This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json) Hash identifier: RKctl7NSG79HTrkSeDpljupeIfR3xAAIrnHp8BlRrOs= Subject key identifier: 13:C2:2D:8A:A3:B8:5F:49:E3:36:39:7A:4F:F7:C2:A2:B9:02:86:F0 Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Certificate serial: 019B3AFE1160D349BB47E060548F8E522EA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft Manifest number: 12CC Signing time: Sat 20 Dec 2025 09:01:27 +0000 Manifest this update: Sat 20 Dec 2025 09:01:27 +0000 Manifest next update: Sun 21 Dec 2025 09:01:27 +0000 Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: WCDAFB0Zuk3jZ10hT5S/IPXM7rtYm+ImOuIJuhssvFc=) 2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=) 3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:11:60:d3:49:bb:47:e0:60:54:8f:8e:52:2e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Validity Not Before: Dec 20 09:01:27 2025 GMT Not After : Dec 21 09:01:27 2025 GMT Subject: CN=13c22d8aa3b85f49e336397a4ff7c2a2b90286f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:f3:24:5e:fb:17:c0:29:be:18:b3:2d:ee: 98:3c:79:d5:7d:9d:77:5d:bd:37:92:7d:74:94:22: 78:c1:5e:55:ea:34:34:ef:ea:a5:e3:ca:91:27:e9: df:c2:68:58:04:e5:99:12:11:cd:48:bf:81:cd:60: 94:5d:a1:5d:ae:6f:91:79:e9:64:73:cb:bc:92:41: 91:8d:62:f0:10:a9:05:db:86:df:f5:7e:c9:00:27: c3:0d:bb:1c:31:a6:57:bc:1d:d9:75:d2:03:56:d3: 67:2a:f1:9f:4e:34:e9:40:72:46:c3:59:3d:f0:67: 3d:ce:57:c7:e6:04:22:2b:f0:f8:3b:ed:69:fb:38: 64:ab:d8:46:51:40:2d:c3:56:e0:27:09:6e:5c:e3: 45:66:b9:d9:4b:90:c9:5d:a7:cb:54:d4:8c:bc:08: 46:91:eb:24:23:d0:c6:bb:90:de:a7:af:6e:d6:72: c0:d1:a1:65:84:cf:43:ff:b9:b5:7c:5b:fa:14:78: d3:91:0c:b0:86:2e:6c:5a:72:86:97:be:11:d1:3a: 3a:89:e3:1d:7f:ca:f5:c8:5a:76:cb:94:29:c3:a1: a4:e6:e7:32:81:fd:62:66:be:1e:d9:1e:c1:29:26: a4:a7:a7:d5:49:6d:e6:92:c2:c7:9b:e4:00:5b:1a: 03:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C2:2D:8A:A3:B8:5F:49:E3:36:39:7A:4F:F7:C2:A2:B9:02:86:F0 X509v3 Authority Key Identifier: keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:98:7f:6b:57:b9:98:78:89:39:80:4b:42:5a:40:b0:c5:d4: 4d:79:b3:30:af:be:16:35:45:f0:61:0e:0e:2b:ee:15:32:4f: af:01:19:df:8b:94:8c:17:3c:44:5d:f0:69:a2:a1:bc:6a:e5: 11:ce:11:d7:ca:36:d4:f5:4d:4b:43:8b:61:a3:b2:9d:1a:af: 03:00:5d:88:3d:35:b2:5a:fb:c6:2c:3e:fa:54:6b:fc:14:99: 67:92:5f:3a:f5:a9:dc:e8:22:61:20:07:a2:9d:1b:f3:df:6e: 00:80:11:c6:8d:f3:64:01:ba:d8:6d:29:ae:4e:6e:b6:68:74: 05:1d:0e:c9:46:99:9c:c2:42:a9:6e:9a:9c:0c:a0:46:8e:24: 7a:0b:7f:ff:a6:13:10:dc:4c:12:d5:3a:75:2f:c6:59:3f:9a: c7:a5:95:b7:99:8b:87:b5:74:db:11:cb:1b:9b:75:13:1b:3e: 0c:30:ee:b4:6d:36:e4:c7:f0:be:4e:e6:11:fb:79:5f:e9:01: c5:f1:80:fc:47:24:5a:a4:67:23:09:d5:46:e0:f8:01:f1:f1: a1:15:49:e6:82:bf:90:6e:ad:cc:32:e9:b8:6d:64:8b:58:5e: c2:5e:a3:4f:83:55:f5:2f:65:ca:53:e7:60:52:4d:2c:ea:fb: 0f:58:af:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/hFg00m7R+BgVI+OUi6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw ZGQ0OGQwHhcNMjUxMjIwMDkwMTI3WhcNMjUxMjIxMDkwMTI3WjAzMTEwLwYDVQQD EygxM2MyMmQ4YWEzYjg1ZjQ5ZTMzNjM5N2E0ZmY3YzJhMmI5MDI4NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR/zJF77F8ApvhizLe6YPHnVfZ13 Xb03kn10lCJ4wV5V6jQ07+ql48qRJ+nfwmhYBOWZEhHNSL+BzWCUXaFdrm+Reelk c8u8kkGRjWLwEKkF24bf9X7JACfDDbscMaZXvB3ZddIDVtNnKvGfTjTpQHJGw1k9 8Gc9zlfH5gQiK/D4O+1p+zhkq9hGUUAtw1bgJwluXONFZrnZS5DJXafLVNSMvAhG keskI9DGu5Dep69u1nLA0aFlhM9D/7m1fFv6FHjTkQywhi5sWnKGl74R0To6ieMd f8r1yFp2y5Qpw6Gk5ucygf1iZr4e2R7BKSakp6fVSW3mksLHm+QAWxoDswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPCLYqjuF9J4zY5ek/3wqK5AobwMB8GA1UdIwQY MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt NThlZWZjZDY1MmQ4LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4 LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGph/a1e5 mHiJOYBLQlpAsMXUTXmzMK++FjVF8GEODivuFTJPrwEZ34uUjBc8RF3waaKhvGrl Ec4R18o21PVNS0OLYaOynRqvAwBdiD01slr7xiw++lRr/BSZZ5JfOvWp3OgiYSAH op0b899uAIARxo3zZAG62G0prk5utmh0BR0OyUaZnMJCqW6anAygRo4kegt//6YT ENxMEtU6dS/GWT+ax6WVt5mLh7V02xHLG5t1Exs+DDDutG025Mfwvk7mEft5X+kB xfGA/EckWqRnIwnVRuD4AfHxoRVJ5oK/kG6tzDLpuG1ki1hewl6jT4NV9S9lylPn YFJNLOr7D1ivfg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:32 2025 by rpki-client