This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json) Hash identifier: d/RKLGzl0fUafoytIr6wnURaTOuU+s0JRfxXkiRCl+E= Subject key identifier: 1E:5E:F4:BE:A3:D9:C1:AA:8F:3D:90:D8:AF:B2:97:3D:24:BD:E3:F9 Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5 Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5 Certificate serial: 019B45B854E4951100A17A25DAABDF9EEB55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft Manifest number: 0499 Signing time: Mon 22 Dec 2025 11:01:06 +0000 Manifest this update: Mon 22 Dec 2025 11:01:06 +0000 Manifest next update: Tue 23 Dec 2025 11:01:06 +0000 Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: gqx69KX17VYNud/hqofI++o+4YSNcN0AvzvQgRAD0ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:54:e4:95:11:00:a1:7a:25:da:ab:df:9e:eb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5 Validity Not Before: Dec 22 11:01:06 2025 GMT Not After : Dec 23 11:01:06 2025 GMT Subject: CN=1e5ef4bea3d9c1aa8f3d90d8afb2973d24bde3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:3a:a4:a3:a3:c3:d8:ec:78:e5:ad:30:17: 28:a6:c3:27:52:83:c3:a6:f9:ea:cf:32:10:d5:ca: f5:65:75:ca:06:42:fa:d9:86:ff:04:14:14:2f:8f: e8:4f:d7:4b:2e:77:0a:bb:78:13:f1:d4:02:78:91: 3e:ad:b1:79:1c:ce:92:89:0a:ca:1d:5b:95:8a:9c: 6a:d4:0c:8e:a7:7f:4b:b0:f6:ae:89:2d:25:00:6f: 86:f4:d1:9e:1f:5f:1e:c5:01:b3:bb:bd:5d:d6:c8: a8:10:24:d7:5c:7e:ae:ed:1d:9e:0e:12:8c:bc:c7: 86:0e:df:65:48:38:0f:04:f9:ea:ce:c3:fe:8e:8a: fb:e0:b6:7a:29:59:e2:4b:ff:fa:86:4b:a3:b5:86: 72:85:eb:ed:05:a5:40:41:70:88:40:5b:44:82:37: b4:ed:f0:ad:95:c2:b6:c7:92:0b:e9:b0:4b:5f:29: 9f:67:a0:e1:42:5c:ce:6c:f0:0a:7c:6d:cf:77:29: 93:28:f6:65:7e:ef:41:10:f9:e6:fa:ec:f7:62:2f: ae:72:8a:9e:2e:3b:78:33:98:ff:ae:e8:c4:58:3f: f5:9f:85:11:05:28:72:ed:26:55:5f:6f:0b:b9:a1: c5:57:9a:74:af:7e:b6:61:9c:b0:8b:31:1d:e8:5c: 05:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5E:F4:BE:A3:D9:C1:AA:8F:3D:90:D8:AF:B2:97:3D:24:BD:E3:F9 X509v3 Authority Key Identifier: keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8c:b8:12:e0:d2:ef:f6:1a:e8:01:93:d1:65:49:13:e9:95: 19:ec:99:8c:99:5f:6d:c0:a0:bd:d0:ca:40:cf:e9:b6:6b:ff: 61:59:1c:c4:3e:99:f7:17:f5:f2:7f:7e:2c:d4:47:f3:53:80: 8a:77:14:d9:1b:89:3f:81:0c:a5:07:d6:a0:70:ee:54:bd:fd: 3c:b5:7a:ef:83:73:cc:51:df:09:6a:10:e0:30:40:11:70:0d: 6d:37:5d:bc:fb:f4:13:9b:e0:99:56:4e:5e:f3:5f:50:d9:19: 51:6d:30:50:e2:28:bc:af:9e:55:c3:06:d6:21:42:df:fd:0b: fc:58:d9:64:b4:e7:7c:95:a7:c0:eb:6b:e2:ff:2d:88:4e:15: 58:bd:68:d1:fd:38:a9:8a:40:0b:03:b1:4b:7b:0d:38:c3:73: a9:ea:30:6d:59:dc:20:66:57:e3:55:11:9c:c1:42:04:e7:31: 0d:ca:c5:d1:6e:70:a7:45:2c:7d:9d:5d:27:e6:ee:e9:7c:35: f2:0c:c3:48:c5:db:a1:aa:a0:0a:e4:19:cf:57:d9:70:e1:02: 5a:88:6f:3a:34:b2:26:af:23:df:16:5a:3c:cf:7c:3c:fe:6b: 12:32:07:50:93:d0:1e:88:63:ad:f9:57:cb:28:4f:25:bc:90: 7b:ac:35:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuFTklREAoXol2qvfnutVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzU1ZGRkYTQxNDI0MDI2OWYwNWJmOGU4Y2Q3MDgxMzVk ZDdkZTUwHhcNMjUxMjIyMTEwMTA2WhcNMjUxMjIzMTEwMTA2WjAzMTEwLwYDVQQD EygxZTVlZjRiZWEzZDljMWFhOGYzZDkwZDhhZmIyOTczZDI0YmRlM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwQ6pKOjw9jseOWtMBcopsMnUoPD pvnqzzIQ1cr1ZXXKBkL62Yb/BBQUL4/oT9dLLncKu3gT8dQCeJE+rbF5HM6SiQrK HVuVipxq1AyOp39LsPauiS0lAG+G9NGeH18exQGzu71d1sioECTXXH6u7R2eDhKM vMeGDt9lSDgPBPnqzsP+jor74LZ6KVniS//6hkujtYZyhevtBaVAQXCIQFtEgje0 7fCtlcK2x5IL6bBLXymfZ6DhQlzObPAKfG3PdymTKPZlfu9BEPnm+uz3Yi+ucoqe Ljt4M5j/rujEWD/1n4URBShy7SZVX28LuaHFV5p0r362YZywizEd6FwFTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5e9L6j2cGqjz2Q2K+ylz0kveP5MB8GA1UdIwQY MBaAFH3FXd2kFCQCafBb+OjNcIE13X3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNWZDNhUVVKQUpwOEZ2NDZNMXdnVFhkZmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ODBmMjktZjYxNC00ZjAyLTkxZTAt NWQxNDNlNTZhZjY4LzEvZmNWZDNhUVVKQUpwOEZ2NDZNMXdnVFhkZmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ODBmMjktZjYxNC00ZjAyLTkxZTAtNWQxNDNlNTZhZjY4 LzEvZmNWZDNhUVVKQUpwOEZ2NDZNMXdnVFhkZmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYy4EuDS 7/Ya6AGT0WVJE+mVGeyZjJlfbcCgvdDKQM/ptmv/YVkcxD6Z9xf18n9+LNRH81OA incU2RuJP4EMpQfWoHDuVL39PLV674NzzFHfCWoQ4DBAEXANbTddvPv0E5vgmVZO XvNfUNkZUW0wUOIovK+eVcMG1iFC3/0L/FjZZLTnfJWnwOtr4v8tiE4VWL1o0f04 qYpACwOxS3sNOMNzqeowbVncIGZX41URnMFCBOcxDcrF0W5wp0UsfZ1dJ+bu6Xw1 8gzDSMXboaqgCuQZz1fZcOECWohvOjSyJq8j3xZaPM98PP5rEjIHUJPQHohjrflX yyhPJbyQe6w1WA== -----END CERTIFICATE-----Generated at Mon Dec 22 17:10:19 2025 by rpki-client