This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json) Hash identifier: wGoB5DJoqrkA7geUK9q3IaLVWFvcuaP9b8CTq7o7DWc= Subject key identifier: 4B:C8:21:9A:10:6D:EA:0F:04:6C:97:3F:EA:87:0C:1B:5C:FA:6A:B0 Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17 Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917 Certificate serial: 019B4249DD0B0E2465C2A62981CEE07FAF52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:01:35 +0000 Manifest this update: Sun 21 Dec 2025 19:01:35 +0000 Manifest next update: Mon 22 Dec 2025 19:01:35 +0000 Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: ysn+/96T2CWawQW17HnZFu7zQam33MNYsT2+J4j9D4k=) 2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:dd:0b:0e:24:65:c2:a6:29:81:ce:e0:7f:af:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917 Validity Not Before: Dec 21 19:01:35 2025 GMT Not After : Dec 22 19:01:35 2025 GMT Subject: CN=4bc8219a106dea0f046c973fea870c1b5cfa6ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:4e:60:f5:d7:77:96:a2:15:c2:fa:10:75: 23:fb:5a:24:17:a7:da:26:c4:d0:5a:2e:82:8e:b5: 2d:a5:31:0f:e4:72:24:bb:d9:09:fc:1c:38:68:87: 73:63:5b:1e:4c:b7:96:2a:a2:b7:95:32:b0:59:72: cb:9f:64:7e:19:df:e3:c7:cd:29:ba:05:9e:57:ee: 81:2f:0e:19:83:aa:d8:c4:d4:63:52:46:4a:16:13: 5f:00:ac:3d:61:c3:01:bc:9a:a0:42:40:75:1f:13: 6f:06:2a:36:81:f6:5e:84:d4:91:ec:f5:72:73:3c: 50:44:85:65:27:93:79:60:3a:ab:c2:39:4f:79:13: 18:5e:3e:e9:49:d4:f1:ed:00:e9:b3:50:70:93:ab: e0:ae:47:4a:e2:27:5f:ae:87:d4:d9:e7:5f:9e:85: 79:76:b0:6f:20:48:7e:a9:69:c6:90:f7:df:93:f4: ec:75:ce:c5:43:39:9a:6d:d3:85:0f:28:0d:ca:67: 7a:82:9f:74:d2:d9:0d:6c:59:b2:44:0c:95:36:1d: 5f:a7:d5:58:24:57:85:8c:26:33:21:da:8c:d4:00: b2:0b:05:ac:27:fd:ec:ba:6e:82:53:f0:ea:0b:34: 0b:36:3e:6c:58:7b:41:a4:a3:0c:44:f8:e7:10:08: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C8:21:9A:10:6D:EA:0F:04:6C:97:3F:EA:87:0C:1B:5C:FA:6A:B0 X509v3 Authority Key Identifier: keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6c:fa:f2:1e:07:31:a1:57:df:88:f4:26:d3:ae:f0:44:59: 6f:c1:84:d5:99:e7:3a:a7:18:f6:f7:dd:ae:04:57:ec:e9:cf: e8:0c:50:1f:0b:0f:9f:77:ca:e4:1f:62:3f:b4:f9:9c:3d:a0: 6e:87:d3:57:03:8b:e6:d1:8d:96:cb:9e:d3:d0:f4:5f:3e:d7: c5:75:0b:f9:66:cc:67:86:fc:30:8d:cf:64:0d:c8:b2:14:e5: f3:92:d6:f3:9a:41:8a:88:c6:bf:23:db:08:f3:e2:c5:98:f7: 3a:37:22:c5:ee:3a:bc:4c:6a:b8:e2:15:28:ec:8b:84:ea:91: 36:0c:f6:07:8e:dc:e1:e4:a0:49:b2:2f:4c:39:69:b5:24:82: 2b:37:80:51:20:de:1b:fe:33:f9:ca:4d:cd:4d:5d:be:9c:a4: 21:d5:4d:5a:fa:fa:c8:03:10:17:cd:da:88:20:26:ed:f2:1e: d9:68:44:41:ce:c4:ba:1a:5f:75:33:c5:9d:d0:9b:94:90:2a: 8a:04:d9:c3:89:57:67:39:be:be:32:08:5b:57:7e:45:39:da: 0d:22:a1:4f:42:3d:76:dc:ae:a7:7e:73:d1:70:1f:45:8f:4d: 5c:f1:e5:1d:26:e8:d2:29:5e:29:75:7e:80:00:08:a1:85:09: c7:90:10:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSd0LDiRlwqYpgc7gf69SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MmZlZGIwMjVhNmNiZDI0ODY4NDE5YTBjYjU2MjlkNDg2 MzU5MTcwHhcNMjUxMjIxMTkwMTM1WhcNMjUxMjIyMTkwMTM1WjAzMTEwLwYDVQQD Eyg0YmM4MjE5YTEwNmRlYTBmMDQ2Yzk3M2ZlYTg3MGMxYjVjZmE2YWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibZOYPXXd5aiFcL6EHUj+1okF6fa JsTQWi6CjrUtpTEP5HIku9kJ/Bw4aIdzY1seTLeWKqK3lTKwWXLLn2R+Gd/jx80p ugWeV+6BLw4Zg6rYxNRjUkZKFhNfAKw9YcMBvJqgQkB1HxNvBio2gfZehNSR7PVy czxQRIVlJ5N5YDqrwjlPeRMYXj7pSdTx7QDps1Bwk6vgrkdK4idfrofU2edfnoV5 drBvIEh+qWnGkPffk/Tsdc7FQzmabdOFDygNymd6gp900tkNbFmyRAyVNh1fp9VY JFeFjCYzIdqM1ACyCwWsJ/3sum6CU/DqCzQLNj5sWHtBpKMMRPjnEAhl4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvIIZoQbeoPBGyXP+qHDBtc+mqwMB8GA1UdIwQY MBaAFBUv7bAlpsvSSGhBmgy1Yp1IY1kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmIt MWEyMTIxOWU5MTAwLzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmItMWEyMTIxOWU5MTAw LzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGz68h4H MaFX34j0JtOu8ERZb8GE1ZnnOqcY9vfdrgRX7OnP6AxQHwsPn3fK5B9iP7T5nD2g bofTVwOL5tGNlsue09D0Xz7XxXUL+WbMZ4b8MI3PZA3IshTl85LW85pBiojGvyPb CPPixZj3Ojcixe46vExquOIVKOyLhOqRNgz2B47c4eSgSbIvTDlptSSCKzeAUSDe G/4z+cpNzU1dvpykIdVNWvr6yAMQF83aiCAm7fIe2WhEQc7EuhpfdTPFndCblJAq igTZw4lXZzm+vjIIW1d+RTnaDSKhT0I9dtyup35z0XAfRY9NXPHlHSbo0ileKXV+ gAAIoYUJx5AQtw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:44:24 2025 by rpki-client