This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft File: FDze4UaxO5Zn3v8_ezDpoaozTIM.mft (raw, json) Hash identifier: tjb5pDWM9ztOMPzJkYQ5pn9079KkdhR9pjPm1urMGJE= Subject key identifier: FB:58:D9:39:4F:28:B6:3F:97:9B:CB:1F:E0:1F:DE:58:12:D9:38:9E Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83 Certificate issuer: /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83 Certificate serial: 019B3CEBFA63F680AF3598257438F0A200C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft Manifest number: 148A Signing time: Sat 20 Dec 2025 18:00:56 +0000 Manifest this update: Sat 20 Dec 2025 18:00:56 +0000 Manifest next update: Sun 21 Dec 2025 18:00:56 +0000 Files and hashes: 1: FDze4UaxO5Zn3v8_ezDpoaozTIM.crl (hash: HQyfFF7CO/JopzScEpEK2ddNXyGwEtX8OrH0GgMw8Sw=) 2: IC8rrkeuZ3TqcdV591D01mfbwHc.roa (hash: 7tBT71N8NPjqdd9xF1vrNPm9jbI3kLMX+SeUrC9ethY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:fa:63:f6:80:af:35:98:25:74:38:f0:a2:00:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83 Validity Not Before: Dec 20 18:00:56 2025 GMT Not After : Dec 21 18:00:56 2025 GMT Subject: CN=fb58d9394f28b63f979bcb1fe01fde5812d9389e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:26:a4:3a:83:2d:6e:ba:77:f9:75:70:3a: 33:3f:ca:66:aa:93:62:6e:84:96:ca:01:2b:64:38: 67:7e:26:f6:51:79:96:e1:88:27:92:fd:56:b8:b5: bf:c5:8e:6a:df:b9:65:05:a9:c9:7d:e2:b3:0e:4d: c0:03:bb:bf:41:60:5b:c3:ba:2f:c1:82:12:6a:14: b4:a9:1b:64:06:d0:ff:56:7f:55:7d:eb:2e:fb:83: 74:99:58:e7:36:3d:b5:44:7b:47:31:dd:d5:d5:e1: 0b:86:a2:85:98:ac:44:13:cf:5c:56:ed:76:ca:81: e1:37:2d:27:c2:65:e3:56:79:77:c0:8b:0d:70:24: 16:b6:10:52:79:1a:eb:67:ec:5b:f3:aa:aa:5e:b0: fe:85:19:87:14:d4:df:76:37:27:05:92:a8:e3:b1: 85:7d:ac:90:e7:9b:32:05:05:80:1c:8a:84:d2:77: ad:dc:78:74:9e:4a:64:8d:13:65:d9:a0:31:0d:a4: 45:dd:35:55:0a:eb:fd:d0:ab:24:23:79:40:60:71: a2:3d:64:d8:31:f4:59:5e:c9:7e:6e:ed:09:fc:dc: 3b:d1:a7:39:e9:6a:de:e7:0b:ad:5e:2a:50:dc:80: 94:3a:c2:f5:9c:7d:09:12:bc:c6:af:46:3b:79:f6: 8b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:58:D9:39:4F:28:B6:3F:97:9B:CB:1F:E0:1F:DE:58:12:D9:38:9E X509v3 Authority Key Identifier: keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bc:3c:2b:1f:86:a7:d6:1b:2e:3e:af:fb:04:4a:30:c8:5f: 72:55:9a:e2:4e:44:e6:db:14:1d:e3:f0:04:28:03:b1:cd:4f: 35:cd:66:54:93:5a:9d:c8:b1:32:c0:69:3c:ae:91:22:7f:25: d4:01:d9:c9:0a:5b:e5:8b:ae:dd:9d:42:9c:5c:db:f5:b9:06: 5f:65:94:65:c9:93:b4:0b:18:f6:ba:9d:e5:d4:2f:58:38:7c: 11:21:c4:9f:72:e1:4c:fd:42:62:b1:83:41:cd:6c:01:86:06: 48:42:2c:72:f1:da:55:36:35:60:2f:da:03:c7:9d:fe:bd:a9: 62:8c:4a:ae:ac:e3:72:e3:8c:13:26:29:1b:5b:9c:d3:fc:01: 39:e9:b8:c0:34:88:f2:7a:9d:7a:ce:1f:ae:88:20:a8:90:c1: 8e:cd:79:2f:72:51:96:69:3c:e1:56:21:6f:dd:02:1e:3e:6f: 74:1b:94:6a:88:f3:4c:1f:87:dc:ac:73:a3:69:4b:94:f2:c6: 01:5c:43:f4:7b:35:98:9c:0b:19:ae:f1:be:64:a9:4f:58:45: 4a:a6:3b:f2:f6:1e:ec:b1:16:6b:19:47:d2:ff:6b:eb:5b:53: ff:a0:ec:48:ef:a1:b8:07:e0:ff:9c:c0:bb:ac:ac:4f:69:84: 0a:56:9b:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/pj9oCvNZgldDjwogDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0M2NkZWUxNDZiMTNiOTY2N2RlZmYzZjdiMzBlOWExYWEz MzRjODMwHhcNMjUxMjIwMTgwMDU2WhcNMjUxMjIxMTgwMDU2WjAzMTEwLwYDVQQD EyhmYjU4ZDkzOTRmMjhiNjNmOTc5YmNiMWZlMDFmZGU1ODEyZDkzODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSEmpDqDLW66d/l1cDozP8pmqpNi boSWygErZDhnfib2UXmW4Ygnkv1WuLW/xY5q37llBanJfeKzDk3AA7u/QWBbw7ov wYISahS0qRtkBtD/Vn9Vfesu+4N0mVjnNj21RHtHMd3V1eELhqKFmKxEE89cVu12 yoHhNy0nwmXjVnl3wIsNcCQWthBSeRrrZ+xb86qqXrD+hRmHFNTfdjcnBZKo47GF fayQ55syBQWAHIqE0net3Hh0nkpkjRNl2aAxDaRF3TVVCuv90KskI3lAYHGiPWTY MfRZXsl+bu0J/Nw70ac56Wre5wutXipQ3ICUOsL1nH0JErzGr0Y7efaLKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtY2TlPKLY/l5vLH+Af3lgS2TieMB8GA1UdIwQY MBaAFBQ83uFGsTuWZ97/P3sw6aGqM0yDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkR6ZTRVYXhPNVpuM3Y4X2V6RHBvYW96VElNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xY2EzOWMtMjAxYy00MWZkLTljYjAt ODIzNmU1NzI2NGJmLzEvRkR6ZTRVYXhPNVpuM3Y4X2V6RHBvYW96VElNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xY2EzOWMtMjAxYy00MWZkLTljYjAtODIzNmU1NzI2NGJm LzEvRkR6ZTRVYXhPNVpuM3Y4X2V6RHBvYW96VElNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7w8Kx+G p9YbLj6v+wRKMMhfclWa4k5E5tsUHePwBCgDsc1PNc1mVJNancixMsBpPK6RIn8l 1AHZyQpb5Yuu3Z1CnFzb9bkGX2WUZcmTtAsY9rqd5dQvWDh8ESHEn3LhTP1CYrGD Qc1sAYYGSEIscvHaVTY1YC/aA8ed/r2pYoxKrqzjcuOMEyYpG1uc0/wBOem4wDSI 8nqdes4froggqJDBjs15L3JRlmk84VYhb90CHj5vdBuUaojzTB+H3Kxzo2lLlPLG AVxD9Hs1mJwLGa7xvmSpT1hFSqY78vYe7LEWaxlH0v9r61tT/6DsSO+huAfg/5zA u6ysT2mEClabJw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:53:48 2025 by rpki-client