This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft File: FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json) Hash identifier: rhHOCj0T8VyxIJNdjlzc98Mr24ut/+QFy+lAU1v+/hU= Subject key identifier: 10:8F:4C:9A:4E:55:A1:BB:F8:5A:77:0F:FD:E4:77:D0:03:41:8D:3C Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22 Certificate issuer: /CN=173515f4c8417014f88415f6d04a9f7003fc0b22 Certificate serial: 019AF31C26F31880968CBD5845F0B15A9E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft Manifest number: 0233 Signing time: Sat 06 Dec 2025 10:01:39 +0000 Manifest this update: Sat 06 Dec 2025 10:01:39 +0000 Manifest next update: Sun 07 Dec 2025 10:01:39 +0000 Files and hashes: 1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: FqWArQf+fM/mIG1SGPzdRCXWhIDR1z2jW5DpgBmyy6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:26:f3:18:80:96:8c:bd:58:45:f0:b1:5a:9e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22 Validity Not Before: Dec 6 10:01:39 2025 GMT Not After : Dec 7 10:01:39 2025 GMT Subject: CN=108f4c9a4e55a1bbf85a770ffde477d003418d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:d4:ac:6b:7c:4b:6b:54:53:c5:63:37:c7: 3d:26:2c:be:72:d0:ba:99:72:cc:1c:71:5b:b1:bc: c7:49:7a:38:7b:97:1c:c1:43:89:81:6c:65:00:0a: 59:fb:8a:0b:67:64:d4:4a:af:44:5e:83:1d:98:4a: 40:d9:9f:58:4a:f2:7c:7f:d4:e8:eb:5e:f0:98:33: ed:ef:28:5d:b3:4d:54:13:c8:2f:51:e3:e8:07:a2: 5c:fa:da:3f:ed:b9:50:13:ca:7e:17:56:18:16:a1: a4:44:a9:0c:42:6f:74:01:7d:8c:ef:44:44:4c:c9: 6b:d4:fe:12:4c:a1:71:13:b5:8c:58:2d:32:bb:08: f4:5a:13:ec:cf:38:d6:b4:46:cb:5c:ce:7f:b6:9e: 21:9b:28:d1:9a:4e:52:77:75:9f:2d:37:fb:b6:35: 68:17:8e:49:8c:91:57:a4:82:37:13:b8:8e:a1:bb: 4b:31:22:25:50:35:d9:3c:89:e2:c9:40:d3:24:f9: ba:ed:07:74:5b:56:96:8d:38:d5:8c:e9:44:87:57: ca:50:af:9a:73:6e:76:95:f6:68:f4:f1:73:c8:aa: b8:ec:4b:41:06:49:4c:d4:73:7e:34:c3:87:ce:16: 86:5e:2d:3f:6f:a1:a2:f8:22:2c:bf:af:bb:09:09: dd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8F:4C:9A:4E:55:A1:BB:F8:5A:77:0F:FD:E4:77:D0:03:41:8D:3C X509v3 Authority Key Identifier: keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b5:36:fc:46:55:fa:de:b1:78:ad:cc:59:0b:4a:4a:49:d4: 64:6a:8b:39:4e:9f:71:cf:48:58:79:00:40:f8:4a:a2:0c:0d: 6b:56:8e:c9:81:ef:75:14:af:b2:1b:a7:29:c8:80:c6:e1:f3: e4:1e:53:1d:d8:52:1e:7c:ef:83:9a:0e:4c:e5:c5:c6:8b:db: 4b:db:20:e1:19:d9:27:28:e5:92:2b:db:35:fe:f9:75:9c:67: 15:3a:f6:71:6f:8b:ec:9a:44:e7:ec:f8:70:b9:61:2d:6d:28: e8:07:28:31:43:ed:32:8c:e2:50:48:f7:12:2a:e8:c1:a3:f2: 03:e9:46:fb:de:11:6c:aa:6f:ea:a0:43:00:97:c1:8a:18:73: 10:28:4f:39:83:4b:61:74:bd:5d:46:1e:e7:f8:81:9a:85:8f: c7:27:71:34:f4:a0:c9:58:f1:49:b2:c9:00:f6:f3:a4:06:f2: 1f:00:e6:73:75:05:d5:de:1b:52:32:32:b7:cf:da:88:f2:25: db:4e:53:62:82:a8:e4:0b:a7:94:9f:c1:4e:f2:1e:52:44:29: 4d:c8:b7:6d:e3:2a:d6:39:de:81:93:14:dc:bb:81:7d:f6:f0: b1:c1:83:d8:b4:39:78:e8:fa:86:01:8a:6a:9e:16:26:0e:b6: 10:4c:e9:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCbzGICWjL1YRfCxWp5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzUxNWY0Yzg0MTcwMTRmODg0MTVmNmQwNGE5ZjcwMDNm YzBiMjIwHhcNMjUxMjA2MTAwMTM5WhcNMjUxMjA3MTAwMTM5WjAzMTEwLwYDVQQD EygxMDhmNGM5YTRlNTVhMWJiZjg1YTc3MGZmZGU0NzdkMDAzNDE4ZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVDUrGt8S2tUU8VjN8c9Jiy+ctC6 mXLMHHFbsbzHSXo4e5ccwUOJgWxlAApZ+4oLZ2TUSq9EXoMdmEpA2Z9YSvJ8f9To 617wmDPt7yhds01UE8gvUePoB6Jc+to/7blQE8p+F1YYFqGkRKkMQm90AX2M70RE TMlr1P4STKFxE7WMWC0yuwj0WhPszzjWtEbLXM5/tp4hmyjRmk5Sd3WfLTf7tjVo F45JjJFXpII3E7iOobtLMSIlUDXZPIniyUDTJPm67Qd0W1aWjTjVjOlEh1fKUK+a c252lfZo9PFzyKq47EtBBklM1HN+NMOHzhaGXi0/b6Gi+CIsv6+7CQndwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCPTJpOVaG7+Fp3D/3kd9ADQY08MB8GA1UdIwQY MBaAFBc1FfTIQXAU+IQV9tBKn3AD/AsiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpVVjlNaEJjQlQ0aEJYMjBFcWZjQVA4Q3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNGQ0MzktYjY1OS00ZDdlLWI5Zjct MTgyNjRjYjc4YjRjLzEvRnpVVjlNaEJjQlQ0aEJYMjBFcWZjQVA4Q3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kNGQ0MzktYjY1OS00ZDdlLWI5ZjctMTgyNjRjYjc4YjRj LzEvRnpVVjlNaEJjQlQ0aEJYMjBFcWZjQVA4Q3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7U2/EZV +t6xeK3MWQtKSknUZGqLOU6fcc9IWHkAQPhKogwNa1aOyYHvdRSvshunKciAxuHz 5B5THdhSHnzvg5oOTOXFxovbS9sg4RnZJyjlkivbNf75dZxnFTr2cW+L7JpE5+z4 cLlhLW0o6AcoMUPtMoziUEj3EirowaPyA+lG+94RbKpv6qBDAJfBihhzEChPOYNL YXS9XUYe5/iBmoWPxydxNPSgyVjxSbLJAPbzpAbyHwDmc3UF1d4bUjIyt8/aiPIl 205TYoKo5AunlJ/BTvIeUkQpTci3beMq1jnegZMU3LuBffbwscGD2LQ5eOj6hgGK ap4WJg62EEzp9g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:21 2025 by rpki-client