This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft File: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json) Hash identifier: 1S1x+08HWrGN3Bc1qwvdcXuXqaB2J67SYTX30wdprOI= Subject key identifier: 4D:8D:1C:6C:6C:60:43:47:86:38:76:15:7C:E5:22:C9:B1:54:E8:FF Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0 Certificate issuer: /CN=169ea0275c765e17603eb59eef39e2fab5380ef0 Certificate serial: 019B3EDA92587FDE77F92F1F8EAE9C135F1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft Manifest number: 0BFF Signing time: Sun 21 Dec 2025 03:01:09 +0000 Manifest this update: Sun 21 Dec 2025 03:01:09 +0000 Manifest next update: Mon 22 Dec 2025 03:01:09 +0000 Files and hashes: 1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: R/937CC0yh3Y5MWdKQxxjonvEf69mWlNLcgQkikuwLo=) 2: wbh15XPn1kgCYyJ-XkIl20Yytuw.roa (hash: aWvLndo6Gq/HOzsYU6uHpO8FpYdNLyOKJEg8ZgZ7QAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:92:58:7f:de:77:f9:2f:1f:8e:ae:9c:13:5f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0 Validity Not Before: Dec 21 03:01:09 2025 GMT Not After : Dec 22 03:01:09 2025 GMT Subject: CN=4d8d1c6c6c604347863876157ce522c9b154e8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:41:db:c2:49:02:98:74:d8:15:92:16:21: 30:ee:ea:29:3a:32:7d:1a:42:18:63:9d:27:c1:8c: 81:74:85:77:e7:7f:29:f2:f6:9a:26:ac:5b:25:c1: fc:22:cc:9c:b2:b0:37:34:fe:df:8b:f3:fc:24:31: 42:89:ae:55:02:f6:13:4b:76:68:eb:4a:b6:86:b9: f3:e5:47:e1:4c:eb:be:1a:1b:b5:27:79:b8:16:91: 58:e6:2a:88:f3:86:e7:87:b9:ab:7f:cb:97:e7:f8: 02:8f:ba:1e:c1:6f:d2:de:3f:60:37:68:56:9e:cf: 2b:34:39:3b:96:49:b0:f7:3f:6e:eb:31:c3:52:92: 04:4c:d7:9a:5c:72:99:2d:2f:f8:53:2a:d3:8c:af: fb:dc:1c:cc:e8:76:c2:1b:38:06:57:70:e7:77:42: 14:6b:21:64:c6:34:30:e8:1b:ba:57:a5:c0:cb:e9: a8:89:a6:45:51:33:f3:78:fb:6b:0b:1c:ba:19:df: 2f:61:67:f4:97:df:8b:90:46:1b:fc:0e:c9:68:20: e2:78:2f:03:0c:1c:5b:d8:e3:8b:0c:e2:fb:7b:6e: f9:48:b9:66:10:eb:54:fd:98:3d:d3:e9:af:8a:bb: 6e:e5:ca:d0:6f:05:7a:68:0c:99:aa:42:e1:8f:69: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8D:1C:6C:6C:60:43:47:86:38:76:15:7C:E5:22:C9:B1:54:E8:FF X509v3 Authority Key Identifier: keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d5:10:04:53:71:b5:dd:15:e5:42:46:24:fa:0b:f2:56:9c: 50:fd:6e:cc:51:23:68:7b:4d:39:eb:da:e8:f3:3b:d9:44:4a: 39:60:18:66:86:e4:87:05:a4:a1:ec:82:c9:28:ca:74:27:47: 39:fc:52:75:3d:7b:95:f0:70:c2:fd:58:8b:66:d8:a9:e9:68: 03:4e:59:0e:e9:04:da:c5:b4:07:87:17:c2:fb:f5:ef:cd:0f: e7:0c:a1:23:a3:8c:03:41:9b:16:2d:40:92:e8:c1:aa:28:e7: 40:f8:98:3f:45:9e:67:05:13:1c:60:a4:c7:f2:11:fb:2a:7b: bd:af:99:3f:36:4a:3a:a4:f5:bf:1c:81:ca:b4:19:40:e5:5d: 3c:e1:06:d7:77:bd:39:ee:2c:d0:e5:e4:17:0b:15:6a:90:0d: e5:2d:de:9f:c4:bf:47:22:72:48:23:d6:9f:29:0a:ac:9b:b9: 76:b0:18:2f:5d:9e:a4:7b:d2:8d:1d:7b:43:d0:4b:4d:ee:ef: 30:c4:1b:3c:05:fa:86:50:a0:4d:9d:91:b7:97:fe:1b:84:63: 98:aa:53:ad:55:0a:59:fe:ed:c4:d2:90:f3:65:90:58:90:f4: 02:a1:9d:65:79:55:93:07:d8:ad:05:6e:69:37:69:ee:51:45: b7:48:ae:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2pJYf953+S8fjq6cE18aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OWVhMDI3NWM3NjVlMTc2MDNlYjU5ZWVmMzllMmZhYjUz ODBlZjAwHhcNMjUxMjIxMDMwMTA5WhcNMjUxMjIyMDMwMTA5WjAzMTEwLwYDVQQD Eyg0ZDhkMWM2YzZjNjA0MzQ3ODYzODc2MTU3Y2U1MjJjOWIxNTRlOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxghB28JJAph02BWSFiEw7uopOjJ9 GkIYY50nwYyBdIV3538p8vaaJqxbJcH8IsycsrA3NP7fi/P8JDFCia5VAvYTS3Zo 60q2hrnz5UfhTOu+Ghu1J3m4FpFY5iqI84bnh7mrf8uX5/gCj7oewW/S3j9gN2hW ns8rNDk7lkmw9z9u6zHDUpIETNeaXHKZLS/4UyrTjK/73BzM6HbCGzgGV3Dnd0IU ayFkxjQw6Bu6V6XAy+moiaZFUTPzePtrCxy6Gd8vYWf0l9+LkEYb/A7JaCDieC8D DBxb2OOLDOL7e275SLlmEOtU/Zg90+mvirtu5crQbwV6aAyZqkLhj2mI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2NHGxsYENHhjh2FXzlIsmxVOj/MB8GA1UdIwQY MBaAFBaeoCdcdl4XYD61nu854vq1OA7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5Njkt ZDY5ZWY0MjJjMTY3LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5NjktZDY5ZWY0MjJjMTY3 LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdUQBFNx td0V5UJGJPoL8lacUP1uzFEjaHtNOeva6PM72URKOWAYZobkhwWkoeyCySjKdCdH OfxSdT17lfBwwv1Yi2bYqeloA05ZDukE2sW0B4cXwvv1780P5wyhI6OMA0GbFi1A kujBqijnQPiYP0WeZwUTHGCkx/IR+yp7va+ZPzZKOqT1vxyByrQZQOVdPOEG13e9 Oe4s0OXkFwsVapAN5S3en8S/RyJySCPWnykKrJu5drAYL12epHvSjR17Q9BLTe7v MMQbPAX6hlCgTZ2Rt5f+G4RjmKpTrVUKWf7txNKQ82WQWJD0AqGdZXlVkwfYrQVu aTdp7lFFt0iuLA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:23 2025 by rpki-client