This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json) Hash identifier: N7pj/dDvh7GjhfE4Rfg2J5KRZ82szBJIGjB2xi9WPug= Subject key identifier: 35:0D:33:8F:D0:39:11:7D:7F:19:FB:8B:B6:86:59:D6:83:AF:E3:AC Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac Certificate serial: 019B360E61459D46B52BEDBF0AB879D59990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft Manifest number: 10A8 Signing time: Fri 19 Dec 2025 10:01:10 +0000 Manifest this update: Fri 19 Dec 2025 10:01:10 +0000 Manifest next update: Sat 20 Dec 2025 10:01:10 +0000 Files and hashes: 1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=) 2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: 8t2XoyAn0c3jYzzUveAXOrSCU96u5eM/Z0MOXVM4Ouk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:61:45:9d:46:b5:2b:ed:bf:0a:b8:79:d5:99:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac Validity Not Before: Dec 19 10:01:10 2025 GMT Not After : Dec 20 10:01:10 2025 GMT Subject: CN=350d338fd039117d7f19fb8bb68659d683afe3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:ec:50:34:8e:18:03:bf:94:d6:d0:e2:69: 6a:e5:0a:a5:82:d7:5d:70:ab:98:a8:8d:96:9d:38: 46:fb:e8:2f:a2:5e:0e:8f:c3:e2:13:ae:6c:8e:71: 6f:76:e3:6f:d8:41:14:d4:66:64:86:c4:fe:db:c0: 78:7c:a6:1a:6f:dd:a0:ed:0f:35:a4:15:37:02:24: 70:1d:6f:34:d4:58:54:77:99:67:e3:79:9d:55:15: 3a:fe:59:de:83:5a:19:45:4b:68:43:89:50:47:34: 25:30:e6:22:8d:e0:3a:41:a5:0f:33:c6:75:63:68: 6d:83:dc:4d:82:cd:d9:16:9f:51:4b:93:46:15:ae: 49:ff:7e:b9:59:6a:b5:35:7a:14:47:d7:64:da:fb: 5d:73:7a:dc:b1:2c:96:f6:3c:a6:53:70:6b:59:31: 6d:12:28:66:db:03:f9:7c:cc:4c:f3:ad:68:7a:0f: a8:a5:03:6f:70:fd:f0:92:60:2d:c1:5f:87:a3:54: c6:89:d1:a0:5a:dd:0d:3d:84:fc:2f:0d:b6:f8:17: 50:52:bc:cd:00:ae:2c:03:75:d1:f4:8e:bd:42:ad: 6e:ae:05:ca:f9:7d:3e:5d:a7:3c:10:25:10:51:82: 3f:f1:76:c7:90:04:38:c1:1b:27:be:c1:99:a7:b4: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0D:33:8F:D0:39:11:7D:7F:19:FB:8B:B6:86:59:D6:83:AF:E3:AC X509v3 Authority Key Identifier: keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1d:cd:4e:20:a1:2a:f2:5e:2a:08:c6:04:c3:3f:c4:de:72: 07:54:de:af:ea:71:03:4c:6d:8a:79:ef:d6:85:a2:85:8b:1d: fd:80:f9:55:57:a7:fc:87:84:cc:10:66:c0:f6:b7:b7:9a:12: 4f:56:89:25:35:be:26:fa:a4:01:4f:10:a0:f2:0e:38:e7:99: 21:4d:c7:be:60:cd:c8:d1:20:0f:d6:2c:cb:75:82:d7:b7:99: 8d:34:30:47:69:5b:68:e7:99:aa:6b:f7:3d:58:f1:e4:ad:a7: fb:ca:da:d6:31:9b:13:ab:1b:c1:fb:d9:57:9e:c9:e5:84:0d: 2c:d8:5b:8a:aa:74:d3:b5:82:91:63:58:30:d1:06:44:8c:aa: a5:40:7c:92:5b:71:eb:c3:ca:15:5f:47:00:70:6c:db:2b:9d: 2a:d5:7a:9e:fb:e4:55:49:a2:38:2a:27:af:ca:3f:f4:43:d4: 21:ca:b2:8e:f8:15:8f:49:ac:01:d8:c7:3d:de:ee:32:c2:99: 61:29:43:0e:aa:e4:e2:a2:52:fe:98:f2:ce:26:ea:0e:c6:e2: 1c:6e:6b:3c:0f:2e:24:43:ab:b5:86:fc:e5:ba:78:04:ee:d1: e2:8c:b9:86:e5:38:7f:df:85:8e:a5:a8:11:06:99:95:45:8e: b6:90:c7:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DmFFnUa1K+2/Crh51ZmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2NlMDYxZDI0MDhkOWE4ZjZiMmI5NDE2MmQxZjc0ZmFj M2RjYWMwHhcNMjUxMjE5MTAwMTEwWhcNMjUxMjIwMTAwMTEwWjAzMTEwLwYDVQQD EygzNTBkMzM4ZmQwMzkxMTdkN2YxOWZiOGJiNjg2NTlkNjgzYWZlM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0LsUDSOGAO/lNbQ4mlq5Qqlgtdd cKuYqI2WnThG++gvol4Oj8PiE65sjnFvduNv2EEU1GZkhsT+28B4fKYab92g7Q81 pBU3AiRwHW801FhUd5ln43mdVRU6/lneg1oZRUtoQ4lQRzQlMOYijeA6QaUPM8Z1 Y2htg9xNgs3ZFp9RS5NGFa5J/365WWq1NXoUR9dk2vtdc3rcsSyW9jymU3BrWTFt Eihm2wP5fMxM861oeg+opQNvcP3wkmAtwV+Ho1TGidGgWt0NPYT8Lw22+BdQUrzN AK4sA3XR9I69Qq1urgXK+X0+Xac8ECUQUYI/8XbHkAQ4wRsnvsGZp7TPxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUNM4/QORF9fxn7i7aGWdaDr+OsMB8GA1UdIwQY MBaAFBXM4GHSQI2aj2srlBYtH3T6w9ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMt NjY4MmY3ODI3ZGYwLzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMtNjY4MmY3ODI3ZGYw LzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR3NTiCh KvJeKgjGBMM/xN5yB1Ter+pxA0xtinnv1oWihYsd/YD5VVen/IeEzBBmwPa3t5oS T1aJJTW+JvqkAU8QoPIOOOeZIU3HvmDNyNEgD9Ysy3WC17eZjTQwR2lbaOeZqmv3 PVjx5K2n+8ra1jGbE6sbwfvZV57J5YQNLNhbiqp007WCkWNYMNEGRIyqpUB8kltx 68PKFV9HAHBs2yudKtV6nvvkVUmiOConr8o/9EPUIcqyjvgVj0msAdjHPd7uMsKZ YSlDDqrk4qJS/pjyzibqDsbiHG5rPA8uJEOrtYb85bp4BO7R4oy5huU4f9+FjqWo EQaZlUWOtpDHXw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:06:21 2025 by rpki-client