This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json) Hash identifier: zoQ+VlYk6Laqc5iSDx4u+e3v2FafyYUHbWnpHMhhz1Q= Subject key identifier: 68:9A:51:CF:2E:3A:23:B4:F3:EA:87:C4:4A:FD:66:AF:E5:BB:61:24 Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Certificate serial: 019B1916A223E0D1FB3040C00EFFA417E865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft Manifest number: 1785 Signing time: Sat 13 Dec 2025 19:01:12 +0000 Manifest this update: Sat 13 Dec 2025 19:01:12 +0000 Manifest next update: Sun 14 Dec 2025 19:01:12 +0000 Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: KbTJcteop4hbM5G40PCXr3ro1RWK5hs06HgT2LO5r/w=) 2: OwCZF0T7cuiO0bzm9gpsrlp-iqg.roa (hash: 2EnFWrT+AFUt7JddKEdfFndTYaCRqX2SZcB6fsF93Q4=) 3: r4X2HvAwh5ygol1cL2nGNDVz3U4.roa (hash: 7aCXdpb3SzbFP3HJ9KQNb5y78LcqzI5vEIV6FBttc2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:a2:23:e0:d1:fb:30:40:c0:0e:ff:a4:17:e8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Validity Not Before: Dec 13 19:01:12 2025 GMT Not After : Dec 14 19:01:12 2025 GMT Subject: CN=689a51cf2e3a23b4f3ea87c44afd66afe5bb6124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:43:1f:af:a3:13:9e:27:67:a5:66:86:57: c0:da:95:47:69:0a:67:11:ba:ce:a6:90:9c:17:36: 4b:cb:b7:ba:4a:9c:b3:ab:f9:fc:09:ba:75:a5:1a: cb:54:9c:ad:51:d7:69:7d:6e:90:33:ed:3e:7e:08: 42:1f:bc:e2:21:77:75:24:07:35:70:bb:b9:2c:2a: 53:a4:bd:16:47:83:89:44:81:a0:c6:8c:0c:e5:ee: 93:f9:eb:3d:79:ab:f1:58:92:d5:17:a4:6b:0c:9e: 2a:63:6f:b3:8c:f3:b0:5a:f7:83:aa:15:5f:e9:86: 87:a1:d7:4f:af:fd:22:42:a0:dc:71:14:57:52:96: eb:50:cc:26:11:96:39:c2:63:db:19:35:4c:55:da: 06:13:d0:8d:b1:d5:b7:fc:02:d5:70:a5:9d:30:04: 34:e8:27:5c:72:0d:f8:04:06:ab:1f:a5:29:c4:0d: 17:33:30:81:af:c9:de:3a:87:98:d1:0f:d5:55:44: 9c:c7:9d:b4:76:6c:fa:dd:59:33:09:8e:b1:8d:6e: 0b:0b:7d:49:b9:71:4c:b6:f3:fc:60:4a:34:2e:a8: 3d:95:e6:9a:68:e2:5f:70:c5:ff:f5:e8:dc:8e:fe: 96:76:8d:6f:7e:b6:7c:6f:d7:dc:64:83:db:46:b9: 31:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9A:51:CF:2E:3A:23:B4:F3:EA:87:C4:4A:FD:66:AF:E5:BB:61:24 X509v3 Authority Key Identifier: keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:90:78:bc:98:c2:2e:89:17:17:34:66:d1:6b:d7:df:9a:d6: 8c:28:3d:df:98:07:2a:c2:ce:65:01:1d:55:7e:36:79:6e:67: a8:96:fa:f8:57:7c:5f:08:fc:7b:48:b3:41:58:c1:3f:24:9f: d3:93:3d:81:46:e4:fa:76:03:3e:8d:68:4d:39:a6:16:10:27: 46:24:02:0b:bb:78:fd:13:e9:7d:be:59:27:86:63:12:c6:d7: 9e:ab:58:40:70:68:21:9f:25:34:fb:f6:95:75:05:01:0e:02: 6e:38:10:11:24:19:d5:68:a5:c8:e1:6b:24:cf:7a:01:80:2e: 3a:bf:61:ef:77:c4:40:10:cb:fb:f6:7a:26:89:eb:f3:81:57: 43:2c:76:5b:1f:e8:4a:01:a1:6a:8d:bb:fe:41:57:b9:b0:79: a9:3d:16:d2:3f:74:8d:83:50:a9:d0:c2:ad:e0:ca:f2:5f:0f: 9f:a9:67:66:23:fc:38:fb:8d:6a:7f:d4:e8:cd:74:89:e2:8f: 2f:44:53:a6:91:69:ad:3e:72:3e:d2:15:52:d4:f9:2a:0e:4c: 0d:41:2e:4c:44:86:b8:fe:4d:32:9d:83:1b:ee:1f:24:27:72: 27:0e:f0:99:c0:ed:45:88:98:b4:74:f3:72:12:9e:12:ad:ca: 06:ab:0b:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFqIj4NH7MEDADv+kF+hlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz ZTM4NjkwHhcNMjUxMjEzMTkwMTEyWhcNMjUxMjE0MTkwMTEyWjAzMTEwLwYDVQQD Eyg2ODlhNTFjZjJlM2EyM2I0ZjNlYTg3YzQ0YWZkNjZhZmU1YmI2MTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5xDH6+jE54nZ6VmhlfA2pVHaQpn EbrOppCcFzZLy7e6Spyzq/n8Cbp1pRrLVJytUddpfW6QM+0+fghCH7ziIXd1JAc1 cLu5LCpTpL0WR4OJRIGgxowM5e6T+es9eavxWJLVF6RrDJ4qY2+zjPOwWveDqhVf 6YaHoddPr/0iQqDccRRXUpbrUMwmEZY5wmPbGTVMVdoGE9CNsdW3/ALVcKWdMAQ0 6Cdccg34BAarH6UpxA0XMzCBr8neOoeY0Q/VVUScx520dmz63VkzCY6xjW4LC31J uXFMtvP8YEo0Lqg9leaaaOJfcMX/9ejcjv6Wdo1vfrZ8b9fcZIPbRrkxUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiaUc8uOiO08+qHxEr9Zq/lu2EkMB8GA1UdIwQY MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt NTQ4NTY4MmEwNWY1LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1 LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJB4vJjC LokXFzRm0WvX35rWjCg935gHKsLOZQEdVX42eW5nqJb6+Fd8Xwj8e0izQVjBPySf 05M9gUbk+nYDPo1oTTmmFhAnRiQCC7t4/RPpfb5ZJ4ZjEsbXnqtYQHBoIZ8lNPv2 lXUFAQ4CbjgQESQZ1WilyOFrJM96AYAuOr9h73fEQBDL+/Z6Jonr84FXQyx2Wx/o SgGhao27/kFXubB5qT0W0j90jYNQqdDCreDK8l8Pn6lnZiP8OPuNan/U6M10ieKP L0RTppFprT5yPtIVUtT5Kg5MDUEuTESGuP5NMp2DG+4fJCdyJw7wmcDtRYiYtHTz chKeEq3KBqsLBA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:12 2025 by rpki-client