This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json) Hash identifier: n3cZM2R82kUTmqUFcKVnrZdVFgLxREPypGH5A8FFAl8= Subject key identifier: D3:D0:3E:AC:58:F3:D8:77:D9:27:C9:CD:6A:36:03:92:68:B8:FE:FA Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e Certificate serial: 019B3231E0E99FC5148D6159146E2F06735A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft Manifest number: 0F0D Signing time: Thu 18 Dec 2025 16:01:28 +0000 Manifest this update: Thu 18 Dec 2025 16:01:28 +0000 Manifest next update: Fri 19 Dec 2025 16:01:28 +0000 Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: J3iLkJnTHEnhMlnjL+uYdd4ATK8Tt4kqvJwhbq1xYz4=) 2: sD3TQhmqpMeiNDRMe_Cg9c8gcQg.roa (hash: YpFE/XWsvo+iSqItJdBs7pFneblfjbKHabl7GMSfsrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:e0:e9:9f:c5:14:8d:61:59:14:6e:2f:06:73:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e Validity Not Before: Dec 18 16:01:28 2025 GMT Not After : Dec 19 16:01:28 2025 GMT Subject: CN=d3d03eac58f3d877d927c9cd6a36039268b8fefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:8d:63:55:10:e8:f0:ba:f6:80:a0:88:52: d0:f6:69:7e:c2:a6:e7:eb:92:50:e6:52:03:19:7d: 38:0d:6b:f4:bf:50:a4:81:ff:50:cb:b7:73:be:f8: e5:0d:20:87:5c:9f:9e:d7:d8:05:90:27:4b:58:70: 9a:7a:9a:ef:e0:fb:5a:5f:a2:83:b3:f2:63:fb:b0: fd:7d:9f:f1:5f:d3:29:67:49:e6:ff:51:27:27:ac: 99:a1:b0:f0:3d:9d:dd:70:d3:40:ac:af:e9:cd:ea: 07:e0:d6:f6:51:be:4c:03:95:38:92:7e:2b:66:aa: 89:a9:74:d5:95:a3:ae:56:88:be:a1:b9:24:1f:4f: b8:95:23:48:54:dc:ab:df:aa:4a:54:3d:b0:34:4c: f8:df:b1:e9:1b:0c:42:d8:49:2c:a5:66:a7:9d:7d: 16:19:dc:e2:dd:4b:42:69:6e:eb:94:bf:58:65:bf: 9d:75:80:44:2e:65:84:e1:ef:dc:52:27:b0:bb:bf: f5:b5:29:6a:e6:a0:94:ee:6a:ed:7a:fa:27:18:68: 89:58:d7:37:56:57:e6:e4:3e:40:eb:6d:d7:f1:7c: ea:53:30:5a:fd:e8:33:5c:e2:23:27:87:20:bd:25: 38:48:ce:36:b2:4c:a4:d0:8a:f8:05:aa:37:69:8d: c2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D0:3E:AC:58:F3:D8:77:D9:27:C9:CD:6A:36:03:92:68:B8:FE:FA X509v3 Authority Key Identifier: keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:4e:21:a3:f7:aa:b8:1a:ba:40:cf:04:19:48:51:c7:5a:a9: 5d:9e:8c:ab:c1:e7:4d:39:b5:b7:20:f5:48:56:02:1d:88:bc: 1c:b8:e5:bf:48:a2:89:bd:63:b0:07:eb:92:3e:d8:10:71:1a: 5c:e4:87:de:c1:9a:0d:34:70:df:47:b1:1e:41:91:1b:1a:0c: e1:5d:77:fa:a2:fb:34:b0:13:3a:92:f3:1c:6d:63:0a:ec:45: 23:9a:49:83:34:ef:f9:cb:8d:c5:06:3f:6a:9e:14:c1:21:a0: 56:ca:38:77:e9:13:c1:3b:76:37:49:44:53:53:ee:d9:17:53: d3:c0:82:e6:26:61:94:16:98:4c:6c:bc:cc:a7:70:79:65:f2: f9:7d:01:21:47:58:5f:bd:4d:21:e6:86:19:24:ae:a9:b3:6a: a5:e9:09:98:23:fd:9b:28:ec:11:73:58:08:ef:e1:a2:fc:b0: 1d:9d:27:07:94:af:30:46:74:ad:d6:2e:5b:fb:c6:a1:c6:e7: e4:eb:f8:59:c2:ae:89:8a:09:e9:a0:ff:f2:06:23:d0:88:e6: 0c:86:2a:b3:cf:54:fe:88:1d:76:18:99:5a:aa:10:7e:ad:c6: 86:a9:a6:74:9d:7a:5d:58:b8:88:e5:fd:cc:43:00:f5:24:b1: ea:d5:39:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMeDpn8UUjWFZFG4vBnNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmQzODA0ZTAwYjllMDZhODJjZWQ5ZjA3YjM0ZmUzZmQ4 MDM5NGUwHhcNMjUxMjE4MTYwMTI4WhcNMjUxMjE5MTYwMTI4WjAzMTEwLwYDVQQD EyhkM2QwM2VhYzU4ZjNkODc3ZDkyN2M5Y2Q2YTM2MDM5MjY4YjhmZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RyNY1UQ6PC69oCgiFLQ9ml+wqbn 65JQ5lIDGX04DWv0v1Ckgf9Qy7dzvvjlDSCHXJ+e19gFkCdLWHCaeprv4PtaX6KD s/Jj+7D9fZ/xX9MpZ0nm/1EnJ6yZobDwPZ3dcNNArK/pzeoH4Nb2Ub5MA5U4kn4r ZqqJqXTVlaOuVoi+obkkH0+4lSNIVNyr36pKVD2wNEz437HpGwxC2EkspWannX0W Gdzi3UtCaW7rlL9YZb+ddYBELmWE4e/cUiewu7/1tSlq5qCU7mrtevonGGiJWNc3 Vlfm5D5A623X8XzqUzBa/egzXOIjJ4cgvSU4SM42skyk0Ir4Bao3aY3CbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPQPqxY89h32SfJzWo2A5JouP76MB8GA1UdIwQY MBaAFBX9OATgC54GqCztnwezT+P9gDlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEt NzgzNWQzMjA4Mzk2LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEtNzgzNWQzMjA4Mzk2 LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUU4ho/eq uBq6QM8EGUhRx1qpXZ6Mq8HnTTm1tyD1SFYCHYi8HLjlv0iiib1jsAfrkj7YEHEa XOSH3sGaDTRw30exHkGRGxoM4V13+qL7NLATOpLzHG1jCuxFI5pJgzTv+cuNxQY/ ap4UwSGgVso4d+kTwTt2N0lEU1Pu2RdT08CC5iZhlBaYTGy8zKdweWXy+X0BIUdY X71NIeaGGSSuqbNqpekJmCP9myjsEXNYCO/hovywHZ0nB5SvMEZ0rdYuW/vGocbn 5Ov4WcKuiYoJ6aD/8gYj0IjmDIYqs89U/ogddhiZWqoQfq3GhqmmdJ16XVi4iOX9 zEMA9SSx6tU5Mw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:05:53 2025 by rpki-client