This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json) Hash identifier: zSxU9sagrSJ4pckgrexbiP5VjPjEnQFscX8Vl/zzWVY= Subject key identifier: 9D:94:DD:17:42:8E:28:BA:DA:60:B1:F1:D4:A9:6B:98:C4:81:21:59 Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7 Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7 Certificate serial: 019B23D0FCB5C97FE48F90198FE39710B8FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft Manifest number: 151F Signing time: Mon 15 Dec 2025 21:00:57 +0000 Manifest this update: Mon 15 Dec 2025 21:00:57 +0000 Manifest next update: Tue 16 Dec 2025 21:00:57 +0000 Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: dGKRqG3fEbT9n+O+Gq34Ze986a6VA1yFNeQMzuu5fG0=) 2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:fc:b5:c9:7f:e4:8f:90:19:8f:e3:97:10:b8:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7 Validity Not Before: Dec 15 21:00:57 2025 GMT Not After : Dec 16 21:00:57 2025 GMT Subject: CN=9d94dd17428e28bada60b1f1d4a96b98c4812159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d6:dc:2d:51:94:0c:37:f1:65:35:f6:be:cf: 94:9d:3a:13:75:b5:df:b7:8f:cd:25:2a:27:13:91: 28:d2:98:39:e2:ac:a6:03:91:ac:42:9a:1e:4b:1a: f6:ca:aa:1f:43:9a:d0:f3:16:97:af:95:28:67:9a: 08:18:3a:3a:eb:08:22:74:62:e9:2e:f1:89:df:15: 50:e7:af:4b:77:d7:c1:68:32:1b:d2:e6:e8:1c:8b: e2:1e:7a:87:60:9a:e3:1d:b6:3a:de:50:e9:57:96: 7e:45:2b:ba:c3:57:38:de:e5:17:37:b6:b3:7f:37: f1:79:82:e2:de:f2:44:69:64:82:11:4c:9d:6c:22: fd:60:0f:86:c9:5d:bd:aa:9a:73:55:56:43:66:71: 60:c1:0d:33:d1:ac:5c:41:f6:b5:58:f9:f2:b4:89: 75:45:ec:9a:ff:85:87:e6:b2:9d:2d:7e:0a:4c:37: 46:38:ef:69:2e:5a:45:81:1d:bc:b2:d4:38:ea:78: 80:5b:7c:fb:22:6c:9d:fe:b9:30:eb:a3:5f:a8:27: dc:dd:ed:2a:92:f1:05:2b:f0:00:c5:0d:47:ff:b3: 59:13:07:a6:13:9d:5b:90:64:94:2e:eb:a0:3f:51: fd:7e:a4:fb:fd:7a:79:d1:77:e3:63:4e:e1:78:c4: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:DD:17:42:8E:28:BA:DA:60:B1:F1:D4:A9:6B:98:C4:81:21:59 X509v3 Authority Key Identifier: keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:61:d4:6a:bf:6e:f8:c3:74:54:3b:ae:8b:95:c6:f6:c7:33: d7:29:d6:52:35:c3:3c:67:3b:21:bb:40:06:ff:5b:4a:69:55: 53:17:43:94:09:c8:bd:3a:22:fc:64:fa:14:4e:fc:8e:bb:03: f0:fe:f8:d3:2d:18:0f:ce:a2:e3:32:64:7a:a3:6b:9c:76:cf: 7a:90:82:27:6b:4e:05:e9:fd:67:d1:86:ba:fa:5b:62:4b:bb: f6:61:bc:04:97:bf:4e:da:27:92:ec:ea:d5:7a:1f:2b:f1:b2: f6:4f:07:78:25:6b:ed:be:e3:0c:f6:fa:84:64:21:ae:a0:c1: b0:47:71:47:92:a6:0b:1b:81:a4:74:83:31:1c:52:15:34:ae: ab:6b:25:a1:4c:3e:52:70:f8:92:c3:65:9d:ab:96:de:e2:c6: db:e4:22:3e:d9:8e:8e:b4:28:a0:f5:d4:00:96:9e:4d:23:84: 1e:18:f9:0f:f2:1d:c8:8f:6c:04:3b:77:2b:90:bf:2f:10:29: 81:28:9e:d7:b7:71:4a:87:27:a9:a6:d9:cf:eb:43:01:2b:38: 43:98:7c:4f:83:0a:a8:d4:1b:2d:63:c8:60:f5:66:b8:a0:48: 77:71:81:67:41:59:da:20:35:34:e3:f3:f1:cf:b2:40:9e:04: 76:01:5f:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0Py1yX/kj5AZj+OXELj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDRhNTFkODRmYmE2ZDBmZTIxOGFlZGNhOTVhODk0ZGNj ZTFjZDcwHhcNMjUxMjE1MjEwMDU3WhcNMjUxMjE2MjEwMDU3WjAzMTEwLwYDVQQD Eyg5ZDk0ZGQxNzQyOGUyOGJhZGE2MGIxZjFkNGE5NmI5OGM0ODEyMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtbcLVGUDDfxZTX2vs+UnToTdbXf t4/NJSonE5Eo0pg54qymA5GsQpoeSxr2yqofQ5rQ8xaXr5UoZ5oIGDo66wgidGLp LvGJ3xVQ569Ld9fBaDIb0uboHIviHnqHYJrjHbY63lDpV5Z+RSu6w1c43uUXN7az fzfxeYLi3vJEaWSCEUydbCL9YA+GyV29qppzVVZDZnFgwQ0z0axcQfa1WPnytIl1 Reya/4WH5rKdLX4KTDdGOO9pLlpFgR28stQ46niAW3z7Imyd/rkw66NfqCfc3e0q kvEFK/AAxQ1H/7NZEwemE51bkGSULuugP1H9fqT7/Xp50XfjY07heMSw5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2U3RdCjii62mCx8dSpa5jEgSFZMB8GA1UdIwQY MBaAFBcEpR2E+6bQ/iGK7cqVqJTczhzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTIt ZWFmOTI0NzMxMjE4LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTItZWFmOTI0NzMxMjE4 LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWHUar9u +MN0VDuui5XG9scz1ynWUjXDPGc7IbtABv9bSmlVUxdDlAnIvToi/GT6FE78jrsD 8P740y0YD86i4zJkeqNrnHbPepCCJ2tOBen9Z9GGuvpbYku79mG8BJe/Ttonkuzq 1XofK/Gy9k8HeCVr7b7jDPb6hGQhrqDBsEdxR5KmCxuBpHSDMRxSFTSuq2sloUw+ UnD4ksNlnauW3uLG2+QiPtmOjrQooPXUAJaeTSOEHhj5D/IdyI9sBDt3K5C/LxAp gSie17dxSocnqabZz+tDASs4Q5h8T4MKqNQbLWPIYPVmuKBId3GBZ0FZ2iA1NOPz 8c+yQJ4EdgFf3g== -----END CERTIFICATE-----Generated at Tue Dec 16 06:35:22 2025 by rpki-client