This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json) Hash identifier: +k84tGD+CI8YhaSBD/Q1Y3OMpbOTo4z/K0/81AZtCDI= Subject key identifier: 6D:8A:E2:5F:5E:31:C0:9A:9D:CC:AB:10:15:06:FE:D2:84:F7:83:5F Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01 Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501 Certificate serial: 019B2EF9FB7741123AB3340F83282810E74E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft Manifest number: 0346 Signing time: Thu 18 Dec 2025 01:01:33 +0000 Manifest this update: Thu 18 Dec 2025 01:01:33 +0000 Manifest next update: Fri 19 Dec 2025 01:01:33 +0000 Files and hashes: 1: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (hash: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=) 2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: uF1kBtZ6fQaW9v6/cUpB1DIqC4LFlcL7TBe9281Pzto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:fb:77:41:12:3a:b3:34:0f:83:28:28:10:e7:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501 Validity Not Before: Dec 18 01:01:33 2025 GMT Not After : Dec 19 01:01:33 2025 GMT Subject: CN=6d8ae25f5e31c09a9dccab101506fed284f7835f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:d2:7b:44:e8:8b:a1:52:5e:8e:16:f4:c3: 76:f6:ab:a0:b4:70:24:7e:a9:38:ce:95:90:ee:17: 9b:ed:04:93:73:56:2e:b1:a5:be:e0:d6:fe:b4:ec: 84:3a:24:23:15:54:ea:19:08:71:b1:f3:a3:41:31: a9:ab:d5:06:13:5e:8f:1e:18:67:9f:cd:f7:80:e4: 87:39:ac:b1:ed:1c:6a:95:01:d5:0e:1c:b4:34:c8: 93:39:6d:6f:ff:6b:6a:50:46:9d:9f:a8:b2:97:da: 67:02:6f:f9:78:a4:7d:84:63:96:d9:5d:6f:be:79: fa:5e:16:9a:51:5a:92:1a:b6:ea:18:be:76:75:e9: fa:68:55:14:f0:96:f3:95:6f:de:74:d9:a9:a6:37: 3d:00:9e:d0:3c:04:8a:ab:57:5f:cf:d5:ea:bb:db: 78:b5:1c:9d:e2:47:96:7a:6c:67:9d:1d:0c:d9:32: e5:4a:82:05:a3:26:31:fb:4e:80:c1:b8:6e:db:42: 35:c8:9f:1b:2e:4c:83:d7:32:02:11:cc:16:88:8b: 2d:a7:24:1c:5e:64:de:3b:21:eb:00:83:50:7c:29: e9:77:79:b9:75:79:c4:17:43:57:55:4d:3c:ee:49: ad:c7:e2:46:ac:51:16:2d:0f:f4:eb:24:ac:c6:c8: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8A:E2:5F:5E:31:C0:9A:9D:CC:AB:10:15:06:FE:D2:84:F7:83:5F X509v3 Authority Key Identifier: keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:69:73:98:1e:93:e6:05:fb:e5:99:f6:d1:76:0f:6c:aa:35: 26:6f:c9:91:4a:4a:64:b7:3b:8f:84:e9:e9:67:29:9c:c6:6d: 58:d4:69:3e:12:a7:70:17:c1:2e:25:26:c1:53:d9:fd:85:01: 47:11:da:15:7b:23:93:82:6b:a1:e6:29:4b:2c:46:71:dc:54: fe:ea:84:db:8d:57:26:9c:ff:07:6e:6c:6f:57:5a:89:6e:a8: e2:c9:62:45:0f:f3:c9:13:0a:5f:0e:6a:dd:66:59:2c:32:2c: f3:5b:e9:fa:67:5d:82:95:28:85:dd:cb:83:47:71:01:a1:e3: 0a:ce:0f:4b:02:ea:7f:31:2a:39:1d:a1:5f:42:e0:83:ed:d2: dc:84:b2:23:c9:0d:14:82:af:5a:a6:83:67:51:24:61:92:2d: b1:e4:4d:8a:7e:1a:1e:08:0b:5b:3e:04:56:d1:2c:aa:3e:24: 67:64:aa:65:ad:33:8a:88:90:12:aa:72:cc:16:72:3d:1b:1d: 60:0f:a5:f5:d1:f2:d2:0e:18:51:f2:93:e7:1e:d3:3b:d2:29: d1:5e:23:a5:8d:a5:a5:2e:25:fb:bf:25:fc:a9:80:2a:aa:0b: 96:98:c6:b5:35:05:14:85:d6:96:43:5f:1a:d3:a3:c9:5b:b6: de:2f:8b:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+ft3QRI6szQPgygoEOdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NTIwNmIxZDZmMzkxMmE4NmViNjI4ZjYxOWM1YTU1MmM1 NTM1MDEwHhcNMjUxMjE4MDEwMTMzWhcNMjUxMjE5MDEwMTMzWjAzMTEwLwYDVQQD Eyg2ZDhhZTI1ZjVlMzFjMDlhOWRjY2FiMTAxNTA2ZmVkMjg0Zjc4MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hPSe0Toi6FSXo4W9MN29qugtHAk fqk4zpWQ7heb7QSTc1YusaW+4Nb+tOyEOiQjFVTqGQhxsfOjQTGpq9UGE16PHhhn n833gOSHOayx7RxqlQHVDhy0NMiTOW1v/2tqUEadn6iyl9pnAm/5eKR9hGOW2V1v vnn6XhaaUVqSGrbqGL52den6aFUU8JbzlW/edNmppjc9AJ7QPASKq1dfz9Xqu9t4 tRyd4keWemxnnR0M2TLlSoIFoyYx+06Awbhu20I1yJ8bLkyD1zICEcwWiIstpyQc XmTeOyHrAINQfCnpd3m5dXnEF0NXVU087kmtx+JGrFEWLQ/06ySsxsiF2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2K4l9eMcCancyrEBUG/tKE94NfMB8GA1UdIwQY MBaAFMRSBrHW85Eqhutij2GcWlUsVTUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUt NWJlNDBiMTRmOGRmLzEveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUtNWJlNDBiMTRmOGRm LzEveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2lzmB6T 5gX75Zn20XYPbKo1Jm/JkUpKZLc7j4Tp6WcpnMZtWNRpPhKncBfBLiUmwVPZ/YUB RxHaFXsjk4JroeYpSyxGcdxU/uqE241XJpz/B25sb1daiW6o4sliRQ/zyRMKXw5q 3WZZLDIs81vp+mddgpUohd3Lg0dxAaHjCs4PSwLqfzEqOR2hX0Lgg+3S3ISyI8kN FIKvWqaDZ1EkYZItseRNin4aHggLWz4EVtEsqj4kZ2SqZa0zioiQEqpyzBZyPRsd YA+l9dHy0g4YUfKT5x7TO9Ip0V4jpY2lpS4l+78l/KmAKqoLlpjGtTUFFIXWlkNf GtOjyVu23i+LZw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:49 2025 by rpki-client