsrYsDFMR/bj80XIKjD0V0 Z6Dp3ttyXNL1EaB0B0OrNHJ3nbpqb3glOpmP8H/zR+O7HI+ebZj5IdqN/5oeZeW7 yY0tknNkOB3YQ3M0LBi4kjkC9At+2dWTyjv0oJW3lfHOfqbnYiFTU3hCRj0wb611 EKkcdQs3Ugre8KDBnS/UGZB69vyuSgwZhQ796BZ1HCQnmJ/xWDQqpVGCnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuH2cwcCg+g6siaK0Nf8aHOMUJ6MB8GA1UdIwQY MBaAFBY9JXIYD0t4T7Type1Q6f5ea+anMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEt NzBiYmM3YzBhOWE1LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEtNzBiYmM3YzBhOWE1 LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANC9Ko78t SBN5i1c6zSYDlkcztjovNlOS/xxYOnZDLXHibvCBu0gt/rvhmjZeu61LgabjoZCt gXAeC1xziehLHTH/uYsCwO0aVuZPUX4tDTrYbapBUQ00qZGo0HXE3dOpJif3th61 8IS9dmSAS44k1xK8fpNZmhnUXa/sWzG2VvZeVGAFG9dVFJ3NdHd3FMCB9gcdMpuB w0AXT3NjK6pS+uKQ7PtasdLbLJehSCroMjw3+qg1Rfo8AGl32xkYlh9ulnzEom0b 4m0saBBFjGBDlVEzAw760Awy4nPNj7NdzEyvdb9cCAGvR7uvPMtA1y8m5/i0OIDg 3TIMfAWlb5Xonw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:24 2025 by rpki-client