This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json) Hash identifier: j7giyZtYXzbgyF+7miBhXgiIzCA3r0v2yJ6BY4+vLsQ= Subject key identifier: 47:7C:D9:14:B1:47:E0:E6:6A:AB:86:FB:70:D6:A8:04:9F:62:D4:02 Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17 Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917 Certificate serial: 019B217586B790723A53CA17BC0B5B2B4DB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 10:01:48 +0000 Manifest this update: Mon 15 Dec 2025 10:01:48 +0000 Manifest next update: Tue 16 Dec 2025 10:01:48 +0000 Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: vExKTkFjWGW4gsdjgc5nElqCdazy68vC6ssiztkffiE=) 2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:86:b7:90:72:3a:53:ca:17:bc:0b:5b:2b:4d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917 Validity Not Before: Dec 15 10:01:48 2025 GMT Not After : Dec 16 10:01:48 2025 GMT Subject: CN=477cd914b147e0e66aab86fb70d6a8049f62d402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:5c:ea:73:cf:dc:a7:cd:95:1c:c9:e2:07: 18:94:73:78:ae:36:8a:80:24:78:48:83:35:c6:07: d3:10:1d:1a:f3:fe:b0:01:c7:51:84:a8:75:79:55: e1:25:11:39:fd:14:4a:17:dc:5d:a6:3e:73:0e:a2: 9d:35:99:ac:e5:05:ee:b7:80:1e:06:05:32:41:b9: 48:19:d7:5f:eb:f8:58:f1:9b:03:46:49:8b:a2:1d: a3:0e:99:b4:4c:c9:93:76:a5:d7:52:71:80:7c:70: a1:30:c4:40:d2:65:84:96:75:2c:de:5e:9c:47:6b: 78:12:be:f7:93:0a:39:cc:b1:3b:4f:8c:43:fe:35: 00:c3:f0:6b:db:13:2d:2c:8f:09:32:58:6e:ad:8f: 97:fb:92:44:2c:f5:7e:b3:14:90:d2:53:58:ed:9a: d7:6b:a3:d5:de:43:fe:d7:17:9a:aa:40:02:f1:d1: 1c:73:d6:c7:6c:4a:e4:a8:93:60:ba:f9:c0:87:8b: 80:2d:98:fe:2f:9c:4f:56:14:80:ce:e1:c8:85:d0: ad:e6:25:d4:a7:cd:f9:5b:6c:c7:a4:1b:ae:25:ea: 23:af:97:81:0d:b4:74:d4:47:e4:5f:77:3c:d1:74: 97:a2:5d:b2:71:32:a7:c7:59:40:49:51:31:cc:cc: 29:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7C:D9:14:B1:47:E0:E6:6A:AB:86:FB:70:D6:A8:04:9F:62:D4:02 X509v3 Authority Key Identifier: keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5a:98:ce:26:65:79:57:e8:41:1a:39:10:ab:2f:96:a1:db: f6:94:20:8d:65:f8:ed:85:1d:9a:eb:4c:90:f5:c4:c0:27:d3: 56:da:b0:0a:23:fa:26:f1:2a:b9:26:fa:df:18:43:05:bc:84: 0d:aa:82:db:24:d0:c8:64:19:24:6a:83:c5:d0:3a:67:17:69: f8:5e:96:fb:04:d5:6d:9d:38:92:eb:ac:6a:26:f3:6b:91:c7: 5d:aa:ca:c6:14:4a:e2:c3:5c:fc:68:e8:da:65:da:3b:13:a9: ad:b3:ed:f4:3d:32:1b:40:9d:84:65:37:f8:2a:f1:28:52:da: fa:8e:8e:15:2f:7b:9f:b1:bc:0d:74:f8:c7:2c:12:b8:da:6e: 1a:e5:65:cf:99:90:84:4f:0f:57:c5:c0:c9:9a:e3:58:09:28: 10:69:67:c5:20:67:cf:b5:0f:4f:a0:f8:08:2c:ea:ed:a0:50: de:83:5f:a4:ca:bd:d9:9d:f6:9b:db:87:39:ab:b5:78:e7:a5: 8d:ef:4e:94:3a:ee:2c:71:a3:3e:25:80:99:bd:02:9a:26:c7: db:4b:7a:ab:68:ef:67:0f:79:ca:57:5b:f7:2b:64:ed:43:d8: 85:f7:4e:30:b1:6f:0f:22:f4:3c:de:d5:58:5e:01:5c:97:fd: b6:5f:d7:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdYa3kHI6U8oXvAtbK024MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MmZlZGIwMjVhNmNiZDI0ODY4NDE5YTBjYjU2MjlkNDg2 MzU5MTcwHhcNMjUxMjE1MTAwMTQ4WhcNMjUxMjE2MTAwMTQ4WjAzMTEwLwYDVQQD Eyg0NzdjZDkxNGIxNDdlMGU2NmFhYjg2ZmI3MGQ2YTgwNDlmNjJkNDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVc6nPP3KfNlRzJ4gcYlHN4rjaK gCR4SIM1xgfTEB0a8/6wAcdRhKh1eVXhJRE5/RRKF9xdpj5zDqKdNZms5QXut4Ae BgUyQblIGddf6/hY8ZsDRkmLoh2jDpm0TMmTdqXXUnGAfHChMMRA0mWElnUs3l6c R2t4Er73kwo5zLE7T4xD/jUAw/Br2xMtLI8JMlhurY+X+5JELPV+sxSQ0lNY7ZrX a6PV3kP+1xeaqkAC8dEcc9bHbErkqJNguvnAh4uALZj+L5xPVhSAzuHIhdCt5iXU p835W2zHpBuuJeojr5eBDbR01EfkX3c80XSXol2ycTKnx1lASVExzMwp0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd82RSxR+DmaquG+3DWqASfYtQCMB8GA1UdIwQY MBaAFBUv7bAlpsvSSGhBmgy1Yp1IY1kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmIt MWEyMTIxOWU5MTAwLzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmItMWEyMTIxOWU5MTAw LzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlqYziZl eVfoQRo5EKsvlqHb9pQgjWX47YUdmutMkPXEwCfTVtqwCiP6JvEquSb63xhDBbyE DaqC2yTQyGQZJGqDxdA6Zxdp+F6W+wTVbZ04kuusaibza5HHXarKxhRK4sNc/Gjo 2mXaOxOprbPt9D0yG0CdhGU3+CrxKFLa+o6OFS97n7G8DXT4xywSuNpuGuVlz5mQ hE8PV8XAyZrjWAkoEGlnxSBnz7UPT6D4CCzq7aBQ3oNfpMq92Z32m9uHOau1eOel je9OlDruLHGjPiWAmb0CmibH20t6q2jvZw95yldb9ytk7UPYhfdOMLFvDyL0PN7V WF4BXJf9tl/Xkg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:15 2025 by rpki-client