This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft File: FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json) Hash identifier: J4MMUGRcNyIciw0YE4UrU9mY36EJCfsmKS+IbsARYA4= Subject key identifier: EA:63:57:C0:41:80:24:92:61:60:7C:40:BE:74:65:BD:7E:02:D5:1B Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17 Certificate issuer: /CN=1627573c68929ab2a4590e92a51abc40ea9e5817 Certificate serial: 019B311EADA1E0D7D2D5835DE5A27E273550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 11:00:52 +0000 Manifest this update: Thu 18 Dec 2025 11:00:52 +0000 Manifest next update: Fri 19 Dec 2025 11:00:52 +0000 Files and hashes: 1: BwfVTKMmzPQcO6hQWHgwE-WzBlM.roa (hash: K/mo2ikV7viOGHu5dYw3ftaMmyVAbJKcoqq2YMC1Njg=) 2: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: GVUfh+LbGVI+JeL/kr1qv2fZhCf4xo4obc+CTcpLUdI=) 3: J9Bpev_Y5vGj_8kiIukuwgRMBjY.roa (hash: 3vSvZEcT9f/cHeJWrMbjmT4TMpfqGkzVbdBf+Y81z9c=) 4: OhhSpunX2oFMOOPbpKEEbEzELw0.roa (hash: 3ps6+ztcgkHapstvgub1KecvUe5/zgzQ6krJXv7P6Sc=) 5: WfIQgLqg5iDOkRknXs8LwTd___8.roa (hash: 2fUIvuzipETi107axsQwvDcKefOjWiKRaZgxPs7El0w=) 6: iGpfBbTLVL4RbtqfFkeH2DBrS5I.roa (hash: DzYF6jb/f2Y0zsTtOWIE735rB2ypyM5HGglTzwx4No8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:ad:a1:e0:d7:d2:d5:83:5d:e5:a2:7e:27:35:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817 Validity Not Before: Dec 18 11:00:52 2025 GMT Not After : Dec 19 11:00:52 2025 GMT Subject: CN=ea6357c04180249261607c40be7465bd7e02d51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:0e:1a:52:5b:6f:39:1c:7f:b9:1d:37:f6: ae:ff:d0:91:8d:cd:e3:dd:99:88:86:52:d2:29:f0: a3:d1:58:9f:1e:ff:e0:cb:99:17:b1:28:04:63:c0: 48:6c:a7:9c:82:ea:94:fc:38:54:8a:96:5e:22:95: 9a:af:54:02:07:c9:e5:b6:c7:ba:73:b1:16:c1:cb: 75:fd:19:64:aa:19:9b:04:22:3c:db:1a:fa:48:75: e9:df:d0:75:20:40:8f:5c:e8:2b:83:93:2e:71:9b: 71:47:af:bf:57:75:80:08:5d:0f:94:8d:fb:e9:95: 74:fe:a5:76:5e:75:0b:8b:82:6a:64:b8:7c:3e:c0: 61:3d:38:33:00:38:ef:c8:ff:01:46:99:ce:dd:59: 8b:da:18:10:a0:45:c6:89:20:45:45:71:46:2e:51: 6d:7e:48:7d:bb:f5:78:67:f2:72:a5:30:e3:57:26: ca:7c:72:ff:e7:da:e4:66:d6:9b:f2:71:51:5a:17: f0:a6:65:57:6c:86:a0:d9:b6:48:c5:65:47:f7:6d: 3e:99:93:59:3b:92:92:a7:b4:3f:22:a2:89:f6:e4: 70:2c:25:17:5a:38:eb:0c:b3:e8:fb:bb:8d:7a:89: 9b:98:ae:71:1e:fd:2d:5d:5a:3d:21:1b:6a:5a:96: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:63:57:C0:41:80:24:92:61:60:7C:40:BE:74:65:BD:7E:02:D5:1B X509v3 Authority Key Identifier: keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2f:a2:22:04:e9:56:d3:6b:96:82:6b:7f:85:74:05:60:05: 6f:7d:43:f7:9e:63:4d:a3:0e:9c:8e:0c:26:96:dc:9d:b1:de: 46:49:7f:14:ab:85:04:8d:77:68:74:ff:d4:6b:3c:bd:13:2f: dd:e3:98:7f:a9:4a:08:65:18:0f:32:d9:7b:24:ae:11:f5:d9: 6f:70:7d:97:51:7d:6e:2f:ca:91:62:de:2c:f9:6a:f3:56:df: 3f:d0:af:ff:33:17:fb:ff:8d:62:f4:29:6d:18:b6:ca:90:13: 7e:ae:5d:a8:9d:ba:18:a1:93:23:84:75:1d:5a:68:8a:42:57: 14:a0:f3:e3:60:f2:cb:db:c9:ce:d3:bb:11:dd:87:6c:d6:f2: 25:c7:58:af:b8:76:63:28:da:9a:4a:6d:69:2a:d4:56:7f:a4: c4:6a:ec:61:90:e4:f7:e0:68:89:c7:12:f4:b6:37:28:8a:5d: 19:72:cb:7e:aa:ae:a1:37:4a:1b:a7:5b:41:0b:f2:96:de:89: 5b:76:60:1b:1b:0e:88:f1:05:4b:bc:95:0c:2a:2f:dc:33:02: a3:bd:a8:08:ca:02:50:6b:d4:38:1d:29:9d:a1:02:4b:49:ee: e9:32:3e:0f:96:03:65:ce:99:58:f1:4f:f3:ed:e7:b5:ad:41: ab:e3:c4:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHq2h4NfS1YNd5aJ+JzVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Mjc1NzNjNjg5MjlhYjJhNDU5MGU5MmE1MWFiYzQwZWE5 ZTU4MTcwHhcNMjUxMjE4MTEwMDUyWhcNMjUxMjE5MTEwMDUyWjAzMTEwLwYDVQQD EyhlYTYzNTdjMDQxODAyNDkyNjE2MDdjNDBiZTc0NjViZDdlMDJkNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkYOGlJbbzkcf7kdN/au/9CRjc3j 3ZmIhlLSKfCj0VifHv/gy5kXsSgEY8BIbKecguqU/DhUipZeIpWar1QCB8nltse6 c7EWwct1/RlkqhmbBCI82xr6SHXp39B1IECPXOgrg5MucZtxR6+/V3WACF0PlI37 6ZV0/qV2XnULi4JqZLh8PsBhPTgzADjvyP8BRpnO3VmL2hgQoEXGiSBFRXFGLlFt fkh9u/V4Z/JypTDjVybKfHL/59rkZtab8nFRWhfwpmVXbIag2bZIxWVH920+mZNZ O5KSp7Q/IqKJ9uRwLCUXWjjrDLPo+7uNeombmK5xHv0tXVo9IRtqWpbVVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpjV8BBgCSSYWB8QL50Zb1+AtUbMB8GA1UdIwQY MBaAFBYnVzxokpqypFkOkqUavEDqnlgXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2Ut ZTZmOWRiNzQxMzlkLzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2UtZTZmOWRiNzQxMzlk LzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi+iIgTp VtNrloJrf4V0BWAFb31D955jTaMOnI4MJpbcnbHeRkl/FKuFBI13aHT/1Gs8vRMv 3eOYf6lKCGUYDzLZeySuEfXZb3B9l1F9bi/KkWLeLPlq81bfP9Cv/zMX+/+NYvQp bRi2ypATfq5dqJ26GKGTI4R1HVpoikJXFKDz42Dyy9vJztO7Ed2HbNbyJcdYr7h2 YyjamkptaSrUVn+kxGrsYZDk9+BoiccS9LY3KIpdGXLLfqquoTdKG6dbQQvylt6J W3ZgGxsOiPEFS7yVDCov3DMCo72oCMoCUGvUOB0pnaECS0nu6TI+D5YDZc6ZWPFP 8+3nta1Bq+PEwQ== -----END CERTIFICATE-----Generated at Thu Dec 18 18:56:43 2025 by rpki-client