This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json) Hash identifier: MPOfI9CvlPvinCaFyG1Jhy2igmZTKxnU4s7eMBLmu+g= Subject key identifier: A4:F6:77:53:1F:CA:C8:1D:AB:3B:BF:CA:C2:B6:E9:53:EF:5E:26:B6 Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272 Certificate serial: 019B59E3DC29B728A47988B591DF4E676C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft Manifest number: 0296 Signing time: Fri 26 Dec 2025 09:01:03 +0000 Manifest this update: Fri 26 Dec 2025 09:01:03 +0000 Manifest next update: Sat 27 Dec 2025 09:01:03 +0000 Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: r8Lsg1wZRZo0cevKPBsxTYFL5a5W7nNyyIZKPdtOgCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:dc:29:b7:28:a4:79:88:b5:91:df:4e:67:6c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272 Validity Not Before: Dec 26 09:01:03 2025 GMT Not After : Dec 27 09:01:03 2025 GMT Subject: CN=a4f677531fcac81dab3bbfcac2b6e953ef5e26b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:4b:a7:81:4c:34:cc:8b:a4:08:bc:61:9f: e4:67:ff:30:b6:f8:3f:72:01:78:2a:27:cb:59:9a: e3:05:d6:6d:d3:8a:a7:5a:be:9d:ad:cf:9f:78:38: 01:8a:e9:b4:59:31:30:cc:c7:67:2a:50:ac:9d:2b: 56:3c:99:b2:06:1c:be:20:55:38:77:d4:09:52:2b: e5:36:3e:a4:98:8f:e9:53:06:3f:81:9b:7b:12:a7: 43:9f:09:ff:b5:c6:97:a1:a7:6a:9a:62:2d:2f:6e: 61:02:0c:d1:06:aa:53:e6:0d:f2:fa:91:91:cf:ef: 98:71:00:90:fb:ab:1f:b1:e9:1a:fc:fe:b6:84:48: 40:4f:c5:75:be:ba:a4:a6:97:65:71:7c:44:74:09: 49:93:70:45:f6:06:9a:95:ca:d7:1e:54:4e:2f:d1: af:66:6c:ec:28:ce:37:3a:c1:64:4e:5d:b6:41:f4: d3:dd:60:2e:65:ab:3d:86:96:35:6c:8a:9f:67:49: bf:d4:72:76:0f:41:8b:03:a9:5f:c7:ab:d3:d1:88: 24:20:eb:5b:68:50:26:c1:d0:77:54:ee:08:56:80: 52:36:bd:56:41:4e:e0:c1:cb:16:f4:68:db:1d:90: 62:c5:76:1a:c7:5c:c1:13:2d:fa:a8:68:0c:7a:b6: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F6:77:53:1F:CA:C8:1D:AB:3B:BF:CA:C2:B6:E9:53:EF:5E:26:B6 X509v3 Authority Key Identifier: keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:2c:70:d8:cc:92:b1:34:7c:d7:02:dc:7a:0a:83:05:c3:8b: 12:5c:98:5d:ff:f1:32:54:2b:72:b2:ae:17:45:d1:bd:6b:52: 13:6d:40:e9:cd:59:fa:28:68:36:b4:95:ea:a4:bf:5d:3a:29: dd:ce:fc:95:3f:10:db:9b:5f:f7:4a:3a:ae:a1:cc:fb:c3:38: 17:3d:67:40:67:87:3a:e2:9f:34:fe:e1:bf:0f:99:a7:00:bc: 52:df:d8:61:85:5e:9f:4d:6e:73:b7:56:a3:8e:51:84:d3:26: 7e:ab:5e:68:82:46:4e:4c:2b:52:b0:6a:8c:e1:88:d1:b9:e2: 87:a8:94:73:40:80:70:5b:d7:5e:3d:35:a1:f5:41:97:29:f2: a8:46:b3:db:1a:e5:6c:1e:64:b1:c7:20:b7:c4:8a:3b:2b:2c: 1f:f6:1c:8b:a4:9d:09:54:e9:61:60:10:e0:38:8d:76:ee:ce: 28:0e:e6:a8:b4:f7:62:af:c8:16:93:3e:c9:78:7b:91:95:bb: d7:5e:0d:b0:a5:17:d6:b9:db:75:92:81:c3:cb:30:ab:6a:4a: 8a:88:a9:b2:c8:08:1e:09:34:98:a2:72:61:ea:5f:fa:ba:8a: 23:5b:f8:94:95:b1:e0:90:f2:70:de:86:93:eb:d5:90:3b:06: 09:48:ee:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ49wptyikeYi1kd9OZ2w9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2I0MzZhZjY0ZjhkMDZkMmNjMTkyZDA0ODAwY2IyNTYy ODQyNzIwHhcNMjUxMjI2MDkwMTAzWhcNMjUxMjI3MDkwMTAzWjAzMTEwLwYDVQQD EyhhNGY2Nzc1MzFmY2FjODFkYWIzYmJmY2FjMmI2ZTk1M2VmNWUyNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUFLp4FMNMyLpAi8YZ/kZ/8wtvg/ cgF4KifLWZrjBdZt04qnWr6drc+feDgBium0WTEwzMdnKlCsnStWPJmyBhy+IFU4 d9QJUivlNj6kmI/pUwY/gZt7EqdDnwn/tcaXoadqmmItL25hAgzRBqpT5g3y+pGR z++YcQCQ+6sfseka/P62hEhAT8V1vrqkppdlcXxEdAlJk3BF9gaalcrXHlROL9Gv ZmzsKM43OsFkTl22QfTT3WAuZas9hpY1bIqfZ0m/1HJ2D0GLA6lfx6vT0YgkIOtb aFAmwdB3VO4IVoBSNr1WQU7gwcsW9GjbHZBixXYax1zBEy36qGgMerb44wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKT2d1Mfysgdqzu/ysK26VPvXia2MB8GA1UdIwQY MBaAFBXLQ2r2T40G0swZLQSADLJWKEJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1Mjct MDljMmE2NjIwOGEzLzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1MjctMDljMmE2NjIwOGEz LzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyxw2MyS sTR81wLcegqDBcOLElyYXf/xMlQrcrKuF0XRvWtSE21A6c1Z+ihoNrSV6qS/XTop 3c78lT8Q25tf90o6rqHM+8M4Fz1nQGeHOuKfNP7hvw+ZpwC8Ut/YYYVen01uc7dW o45RhNMmfqteaIJGTkwrUrBqjOGI0bnih6iUc0CAcFvXXj01ofVBlynyqEaz2xrl bB5ksccgt8SKOyssH/Yci6SdCVTpYWAQ4DiNdu7OKA7mqLT3Yq/IFpM+yXh7kZW7 114NsKUX1rnbdZKBw8swq2pKioipssgIHgk0mKJyYepf+rqKI1v4lJWx4JDycN6G k+vVkDsGCUjusw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:50 2025 by rpki-client