This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft File: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json) Hash identifier: Gx2tp8ciu0qKI80D6ugpegvhgdC4+FKjNtnLbx2Iu9A= Subject key identifier: 74:69:94:FC:BA:A2:32:41:30:DA:0A:FA:27:D3:16:89:16:60:59:DE Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0 Certificate issuer: /CN=169ea0275c765e17603eb59eef39e2fab5380ef0 Certificate serial: 019B1FF43193431FF2395561B7A286CC3DA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft Manifest number: 0BEF Signing time: Mon 15 Dec 2025 03:00:55 +0000 Manifest this update: Mon 15 Dec 2025 03:00:55 +0000 Manifest next update: Tue 16 Dec 2025 03:00:55 +0000 Files and hashes: 1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: 4r31RV+cwv/hjP5JQHejlQTv0BpbLwo20z5CbWAjCWk=) 2: wbh15XPn1kgCYyJ-XkIl20Yytuw.roa (hash: aWvLndo6Gq/HOzsYU6uHpO8FpYdNLyOKJEg8ZgZ7QAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:31:93:43:1f:f2:39:55:61:b7:a2:86:cc:3d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0 Validity Not Before: Dec 15 03:00:55 2025 GMT Not After : Dec 16 03:00:55 2025 GMT Subject: CN=746994fcbaa2324130da0afa27d31689166059de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:85:c6:14:5b:5b:c8:c2:98:00:9d:2e:5c: 15:b0:89:8b:87:9b:e5:14:1a:ab:d5:53:b1:7a:4d: c6:42:90:30:ea:c5:c2:63:6f:00:22:89:1f:72:42: ac:0c:2a:a3:6c:83:1f:a4:e6:65:53:88:83:1a:f4: 36:40:3d:57:32:b4:3d:29:99:6f:7c:20:39:05:a0: ad:4b:8b:24:84:30:67:69:df:27:88:13:9e:83:35: 57:2f:63:25:84:8c:53:71:7e:e5:6c:49:ff:96:03: 47:b9:0e:84:f7:67:88:85:43:b0:f7:e5:3c:f6:49: 53:81:d0:24:d4:1b:3c:7a:eb:4a:c8:dc:6b:71:28: 3b:a6:77:64:dc:84:2a:bd:e4:cf:af:45:6a:4f:a4: e5:9e:5f:11:79:41:c4:24:0b:13:06:36:14:89:a2: ef:25:32:0c:33:31:2d:9d:c2:05:36:5a:8d:52:97: 0a:28:bb:52:fd:55:db:dc:6a:fa:23:5a:2f:db:6d: b0:55:ce:fa:7a:46:75:61:65:0b:e2:20:1c:92:4e: 30:7e:d7:4a:bb:d5:7b:37:d5:64:c3:81:ed:ed:34: 2f:cf:98:75:9c:b1:5b:69:46:58:da:f5:a9:35:2a: 94:f3:83:a7:21:94:3f:dc:22:52:b3:2f:c6:f6:7c: f7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:69:94:FC:BA:A2:32:41:30:DA:0A:FA:27:D3:16:89:16:60:59:DE X509v3 Authority Key Identifier: keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:55:00:1b:b6:70:80:3a:90:32:31:10:ed:a6:60:d0:b1:30: cb:56:26:2f:41:b4:b6:1e:a7:e0:2e:b9:84:bf:a6:8c:4e:26: 89:38:5b:ea:27:72:73:1d:e2:d2:ee:1e:05:9d:af:67:bd:70: 66:5f:b7:56:90:eb:86:07:49:f8:a3:35:b5:67:2a:e9:73:e2: f3:5f:af:19:a1:bd:0a:36:6e:68:3a:8a:86:17:71:60:e8:a0: 36:6e:b1:75:bb:37:da:a9:c7:d1:d0:e6:8c:06:d6:d9:f7:78: 22:1c:cf:4e:9f:fc:fd:c6:de:5e:20:75:98:f0:5f:59:b9:b6: d3:35:8c:a3:3a:90:88:20:99:d2:d9:7a:61:59:6d:b3:f2:dc: da:d9:75:c3:e2:76:50:6d:09:72:fe:13:45:18:63:0f:d5:80: 52:6b:d4:33:30:f8:26:0f:fd:41:96:72:67:7c:95:c8:ae:24: 94:56:05:41:16:20:62:94:32:ec:06:e2:05:b6:7f:d8:51:9c: 19:27:fa:4c:bd:35:f6:1b:8d:d1:cd:d0:d6:81:b8:3e:b9:10: 91:c3:0c:bb:76:f0:53:31:40:4b:19:84:f6:5c:f9:1b:96:ff: e1:55:0c:b6:f8:8a:6d:fa:5f:25:47:50:e6:47:70:5a:7f:08: 9b:ed:7d:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9DGTQx/yOVVht6KGzD2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OWVhMDI3NWM3NjVlMTc2MDNlYjU5ZWVmMzllMmZhYjUz ODBlZjAwHhcNMjUxMjE1MDMwMDU1WhcNMjUxMjE2MDMwMDU1WjAzMTEwLwYDVQQD Eyg3NDY5OTRmY2JhYTIzMjQxMzBkYTBhZmEyN2QzMTY4OTE2NjA1OWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGyFxhRbW8jCmACdLlwVsImLh5vl FBqr1VOxek3GQpAw6sXCY28AIokfckKsDCqjbIMfpOZlU4iDGvQ2QD1XMrQ9KZlv fCA5BaCtS4skhDBnad8niBOegzVXL2MlhIxTcX7lbEn/lgNHuQ6E92eIhUOw9+U8 9klTgdAk1Bs8eutKyNxrcSg7pndk3IQqveTPr0VqT6Tlnl8ReUHEJAsTBjYUiaLv JTIMMzEtncIFNlqNUpcKKLtS/VXb3Gr6I1ov222wVc76ekZ1YWUL4iAckk4wftdK u9V7N9Vkw4Ht7TQvz5h1nLFbaUZY2vWpNSqU84OnIZQ/3CJSsy/G9nz3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRplPy6ojJBMNoK+ifTFokWYFneMB8GA1UdIwQY MBaAFBaeoCdcdl4XYD61nu854vq1OA7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5Njkt ZDY5ZWY0MjJjMTY3LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5NjktZDY5ZWY0MjJjMTY3 LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFUAG7Zw gDqQMjEQ7aZg0LEwy1YmL0G0th6n4C65hL+mjE4miThb6idycx3i0u4eBZ2vZ71w Zl+3VpDrhgdJ+KM1tWcq6XPi81+vGaG9CjZuaDqKhhdxYOigNm6xdbs32qnH0dDm jAbW2fd4IhzPTp/8/cbeXiB1mPBfWbm20zWMozqQiCCZ0tl6YVlts/Lc2tl1w+J2 UG0Jcv4TRRhjD9WAUmvUMzD4Jg/9QZZyZ3yVyK4klFYFQRYgYpQy7AbiBbZ/2FGc GSf6TL019huN0c3Q1oG4PrkQkcMMu3bwUzFASxmE9lz5G5b/4VUMtviKbfpfJUdQ 5kdwWn8Im+195w== -----END CERTIFICATE-----Generated at Mon Dec 15 11:24:29 2025 by rpki-client