This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json) Hash identifier: WU5e5rjOFlGfnlTsy8qFUnuuygEwhvdoXH1enlYuHao= Subject key identifier: E3:BB:62:08:A4:08:26:68:86:77:53:66:5F:6C:12:D4:50:82:CA:19 Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78 Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178 Certificate serial: 019AF1D227621B674C411BEEBD66C32D4594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft Manifest number: 03A0 Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: RnXa4kCr6sqe31yJm1g/tvSkwR6wm1ZWHRyaW/jrf/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:27:62:1b:67:4c:41:1b:ee:bd:66:c3:2d:45:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178 Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=e3bb6208a4082668867753665f6c12d45082ca19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:fe:85:0f:49:60:ca:93:73:85:85:69:9f: 98:b5:5b:9a:dd:2d:1f:04:0f:a7:7d:c5:3a:a5:ec: 95:fa:bc:ac:fa:0b:62:57:27:d8:3c:9c:d1:74:56: e7:76:ca:3c:e1:9c:aa:e7:fa:6c:75:a9:e0:a2:e9: 8f:31:e1:0c:04:95:71:0f:44:f5:3e:29:bc:e5:a2: a2:1b:7f:e6:22:d9:23:6c:90:2d:23:6a:6a:17:af: 8d:fd:2e:24:6c:19:4e:a7:04:ea:25:ce:c5:ee:c3: 19:53:1f:d4:79:1e:fc:0c:2b:c5:82:64:99:f6:12: f6:4e:31:fc:57:73:52:ce:d7:b9:09:d2:75:ae:25: 3d:38:2d:8e:7b:13:ea:00:7f:f0:c1:b0:14:6d:67: 7c:55:0c:7e:4e:d9:24:0c:d3:47:ee:49:ea:7c:5f: 84:a9:84:1a:45:ce:86:4d:e5:fa:08:df:39:03:48: 0d:76:49:02:d6:f0:e6:38:85:25:e3:e4:35:ba:12: 1e:63:19:c7:b7:de:19:bc:51:e7:dc:e4:33:ba:4f: d6:41:31:9b:b1:e0:08:e2:91:dc:d1:d6:64:15:4e: af:fe:04:8f:e6:7b:e7:9b:cd:8c:b0:22:22:07:6b: 49:b6:8b:58:dd:bb:65:70:f9:84:c7:8a:f2:a1:0a: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:62:08:A4:08:26:68:86:77:53:66:5F:6C:12:D4:50:82:CA:19 X509v3 Authority Key Identifier: keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:64:45:be:dd:bf:c5:bb:db:8c:4a:bd:16:77:08:96:be:2a: 73:c0:70:2c:93:70:7e:bf:01:83:92:ba:36:e9:de:56:3b:a9: 55:05:7f:12:19:17:f2:f0:33:1b:42:32:64:c5:5a:b6:51:c1: 78:b2:f6:8e:af:34:cb:4d:38:52:b8:d4:13:f2:ad:6b:b9:ce: b7:d7:8a:7d:1e:df:b2:5a:e0:3f:c1:b0:ac:a1:c3:ac:40:8b: 77:2d:14:19:69:16:e1:c1:88:25:d5:c4:b3:d6:46:cb:ee:ac: b6:0b:77:1d:d4:e2:30:6c:a9:7c:84:37:d6:ac:ce:88:3e:fc: 6e:41:df:f5:7e:9e:54:7c:3f:ad:39:af:37:50:ad:bb:a9:b4: dc:46:a8:c3:31:77:5e:12:15:d5:e7:ca:6d:8c:3e:ee:50:ec: e7:78:b3:1f:82:ce:b6:2d:a6:22:a6:51:9e:4d:f7:e9:5c:a3: 9a:59:1d:78:19:e4:4b:47:af:de:5e:4f:45:3f:23:26:4c:32: 8a:73:b2:4a:b3:b9:9e:98:20:da:b9:ab:8e:13:8c:4a:79:50: cc:63:4a:2c:39:d9:cb:c2:50:21:b9:34:90:8c:59:31:4d:d1: 9a:f5:0b:83:d0:bc:88:01:1f:fa:99:2e:55:09:76:5b:01:e4: 17:12:28:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0idiG2dMQRvuvWbDLUWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTQ5Yzk1ZDBjY2Q5OWM4NWVjMDcyMTA3NjQ0YzhjYzhk MWUxNzgwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD EyhlM2JiNjIwOGE0MDgyNjY4ODY3NzUzNjY1ZjZjMTJkNDUwODJjYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIP+hQ9JYMqTc4WFaZ+YtVua3S0f BA+nfcU6peyV+rys+gtiVyfYPJzRdFbndso84Zyq5/psdangoumPMeEMBJVxD0T1 Pim85aKiG3/mItkjbJAtI2pqF6+N/S4kbBlOpwTqJc7F7sMZUx/UeR78DCvFgmSZ 9hL2TjH8V3NSzte5CdJ1riU9OC2OexPqAH/wwbAUbWd8VQx+TtkkDNNH7knqfF+E qYQaRc6GTeX6CN85A0gNdkkC1vDmOIUl4+Q1uhIeYxnHt94ZvFHn3OQzuk/WQTGb seAI4pHc0dZkFU6v/gSP5nvnm82MsCIiB2tJtotY3btlcPmEx4ryoQoi6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO7YgikCCZohndTZl9sEtRQgsoZMB8GA1UdIwQY MBaAFH6UnJXQzNmchewHIQdkTIzI0eF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTIt ZGQ4ZjY1MjhlYzExLzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTItZGQ4ZjY1MjhlYzEx LzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWRFvt2/ xbvbjEq9FncIlr4qc8BwLJNwfr8Bg5K6NuneVjupVQV/EhkX8vAzG0IyZMVatlHB eLL2jq80y004UrjUE/Kta7nOt9eKfR7fslrgP8GwrKHDrECLdy0UGWkW4cGIJdXE s9ZGy+6stgt3HdTiMGypfIQ31qzOiD78bkHf9X6eVHw/rTmvN1Ctu6m03EaowzF3 XhIV1efKbYw+7lDs53izH4LOti2mIqZRnk336VyjmlkdeBnkS0ev3l5PRT8jJkwy inOySrO5npgg2rmrjhOMSnlQzGNKLDnZy8JQIbk0kIxZMU3RmvULg9C8iAEf+pku VQl2WwHkFxIoeA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:38 2025 by rpki-client