This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json) Hash identifier: NvtsgSm/zUolZDifHru+0r8U48wYIfi8C7BZg16RBVY= Subject key identifier: 84:BE:CD:0A:15:04:18:D2:E5:40:AE:56:10:6C:D1:DC:5B:F8:FF:FF Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6 Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6 Certificate serial: 019B4437B5E6DBBCF0CEEDAD56A2D1DB8D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft Manifest number: 0F19 Signing time: Mon 22 Dec 2025 04:01:00 +0000 Manifest this update: Mon 22 Dec 2025 04:01:00 +0000 Manifest next update: Tue 23 Dec 2025 04:01:00 +0000 Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: 46UPpYIfoeKGjMQ1SyG+KSqEQZA6JwgqkE3Md6PJLUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:b5:e6:db:bc:f0:ce:ed:ad:56:a2:d1:db:8d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6 Validity Not Before: Dec 22 04:01:00 2025 GMT Not After : Dec 23 04:01:00 2025 GMT Subject: CN=84becd0a150418d2e540ae56106cd1dc5bf8ffff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:87:9f:6c:1b:47:2b:76:33:75:91:e6:d1: 61:55:73:8e:c6:dc:0c:95:d9:07:3f:f5:10:b0:6e: f7:4b:0d:55:1b:c9:81:a2:aa:80:a6:5e:fd:cf:49: 98:9c:07:70:b9:ab:2e:c6:c7:fa:6b:76:08:49:12: c6:b7:b8:06:69:52:3a:8d:f0:43:7d:82:4f:b8:9b: aa:8c:f2:c7:dc:d6:92:77:f5:15:c1:37:cf:af:71: ef:44:80:b7:0d:88:1a:f2:f5:e5:32:87:e2:de:4d: f5:3d:5c:d9:7a:87:f0:1b:8b:aa:ec:34:31:07:46: e8:d4:90:a6:37:1c:89:a4:ad:78:06:f9:72:60:b1: 6c:12:9c:94:cd:8f:53:67:aa:88:65:3e:4c:d2:66: 5c:7c:b9:48:fe:0e:42:14:b3:7c:c6:f5:d4:93:17: 6b:d2:7b:6c:62:ea:d4:f8:ab:3a:e2:76:b9:96:f6: 97:ce:f9:e8:a2:eb:1f:88:fc:aa:bd:e4:29:d0:f0: ae:eb:16:3f:6e:f4:2f:37:a3:81:41:f7:5d:e1:e8: 0e:c0:49:8e:21:e6:1e:b8:2a:41:38:c9:22:dd:4a: d3:a1:78:4c:e1:a5:cf:21:ec:61:94:7a:aa:48:dc: 80:c9:66:59:0a:39:78:bc:cf:c8:37:34:1d:cf:20: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BE:CD:0A:15:04:18:D2:E5:40:AE:56:10:6C:D1:DC:5B:F8:FF:FF X509v3 Authority Key Identifier: keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:99:11:72:8a:c0:98:a3:37:41:8d:61:a0:03:9a:54:33:1c: 1a:85:10:1f:c7:10:0d:86:65:fe:ed:c2:f6:92:ea:76:5b:d4: 58:fa:55:af:99:63:9e:d2:44:3c:92:e7:5c:b0:72:bb:9a:e2: 05:b3:5c:ba:d4:d7:50:52:1c:73:5f:cc:dc:a3:54:ed:a1:b2: 6d:af:fa:76:1b:77:d2:e1:a0:a3:1d:e3:20:70:08:a3:4a:ae: 20:c0:67:09:34:d6:04:dd:e0:cf:db:4c:36:1a:28:99:85:ba: 81:14:21:36:01:cc:92:bf:22:02:d5:66:2e:38:bf:4c:b2:ab: f9:9c:cf:e1:e5:ba:27:4c:48:af:43:50:eb:f8:83:fe:cf:5e: 03:ce:58:26:98:d7:41:4c:d6:f6:35:1e:7c:6f:51:1d:29:7b: 71:6d:f4:06:f5:3e:75:c0:74:e8:20:ac:4a:8a:32:db:3b:59: 11:78:e6:eb:1a:87:d0:69:09:62:f0:73:5c:2f:b4:b0:7b:69: 7e:3f:f1:94:00:0a:46:22:f8:c3:f5:fb:1c:b7:d2:c8:8f:29: 4b:a0:9a:a4:bf:d2:03:44:06:9a:6e:2b:7a:dc:9e:ce:64:d7: 15:ef:3b:47:da:80:f6:02:35:87:7e:65:b7:12:d8:ec:50:c0: 5c:37:b6:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN7Xm27zwzu2tVqLR242DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZmJiNGZiZDkxZjBlYWUzY2MyMmY2YzRlYmI1MGNkODBh ODhmZDYwHhcNMjUxMjIyMDQwMTAwWhcNMjUxMjIzMDQwMTAwWjAzMTEwLwYDVQQD Eyg4NGJlY2QwYTE1MDQxOGQyZTU0MGFlNTYxMDZjZDFkYzViZjhmZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/SHn2wbRyt2M3WR5tFhVXOOxtwM ldkHP/UQsG73Sw1VG8mBoqqApl79z0mYnAdwuasuxsf6a3YISRLGt7gGaVI6jfBD fYJPuJuqjPLH3NaSd/UVwTfPr3HvRIC3DYga8vXlMofi3k31PVzZeofwG4uq7DQx B0bo1JCmNxyJpK14BvlyYLFsEpyUzY9TZ6qIZT5M0mZcfLlI/g5CFLN8xvXUkxdr 0ntsYurU+Ks64na5lvaXzvnoousfiPyqveQp0PCu6xY/bvQvN6OBQfdd4egOwEmO IeYeuCpBOMki3UrToXhM4aXPIexhlHqqSNyAyWZZCjl4vM/INzQdzyAGowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS+zQoVBBjS5UCuVhBs0dxb+P//MB8GA1UdIwQY MBaAFH37tPvZHw6uPMIvbE67UM2AqI/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYmQ3ZTItOGY1Ni00OWQ1LWJiOGMt MGQxN2RkYmZlM2I2LzEvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYmQ3ZTItOGY1Ni00OWQ1LWJiOGMtMGQxN2RkYmZlM2I2 LzEvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZkRcorA mKM3QY1hoAOaVDMcGoUQH8cQDYZl/u3C9pLqdlvUWPpVr5ljntJEPJLnXLByu5ri BbNcutTXUFIcc1/M3KNU7aGyba/6dht30uGgox3jIHAIo0quIMBnCTTWBN3gz9tM NhoomYW6gRQhNgHMkr8iAtVmLji/TLKr+ZzP4eW6J0xIr0NQ6/iD/s9eA85YJpjX QUzW9jUefG9RHSl7cW30BvU+dcB06CCsSooy2ztZEXjm6xqH0GkJYvBzXC+0sHtp fj/xlAAKRiL4w/X7HLfSyI8pS6CapL/SA0QGmm4retyezmTXFe87R9qA9gI1h35l txLY7FDAXDe2HQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:33:57 2025 by rpki-client