This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft File: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft (raw, json) Hash identifier: supOHJAC+UhN1sMPh7uxMYhGASstKM2DM6GCkWMBN0Y= Subject key identifier: E3:B5:3E:81:B1:0A:B0:E2:37:E3:94:9C:F1:6C:E6:8A:C4:37:7C:63 Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0 Certificate issuer: /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0 Certificate serial: 019B495E713B78AF4AE9194718A469B0A6FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft Manifest number: 072D Signing time: Tue 23 Dec 2025 04:01:24 +0000 Manifest this update: Tue 23 Dec 2025 04:01:24 +0000 Manifest next update: Wed 24 Dec 2025 04:01:24 +0000 Files and hashes: 1: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl (hash: 0h/2vfuCAI4tUEgQqrfzj+BYAFxvxwcgzd/MKSG9JrE=) 2: RvOaflHrUbGbCGM86DjNMJAz4Rw.roa (hash: 3Nyo7ThzTtGgNw1pACQDePiv05YOigx9XCdhwJe3hKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:71:3b:78:af:4a:e9:19:47:18:a4:69:b0:a6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0 Validity Not Before: Dec 23 04:01:24 2025 GMT Not After : Dec 24 04:01:24 2025 GMT Subject: CN=e3b53e81b10ab0e237e3949cf16ce68ac4377c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:eb:91:39:d2:aa:9e:ff:93:2e:07:db:72: 1d:f1:74:cc:93:06:fe:7e:d9:3f:10:fa:aa:30:45: 74:92:ac:07:0d:0f:2e:fc:e4:0e:29:96:6b:41:e9: 88:30:34:f3:ff:7f:1f:1d:17:ff:bf:fe:48:d4:4e: 9a:fe:86:b0:4d:3f:8c:ad:10:4e:6c:dc:00:fd:c5: 72:7d:2b:8e:5d:e0:55:c6:29:55:5b:1e:51:f5:73: 3d:60:83:a6:fb:a5:b5:06:c3:5b:fa:18:a6:83:fb: 29:99:8f:b5:d0:82:96:bc:e7:e5:bd:45:0e:b6:d6: c8:c1:90:30:9d:ef:a4:7c:c4:77:61:ba:e5:d8:63: 22:24:34:d3:9b:57:82:15:0f:3a:90:68:11:cf:78: 8c:cb:53:ea:49:ca:b5:2b:e8:a2:ad:19:06:a2:87: 2c:2c:db:18:71:55:ad:f8:1c:5a:40:d1:2c:1e:24: 13:5a:7e:47:fe:98:aa:a3:bd:22:c7:98:0f:2e:e2: 93:74:07:3f:34:5b:02:8d:b0:fa:81:40:74:d9:b5: ea:bc:13:fe:ad:5e:4d:9e:37:f8:f7:83:e6:18:c9: db:8a:61:f5:a6:ff:d7:b9:22:f4:c4:0f:43:77:71: eb:19:07:1d:3f:db:5f:a4:8c:4d:c7:d1:86:d7:a9: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B5:3E:81:B1:0A:B0:E2:37:E3:94:9C:F1:6C:E6:8A:C4:37:7C:63 X509v3 Authority Key Identifier: keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:70:eb:9f:3c:fe:1e:0c:f1:b7:07:4f:90:1b:a5:83:38:09: ec:45:3a:99:88:5d:d0:61:0f:f8:5c:29:9c:4c:6a:58:bb:59: 53:ba:70:8a:50:ad:a6:09:5d:27:28:8c:6a:81:cd:69:26:7d: 34:2b:27:1a:cc:08:31:b8:b9:76:2c:71:be:46:f1:cd:49:92: 0c:70:32:4b:51:b2:b4:16:e1:87:f7:1c:ca:dd:86:3e:a4:c7: ea:5c:5e:25:a6:ed:1d:ae:cf:80:c5:01:c3:5c:29:19:4a:83: 47:d2:89:6f:8b:0b:3c:dc:bb:4b:3c:03:a2:46:78:35:78:9c: 55:5c:fc:7a:3f:4f:55:f4:8f:92:41:94:d8:3a:d9:ab:48:8d: c4:48:3c:cb:72:b2:e7:47:e2:24:3b:6f:b9:da:43:7b:51:1e: 75:05:da:1a:6c:d8:58:be:e5:9c:bc:0a:63:e9:58:83:2f:0c: dd:7d:e3:fb:37:d5:79:3d:f1:8e:ca:cc:c2:eb:23:07:c5:02: 14:af:bb:61:99:2d:2a:f8:a5:3d:12:a0:ec:05:db:d6:b0:c3: 6f:32:45:ae:20:e5:88:6e:a5:ab:a2:d9:b2:54:83:e5:f9:26: 01:93:b7:d6:d4:45:aa:83:6d:28:d3:6e:59:80:95:ca:62:e4: 66:79:06:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXnE7eK9K6RlHGKRpsKb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTRiYTUwYjQ2OGZjZWVhYzE5NDYyN2U5OGJhMWY1N2Rl YjRmYzAwHhcNMjUxMjIzMDQwMTI0WhcNMjUxMjI0MDQwMTI0WjAzMTEwLwYDVQQD EyhlM2I1M2U4MWIxMGFiMGUyMzdlMzk0OWNmMTZjZTY4YWM0Mzc3YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEPrkTnSqp7/ky4H23Id8XTMkwb+ ftk/EPqqMEV0kqwHDQ8u/OQOKZZrQemIMDTz/38fHRf/v/5I1E6a/oawTT+MrRBO bNwA/cVyfSuOXeBVxilVWx5R9XM9YIOm+6W1BsNb+himg/spmY+10IKWvOflvUUO ttbIwZAwne+kfMR3Ybrl2GMiJDTTm1eCFQ86kGgRz3iMy1PqScq1K+iirRkGoocs LNsYcVWt+BxaQNEsHiQTWn5H/piqo70ix5gPLuKTdAc/NFsCjbD6gUB02bXqvBP+ rV5Nnjf494PmGMnbimH1pv/XuSL0xA9Dd3HrGQcdP9tfpIxNx9GG16kaLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO1PoGxCrDiN+OUnPFs5orEN3xjMB8GA1UdIwQY MBaAFBSkulC0aPzurBlGJ+mLofV960/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgt YTBkNDhkMGQ3NDYxLzEvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgtYTBkNDhkMGQ3NDYx LzEvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHDrnzz+ HgzxtwdPkBulgzgJ7EU6mYhd0GEP+FwpnExqWLtZU7pwilCtpgldJyiMaoHNaSZ9 NCsnGswIMbi5dixxvkbxzUmSDHAyS1GytBbhh/ccyt2GPqTH6lxeJabtHa7PgMUB w1wpGUqDR9KJb4sLPNy7SzwDokZ4NXicVVz8ej9PVfSPkkGU2DrZq0iNxEg8y3Ky 50fiJDtvudpDe1EedQXaGmzYWL7lnLwKY+lYgy8M3X3j+zfVeT3xjsrMwusjB8UC FK+7YZktKvilPRKg7AXb1rDDbzJFriDliG6lq6LZslSD5fkmAZO31tRFqoNtKNNu WYCVymLkZnkGHA== -----END CERTIFICATE-----Generated at Tue Dec 23 08:23:23 2025 by rpki-client