This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft File: fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft (raw, json) Hash identifier: rjJ6Cflw8uQJnXub0lWxkJvXS4wEVJlT1hUmBKgnsPg= Subject key identifier: EA:5B:D2:ED:AC:CB:E4:89:45:2D:05:57:63:60:16:BC:15:2D:33:49 Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8 Certificate issuer: /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8 Certificate serial: 019B0F37A5E77BA8052684E8C83B0B3AFC35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 21:01:03 +0000 Manifest this update: Thu 11 Dec 2025 21:01:03 +0000 Manifest next update: Fri 12 Dec 2025 21:01:03 +0000 Files and hashes: 1: _YypdYwNnlrSxn7Xk5pVVLuYXRI.roa (hash: UMpoA6QJ7yrchwDrkwz1jDoIaBrnsc3wqSmOPTPFUrQ=) 2: fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl (hash: MdPvZpc4XbO3xGuEykNfUJffCrl8olEHf8Pxgjm0SCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:a5:e7:7b:a8:05:26:84:e8:c8:3b:0b:3a:fc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8 Validity Not Before: Dec 11 21:01:03 2025 GMT Not After : Dec 12 21:01:03 2025 GMT Subject: CN=ea5bd2edaccbe489452d0557636016bc152d3349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:58:5b:d3:bf:3b:1c:25:67:86:b5:9c:b2:92: ce:84:f7:ef:1e:fe:0d:2d:70:95:42:cd:0d:da:24: 55:d9:c6:80:03:29:5f:bb:f6:bf:dc:8e:2a:2e:1f: 52:25:50:47:75:c4:d0:bf:c9:8e:f1:59:57:ec:76: f8:53:ae:96:5c:72:53:11:05:2a:04:9f:39:63:02: 66:7a:10:40:73:7d:36:9b:e2:66:fd:20:55:4e:5b: 37:17:d0:13:b4:12:1f:e0:f2:89:d4:c5:7d:05:f3: 94:ad:cd:ba:65:9d:6a:35:65:5e:75:f0:24:6b:5a: b8:82:2c:4b:85:9b:08:f4:53:55:0b:c4:dd:49:2a: c9:92:db:5b:85:bb:18:cc:ce:83:be:fc:2d:cf:9b: 47:a4:a4:10:4b:44:b9:24:4d:36:71:0b:d2:c6:2c: 92:fc:3b:92:2b:50:2a:46:60:f8:3d:a9:1b:bc:55: dc:cb:f6:3a:ac:81:06:c8:c2:36:d1:41:f6:aa:27: b0:3a:1d:44:89:d1:f0:88:1b:0b:ee:0a:50:0b:ab: 7e:65:9a:9c:4c:b7:ca:06:22:62:52:7d:c0:b7:c3: 3e:bc:0b:3b:7e:2a:cc:20:3e:3f:13:dd:f1:dd:f4: c8:e1:18:a2:34:19:fe:a4:a7:75:84:e8:f5:c4:4e: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5B:D2:ED:AC:CB:E4:89:45:2D:05:57:63:60:16:BC:15:2D:33:49 X509v3 Authority Key Identifier: keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5a:4f:e9:1d:70:54:17:b1:f8:af:dd:c7:40:0c:a9:52:2c: f5:2a:76:0f:bc:ea:d7:89:ca:97:e1:6d:1d:7a:23:ad:02:49: 5d:73:2d:7f:31:ea:8e:ea:ac:18:b5:fd:6f:72:46:ed:f5:03: 79:73:f8:ea:dc:96:8b:8e:d1:40:7f:ae:b6:af:0e:ed:e2:e8: b6:88:44:3f:b7:4d:e8:db:86:be:97:21:4d:98:47:46:10:67: 49:c0:3d:e9:95:70:dd:ba:38:11:c0:bd:7d:20:02:8f:d4:94: 8f:1d:1e:c7:21:80:90:16:19:3a:c4:2f:fc:04:2c:0b:b2:80: 86:2a:84:c6:0f:ce:cb:10:2b:14:cc:4e:a6:dd:1c:7d:56:9a: 53:90:0a:f3:46:52:f3:20:7e:5f:a8:57:15:97:4b:90:ac:68: ef:09:00:69:eb:bf:b7:d4:25:25:d4:c0:04:54:db:90:f7:fd: 91:04:83:30:fa:e5:83:f4:46:04:9c:00:90:19:aa:ee:45:bf: f0:54:0a:7e:2c:5d:29:bd:eb:e8:0e:38:a8:7a:b2:c3:26:93: 85:e5:37:71:12:ad:2f:93:54:40:ef:d2:fb:c1:f0:1b:65:41: f5:ac:32:33:2a:73:f2:07:8f:d6:5b:87:68:40:fd:97:95:ec: 3a:5d:bb:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN6Xne6gFJoToyDsLOvw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmMwY2NmMWZmYmZjZGI4YjYxZDczODIwMTMwMWI4Nzkx MTg0ZTgwHhcNMjUxMjExMjEwMTAzWhcNMjUxMjEyMjEwMTAzWjAzMTEwLwYDVQQD EyhlYTViZDJlZGFjY2JlNDg5NDUyZDA1NTc2MzYwMTZiYzE1MmQzMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVhb0787HCVnhrWcspLOhPfvHv4N LXCVQs0N2iRV2caAAylfu/a/3I4qLh9SJVBHdcTQv8mO8VlX7Hb4U66WXHJTEQUq BJ85YwJmehBAc302m+Jm/SBVTls3F9ATtBIf4PKJ1MV9BfOUrc26ZZ1qNWVedfAk a1q4gixLhZsI9FNVC8TdSSrJkttbhbsYzM6Dvvwtz5tHpKQQS0S5JE02cQvSxiyS /DuSK1AqRmD4PakbvFXcy/Y6rIEGyMI20UH2qiewOh1EidHwiBsL7gpQC6t+ZZqc TLfKBiJiUn3At8M+vAs7firMID4/E93x3fTI4RiiNBn+pKd1hOj1xE6KXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpb0u2sy+SJRS0FV2NgFrwVLTNJMB8GA1UdIwQY MBaAFH4sDM8f+/zbi2HXOCATAbh5EYToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZml3TXp4XzdfTnVMWWRjNElCTUJ1SGtSaE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jZGYyZDctYjExZS00N2IyLTlmYzkt NzkwOTFjNzhhYjQ4LzEvZml3TXp4XzdfTnVMWWRjNElCTUJ1SGtSaE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9jZGYyZDctYjExZS00N2IyLTlmYzktNzkwOTFjNzhhYjQ4 LzEvZml3TXp4XzdfTnVMWWRjNElCTUJ1SGtSaE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFpP6R1w VBex+K/dx0AMqVIs9Sp2D7zq14nKl+FtHXojrQJJXXMtfzHqjuqsGLX9b3JG7fUD eXP46tyWi47RQH+utq8O7eLotohEP7dN6NuGvpchTZhHRhBnScA96ZVw3bo4EcC9 fSACj9SUjx0exyGAkBYZOsQv/AQsC7KAhiqExg/OyxArFMxOpt0cfVaaU5AK80ZS 8yB+X6hXFZdLkKxo7wkAaeu/t9QlJdTABFTbkPf9kQSDMPrlg/RGBJwAkBmq7kW/ 8FQKfixdKb3r6A44qHqywyaTheU3cRKtL5NUQO/S+8HwG2VB9awyMypz8geP1luH aED9l5XsOl27sA== -----END CERTIFICATE-----Generated at Fri Dec 12 06:39:46 2025 by rpki-client