This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json) Hash identifier: 7jC0TycOJczDrxDCdy+CiUV8/riPj7TEqPkWngZWJPk= Subject key identifier: DF:ED:FF:B2:A3:FF:94:F4:A6:1F:C5:62:A6:68:AA:78:92:8A:74:97 Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58 Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58 Certificate serial: 019B2FD5ABAC60EEB537C375D63FAD411D09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft Manifest number: 1658 Signing time: Thu 18 Dec 2025 05:01:30 +0000 Manifest this update: Thu 18 Dec 2025 05:01:30 +0000 Manifest next update: Fri 19 Dec 2025 05:01:30 +0000 Files and hashes: 1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=) 2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: UeNV+I6k0Lp8W3I8J37C3ZGehapNQ0z6y8kxR+i7tS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:ab:ac:60:ee:b5:37:c3:75:d6:3f:ad:41:1d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58 Validity Not Before: Dec 18 05:01:30 2025 GMT Not After : Dec 19 05:01:30 2025 GMT Subject: CN=dfedffb2a3ff94f4a61fc562a668aa78928a7497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:f3:51:72:29:36:df:67:92:f0:78:d5:d5: 60:4b:50:dc:90:5f:a7:3c:27:54:d7:c1:8b:8d:13: 95:f0:81:8a:82:b5:0d:04:f1:cb:f3:c0:e1:35:5a: 2c:ee:6c:8e:de:ae:ff:a0:13:17:98:fd:7a:12:3e: 25:c3:90:e8:42:00:52:1e:f9:c9:74:87:e6:fc:f2: c9:5f:ee:85:c0:02:cc:cc:7f:05:83:b5:78:82:47: a5:76:c0:2a:4b:5d:47:38:c2:7c:f5:46:be:12:4c: d8:a3:9e:42:c9:e4:86:ba:fc:79:24:75:1b:37:29: db:e4:b2:9a:b1:63:ea:b2:61:52:8d:75:0e:c5:6e: 54:d2:9c:82:61:05:f7:0c:74:69:46:f0:46:bc:05: c3:9f:6a:09:eb:21:cc:74:e2:87:ad:f1:da:90:35: 0a:5e:18:b0:5d:1a:f0:09:ac:b6:aa:ce:dd:d6:7d: 86:10:b6:eb:b8:c9:19:a4:e5:cf:b6:0e:3c:b3:df: 8d:57:bf:b9:37:a1:b6:c5:77:ee:b9:3a:bd:a3:47: a7:f1:f6:26:75:77:bc:71:eb:e7:ef:d6:96:2d:9a: e0:cb:c0:f1:65:58:23:f0:0c:46:aa:95:a7:71:48: 78:32:a6:e2:6a:45:6b:a0:11:7f:b0:f2:a0:57:19: 0d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:ED:FF:B2:A3:FF:94:F4:A6:1F:C5:62:A6:68:AA:78:92:8A:74:97 X509v3 Authority Key Identifier: keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1c:be:2a:fd:c9:5c:e1:e3:9f:fc:59:a9:5d:43:f3:58:e0: 15:42:8d:74:8d:c2:51:26:3c:53:30:ca:04:88:f0:1d:3b:62: 4d:af:57:a3:97:45:65:96:85:cb:34:f9:03:c5:a9:de:7c:71: 44:d8:e0:c9:96:53:60:05:51:1a:c1:ef:d9:59:1e:d9:43:d7: 03:26:f7:b8:38:35:a7:98:7a:83:2a:d8:38:80:de:90:5d:7a: 62:47:ce:69:69:fd:12:ca:32:7f:41:74:b5:4b:52:ea:b7:4a: 34:f0:cc:64:2f:5a:e5:97:b8:49:3d:e2:da:28:8e:f3:17:71: 7d:bc:33:ff:06:64:f3:4b:2d:34:5e:80:6d:9d:64:3e:e8:59: 28:05:19:00:a8:d3:3e:44:78:80:14:18:d4:f1:c7:01:58:1b: be:fa:cf:ea:c4:c7:dc:70:d0:4c:6f:83:a5:12:c3:64:a5:f3: 51:b9:5a:b7:f1:2f:05:10:db:98:f7:95:02:d8:59:b5:55:ec: dd:43:d2:c8:f4:3d:78:d4:1f:57:a4:89:85:25:b4:56:79:4b: ce:6d:d6:00:59:9e:f6:da:3e:61:73:6a:09:6d:3f:cf:61:09: 01:74:38:6e:d5:1d:bb:85:25:2c:04:5a:ed:2e:fc:03:fd:46: db:97:72:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1ausYO61N8N11j+tQR0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDljMjRkYWUzZWVmZmNiZWZhMzdhNjg4NjY0YWM5MzMw MGVmNTgwHhcNMjUxMjE4MDUwMTMwWhcNMjUxMjE5MDUwMTMwWjAzMTEwLwYDVQQD EyhkZmVkZmZiMmEzZmY5NGY0YTYxZmM1NjJhNjY4YWE3ODkyOGE3NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx3zUXIpNt9nkvB41dVgS1DckF+n PCdU18GLjROV8IGKgrUNBPHL88DhNVos7myO3q7/oBMXmP16Ej4lw5DoQgBSHvnJ dIfm/PLJX+6FwALMzH8Fg7V4gkeldsAqS11HOMJ89Ua+EkzYo55CyeSGuvx5JHUb Nynb5LKasWPqsmFSjXUOxW5U0pyCYQX3DHRpRvBGvAXDn2oJ6yHMdOKHrfHakDUK XhiwXRrwCay2qs7d1n2GELbruMkZpOXPtg48s9+NV7+5N6G2xXfuuTq9o0en8fYm dXe8cevn79aWLZrgy8DxZVgj8AxGqpWncUh4MqbiakVroBF/sPKgVxkNtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/t/7Kj/5T0ph/FYqZoqniSinSXMB8GA1UdIwQY MBaAFBYJwk2uPu/8vvo3pohmSskzAO9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjIt YmY0Yjc1ZTIwMGE3LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjItYmY0Yjc1ZTIwMGE3 LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBy+Kv3J XOHjn/xZqV1D81jgFUKNdI3CUSY8UzDKBIjwHTtiTa9Xo5dFZZaFyzT5A8Wp3nxx RNjgyZZTYAVRGsHv2Vke2UPXAyb3uDg1p5h6gyrYOIDekF16YkfOaWn9Esoyf0F0 tUtS6rdKNPDMZC9a5Ze4ST3i2iiO8xdxfbwz/wZk80stNF6AbZ1kPuhZKAUZAKjT PkR4gBQY1PHHAVgbvvrP6sTH3HDQTG+DpRLDZKXzUblat/EvBRDbmPeVAthZtVXs 3UPSyPQ9eNQfV6SJhSW0VnlLzm3WAFme9to+YXNqCW0/z2EJAXQ4btUdu4UlLARa 7S78A/1G25dyzw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:48:39 2025 by rpki-client