This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft File: FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json) Hash identifier: yH3+gFSFnblX2Nwk/1Zn5NDMgEhc0krEoj5L1PK7k+g= Subject key identifier: 8B:0F:38:54:70:7C:48:73:EA:0B:24:33:BE:63:7B:D1:F1:AE:0D:DC Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3 Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3 Certificate serial: 019B38A2CAD75AED0208412CC02CC4E275E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 22:02:31 +0000 Manifest this update: Fri 19 Dec 2025 22:02:31 +0000 Manifest next update: Sat 20 Dec 2025 22:02:31 +0000 Files and hashes: 1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: oDyFFn620i0GuhBBP4Yt/ODMb7X6H6OwYtvCGKyDH4E=) 2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:ca:d7:5a:ed:02:08:41:2c:c0:2c:c4:e2:75:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3 Validity Not Before: Dec 19 22:02:31 2025 GMT Not After : Dec 20 22:02:31 2025 GMT Subject: CN=8b0f3854707c4873ea0b2433be637bd1f1ae0ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:70:36:b0:1e:4a:26:7d:8e:00:61:bd:ce: 63:39:c5:f4:18:35:8b:64:7a:c9:0c:71:0f:af:97: 68:ca:51:5c:d4:2a:cb:92:95:e2:db:7b:76:ed:00: 32:77:6b:e1:65:d8:55:58:ba:6b:35:d9:21:b2:2e: dc:98:0c:c9:35:2d:81:29:e8:9a:05:71:29:a6:b3: b2:cd:4b:ba:ba:ab:91:c8:7a:84:ff:72:80:7d:bf: 1c:ad:60:ec:e7:5e:89:9e:1e:70:b9:02:15:60:40: 6b:22:6c:26:0e:7a:a4:b1:f6:7d:20:a9:30:af:b3: 65:6a:2f:8c:fe:e6:72:a1:39:e0:90:9c:7b:61:6c: ae:19:d6:26:39:76:51:c1:aa:e4:fd:49:fb:1c:5b: 47:22:e6:df:91:e8:7a:b6:cb:2f:07:82:37:01:de: 50:7a:35:ed:2b:2d:66:22:25:68:c1:49:1d:6f:3b: 8f:ad:b1:d7:8d:d8:f4:44:69:27:dc:9c:73:e8:62: fc:57:eb:fd:68:3d:10:3c:ad:af:14:89:90:91:a9: 63:77:de:0e:3c:bf:53:6c:a4:66:c9:fd:5f:51:c9: 6e:37:fb:17:ed:f0:ff:86:db:d6:ad:81:93:45:6d: 45:61:97:08:a7:21:fb:f7:90:08:9b:98:5f:31:b3: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0F:38:54:70:7C:48:73:EA:0B:24:33:BE:63:7B:D1:F1:AE:0D:DC X509v3 Authority Key Identifier: keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ad:5c:39:bd:25:b6:da:d7:67:dc:26:ca:ba:10:84:84:8a: 50:a6:ee:8f:60:cd:15:6a:75:4c:0a:27:0c:bf:2a:0e:9d:4e: 93:d1:8c:c3:2b:21:8b:b5:6b:6c:63:d1:fa:37:28:f7:d5:b2: 73:c1:58:78:02:4b:df:a5:15:35:4b:6e:12:22:ef:05:82:4a: 5f:58:06:3d:63:5a:0c:59:21:64:ee:6e:47:ed:6a:c1:48:96: ed:f1:27:8b:38:e8:d3:55:7c:91:4a:8e:50:43:dd:77:63:e7: d0:68:10:b8:35:6d:44:00:91:ff:19:b9:78:73:a2:c3:bc:77: e7:0c:c1:1f:f0:e3:ed:96:59:77:0c:0a:e0:a5:c2:39:c4:15: 3e:12:30:55:e1:65:3a:53:06:50:ac:f4:55:b4:1b:6a:1d:8a: 25:c1:33:29:3f:42:b0:84:3b:3e:a7:53:c2:fc:23:d9:a8:8c: f5:70:6b:ed:13:88:68:db:b6:f1:3b:5f:90:c6:50:18:66:0e: 94:45:4e:a5:52:b4:df:05:30:22:8a:23:3f:75:3b:1f:e9:39: 8f:da:44:72:29:0c:99:9f:a0:4a:74:bf:e7:87:a1:7a:64:92: 0f:6b:6d:52:b5:0a:b8:d1:86:f1:8e:90:e1:19:74:48:f5:7d: 30:e5:e3:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4osrXWu0CCEEswCzE4nXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3M2IwZDdmMGVhYzY2NTczM2Q5MjgxNmRkNDkxNjJkNzJl MjIxZjMwHhcNMjUxMjE5MjIwMjMxWhcNMjUxMjIwMjIwMjMxWjAzMTEwLwYDVQQD Eyg4YjBmMzg1NDcwN2M0ODczZWEwYjI0MzNiZTYzN2JkMWYxYWUwZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg1wNrAeSiZ9jgBhvc5jOcX0GDWL ZHrJDHEPr5doylFc1CrLkpXi23t27QAyd2vhZdhVWLprNdkhsi7cmAzJNS2BKeia BXEpprOyzUu6uquRyHqE/3KAfb8crWDs516Jnh5wuQIVYEBrImwmDnqksfZ9IKkw r7Nlai+M/uZyoTngkJx7YWyuGdYmOXZRwark/Un7HFtHIubfkeh6tssvB4I3Ad5Q ejXtKy1mIiVowUkdbzuPrbHXjdj0RGkn3Jxz6GL8V+v9aD0QPK2vFImQkaljd94O PL9TbKRmyf1fUcluN/sX7fD/htvWrYGTRW1FYZcIpyH795AIm5hfMbOwkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsPOFRwfEhz6gskM75je9Hxrg3cMB8GA1UdIwQY MBaAFBc7DX8OrGZXM9koFt1JFi1y4iHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MDExYjEtYjZkYy00ZTExLWJhMjEt ZTIzYTM5MzRiNmY3LzEvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85MDExYjEtYjZkYy00ZTExLWJhMjEtZTIzYTM5MzRiNmY3 LzEvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjq1cOb0l ttrXZ9wmyroQhISKUKbuj2DNFWp1TAonDL8qDp1Ok9GMwyshi7VrbGPR+jco99Wy c8FYeAJL36UVNUtuEiLvBYJKX1gGPWNaDFkhZO5uR+1qwUiW7fEnizjo01V8kUqO UEPdd2Pn0GgQuDVtRACR/xm5eHOiw7x35wzBH/Dj7ZZZdwwK4KXCOcQVPhIwVeFl OlMGUKz0VbQbah2KJcEzKT9CsIQ7PqdTwvwj2aiM9XBr7ROIaNu28TtfkMZQGGYO lEVOpVK03wUwIoojP3U7H+k5j9pEcikMmZ+gSnS/54ehemSSD2ttUrUKuNGG8Y6Q 4Rl0SPV9MOXjRg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:32:13 2025 by rpki-client