This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json) Hash identifier: Rx0vGaycCZ0/bjBM2EmMAJDReJ9whH3hMOXZqmH+pPI= Subject key identifier: 3A:BA:74:B2:E5:6C:60:43:27:99:05:04:1D:52:B6:94:AF:2A:73:C2 Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46 Certificate serial: 019AF208BE0876417AA8278D8C2D5FEAE060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft Manifest number: 043F Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=) 2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: MA8025bF3LZbroWlnT+LgOasiaqJKNxbw7OzSNt7Si8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:be:08:76:41:7a:a8:27:8d:8c:2d:5f:ea:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46 Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=3aba74b2e56c6043279905041d52b694af2a73c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:f2:11:ac:34:45:54:c6:db:ba:b4:87:41: 46:3a:cd:ad:26:c8:0e:8b:03:6c:1f:43:4f:4b:c8: 01:77:e1:45:8f:37:f1:ec:87:74:d6:91:31:1b:48: 2b:2d:2f:1b:7c:f5:03:8a:dc:e2:6d:4c:11:39:df: 5d:10:1b:5d:0c:c0:c7:e8:dd:cc:0b:7b:71:d3:61: b8:cf:83:2f:07:f2:6f:a8:64:0f:b3:93:35:c5:9f: bb:a3:cb:3c:be:52:00:c7:d6:77:4f:38:61:5e:03: eb:88:44:1b:e7:d8:d4:19:95:4a:af:16:87:89:83: 34:bd:54:01:7c:cc:53:9b:77:58:b2:6e:af:68:a9: f0:88:c2:56:20:99:3c:98:6d:0a:42:14:a7:4c:ee: e0:51:06:87:4f:3d:d4:c0:f8:6a:d1:d2:8a:d0:ba: ba:6f:3e:1a:42:c2:a7:0b:be:70:bc:36:e2:87:48: 01:78:3e:73:0b:71:11:f7:ed:14:f8:5c:d6:b5:87: 09:50:79:a2:bf:16:fd:8c:89:51:00:70:df:8e:37: 63:7e:a0:33:85:ca:2f:60:55:56:92:27:df:c9:94: e4:35:74:0c:78:4a:1d:0e:7c:81:b5:76:b5:e3:2d: 14:66:0e:92:7b:7a:85:c3:f6:d2:fa:db:35:e7:4d: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BA:74:B2:E5:6C:60:43:27:99:05:04:1D:52:B6:94:AF:2A:73:C2 X509v3 Authority Key Identifier: keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1c:10:e5:8b:f6:de:ae:82:6a:65:36:0b:fe:1c:9e:98:10: 78:6a:66:9b:04:00:b6:7f:4f:fc:98:f7:8d:92:b5:4f:52:f5: f0:68:55:4e:e2:af:c8:99:d2:35:75:82:9e:2d:3b:ca:39:41: 43:3c:93:81:9a:b5:cc:2f:f9:69:8a:a8:b4:45:b5:ed:fa:0d: 7a:ac:4e:e5:68:7e:2a:7f:79:e3:ee:d5:c2:90:a7:d5:cc:90: f8:c1:3f:d9:d6:6d:5b:70:16:45:d0:ff:7f:c9:c3:3d:d3:ec: e9:56:a6:09:c2:5f:f1:ba:76:96:dc:ed:b8:36:3a:54:26:08: d6:b4:6a:50:7e:1f:98:0b:29:ff:ac:0d:ce:e6:60:d0:eb:31: 54:88:fd:60:b4:78:81:b1:2c:89:2a:7b:2d:8e:8d:c8:57:96: 4e:54:13:2b:0d:c8:8f:bc:e0:93:3f:2b:c9:99:e2:a2:72:97: ed:7d:a0:45:de:6d:ce:2e:80:f3:07:b7:99:0f:8f:d2:02:ff: d8:dc:07:b5:5e:cf:90:0f:09:20:97:53:f5:6a:b2:c2:33:9d: 1e:b5:95:c7:96:f1:c6:55:b0:cf:38:de:d8:03:47:f9:5a:0f: e3:2c:31:32:1e:fd:d5:ec:bc:d0:9b:ea:f1:31:5c:66:3e:2d: 4d:3f:a4:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL4IdkF6qCeNjC1f6uBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzU1NTM1MjMyM2RiY2MyODdiODdlMGQ2YTQ4MTRhNjNh YmJkNDYwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD EygzYWJhNzRiMmU1NmM2MDQzMjc5OTA1MDQxZDUyYjY5NGFmMmE3M2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTjyEaw0RVTG27q0h0FGOs2tJsgO iwNsH0NPS8gBd+FFjzfx7Id01pExG0grLS8bfPUDitzibUwROd9dEBtdDMDH6N3M C3tx02G4z4MvB/JvqGQPs5M1xZ+7o8s8vlIAx9Z3TzhhXgPriEQb59jUGZVKrxaH iYM0vVQBfMxTm3dYsm6vaKnwiMJWIJk8mG0KQhSnTO7gUQaHTz3UwPhq0dKK0Lq6 bz4aQsKnC75wvDbih0gBeD5zC3ER9+0U+FzWtYcJUHmivxb9jIlRAHDfjjdjfqAz hcovYFVWkiffyZTkNXQMeEodDnyBtXa14y0UZg6Se3qFw/bS+ts15031HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq6dLLlbGBDJ5kFBB1StpSvKnPCMB8GA1UdIwQY MBaAFH3FVTUjI9vMKHuH4NakgUpjq71GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi83YTFhZWUtNjcxYi00ZjM5LWI0ZGQt MjEyYTlmMzEwNjIyLzEvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi83YTFhZWUtNjcxYi00ZjM5LWI0ZGQtMjEyYTlmMzEwNjIy LzEvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxwQ5Yv2 3q6CamU2C/4cnpgQeGpmmwQAtn9P/Jj3jZK1T1L18GhVTuKvyJnSNXWCni07yjlB QzyTgZq1zC/5aYqotEW17foNeqxO5Wh+Kn954+7VwpCn1cyQ+ME/2dZtW3AWRdD/ f8nDPdPs6VamCcJf8bp2ltztuDY6VCYI1rRqUH4fmAsp/6wNzuZg0OsxVIj9YLR4 gbEsiSp7LY6NyFeWTlQTKw3Ij7zgkz8ryZnionKX7X2gRd5tzi6A8we3mQ+P0gL/ 2NwHtV7PkA8JIJdT9WqywjOdHrWVx5bxxlWwzzje2ANH+VoP4ywxMh791ey80Jvq 8TFcZj4tTT+kdA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:25 2025 by rpki-client