This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json) Hash identifier: ZzsEhieOqERtJTAfj0zMY6921CqF4JKbvHgf4HhIGSU= Subject key identifier: 6D:48:42:B8:08:B8:86:9D:74:66:A3:95:2F:8C:1B:3B:BC:D1:03:4B Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48 Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48 Certificate serial: 019B1194182EA29A0CB7626AF3BEFA94D173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft Manifest number: 1781 Signing time: Fri 12 Dec 2025 08:01:16 +0000 Manifest this update: Fri 12 Dec 2025 08:01:16 +0000 Manifest next update: Sat 13 Dec 2025 08:01:16 +0000 Files and hashes: 1: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: WdTHywr6atKVq90iPWB7LdvPstYFvwWveT5ZAT15+7E=) 2: MNlQF5nG0eeT7QS_s8UJC2BbGl4.roa (hash: msf9qspTIOl4MPPSDjXBam+bCbkt7kvUjAGSdIfDP0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:94:18:2e:a2:9a:0c:b7:62:6a:f3:be:fa:94:d1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48 Validity Not Before: Dec 12 08:01:16 2025 GMT Not After : Dec 13 08:01:16 2025 GMT Subject: CN=6d4842b808b8869d7466a3952f8c1b3bbcd1034b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:5e:be:21:cf:01:7a:55:89:23:0d:15:51: 6b:eb:db:5a:f3:90:88:b9:e0:28:81:3d:d6:47:a2: 5c:f0:c2:71:53:c7:7a:c1:e1:db:3a:80:7d:de:4e: 25:6a:8a:4b:4d:3a:ce:dc:04:76:85:7b:ef:7e:0d: 73:05:27:62:c1:3e:9d:ce:ac:b6:77:0f:50:b1:df: e5:b7:d0:f3:6b:f4:cf:88:f3:31:d9:a0:b3:5b:57: 91:53:f3:db:c1:42:2e:9b:87:ce:79:46:80:28:08: 5f:26:9f:06:7b:2a:c8:55:dc:3b:d0:a8:76:13:1a: 08:ed:84:c0:fb:f3:30:98:13:6e:ea:a2:ae:fd:27: 36:23:5f:9a:55:71:01:5a:d7:8f:6c:cf:01:ea:45: ec:eb:04:2a:75:c0:b1:d3:a2:a7:f4:d5:4f:e4:ef: 3e:ca:84:e8:f5:76:f9:ba:c6:bb:c3:08:bb:6c:48: 39:d9:3e:8b:21:e0:19:57:5f:6d:2e:a5:12:dd:c4: 11:22:01:1b:04:0c:3a:da:33:9b:ab:d6:ca:39:b3: 11:ac:11:f3:d6:ae:0a:a9:62:d3:e2:a9:70:62:67: f1:53:83:fe:0e:55:ce:1e:82:20:aa:92:d8:8a:b0: 08:f2:96:ce:ea:5f:44:44:47:05:43:da:51:63:32: 3b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:48:42:B8:08:B8:86:9D:74:66:A3:95:2F:8C:1B:3B:BC:D1:03:4B X509v3 Authority Key Identifier: keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a1:65:73:27:be:2c:78:2f:e8:66:7a:06:23:ba:bd:a4:36: 3e:d8:c2:a6:76:68:c3:4a:b2:bc:cd:87:b5:90:d0:b9:5e:38: a0:52:a4:e5:ce:1e:aa:7e:23:0b:15:9c:67:67:5d:07:f0:df: 3d:7f:25:e0:29:78:77:a5:d8:91:26:9a:51:a7:7e:3b:dc:ab: 1e:51:17:90:df:99:3c:8d:4e:6e:9a:29:f6:f6:93:08:26:81: f2:7a:90:a8:34:a0:3d:59:3d:81:b3:d7:dc:65:dc:c3:4f:7d: 7e:1e:d8:5b:5b:25:43:5a:3f:34:8f:2d:94:db:40:82:62:57: 9e:d5:56:64:42:22:21:b3:e6:90:1a:31:f2:09:50:1a:9e:30: 39:b4:6c:5b:01:3a:70:2d:04:3b:ab:34:a7:b4:78:18:64:d1: 78:7a:0d:1c:d8:84:f6:34:aa:b0:ed:51:6a:a6:e7:be:5c:6e: 49:4c:a9:e3:ac:0d:84:8e:f7:f9:30:d6:06:21:c1:52:60:a2: 9b:63:8d:b8:54:c5:4b:0f:0f:80:a5:da:13:f1:be:f0:c0:b3: d8:24:91:b4:6a:98:0d:77:56:ba:1b:6f:5a:98:a7:72:21:19: 76:92:1b:0b:64:c7:14:9f:0a:21:62:96:48:b6:11:1e:b5:5f: 3e:69:50:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRlBguopoMt2Jq8776lNFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ODYwMGRmYWM5ZDNkMWE3NWU2NjMwZDY5NzEwMmYyZjIx MzJjNDgwHhcNMjUxMjEyMDgwMTE2WhcNMjUxMjEzMDgwMTE2WjAzMTEwLwYDVQQD Eyg2ZDQ4NDJiODA4Yjg4NjlkNzQ2NmEzOTUyZjhjMWIzYmJjZDEwMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cxeviHPAXpViSMNFVFr69ta85CI ueAogT3WR6Jc8MJxU8d6weHbOoB93k4laopLTTrO3AR2hXvvfg1zBSdiwT6dzqy2 dw9Qsd/lt9Dza/TPiPMx2aCzW1eRU/PbwUIum4fOeUaAKAhfJp8GeyrIVdw70Kh2 ExoI7YTA+/MwmBNu6qKu/Sc2I1+aVXEBWtePbM8B6kXs6wQqdcCx06Kn9NVP5O8+ yoTo9Xb5usa7wwi7bEg52T6LIeAZV19tLqUS3cQRIgEbBAw62jObq9bKObMRrBHz 1q4KqWLT4qlwYmfxU4P+DlXOHoIgqpLYirAI8pbO6l9EREcFQ9pRYzI77wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1IQrgIuIaddGajlS+MGzu80QNLMB8GA1UdIwQY MBaAFBaGAN+snT0adeZjDWlxAvLyEyxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEt MThkYmU2NTA0YmI0LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEtMThkYmU2NTA0YmI0 LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaFlcye+ LHgv6GZ6BiO6vaQ2PtjCpnZow0qyvM2HtZDQuV44oFKk5c4eqn4jCxWcZ2ddB/Df PX8l4Cl4d6XYkSaaUad+O9yrHlEXkN+ZPI1Obpop9vaTCCaB8nqQqDSgPVk9gbPX 3GXcw099fh7YW1slQ1o/NI8tlNtAgmJXntVWZEIiIbPmkBox8glQGp4wObRsWwE6 cC0EO6s0p7R4GGTReHoNHNiE9jSqsO1RaqbnvlxuSUyp46wNhI73+TDWBiHBUmCi m2ONuFTFSw8PgKXaE/G+8MCz2CSRtGqYDXdWuhtvWpinciEZdpIbC2THFJ8KIWKW SLYRHrVfPmlQTQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:57:30 2025 by rpki-client