This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json) Hash identifier: lGH/2NvwQf3vfd18ov8pE1kzIXArZjxozcFdcIHTeNA= Subject key identifier: 55:04:0F:CD:9D:4B:EA:17:AC:4C:00:61:7D:94:9B:54:49:F7:9E:B7 Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b Certificate serial: 019B5B64402339E4962B325B07C444FDB601 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft Manifest number: 089F Signing time: Fri 26 Dec 2025 16:00:55 +0000 Manifest this update: Fri 26 Dec 2025 16:00:55 +0000 Manifest next update: Sat 27 Dec 2025 16:00:55 +0000 Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: GlyMIeYUvN5AKZnksftNpXpG5UKvYURpZtxLKlY7sTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:40:23:39:e4:96:2b:32:5b:07:c4:44:fd:b6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b Validity Not Before: Dec 26 16:00:55 2025 GMT Not After : Dec 27 16:00:55 2025 GMT Subject: CN=55040fcd9d4bea17ac4c00617d949b5449f79eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:a3:91:e8:2d:40:31:77:dc:7d:dc:35:04: 51:69:52:97:f9:98:19:12:cf:20:4e:da:3d:80:ed: 57:a0:d7:05:b2:35:95:c0:2f:22:da:a7:0f:12:2a: 4a:ba:6f:32:7b:1f:11:68:05:b1:58:1a:e1:cb:1b: a6:ab:8b:97:cb:01:82:59:74:e5:38:25:5d:5a:ed: f6:7e:cc:e9:68:a6:dd:a4:5f:c3:2e:74:c7:33:eb: 5c:65:64:b4:eb:3d:31:db:3c:cf:cf:d9:2f:e9:7f: c8:ee:6f:ab:4c:49:68:0a:b2:59:22:5d:d8:99:19: 8e:22:40:e3:a9:59:f1:87:9f:59:d4:70:5a:58:c3: 27:47:47:60:ab:81:c7:82:9e:e2:ce:a2:a9:91:ca: 31:f0:db:40:2f:89:26:a9:2f:a1:ae:a0:90:92:85: 0b:1e:9d:9a:b7:df:c5:48:9f:96:dc:fd:e0:c9:d4: 19:17:62:25:49:5d:e0:d8:e5:9f:7e:81:72:d4:70: 68:28:8b:41:40:bd:0a:47:01:74:1d:0d:14:75:3c: f4:0d:ea:39:b5:44:55:96:47:bf:11:61:c2:bf:da: 49:b5:81:b6:b2:bf:87:b0:d2:e9:40:af:dd:5b:d0: bd:27:92:d6:75:d7:3f:d2:5f:c5:0e:8a:98:60:b1: 0f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:04:0F:CD:9D:4B:EA:17:AC:4C:00:61:7D:94:9B:54:49:F7:9E:B7 X509v3 Authority Key Identifier: keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:37:ca:dd:db:0d:7a:91:54:7c:8a:ad:1e:08:d3:03:ef:1d: 5f:45:e9:fe:0f:36:0e:4a:5d:e7:fd:39:7f:45:e7:1c:c9:db: 3d:40:7f:e3:b1:e3:04:52:c5:ae:bf:09:6c:3b:9e:95:19:6a: 22:59:59:51:6c:78:b8:06:4b:a3:82:af:cd:1d:a5:d2:4f:ef: 27:cc:c0:cc:cf:2a:18:a0:dd:52:cf:e9:35:db:68:1b:04:0d: db:5f:69:89:72:37:71:1e:31:c0:c6:ac:31:89:0c:99:18:6f: 6d:3a:e6:5b:98:64:3b:20:35:d6:bd:cf:b3:8d:a0:4c:cb:ba: 7d:da:7d:75:4d:14:c7:e1:38:05:ef:9a:ab:40:27:53:ed:e1: ab:ba:f3:08:cb:22:d6:1c:f1:8e:21:34:2d:98:12:09:40:19: a0:c4:02:95:93:79:0b:7c:6e:8d:0b:57:5b:f9:2e:d4:a5:b0: e4:c5:7f:94:3d:c0:bd:c7:9b:c9:06:78:a4:3c:ef:76:0a:7f: 7a:90:1b:88:22:8a:f8:8f:29:f2:5d:68:78:42:01:cd:73:8a: a0:1e:3f:6e:34:e2:7d:22:f7:d1:00:d3:f1:1f:bf:ae:c8:79: 8e:d6:ad:24:2d:fc:d8:85:29:0c:e0:a0:32:ad:16:eb:4c:5a: 52:cc:2b:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZEAjOeSWKzJbB8RE/bYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjVlYzhlZTc5MmJiNWQwYTNjYzcwOWFkY2FlOWI2ODVh OWRlNWIwHhcNMjUxMjI2MTYwMDU1WhcNMjUxMjI3MTYwMDU1WjAzMTEwLwYDVQQD Eyg1NTA0MGZjZDlkNGJlYTE3YWM0YzAwNjE3ZDk0OWI1NDQ5Zjc5ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwujkegtQDF33H3cNQRRaVKX+ZgZ Es8gTto9gO1XoNcFsjWVwC8i2qcPEipKum8yex8RaAWxWBrhyxumq4uXywGCWXTl OCVdWu32fszpaKbdpF/DLnTHM+tcZWS06z0x2zzPz9kv6X/I7m+rTEloCrJZIl3Y mRmOIkDjqVnxh59Z1HBaWMMnR0dgq4HHgp7izqKpkcox8NtAL4kmqS+hrqCQkoUL Hp2at9/FSJ+W3P3gydQZF2IlSV3g2OWffoFy1HBoKItBQL0KRwF0HQ0UdTz0Deo5 tURVlke/EWHCv9pJtYG2sr+HsNLpQK/dW9C9J5LWddc/0l/FDoqYYLEPdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUED82dS+oXrEwAYX2Um1RJ9563MB8GA1UdIwQY MBaAFHxl7I7nkrtdCjzHCa3K6baFqd5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NzNlNjktNTUwZS00NGE5LWEwY2Yt NjNiOTUwYWEzZTFkLzEvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NzNlNjktNTUwZS00NGE5LWEwY2YtNjNiOTUwYWEzZTFk LzEvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjfK3dsN epFUfIqtHgjTA+8dX0Xp/g82Dkpd5/05f0XnHMnbPUB/47HjBFLFrr8JbDuelRlq IllZUWx4uAZLo4KvzR2l0k/vJ8zAzM8qGKDdUs/pNdtoGwQN219piXI3cR4xwMas MYkMmRhvbTrmW5hkOyA11r3Ps42gTMu6fdp9dU0Ux+E4Be+aq0AnU+3hq7rzCMsi 1hzxjiE0LZgSCUAZoMQClZN5C3xujQtXW/ku1KWw5MV/lD3AvcebyQZ4pDzvdgp/ epAbiCKK+I8p8l1oeEIBzXOKoB4/bjTifSL30QDT8R+/rsh5jtatJC382IUpDOCg Mq0W60xaUswr+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 23:10:13 2025 by rpki-client