This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft File: fSiu_AZob_0_snjG3lKXc-2r3p4.mft (raw, json) Hash identifier: CiI9VgzPEIlIBQ7QCNZ8bc3FtA1K2GsrHEc9NsbT2kk= Subject key identifier: D6:09:14:B0:92:F5:68:9E:A3:35:03:45:4A:9F:A6:EF:24:E0:46:56 Authority key identifier: 7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E Certificate issuer: /CN=7d28aefc06686ffd3fb278c6de529773edabde9e Certificate serial: 019B59AD1195774611BCEEFE7F46A6542B62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft Manifest number: 0168 Signing time: Fri 26 Dec 2025 08:01:12 +0000 Manifest this update: Fri 26 Dec 2025 08:01:12 +0000 Manifest next update: Sat 27 Dec 2025 08:01:12 +0000 Files and hashes: 1: fSiu_AZob_0_snjG3lKXc-2r3p4.crl (hash: 5RAP+WT2YCFQoU1kbTKYCE8nl2bInLlWyMLENkRmXmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:11:95:77:46:11:bc:ee:fe:7f:46:a6:54:2b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d28aefc06686ffd3fb278c6de529773edabde9e Validity Not Before: Dec 26 08:01:12 2025 GMT Not After : Dec 27 08:01:12 2025 GMT Subject: CN=d60914b092f5689ea33503454a9fa6ef24e04656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:31:2a:6c:a6:46:68:86:24:a2:89:c9:49: c6:eb:5d:c6:3e:c7:65:cd:ad:ef:39:b0:12:2c:38: 96:d3:b5:b3:73:10:0b:76:9f:92:c5:ea:0c:54:e0: 13:05:73:76:cc:cf:aa:0c:e4:92:72:7b:e2:05:79: 66:26:ab:0c:32:d1:72:a2:98:86:e7:a3:a6:b0:54: 41:47:5c:6f:a3:b4:65:be:e3:18:e8:d2:69:a1:90: 5e:2e:26:7f:4f:6b:62:7f:85:fc:fe:51:12:31:06: 92:bf:5b:df:33:60:25:eb:0c:ab:0a:14:c4:9c:63: d6:3c:d3:84:d2:f7:1f:8c:da:d5:35:10:cd:21:b3: dc:c3:b0:0c:04:3f:3c:3a:35:f5:2d:9c:18:cb:dd: bf:8c:b7:70:e9:ad:b3:c9:5b:25:c0:93:f2:e4:bd: f8:5d:c7:45:6b:d1:54:ca:15:64:d7:c7:02:8c:06: 8b:4a:6e:62:d6:da:37:69:23:bc:e3:fc:ba:6b:06: c3:62:c4:af:be:a8:98:70:07:f1:e6:90:88:84:d4: f0:8d:9a:14:2c:b8:a7:46:74:57:f6:52:6b:58:c5: af:0f:99:80:b7:aa:41:2e:61:52:83:c0:06:a4:db: 9d:af:3d:10:14:4d:3a:52:65:79:3e:8c:04:67:77: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:09:14:B0:92:F5:68:9E:A3:35:03:45:4A:9F:A6:EF:24:E0:46:56 X509v3 Authority Key Identifier: keyid:7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6f:95:4c:a2:0f:3b:71:0c:4a:1a:d7:b8:e3:b2:58:1f:d0: a4:49:d0:fa:68:de:14:75:f1:c2:60:dd:95:17:ef:5d:b0:c6: 58:41:ac:8e:b2:39:65:a4:91:96:ed:43:54:98:55:a3:34:aa: 7f:72:ab:e3:dc:08:79:18:5d:d8:ce:7f:30:4d:bf:5e:b6:5c: a6:69:28:aa:f7:3b:d1:0c:31:e4:19:30:07:df:24:61:23:a4: b6:11:b2:ce:b6:cc:6c:41:ec:c8:bc:15:e8:90:2a:90:11:23: e0:90:17:e4:09:4a:53:e3:67:a3:27:e7:7d:9a:5b:ce:5c:05: 69:3b:f4:cf:9f:c9:ca:6c:fb:e1:95:93:30:26:e6:cd:f3:68: fc:c9:aa:5d:2c:21:b3:15:af:0e:9e:44:56:bb:ea:aa:90:5b: b6:32:f7:a7:79:a6:8b:fd:c0:71:e4:90:4b:9f:e4:77:e0:96: 88:ea:c2:f4:6f:2a:61:28:00:ee:80:03:ca:71:6b:18:e8:38: 18:c5:19:d0:65:fd:21:d3:3b:d2:80:b5:a1:02:33:06:f6:41: 27:3b:f2:77:d9:39:2d:a7:11:04:88:06:0f:9d:1b:a5:ec:93: 97:82:d1:77:3e:6e:8a:5f:9f:2d:e2:7a:ce:78:ca:41:fb:bf: 3b:f0:00:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrRGVd0YRvO7+f0amVCtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMjhhZWZjMDY2ODZmZmQzZmIyNzhjNmRlNTI5NzczZWRh YmRlOWUwHhcNMjUxMjI2MDgwMTEyWhcNMjUxMjI3MDgwMTEyWjAzMTEwLwYDVQQD EyhkNjA5MTRiMDkyZjU2ODllYTMzNTAzNDU0YTlmYTZlZjI0ZTA0NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbIxKmymRmiGJKKJyUnG613GPsdl za3vObASLDiW07WzcxALdp+SxeoMVOATBXN2zM+qDOSScnviBXlmJqsMMtFyopiG 56OmsFRBR1xvo7RlvuMY6NJpoZBeLiZ/T2tif4X8/lESMQaSv1vfM2Al6wyrChTE nGPWPNOE0vcfjNrVNRDNIbPcw7AMBD88OjX1LZwYy92/jLdw6a2zyVslwJPy5L34 XcdFa9FUyhVk18cCjAaLSm5i1to3aSO84/y6awbDYsSvvqiYcAfx5pCIhNTwjZoU LLinRnRX9lJrWMWvD5mAt6pBLmFSg8AGpNudrz0QFE06UmV5PowEZ3dKBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYJFLCS9WieozUDRUqfpu8k4EZWMB8GA1UdIwQY MBaAFH0orvwGaG/9P7J4xt5Sl3Ptq96eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlNpdV9BWm9iXzBfc25qRzNsS1hjLTJyM3A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MDIzM2YtYmQ1Ni00MzE0LTlmMzgt OTM0ZjU0MzdkNTQ4LzEvZlNpdV9BWm9iXzBfc25qRzNsS1hjLTJyM3A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85MDIzM2YtYmQ1Ni00MzE0LTlmMzgtOTM0ZjU0MzdkNTQ4 LzEvZlNpdV9BWm9iXzBfc25qRzNsS1hjLTJyM3A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2+VTKIP O3EMShrXuOOyWB/QpEnQ+mjeFHXxwmDdlRfvXbDGWEGsjrI5ZaSRlu1DVJhVozSq f3Kr49wIeRhd2M5/ME2/XrZcpmkoqvc70Qwx5BkwB98kYSOkthGyzrbMbEHsyLwV 6JAqkBEj4JAX5AlKU+NnoyfnfZpbzlwFaTv0z5/Jymz74ZWTMCbmzfNo/MmqXSwh sxWvDp5EVrvqqpBbtjL3p3mmi/3AceSQS5/kd+CWiOrC9G8qYSgA7oADynFrGOg4 GMUZ0GX9IdM70oC1oQIzBvZBJzvyd9k5LacRBIgGD50bpeyTl4LRdz5uil+fLeJ6 znjKQfu/O/AAKw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:18 2025 by rpki-client