This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json) Hash identifier: FPRewk6IhoxCnc1V89zV8LHRuEjQOatP17rHNwo17fI= Subject key identifier: C9:6B:A8:C0:62:3B:06:9E:16:B4:41:A2:8F:8B:39:6F:44:74:A6:05 Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b Certificate serial: 019B397D3AFBA3556F0741C30E5193B69CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft Manifest number: 0565 Signing time: Sat 20 Dec 2025 02:01:06 +0000 Manifest this update: Sat 20 Dec 2025 02:01:06 +0000 Manifest next update: Sun 21 Dec 2025 02:01:06 +0000 Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: A+Jq0wuYU5ecCcoAO9f5ndqAo4Gdnh3vmlP8lUTfl70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:3a:fb:a3:55:6f:07:41:c3:0e:51:93:b6:9c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b Validity Not Before: Dec 20 02:01:06 2025 GMT Not After : Dec 21 02:01:06 2025 GMT Subject: CN=c96ba8c0623b069e16b441a28f8b396f4474a605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:ae:62:da:99:e3:c9:7a:a1:4f:34:ea:da: 52:91:ac:2c:7d:28:36:97:da:c7:ba:e9:26:5e:49: 95:78:47:80:65:71:5c:f1:e0:a5:6c:eb:f1:68:40: 3a:a2:b2:c3:8e:09:7a:63:5e:e2:76:80:24:fc:56: 34:bf:e2:7b:65:f8:f1:de:7a:05:f6:25:f7:f7:1d: 6b:5d:08:ce:30:00:fd:d0:52:fc:cc:20:55:0d:71: 98:09:8e:5a:dc:49:53:46:5e:e6:a2:f2:a5:cb:51: 81:c8:55:fd:d6:67:dd:85:79:eb:66:04:ad:93:76: 35:26:82:bd:a0:83:b1:0d:78:8c:72:3c:4d:54:03: bc:1b:39:b3:17:5f:53:07:02:2d:03:63:d5:f0:51: 8a:37:ca:37:28:2c:15:c6:30:8a:56:f2:97:26:57: 18:b0:05:2f:87:8e:38:c5:9e:5a:87:e8:92:6e:cf: 9d:40:55:93:80:05:73:87:21:95:c3:58:c9:fb:49: 96:8c:df:80:62:38:33:b2:bb:bb:51:99:ce:f6:3c: 33:d5:75:95:e1:b6:03:bf:9c:b4:da:55:ef:69:16: 03:aa:c4:dc:c9:c0:a8:9c:c0:6f:bf:02:a8:4e:e5: 0d:31:95:c1:2d:92:9f:5b:af:db:53:96:90:66:b8: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6B:A8:C0:62:3B:06:9E:16:B4:41:A2:8F:8B:39:6F:44:74:A6:05 X509v3 Authority Key Identifier: keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7c:8f:b6:a3:02:c3:ca:c6:21:93:a5:8a:8b:b1:d8:df:b3: c1:e5:b3:ce:65:9d:47:10:c4:0b:33:00:86:fc:2c:9c:91:a7: 6b:e1:96:eb:e4:e5:47:41:af:5f:36:74:36:f7:ff:6e:c4:7c: 1e:25:81:89:58:de:93:3d:da:64:e9:e9:9d:f6:89:fd:26:5f: b0:cd:49:3c:5c:11:41:a0:d0:26:92:9c:f7:cc:93:ee:de:de: 74:7a:aa:61:f5:22:8c:35:52:02:2b:26:7e:79:48:41:f0:45: f0:91:5f:91:d3:0a:d3:6f:6a:ef:78:8e:a0:28:2a:1a:ac:18: e1:f5:93:14:8c:f5:69:bd:bf:a8:e7:75:5e:5b:4a:94:f9:c3: 8b:0d:f3:be:4b:dd:d4:53:6c:52:fb:b4:2b:85:d7:ab:17:c6: 8a:a4:56:78:bc:44:5f:2c:04:e5:3c:93:35:43:e7:e8:74:30: 40:95:42:b1:68:2d:e2:99:e1:ec:3e:ed:4a:cf:a0:30:a1:eb: be:60:44:54:3d:e4:55:8f:00:65:62:13:0e:57:74:7a:27:5a: ae:c8:60:a1:8c:ad:40:75:14:80:e0:7d:32:87:e7:39:02:cd: 53:3d:60:d4:14:07:54:9d:b4:51:18:19:1f:9e:5e:7a:6e:58: 9a:1a:fa:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fTr7o1VvB0HDDlGTtpz9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NGUyZjg1MzYxZmY1ZDA2MzA5YzI1Njg0YjkwOGQ3Yjcw MjQzOWIwHhcNMjUxMjIwMDIwMTA2WhcNMjUxMjIxMDIwMTA2WjAzMTEwLwYDVQQD EyhjOTZiYThjMDYyM2IwNjllMTZiNDQxYTI4ZjhiMzk2ZjQ0NzRhNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkKuYtqZ48l6oU806tpSkawsfSg2 l9rHuukmXkmVeEeAZXFc8eClbOvxaEA6orLDjgl6Y17idoAk/FY0v+J7Zfjx3noF 9iX39x1rXQjOMAD90FL8zCBVDXGYCY5a3ElTRl7movKly1GByFX91mfdhXnrZgSt k3Y1JoK9oIOxDXiMcjxNVAO8GzmzF19TBwItA2PV8FGKN8o3KCwVxjCKVvKXJlcY sAUvh444xZ5ah+iSbs+dQFWTgAVzhyGVw1jJ+0mWjN+AYjgzsru7UZnO9jwz1XWV 4bYDv5y02lXvaRYDqsTcycConMBvvwKoTuUNMZXBLZKfW6/bU5aQZrjgtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlrqMBiOwaeFrRBoo+LOW9EdKYFMB8GA1UdIwQY MBaAFBVOL4U2H/XQYwnCVoS5CNe3AkObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEt NTUyODg5MGY5ZGIzLzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEtNTUyODg5MGY5ZGIz LzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXyPtqMC w8rGIZOlioux2N+zweWzzmWdRxDECzMAhvwsnJGna+GW6+TlR0GvXzZ0Nvf/bsR8 HiWBiVjekz3aZOnpnfaJ/SZfsM1JPFwRQaDQJpKc98yT7t7edHqqYfUijDVSAism fnlIQfBF8JFfkdMK029q73iOoCgqGqwY4fWTFIz1ab2/qOd1XltKlPnDiw3zvkvd 1FNsUvu0K4XXqxfGiqRWeLxEXywE5TyTNUPn6HQwQJVCsWgt4pnh7D7tSs+gMKHr vmBEVD3kVY8AZWITDld0eidarshgoYytQHUUgOB9MofnOQLNUz1g1BQHVJ20URgZ H55eem5Ymhr6BQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:30 2025 by rpki-client