This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json) Hash identifier: NUBRW+cMurbQjARvx8LY1P4lcXYirdCJ4zeMQhI04M4= Subject key identifier: 28:1A:E7:DE:41:84:FA:DE:14:86:B5:AA:81:9B:59:17:AF:D2:1D:42 Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78 Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178 Certificate serial: 019B2F9E1A85F51E9ACB864C36101302272B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft Manifest number: 03C0 Signing time: Thu 18 Dec 2025 04:00:49 +0000 Manifest this update: Thu 18 Dec 2025 04:00:49 +0000 Manifest next update: Fri 19 Dec 2025 04:00:49 +0000 Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: NJhKQqnvg00uv7DJaNOq0eGQzUb8c/7cS83TK+gohrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:1a:85:f5:1e:9a:cb:86:4c:36:10:13:02:27:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178 Validity Not Before: Dec 18 04:00:49 2025 GMT Not After : Dec 19 04:00:49 2025 GMT Subject: CN=281ae7de4184fade1486b5aa819b5917afd21d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2a:23:b4:d2:c9:73:20:20:81:5a:80:f0:59: 26:1e:2e:fe:8a:d1:c1:9d:4e:15:57:fa:20:61:66: 4b:02:d8:98:dd:ae:76:30:92:22:1e:e2:26:b0:9e: 25:27:dd:56:6a:33:96:18:d0:24:5b:63:4d:74:ae: fb:69:a3:19:de:78:9c:77:83:f6:35:04:d7:a5:5a: f6:ec:d7:cb:fa:88:6e:b6:44:ba:03:9d:c9:f8:6d: 49:d0:fc:fe:fe:98:bc:69:d6:9a:bf:0c:a3:e6:42: ef:68:52:fb:14:f1:86:8d:1f:43:91:f8:9e:da:a8: b8:dd:e3:12:c3:8a:e9:fe:56:45:04:4a:4d:86:09: 6f:23:2c:57:74:9a:26:07:05:04:c4:ec:eb:c8:38: c7:c8:ef:86:27:eb:3b:2b:0d:c1:10:48:c7:3b:57: 0b:e0:e2:95:7d:c5:a8:55:27:7a:ed:59:07:5b:55: 3d:4a:1e:65:15:52:81:53:e5:57:e8:f5:61:25:cf: 1d:42:a6:50:78:8a:d5:6e:f1:40:cf:76:44:ab:88: eb:c7:7e:6f:93:73:fa:27:5d:b4:5d:f6:78:ea:13: 65:6e:e2:9e:56:94:ba:06:bf:8c:5f:ce:48:e1:67: c4:8d:53:b3:b4:d3:91:3f:91:cc:b2:f1:aa:d9:65: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:E7:DE:41:84:FA:DE:14:86:B5:AA:81:9B:59:17:AF:D2:1D:42 X509v3 Authority Key Identifier: keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c9:7c:1d:5f:0d:24:e8:22:05:2e:55:e2:86:b0:12:3a:69: fa:be:c6:ea:98:7f:e5:0f:03:53:ad:7f:af:90:6b:b8:b2:51: 38:d6:b6:dd:3d:ca:50:71:4e:48:30:b7:d7:4b:b2:b8:be:20: f1:67:56:c0:5b:4f:93:4f:f2:49:12:52:0e:cb:bd:79:a0:0e: 3a:d0:67:b2:9a:e7:ec:7e:25:85:6b:d9:ec:48:e3:a7:eb:f5: 33:c7:de:02:97:59:e5:22:97:44:b9:71:2c:f9:51:7e:f0:2a: 21:79:77:08:0d:38:2b:a3:8a:fc:ec:9f:03:a2:b5:98:5c:85: df:76:2a:53:32:e8:d4:10:1d:22:8f:c6:70:c8:f4:10:ac:9e: 74:96:3b:41:44:6e:c5:38:e6:07:4a:1d:5f:2c:32:f7:32:23: 10:9c:92:5d:26:41:4e:7f:a5:07:66:39:32:7e:b2:73:87:3d: 9f:70:20:62:77:24:bb:38:0e:19:76:89:f5:9d:79:bb:20:24: a8:86:cc:2f:9c:6b:73:62:62:d1:a7:9f:80:7f:e8:19:2c:df: bb:e3:85:1e:4b:22:c8:1d:a5:49:2a:84:98:40:ec:6b:e5:8b: dd:b9:eb:a5:de:ee:f6:b4:0c:93:87:c8:53:40:8c:f7:7b:a3: 01:0a:a0:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnhqF9R6ay4ZMNhATAicrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTQ5Yzk1ZDBjY2Q5OWM4NWVjMDcyMTA3NjQ0YzhjYzhk MWUxNzgwHhcNMjUxMjE4MDQwMDQ5WhcNMjUxMjE5MDQwMDQ5WjAzMTEwLwYDVQQD EygyODFhZTdkZTQxODRmYWRlMTQ4NmI1YWE4MTliNTkxN2FmZDIxZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSojtNLJcyAggVqA8FkmHi7+itHB nU4VV/ogYWZLAtiY3a52MJIiHuImsJ4lJ91WajOWGNAkW2NNdK77aaMZ3nicd4P2 NQTXpVr27NfL+ohutkS6A53J+G1J0Pz+/pi8adaavwyj5kLvaFL7FPGGjR9Dkfie 2qi43eMSw4rp/lZFBEpNhglvIyxXdJomBwUExOzryDjHyO+GJ+s7Kw3BEEjHO1cL 4OKVfcWoVSd67VkHW1U9Sh5lFVKBU+VX6PVhJc8dQqZQeIrVbvFAz3ZEq4jrx35v k3P6J120XfZ46hNlbuKeVpS6Br+MX85I4WfEjVOztNORP5HMsvGq2WU0ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCga595BhPreFIa1qoGbWRev0h1CMB8GA1UdIwQY MBaAFH6UnJXQzNmchewHIQdkTIzI0eF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTIt ZGQ4ZjY1MjhlYzExLzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTItZGQ4ZjY1MjhlYzEx LzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMl8HV8N JOgiBS5V4oawEjpp+r7G6ph/5Q8DU61/r5BruLJRONa23T3KUHFOSDC310uyuL4g 8WdWwFtPk0/ySRJSDsu9eaAOOtBnsprn7H4lhWvZ7Ejjp+v1M8feApdZ5SKXRLlx LPlRfvAqIXl3CA04K6OK/OyfA6K1mFyF33YqUzLo1BAdIo/GcMj0EKyedJY7QURu xTjmB0odXywy9zIjEJySXSZBTn+lB2Y5Mn6yc4c9n3AgYnckuzgOGXaJ9Z15uyAk qIbML5xrc2Ji0aefgH/oGSzfu+OFHksiyB2lSSqEmEDsa+WL3bnrpd7u9rQMk4fI U0CM93ujAQqgEw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:15 2025 by rpki-client