This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft File: Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json) Hash identifier: 4FJNt3OBLZdmd1LD8aB9NWKq5IBYRgA/AkSA9zjHblY= Subject key identifier: 3A:7A:92:87:86:26:87:D8:6C:93:82:1E:8F:11:21:28:1A:1F:4A:56 Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07 Certificate issuer: /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307 Certificate serial: 019B3420012381F6BD4C42EA78592C01079C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft Manifest number: 1050 Signing time: Fri 19 Dec 2025 01:01:11 +0000 Manifest this update: Fri 19 Dec 2025 01:01:11 +0000 Manifest next update: Sat 20 Dec 2025 01:01:11 +0000 Files and hashes: 1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: PoxhK9BhmFatTKLioE7RgYij22HFhfKAtzRpARNWPjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:01:23:81:f6:bd:4c:42:ea:78:59:2c:01:07:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307 Validity Not Before: Dec 19 01:01:11 2025 GMT Not After : Dec 20 01:01:11 2025 GMT Subject: CN=3a7a9287862687d86c93821e8f1121281a1f4a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:3c:1f:27:e3:2c:79:08:1f:6a:79:02:b8: dd:2e:41:2d:6e:42:3a:79:4f:ca:cb:6c:19:0c:88: f0:81:b2:49:2d:69:32:00:39:44:d4:a9:ec:ed:e3: 79:30:7e:3b:0d:cb:16:8f:ee:b9:46:db:3e:65:eb: 99:91:fa:ec:07:0e:71:0b:bf:9e:74:d5:a0:8d:4e: 49:6c:d7:d3:38:a4:87:f9:4f:97:be:0a:95:b1:fd: 62:10:4f:c3:cc:29:a4:62:fc:d5:a8:dd:08:cf:d8: 65:5d:0f:66:8f:28:b1:80:86:77:bb:d2:ae:b6:22: 5c:3d:aa:85:a0:c2:a6:d8:b9:c5:83:93:9d:d9:c5: be:99:93:19:df:12:b9:86:3f:62:e2:ab:4c:ad:0f: e7:1e:8c:01:70:3c:00:92:c3:30:14:46:ff:dc:cf: ec:e6:f4:90:0e:a3:3c:8c:4b:1f:49:a6:53:68:99: 22:7b:63:7b:99:3d:4b:54:cf:49:a5:e9:c9:77:ef: 8d:55:4b:34:a1:00:30:08:a7:79:a6:5f:10:d7:8e: 95:8c:a1:42:03:87:5f:1e:0d:97:ae:3d:72:b2:7a: ac:e5:72:14:4c:74:87:fe:4c:0e:5a:07:61:62:f7: 86:e6:05:31:da:1a:83:ee:72:96:bd:2c:3b:a1:75: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7A:92:87:86:26:87:D8:6C:93:82:1E:8F:11:21:28:1A:1F:4A:56 X509v3 Authority Key Identifier: keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f5:1d:fc:84:af:02:4a:6f:30:fa:12:40:01:5f:78:ab:78: ea:fb:25:88:af:fb:01:05:bf:d6:02:8c:4c:48:a4:f4:cf:95: dd:2a:b0:40:24:24:2f:15:00:c5:16:cf:14:f6:b3:89:d0:52: f0:12:50:43:81:fc:9a:89:b3:a1:c4:db:ab:3a:90:09:a7:17: 16:10:b3:8f:df:97:2c:a4:83:5b:8f:fd:48:a9:27:bd:97:95: 25:61:42:60:29:b8:ec:d0:16:9e:33:47:bd:86:a5:31:d1:56: 9c:da:a8:b7:3b:0e:39:91:ca:5f:4e:86:57:eb:3f:f4:07:ef: 43:dc:3e:b4:7a:ee:4f:61:1d:d1:2c:1d:18:3e:78:67:73:d2: aa:e6:0e:df:0d:4d:4a:84:db:81:c3:15:a8:e8:85:6e:0d:af: f5:8f:97:d7:64:41:0f:fc:3a:0a:ef:15:40:25:71:0a:f8:67: e3:c4:73:7a:d2:53:0f:31:2a:b8:d5:30:c1:23:1c:b8:e4:fb: 40:e2:57:38:5a:19:09:e8:30:2f:50:0d:d4:42:fa:e5:ce:8e: 36:2d:37:c8:16:88:96:8e:ac:6e:93:13:1a:d7:d2:f5:ca:10: 7d:fc:3e:45:84:79:02:ac:2b:35:3b:e8:0e:0a:b0:85:23:93: f9:04:6e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IAEjgfa9TELqeFksAQecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZDdiNWZkMmIyOWM2Njg1ZDdhZTI3NmFkZTcwNGI1ODY2 YzczMDcwHhcNMjUxMjE5MDEwMTExWhcNMjUxMjIwMDEwMTExWjAzMTEwLwYDVQQD EygzYTdhOTI4Nzg2MjY4N2Q4NmM5MzgyMWU4ZjExMjEyODFhMWY0YTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaA8HyfjLHkIH2p5ArjdLkEtbkI6 eU/Ky2wZDIjwgbJJLWkyADlE1Kns7eN5MH47DcsWj+65Rts+ZeuZkfrsBw5xC7+e dNWgjU5JbNfTOKSH+U+XvgqVsf1iEE/DzCmkYvzVqN0Iz9hlXQ9mjyixgIZ3u9Ku tiJcPaqFoMKm2LnFg5Od2cW+mZMZ3xK5hj9i4qtMrQ/nHowBcDwAksMwFEb/3M/s 5vSQDqM8jEsfSaZTaJkie2N7mT1LVM9JpenJd++NVUs0oQAwCKd5pl8Q146VjKFC A4dfHg2Xrj1ysnqs5XIUTHSH/kwOWgdhYveG5gUx2hqD7nKWvSw7oXVJvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp6koeGJofYbJOCHo8RISgaH0pWMB8GA1UdIwQY MBaAFBXXtf0rKcZoXXridq3nBLWGbHMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEt OWM3MTY3ZDgyZjU2LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEtOWM3MTY3ZDgyZjU2 LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPUd/ISv AkpvMPoSQAFfeKt46vsliK/7AQW/1gKMTEik9M+V3SqwQCQkLxUAxRbPFPazidBS 8BJQQ4H8momzocTbqzqQCacXFhCzj9+XLKSDW4/9SKknvZeVJWFCYCm47NAWnjNH vYalMdFWnNqotzsOOZHKX06GV+s/9AfvQ9w+tHruT2Ed0SwdGD54Z3PSquYO3w1N SoTbgcMVqOiFbg2v9Y+X12RBD/w6Cu8VQCVxCvhn48RzetJTDzEquNUwwSMcuOT7 QOJXOFoZCegwL1AN1EL65c6ONi03yBaIlo6sbpMTGtfS9coQffw+RYR5AqwrNTvo DgqwhSOT+QRuhw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:59:06 2025 by rpki-client