This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft File: FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json) Hash identifier: t+CXKBXdRJkUW1IQpVwCi/W48SPoqdXl/qPh4Ouv4MI= Subject key identifier: 1F:36:15:4F:C6:4C:0F:B6:CB:BE:BB:98:38:B6:C7:D9:91:53:57:0B Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35 Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735 Certificate serial: 019AF50B35BEEA9BDD488965C24B6F170ACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft Manifest number: 0218 Signing time: Sat 06 Dec 2025 19:02:23 +0000 Manifest this update: Sat 06 Dec 2025 19:02:23 +0000 Manifest next update: Sun 07 Dec 2025 19:02:23 +0000 Files and hashes: 1: 2KNjtYfkkvpIBPVL-Dk7JZfM4jU.roa (hash: YZgrPPEN8zGqhO8cwF6VGe00Dd89Opm5ALHWcKmIHgM=) 2: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: QoUy0mKN2JJzrTlYsEMdCoMSmT8Ag8KiqFowvxILQeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:35:be:ea:9b:dd:48:89:65:c2:4b:6f:17:0a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735 Validity Not Before: Dec 6 19:02:23 2025 GMT Not After : Dec 7 19:02:23 2025 GMT Subject: CN=1f36154fc64c0fb6cbbebb9838b6c7d99153570b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:55:4f:44:94:66:0c:9e:b9:ac:cd:ae:f2:67: 85:70:13:78:4d:c6:05:69:d6:fa:3d:6c:84:d0:5b: 94:1a:ff:83:f7:5a:b6:73:ac:f8:4f:f5:70:f5:d7: 70:77:7e:48:8b:27:b3:7c:95:8c:ae:2f:0c:d0:0e: 7e:75:94:38:56:b6:aa:5d:9c:8d:c3:f1:81:fe:03: ca:15:02:5c:b6:82:58:1b:66:40:0b:20:db:cc:36: e2:43:bb:d5:72:be:b8:27:c9:2f:66:95:e4:25:27: 95:6b:f2:b7:10:5a:fc:af:92:8a:c0:49:09:a2:c2: 09:e4:7b:39:4d:a1:38:70:39:54:3d:34:36:0e:4e: 1f:20:c9:a4:ba:55:fb:88:b6:d4:6a:54:0d:5f:40: b1:2d:95:6c:8d:77:2d:dc:8e:2e:13:13:40:80:38: e2:20:5f:09:7d:78:7d:f6:52:1d:ea:57:c0:31:0c: bd:e8:80:b5:fb:c2:25:e1:13:46:29:4a:8a:91:7e: e3:ec:18:89:ab:04:8c:21:1a:b0:78:6a:d6:fc:20: fb:cc:bd:d9:54:38:69:52:a2:33:12:06:66:9a:68: 07:ef:8f:6b:9e:eb:96:bf:81:f4:3a:35:cd:1c:94: 91:17:5e:af:bb:60:5c:c9:ca:8d:7e:50:d6:ac:55: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:36:15:4F:C6:4C:0F:B6:CB:BE:BB:98:38:B6:C7:D9:91:53:57:0B X509v3 Authority Key Identifier: keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3f:f2:8f:ec:21:1e:4f:2b:21:2a:ff:2b:00:c5:7a:40:c1: 3b:21:58:e7:a2:bb:c2:8e:c6:31:8b:56:d5:28:82:5d:e5:d8: 45:2a:f9:61:27:04:31:7a:7e:b0:b8:17:6b:8e:d4:b5:52:0e: ce:d2:0d:dd:d7:9a:3a:df:a4:28:07:ca:0b:e3:32:a9:ed:1a: 2c:c9:12:bb:cb:43:84:a1:93:49:6c:ed:12:de:35:50:90:09: f0:78:f5:28:25:71:58:c7:09:41:fc:8e:5f:97:a1:99:45:cb: 59:f6:ac:a9:c1:7f:9f:17:e9:f6:3f:87:88:c6:d9:fc:9c:03: 00:f5:e9:92:22:2e:08:4d:d9:2d:e8:e5:1f:3f:bc:fc:53:0e: 49:e3:62:cc:74:fe:08:b4:b4:64:7e:ae:9b:9a:2f:2d:ff:44: 2e:e1:4f:fa:fe:2f:48:44:2d:41:24:a3:00:94:3b:6c:9c:cc: a2:72:b9:63:07:7c:c2:02:ef:3a:81:a0:30:f7:71:2b:12:bf: d4:fe:9a:bc:a6:44:eb:ed:f9:26:4a:ad:3c:37:25:c4:a4:7c: 92:29:5d:45:42:b8:b0:5d:09:0b:8c:db:d9:e2:e8:44:07:e4: b6:4f:08:57:ed:00:4d:0e:c5:3d:8c:72:2d:79:28:c0:6a:cf: 08:03:9d:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzW+6pvdSIllwktvFwrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YzE4YTI5MDhjZWJkOTA4NWUwMTI2NmJiMDJmYjhhZjIy NDc3MzUwHhcNMjUxMjA2MTkwMjIzWhcNMjUxMjA3MTkwMjIzWjAzMTEwLwYDVQQD EygxZjM2MTU0ZmM2NGMwZmI2Y2JiZWJiOTgzOGI2YzdkOTkxNTM1NzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FVPRJRmDJ65rM2u8meFcBN4TcYF adb6PWyE0FuUGv+D91q2c6z4T/Vw9ddwd35IiyezfJWMri8M0A5+dZQ4VraqXZyN w/GB/gPKFQJctoJYG2ZACyDbzDbiQ7vVcr64J8kvZpXkJSeVa/K3EFr8r5KKwEkJ osIJ5Hs5TaE4cDlUPTQ2Dk4fIMmkulX7iLbUalQNX0CxLZVsjXct3I4uExNAgDji IF8JfXh99lId6lfAMQy96IC1+8Il4RNGKUqKkX7j7BiJqwSMIRqweGrW/CD7zL3Z VDhpUqIzEgZmmmgH749rnuuWv4H0OjXNHJSRF16vu2BcycqNflDWrFUQeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB82FU/GTA+2y767mDi2x9mRU1cLMB8GA1UdIwQY MBaAFBXBiikIzr2QheASZrsC+4ryJHc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5Mzgt N2U1M2QxYzU1OGQ5LzEvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5MzgtN2U1M2QxYzU1OGQ5 LzEvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVj/yj+wh Hk8rISr/KwDFekDBOyFY56K7wo7GMYtW1SiCXeXYRSr5YScEMXp+sLgXa47UtVIO ztIN3deaOt+kKAfKC+Myqe0aLMkSu8tDhKGTSWztEt41UJAJ8Hj1KCVxWMcJQfyO X5ehmUXLWfasqcF/nxfp9j+HiMbZ/JwDAPXpkiIuCE3ZLejlHz+8/FMOSeNizHT+ CLS0ZH6um5ovLf9ELuFP+v4vSEQtQSSjAJQ7bJzMonK5Ywd8wgLvOoGgMPdxKxK/ 1P6avKZE6+35JkqtPDclxKR8kildRUK4sF0JC4zb2eLoRAfktk8IV+0ATQ7FPYxy LXkowGrPCAOdIw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:48 2025 by rpki-client