This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json) Hash identifier: 69ivI+LPYmiNy5c8c3I+pPnQehqW/cm/kWHbwJbPPKM= Subject key identifier: DA:3C:A5:35:C5:A0:AA:53:4F:BF:EA:3A:F2:3A:73:72:62:0C:A9:92 Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a Certificate serial: 019B39B3AC83F7164B26254DE94C981F4555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 03:00:34 +0000 Manifest this update: Sat 20 Dec 2025 03:00:34 +0000 Manifest next update: Sun 21 Dec 2025 03:00:34 +0000 Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: vzXGFJ59OBdMOFoX6TZHE+f8yBH2AuWtNJodKQvNgy8=) 2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:ac:83:f7:16:4b:26:25:4d:e9:4c:98:1f:45:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a Validity Not Before: Dec 20 03:00:34 2025 GMT Not After : Dec 21 03:00:34 2025 GMT Subject: CN=da3ca535c5a0aa534fbfea3af23a7372620ca992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:7a:f6:c2:52:23:c0:ee:ac:1a:e9:1d:93: cc:b6:50:7c:f2:92:5e:fb:ef:ad:65:c9:b2:94:8f: 1f:ca:f9:c3:f5:dc:08:25:87:3c:2a:de:7f:10:ca: ff:10:26:1c:e7:96:b8:45:21:1b:e3:00:8b:99:80: 51:e8:3c:c7:aa:db:26:87:22:24:d4:4a:d7:f2:a9: fe:a3:4c:a6:28:d5:28:d0:d5:e0:17:4b:70:64:fd: 38:5f:b4:98:76:5f:96:dd:46:a8:16:1d:df:30:84: 58:20:30:6b:59:ce:15:42:df:75:a1:86:84:6b:be: 66:76:18:f4:4c:4a:91:ae:03:68:61:99:75:a9:f1: ac:1c:72:0a:49:85:e2:52:a0:40:3e:9d:46:af:93: ce:07:d8:2f:ba:cb:fd:b8:bf:ac:6c:fa:d6:7d:89: 54:b6:c4:87:c0:de:60:fa:8c:fa:88:c3:cc:bd:6a: 48:83:6d:df:32:c5:c1:97:1e:10:88:c4:40:51:54: c9:87:15:cd:a2:b0:8c:29:70:5f:53:b3:30:64:d6: 5c:f6:91:72:94:d0:25:83:a0:26:29:3b:f7:49:56: 22:e4:ee:a9:db:1f:46:5d:4f:9d:7a:40:aa:34:75: 25:9c:26:bb:8b:ba:68:87:18:05:a6:b1:ef:9f:6f: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3C:A5:35:C5:A0:AA:53:4F:BF:EA:3A:F2:3A:73:72:62:0C:A9:92 X509v3 Authority Key Identifier: keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ff:7b:5e:83:73:56:86:cd:15:a2:ba:b7:ba:e0:11:d6:bd: fe:f7:2c:bc:5e:e8:ee:03:e6:b8:9f:a2:55:aa:82:0f:cc:bd: 69:75:de:83:b7:a2:99:ca:f5:63:55:e7:43:b4:9c:e3:c2:6e: fd:b7:46:af:c7:8a:14:7f:02:53:ca:fa:cc:41:f6:a9:25:44: 92:7e:73:a9:61:bd:2f:97:d1:b4:f1:cf:bc:82:7d:cf:eb:a8: b7:37:6c:49:00:b1:b3:b9:b3:0e:b3:3a:5a:ef:81:a5:ac:5e: 1f:a7:73:e3:ea:3a:47:5a:fb:6b:16:7d:5b:21:90:7e:f7:07: e1:ee:97:f8:8a:eb:72:7e:02:93:c0:8c:b1:e2:e8:b6:f8:1c: 2d:26:ab:39:d3:ca:23:ed:5a:3d:cf:18:99:9f:60:32:88:3f: 9f:ec:68:3c:8c:22:27:ff:88:86:cd:fd:66:4f:53:24:d5:10: ee:3a:42:99:fc:70:77:96:4b:94:68:6a:54:a4:fc:e6:2b:35: 55:1f:f9:da:5c:83:e3:e7:45:52:c6:00:04:18:96:27:37:19: 92:66:74:eb:02:f5:6c:b9:fc:6a:2c:7e:18:18:95:92:65:73: a1:43:7e:ce:9e:c0:ed:8b:49:b5:1d:1c:d6:d7:63:9c:43:e8: 9d:21:1c:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s6yD9xZLJiVN6UyYH0VVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2M4ODBmMGExMmM3Yjk0ZjcxZDliMmU1YjAyOGE3MGQx ZmEzNGEwHhcNMjUxMjIwMDMwMDM0WhcNMjUxMjIxMDMwMDM0WjAzMTEwLwYDVQQD EyhkYTNjYTUzNWM1YTBhYTUzNGZiZmVhM2FmMjNhNzM3MjYyMGNhOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVx69sJSI8DurBrpHZPMtlB88pJe +++tZcmylI8fyvnD9dwIJYc8Kt5/EMr/ECYc55a4RSEb4wCLmYBR6DzHqtsmhyIk 1ErX8qn+o0ymKNUo0NXgF0twZP04X7SYdl+W3UaoFh3fMIRYIDBrWc4VQt91oYaE a75mdhj0TEqRrgNoYZl1qfGsHHIKSYXiUqBAPp1Gr5POB9gvusv9uL+sbPrWfYlU tsSHwN5g+oz6iMPMvWpIg23fMsXBlx4QiMRAUVTJhxXNorCMKXBfU7MwZNZc9pFy lNAlg6AmKTv3SVYi5O6p2x9GXU+dekCqNHUlnCa7i7pohxgFprHvn28eqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo8pTXFoKpTT7/qOvI6c3JiDKmSMB8GA1UdIwQY MBaAFBXMiA8KEse5T3HZsuWwKKcNH6NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEt MGE4ZmU2NDM0YmY4LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEtMGE4ZmU2NDM0YmY4 LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/97XoNz VobNFaK6t7rgEda9/vcsvF7o7gPmuJ+iVaqCD8y9aXXeg7eimcr1Y1XnQ7Sc48Ju /bdGr8eKFH8CU8r6zEH2qSVEkn5zqWG9L5fRtPHPvIJ9z+uotzdsSQCxs7mzDrM6 Wu+BpaxeH6dz4+o6R1r7axZ9WyGQfvcH4e6X+Irrcn4Ck8CMseLotvgcLSarOdPK I+1aPc8YmZ9gMog/n+xoPIwiJ/+Ihs39Zk9TJNUQ7jpCmfxwd5ZLlGhqVKT85is1 VR/52lyD4+dFUsYABBiWJzcZkmZ06wL1bLn8aix+GBiVkmVzoUN+zp7A7YtJtR0c 1tdjnEPonSEcLA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:46:45 2025 by rpki-client