This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json) Hash identifier: 4+AhDAqe0LFvBlExyM8Wl7QMpgORGkXsdIiX5uHIZjo= Subject key identifier: F4:FC:34:18:26:E3:3A:50:59:70:A1:9F:E3:2A:EA:C3:19:4A:3A:2C Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Certificate serial: 019B39B3C49583A7EBCBFF7A279F21139401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft Manifest number: 1459 Signing time: Sat 20 Dec 2025 03:00:40 +0000 Manifest this update: Sat 20 Dec 2025 03:00:40 +0000 Manifest next update: Sun 21 Dec 2025 03:00:40 +0000 Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: uZ8bRYHUxN74Zz5U2aI/IfEp94qV1M89pn9jy5j53mM=) 2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:c4:95:83:a7:eb:cb:ff:7a:27:9f:21:13:94:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Validity Not Before: Dec 20 03:00:40 2025 GMT Not After : Dec 21 03:00:40 2025 GMT Subject: CN=f4fc341826e33a505970a19fe32aeac3194a3a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:8b:83:fa:11:86:2e:d4:ed:33:e9:3d:65: d5:4d:c0:5f:10:6a:3a:a3:75:0e:70:20:69:d8:11: 6b:ee:91:2e:43:83:f4:48:f3:61:e1:4e:36:4a:2c: 23:84:e1:eb:83:0f:24:1f:97:91:98:41:3e:20:61: cf:5a:6e:bf:89:4d:f0:b9:c8:98:b5:e0:e6:bb:28: 92:6c:b5:8f:78:7b:69:b8:d1:e2:c5:45:aa:3e:51: 31:68:77:ce:ef:1e:9c:6b:cf:fc:75:2d:55:29:3e: ff:df:aa:b8:07:1a:85:f5:23:7f:7c:e5:36:ea:1c: 21:0f:14:44:87:03:34:26:10:fd:9d:d8:9b:3a:40: 45:60:eb:59:a6:56:ce:f7:0e:2a:9c:c5:1b:44:2c: 18:cf:71:ea:b7:9c:40:15:7e:6e:ed:d8:fc:4e:fd: 37:ed:fc:21:17:7f:fc:d0:1a:a1:8b:c2:c3:d2:8a: 1d:a8:1e:d9:06:31:3d:24:34:68:5e:5e:dd:cf:33: ef:53:c4:03:d9:46:b5:5d:4c:a4:6b:77:cf:e7:19: 76:07:69:e0:c2:e7:c4:a5:30:f1:0a:7f:83:7d:67: 51:ca:ea:51:3e:5f:40:77:45:8e:57:17:c7:a2:b9: 95:c8:04:d3:cd:c8:14:e8:9b:9f:3e:8a:ba:6c:90: 3d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FC:34:18:26:E3:3A:50:59:70:A1:9F:E3:2A:EA:C3:19:4A:3A:2C X509v3 Authority Key Identifier: keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:61:7d:b7:20:a7:98:13:32:a4:14:bd:c2:95:ed:e6:63:fc: 8f:5c:23:1d:20:69:4e:60:88:67:b1:f1:ac:2a:dc:63:f9:6f: e8:13:5c:e9:21:56:08:0c:5c:4d:96:67:4b:a8:76:86:5c:c2: 15:5b:dc:3f:40:ca:16:65:41:00:b7:b6:dd:5b:a1:98:7f:7e: 6f:81:60:bf:8c:88:b5:f3:6b:60:63:c1:d2:b1:61:88:5c:ce: fb:9f:44:15:56:f0:53:44:6a:68:d7:e3:e8:1d:e7:55:8f:33: 44:9e:b2:95:31:c5:e3:bb:26:a7:dd:ce:7f:3c:d2:d2:24:13: 5b:9e:ae:f7:a9:94:91:e9:88:50:34:25:24:98:dd:f8:b5:35: 5a:6e:bc:87:6f:cc:a8:94:81:50:9f:5f:57:94:ca:06:71:b1: 5c:71:13:c1:46:1f:6c:ec:37:94:b3:73:31:f9:de:a3:f8:3d: 81:e8:7a:15:84:c4:da:b1:16:ea:1c:ce:19:61:b5:ce:8d:5f: bc:a5:cb:52:fb:7f:5d:d8:72:4a:5a:c4:2e:79:11:39:ba:df: fc:cb:83:4b:d5:e6:5c:56:8a:e5:e9:90:34:ac:ab:d3:f1:13: 1a:f1:df:c1:95:b8:9c:01:32:13:92:49:43:e5:0f:b0:20:03: 94:b1:19:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s8SVg6fry/96J58hE5QBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTMyMDhlODE4ZGQ3NGMwZDZiNDNkOTI3ZWEwZDE4OTNi ZWQ2NTAwHhcNMjUxMjIwMDMwMDQwWhcNMjUxMjIxMDMwMDQwWjAzMTEwLwYDVQQD EyhmNGZjMzQxODI2ZTMzYTUwNTk3MGExOWZlMzJhZWFjMzE5NGEzYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymmLg/oRhi7U7TPpPWXVTcBfEGo6 o3UOcCBp2BFr7pEuQ4P0SPNh4U42SiwjhOHrgw8kH5eRmEE+IGHPWm6/iU3wuciY teDmuyiSbLWPeHtpuNHixUWqPlExaHfO7x6ca8/8dS1VKT7/36q4BxqF9SN/fOU2 6hwhDxREhwM0JhD9ndibOkBFYOtZplbO9w4qnMUbRCwYz3Hqt5xAFX5u7dj8Tv03 7fwhF3/80Bqhi8LD0oodqB7ZBjE9JDRoXl7dzzPvU8QD2Ua1XUyka3fP5xl2B2ng wufEpTDxCn+DfWdRyupRPl9Ad0WOVxfHormVyATTzcgU6JufPoq6bJA95wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT8NBgm4zpQWXChn+Mq6sMZSjosMB8GA1UdIwQY MBaAFH7jII6BjddMDWtD2SfqDRiTvtZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUt ZmY0YTk5NzgzYWI0LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUtZmY0YTk5NzgzYWI0 LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGF9tyCn mBMypBS9wpXt5mP8j1wjHSBpTmCIZ7HxrCrcY/lv6BNc6SFWCAxcTZZnS6h2hlzC FVvcP0DKFmVBALe23VuhmH9+b4Fgv4yItfNrYGPB0rFhiFzO+59EFVbwU0RqaNfj 6B3nVY8zRJ6ylTHF47smp93OfzzS0iQTW56u96mUkemIUDQlJJjd+LU1Wm68h2/M qJSBUJ9fV5TKBnGxXHETwUYfbOw3lLNzMfneo/g9geh6FYTE2rEW6hzOGWG1zo1f vKXLUvt/XdhySlrELnkRObrf/MuDS9XmXFaK5emQNKyr0/ETGvHfwZW4nAEyE5JJ Q+UPsCADlLEZJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:45:58 2025 by rpki-client