This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json) Hash identifier: G44BAJ4FfO99nnsIihaoVZJDMvCPYEjyWc4MqB0QVzo= Subject key identifier: C7:42:76:78:C8:98:C2:75:55:20:ED:18:59:DE:26:9D:35:B4:E4:D5 Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272 Certificate serial: 019B4693FBAB9142940EDEF8AC715314F037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft Manifest number: 028C Signing time: Mon 22 Dec 2025 15:01:01 +0000 Manifest this update: Mon 22 Dec 2025 15:01:01 +0000 Manifest next update: Tue 23 Dec 2025 15:01:01 +0000 Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: woP09DVRAqli/EvPMhO/sxDcz9YBO3CBlGMxGms0LZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:fb:ab:91:42:94:0e:de:f8:ac:71:53:14:f0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272 Validity Not Before: Dec 22 15:01:01 2025 GMT Not After : Dec 23 15:01:01 2025 GMT Subject: CN=c7427678c898c2755520ed1859de269d35b4e4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:09:11:61:e3:67:cd:d8:2f:d6:8e:a2:4d: 17:a1:e8:7c:dd:2f:31:f0:e6:28:53:b1:31:bb:3f: 6f:4d:96:91:7f:5f:8c:30:b5:88:7c:dc:12:de:fc: 76:8f:51:dc:e3:d2:46:02:f0:66:a3:0c:be:fe:04: 1b:e8:fd:4e:41:12:b0:66:3a:a0:70:fc:76:05:b4: 91:ae:a5:f4:0c:88:20:0a:50:c0:fd:1a:ab:ce:61: 87:8b:c8:6d:05:fc:f5:cd:6f:7c:7e:ab:ed:6c:dc: 53:47:7c:99:d7:44:05:93:60:d2:19:ac:a4:2a:e4: 9d:7d:b8:05:8e:1f:36:04:81:37:de:6b:14:25:75: 2d:e1:20:94:9c:2f:5e:99:79:e9:dc:3a:9d:f8:d4: 00:55:eb:b4:35:28:6a:bc:a1:ab:12:b7:5a:39:61: eb:4d:9e:a0:66:48:a6:cf:c4:06:66:d1:a6:40:0e: 05:8e:44:6c:bf:f9:0d:47:33:36:4b:ed:8d:76:68: aa:eb:a5:0b:84:15:09:19:87:a3:ac:dd:27:33:0d: ec:e8:23:d2:ac:29:7e:4f:1f:03:ee:ab:84:34:ba: 4c:5c:53:dd:27:a0:a8:1c:bc:56:46:a6:99:e8:38: 65:dd:02:56:f0:b0:5b:98:ed:7f:c7:37:a2:cd:c7: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:42:76:78:C8:98:C2:75:55:20:ED:18:59:DE:26:9D:35:B4:E4:D5 X509v3 Authority Key Identifier: keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:28:4b:d2:11:70:9a:9f:6e:f6:80:8f:e2:b8:20:48:43:3e: 16:0c:3f:0a:a0:62:74:44:38:f5:0e:94:c9:a6:08:4c:80:be: b8:ad:dc:2c:e3:27:3b:5b:03:d8:93:b6:cf:0d:c4:bf:cf:e8: 68:a6:27:5c:af:f2:a8:61:18:84:f2:e1:43:d7:14:bf:38:d8: ba:bd:43:46:48:f8:65:07:86:c9:dd:fd:0e:56:4f:1b:dc:35: 7d:de:da:88:f4:a5:64:b6:fd:d1:ae:e6:a1:86:09:ce:a7:50: 6a:1a:ca:e6:53:5f:e7:32:e3:7b:82:a2:02:c7:7e:0c:2f:0a: eb:b5:66:29:95:ad:9a:9f:7c:8c:c2:8b:47:2c:f6:f7:c7:61: 2a:ea:28:c5:7f:eb:0e:4e:ab:1a:12:71:de:7d:48:3a:58:c7: 30:47:42:71:aa:77:f1:5a:c6:d7:0f:67:46:83:67:0b:c1:25: c7:17:aa:41:01:ca:f9:ab:59:b3:03:11:e5:f7:8b:e3:73:4e: f5:29:69:1e:52:1b:39:64:f4:92:30:a9:91:bb:b1:0e:75:bc: 3a:38:d5:13:8a:1a:8b:57:f7:ca:48:f7:52:9c:bf:9c:e2:ec: 57:0b:2a:36:ef:9e:55:93:ea:55:9a:40:e3:aa:3e:65:00:0e: c5:2e:bf:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk/urkUKUDt74rHFTFPA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2I0MzZhZjY0ZjhkMDZkMmNjMTkyZDA0ODAwY2IyNTYy ODQyNzIwHhcNMjUxMjIyMTUwMTAxWhcNMjUxMjIzMTUwMTAxWjAzMTEwLwYDVQQD EyhjNzQyNzY3OGM4OThjMjc1NTUyMGVkMTg1OWRlMjY5ZDM1YjRlNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8wJEWHjZ83YL9aOok0Xoeh83S8x 8OYoU7Exuz9vTZaRf1+MMLWIfNwS3vx2j1Hc49JGAvBmowy+/gQb6P1OQRKwZjqg cPx2BbSRrqX0DIggClDA/RqrzmGHi8htBfz1zW98fqvtbNxTR3yZ10QFk2DSGayk KuSdfbgFjh82BIE33msUJXUt4SCUnC9emXnp3Dqd+NQAVeu0NShqvKGrErdaOWHr TZ6gZkimz8QGZtGmQA4FjkRsv/kNRzM2S+2Ndmiq66ULhBUJGYejrN0nMw3s6CPS rCl+Tx8D7quENLpMXFPdJ6CoHLxWRqaZ6Dhl3QJW8LBbmO1/xzeizceKLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdCdnjImMJ1VSDtGFneJp01tOTVMB8GA1UdIwQY MBaAFBXLQ2r2T40G0swZLQSADLJWKEJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1Mjct MDljMmE2NjIwOGEzLzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1MjctMDljMmE2NjIwOGEz LzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxyhL0hFw mp9u9oCP4rggSEM+Fgw/CqBidEQ49Q6UyaYITIC+uK3cLOMnO1sD2JO2zw3Ev8/o aKYnXK/yqGEYhPLhQ9cUvzjYur1DRkj4ZQeGyd39DlZPG9w1fd7aiPSlZLb90a7m oYYJzqdQahrK5lNf5zLje4KiAsd+DC8K67VmKZWtmp98jMKLRyz298dhKuooxX/r Dk6rGhJx3n1IOljHMEdCcap38VrG1w9nRoNnC8ElxxeqQQHK+atZswMR5feL43NO 9SlpHlIbOWT0kjCpkbuxDnW8OjjVE4oai1f3ykj3Upy/nOLsVwsqNu+eVZPqVZpA 46o+ZQAOxS6/kQ== -----END CERTIFICATE-----Generated at Tue Dec 23 00:44:49 2025 by rpki-client