This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft File: FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json) Hash identifier: AxNGIGHry5lVxLKsjIvren+gq5n60xxZVC7zY5CT6TE= Subject key identifier: 6D:8B:B1:B1:83:EE:87:19:50:3A:DD:FD:DA:FC:03:2E:9B:C4:A7:3D Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7 Certificate issuer: /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7 Certificate serial: 019B2BF8849F3EC54BA8D1D73AABD94C6C5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 11:01:05 +0000 Manifest this update: Wed 17 Dec 2025 11:01:05 +0000 Manifest next update: Thu 18 Dec 2025 11:01:05 +0000 Files and hashes: 1: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: oBBJEk7jWq1tLLOUO6f18zclP6Qxfn+M/ZODK5fUdpY=) 2: kG1kgN5nlYEy7ZpCjdikaIa9hV8.roa (hash: /f6LxWrzAnFYTxviTKRbY2oY2ySMF7I5ROIB6zkf0g0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:84:9f:3e:c5:4b:a8:d1:d7:3a:ab:d9:4c:6c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7 Validity Not Before: Dec 17 11:01:05 2025 GMT Not After : Dec 18 11:01:05 2025 GMT Subject: CN=6d8bb1b183ee8719503addfddafc032e9bc4a73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:45:5d:37:cd:aa:97:c0:92:66:39:d7:d4: f5:81:d6:e8:c9:c6:bd:52:8d:3c:40:ac:e5:ea:98: a5:61:2e:43:68:71:5b:da:2c:ad:e1:36:12:63:a8: e8:0e:33:9e:db:85:e4:48:b3:83:1e:a0:59:f8:c6: 5e:96:e8:94:96:39:93:83:e8:f8:74:1b:51:d1:b1: 13:a9:fe:47:61:e9:c1:46:21:f8:b3:15:00:de:35: 56:0c:38:df:ff:47:61:bb:88:f1:5d:02:b7:5e:0d: 12:82:6b:ef:97:b3:38:93:71:7a:28:a0:56:d0:bf: 7e:3b:ec:df:18:a4:1b:41:b2:ba:35:b6:f6:99:b4: 2f:e5:87:cb:ae:e6:21:7b:fc:c3:13:33:64:47:a2: bf:ea:58:af:63:c4:c0:5d:48:18:0f:b9:23:e4:5a: 6b:da:4b:de:ae:75:94:3c:19:17:fe:47:10:59:42: 64:cc:17:fa:ce:43:0d:ce:27:72:7c:e6:b7:31:77: 61:2f:e7:1c:d4:50:34:84:42:49:71:16:70:50:a3: 23:31:27:a4:44:1e:5a:b2:32:dc:b8:64:0c:21:d7: cf:9b:a5:4e:e2:cd:90:4a:ba:3d:66:51:97:c2:db: 85:9d:fa:7d:e6:ff:80:b0:a7:e1:6c:1a:ec:9c:5d: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8B:B1:B1:83:EE:87:19:50:3A:DD:FD:DA:FC:03:2E:9B:C4:A7:3D X509v3 Authority Key Identifier: keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:53:39:8d:6b:00:5b:3d:94:7c:35:1f:97:50:df:39:e8:da: 21:31:ee:1b:33:bd:aa:0b:69:82:1f:67:13:3c:1d:ff:b8:52: 01:5d:91:62:5c:f7:28:2e:e3:eb:f0:50:f5:17:79:ab:22:d4: 93:90:da:70:90:76:3a:d8:65:e8:77:0b:29:53:0c:70:64:b5: 5d:c7:87:8a:ff:b5:6c:7b:c0:20:04:64:45:64:2d:23:f6:7e: 35:5b:52:1d:9c:e8:c8:a0:58:85:e6:74:af:77:be:86:27:47: 79:7e:bf:f6:ea:52:d6:4f:40:9a:cf:d0:96:69:c8:3f:ef:2f: fe:bb:2f:bc:27:b1:93:38:ad:15:82:f4:e2:23:6f:08:d7:d7: 4f:9e:fe:21:d5:a9:ec:68:5d:1c:80:6a:21:b6:96:ac:ab:5e: 00:a5:35:8f:7f:4c:ec:42:17:e2:60:80:8c:03:4d:78:c7:9c: 19:a3:46:02:64:cf:e0:0c:39:dc:a6:7f:90:5b:63:fa:54:81: 07:b9:1b:e2:1a:d0:2a:f8:b9:05:b9:b0:fd:3b:6a:6f:1f:20: 24:a2:f6:e8:64:ad:6f:8c:ef:9e:25:f0:7f:7e:d4:6b:d1:ba: 2e:d5:a5:5c:7c:31:9b:c0:94:e9:76:e5:aa:df:cd:f5:6b:8b: b8:ab:19:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+ISfPsVLqNHXOqvZTGxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NzMzZmY4MmJlMDBiNDFhOTkwZGVkNmI3MmIwNGNiN2Jm NTgwZDcwHhcNMjUxMjE3MTEwMTA1WhcNMjUxMjE4MTEwMTA1WjAzMTEwLwYDVQQD Eyg2ZDhiYjFiMTgzZWU4NzE5NTAzYWRkZmRkYWZjMDMyZTliYzRhNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshNFXTfNqpfAkmY519T1gdboyca9 Uo08QKzl6pilYS5DaHFb2iyt4TYSY6joDjOe24XkSLODHqBZ+MZeluiUljmTg+j4 dBtR0bETqf5HYenBRiH4sxUA3jVWDDjf/0dhu4jxXQK3Xg0Sgmvvl7M4k3F6KKBW 0L9+O+zfGKQbQbK6Nbb2mbQv5YfLruYhe/zDEzNkR6K/6livY8TAXUgYD7kj5Fpr 2kvernWUPBkX/kcQWUJkzBf6zkMNzidyfOa3MXdhL+cc1FA0hEJJcRZwUKMjMSek RB5asjLcuGQMIdfPm6VO4s2QSro9ZlGXwtuFnfp95v+AsKfhbBrsnF3IDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2LsbGD7ocZUDrd/dr8Ay6bxKc9MB8GA1UdIwQY MBaAFBVzP/gr4AtBqZDe1rcrBMt79YDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhNXy1DdmdDMEdwa043V3R5c0V5M3YxZ05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lYjVkY2UtZDI4Ni00ODI1LWE0MWMt YjJiZDY2ODg5YzI5LzEvRlhNXy1DdmdDMEdwa043V3R5c0V5M3YxZ05jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lYjVkY2UtZDI4Ni00ODI1LWE0MWMtYjJiZDY2ODg5YzI5 LzEvRlhNXy1DdmdDMEdwa043V3R5c0V5M3YxZ05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFM5jWsA Wz2UfDUfl1DfOejaITHuGzO9qgtpgh9nEzwd/7hSAV2RYlz3KC7j6/BQ9Rd5qyLU k5DacJB2Othl6HcLKVMMcGS1XceHiv+1bHvAIARkRWQtI/Z+NVtSHZzoyKBYheZ0 r3e+hidHeX6/9upS1k9Ams/QlmnIP+8v/rsvvCexkzitFYL04iNvCNfXT57+IdWp 7GhdHIBqIbaWrKteAKU1j39M7EIX4mCAjANNeMecGaNGAmTP4Aw53KZ/kFtj+lSB B7kb4hrQKvi5Bbmw/Ttqbx8gJKL26GStb4zvniXwf37Ua9G6LtWlXHwxm8CU6Xbl qt/N9WuLuKsZIw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:26:25 2025 by rpki-client