This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft File: fAMRalBjzm8X_OpTUcneSgxosN0.mft (raw, json) Hash identifier: Fw1cdApEoIbRt57GGlCzYndwOn/ifHZ81Vpzqxx5VAs= Subject key identifier: 37:2A:C8:60:52:86:87:86:67:F7:C8:A1:EE:20:59:55:4F:D0:DD:94 Authority key identifier: 7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD Certificate issuer: /CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd Certificate serial: 019B3E6CF48632DE26E3C4CC8E4476131ECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft Manifest number: 0C40 Signing time: Sun 21 Dec 2025 01:01:26 +0000 Manifest this update: Sun 21 Dec 2025 01:01:26 +0000 Manifest next update: Mon 22 Dec 2025 01:01:26 +0000 Files and hashes: 1: fAMRalBjzm8X_OpTUcneSgxosN0.crl (hash: ljkAZGdEtifckZI0Sp8rYDupGec57bcRX+7GNg5Bg6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:f4:86:32:de:26:e3:c4:cc:8e:44:76:13:1e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd Validity Not Before: Dec 21 01:01:26 2025 GMT Not After : Dec 22 01:01:26 2025 GMT Subject: CN=372ac8605286878667f7c8a1ee2059554fd0dd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9c:c8:09:82:fc:97:a7:84:4a:fb:5c:e6:a3: 1d:56:a3:50:26:33:b9:53:7e:3c:d1:a0:1e:af:6f: 29:e3:6d:7d:dd:11:02:0c:cc:f2:74:da:49:a9:85: 79:63:8f:4f:29:0f:20:3f:61:c7:16:e5:f0:da:3b: b8:fb:95:29:7b:70:6b:7f:8b:a0:53:6b:5d:33:87: fb:f2:f7:7f:1d:c3:c4:fe:bf:17:4a:43:31:11:86: fd:27:30:95:20:c0:19:d1:b2:b0:49:ee:77:21:e3: 4f:26:e3:aa:91:3a:1e:41:d8:08:93:78:f6:92:72: 47:37:f9:93:68:34:35:d2:56:1b:e3:77:6b:1a:16: 88:97:63:39:ac:ad:55:98:83:06:6d:4d:88:30:08: 47:5b:8f:6e:e0:b0:4a:7f:76:cf:94:2f:df:e4:ca: 90:5f:d9:7a:83:4b:10:a8:3a:a8:55:5b:a7:9c:47: 04:7d:af:2d:d3:2c:b6:e3:26:2c:b7:ed:c0:35:1e: fd:47:6a:cf:bd:a2:e8:82:db:59:86:a7:25:96:a2: f7:7e:fe:38:c4:82:c3:31:98:cd:c3:f8:02:b8:17: 7a:62:b9:37:3c:be:f6:b7:a2:b5:a6:4a:ae:db:7e: 49:14:b6:b5:7a:25:fe:72:46:69:c5:61:c9:4b:7f: 42:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2A:C8:60:52:86:87:86:67:F7:C8:A1:EE:20:59:55:4F:D0:DD:94 X509v3 Authority Key Identifier: keyid:7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:36:3d:e0:97:b8:a7:d1:8c:de:a4:45:6e:a1:8b:5f:68:e4: 73:bf:9b:fc:e8:a0:45:91:4b:7e:41:18:dd:66:64:10:0b:f4: 8c:15:1b:c3:77:59:85:38:d9:31:b1:c7:ee:75:f3:87:f2:03: 9f:93:4e:ef:90:a2:40:9a:78:b2:ea:74:6f:f1:7f:c5:7f:74: 80:5e:25:5f:a8:85:da:16:98:d6:f2:d7:58:b0:e8:6c:fe:c9: a2:2f:6a:06:f0:a8:73:39:47:8b:bf:68:6e:28:7e:e9:4d:6d: ea:fd:8b:eb:24:ac:32:e2:b3:41:a7:5e:74:a1:42:5c:4d:0e: b0:6c:1f:14:99:6c:c6:91:53:da:2b:1a:40:51:75:76:53:a0: 78:2b:29:97:f6:9f:a4:26:4a:91:9e:39:9f:88:49:c7:b0:1a: c9:db:92:22:46:67:91:ca:46:17:81:a5:f2:af:5b:ae:e9:c4: 53:61:cb:30:29:3d:31:6d:0f:bf:7c:7b:c4:c6:85:07:25:37: 45:ac:bf:dc:43:34:5a:22:51:7e:c9:67:17:d3:0c:af:05:dd: 3b:c3:5e:86:07:4f:51:5f:e5:59:2e:06:f3:c1:8b:f8:2e:a4: fa:a4:0c:ab:58:f0:bc:52:35:d4:8e:7a:6d:e3:f4:a4:cc:78: 70:93:ed:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bPSGMt4m48TMjkR2Ex7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMDMxMTZhNTA2M2NlNmYxN2ZjZWE1MzUxYzlkZTRhMGM2 OGIwZGQwHhcNMjUxMjIxMDEwMTI2WhcNMjUxMjIyMDEwMTI2WjAzMTEwLwYDVQQD EygzNzJhYzg2MDUyODY4Nzg2NjdmN2M4YTFlZTIwNTk1NTRmZDBkZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZzICYL8l6eESvtc5qMdVqNQJjO5 U3480aAer28p42193RECDMzydNpJqYV5Y49PKQ8gP2HHFuXw2ju4+5Upe3Brf4ug U2tdM4f78vd/HcPE/r8XSkMxEYb9JzCVIMAZ0bKwSe53IeNPJuOqkToeQdgIk3j2 knJHN/mTaDQ10lYb43drGhaIl2M5rK1VmIMGbU2IMAhHW49u4LBKf3bPlC/f5MqQ X9l6g0sQqDqoVVunnEcEfa8t0yy24yYst+3ANR79R2rPvaLogttZhqcllqL3fv44 xILDMZjNw/gCuBd6Yrk3PL72t6K1pkqu235JFLa1eiX+ckZpxWHJS39C1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcqyGBShoeGZ/fIoe4gWVVP0N2UMB8GA1UdIwQY MBaAFHwDEWpQY85vF/zqU1HJ3koMaLDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkFNUmFsQmp6bThYX09wVFVjbmVTZ3hvc04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YmRjNGQtMDg5OS00NzA5LTk0MjQt ODkxYjQ1NWMyYzUzLzEvZkFNUmFsQmp6bThYX09wVFVjbmVTZ3hvc04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80YmRjNGQtMDg5OS00NzA5LTk0MjQtODkxYjQ1NWMyYzUz LzEvZkFNUmFsQmp6bThYX09wVFVjbmVTZ3hvc04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzY94Je4 p9GM3qRFbqGLX2jkc7+b/OigRZFLfkEY3WZkEAv0jBUbw3dZhTjZMbHH7nXzh/ID n5NO75CiQJp4sup0b/F/xX90gF4lX6iF2haY1vLXWLDobP7Joi9qBvCoczlHi79o bih+6U1t6v2L6ySsMuKzQadedKFCXE0OsGwfFJlsxpFT2isaQFF1dlOgeCspl/af pCZKkZ45n4hJx7AayduSIkZnkcpGF4Gl8q9brunEU2HLMCk9MW0Pv3x7xMaFByU3 Ray/3EM0WiJRfslnF9MMrwXdO8NehgdPUV/lWS4G88GL+C6k+qQMq1jwvFI11I56 beP0pMx4cJPtwA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:51:08 2025 by rpki-client