This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft File: fxCetjA1fr3GKYEaYuYrGFenEyo.mft (raw, json) Hash identifier: 0izfddyRw6buxtzQZ6vSzINsCWRaL++O8SD0J/UMDk8= Subject key identifier: 63:54:05:70:2B:67:37:31:AF:EE:84:B8:75:3B:8B:05:65:A6:53:A3 Authority key identifier: 7F:10:9E:B6:30:35:7E:BD:C6:29:81:1A:62:E6:2B:18:57:A7:13:2A Certificate issuer: /CN=7f109eb630357ebdc629811a62e62b1857a7132a Certificate serial: 019B5A51D698B5D9E20E172CD23A33427832 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft Manifest number: 2C Signing time: Fri 26 Dec 2025 11:01:11 +0000 Manifest this update: Fri 26 Dec 2025 11:01:11 +0000 Manifest next update: Sat 27 Dec 2025 11:01:11 +0000 Files and hashes: 1: fxCetjA1fr3GKYEaYuYrGFenEyo.crl (hash: 7Xsd1ctEZE8wnrnHHJ1VUur7aDeIaqLcyd0yNIhCJ/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.crl rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft rsync://rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:d6:98:b5:d9:e2:0e:17:2c:d2:3a:33:42:78:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f109eb630357ebdc629811a62e62b1857a7132a Validity Not Before: Dec 26 11:01:11 2025 GMT Not After : Dec 27 11:01:11 2025 GMT Subject: CN=635405702b673731afee84b8753b8b0565a653a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8c:61:7d:36:26:ee:1e:01:fa:1c:74:75:5f: 71:0b:1a:a0:68:8a:8f:54:9c:07:d5:fc:1a:64:6a: d9:aa:65:03:01:71:a0:95:7b:6b:e7:dd:47:9e:3f: b8:48:e2:f2:26:dc:64:ba:1d:72:1d:d8:fd:0b:49: a8:24:65:a5:11:8b:88:8f:1d:07:53:e5:f8:27:29: b6:5d:b8:f4:49:17:f9:fe:c3:61:2b:1d:bf:f5:47: 6a:a5:73:3d:ec:39:8a:d9:f5:65:f7:83:b5:0a:f4: b8:c5:00:18:e2:74:26:18:f3:c7:4e:f4:af:8a:bc: 65:c5:96:6f:60:7b:84:62:e8:2f:50:ed:a7:f9:69: 95:54:74:41:f7:31:45:81:b1:49:27:36:f6:c7:c4: 5d:6b:96:b6:e3:b3:aa:cb:7b:bb:ec:19:70:91:06: fc:af:f8:c1:60:16:12:05:cd:1a:f5:a3:16:71:d8: 49:4e:fd:d1:6f:d6:9c:b9:33:b0:d7:b5:dd:65:3d: 83:95:fa:dc:7d:ca:40:34:cb:f9:43:21:9a:b3:0c: c9:3e:5e:40:b2:2b:10:0d:6c:8a:d2:66:fd:d5:6f: a4:cc:33:ab:d5:8d:5f:01:9d:f4:0b:38:69:c3:f9: ae:57:29:47:80:e7:7a:72:e8:ae:72:a3:2a:cd:b0: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:54:05:70:2B:67:37:31:AF:EE:84:B8:75:3B:8B:05:65:A6:53:A3 X509v3 Authority Key Identifier: keyid:7F:10:9E:B6:30:35:7E:BD:C6:29:81:1A:62:E6:2B:18:57:A7:13:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a5:7d:26:ca:75:21:78:f6:7c:a2:d7:77:f6:d2:2c:57:23: 23:63:1a:80:51:45:6e:71:0c:e9:5d:3f:92:36:35:45:5c:ea: 06:32:26:3a:97:d3:1d:95:e0:70:8d:f6:a0:4d:de:1d:ae:04: ed:f4:d2:87:18:65:0e:76:cc:ba:54:83:a9:21:69:38:a0:f6: 12:88:22:c1:2a:f6:13:3e:24:9b:72:7d:22:75:b9:73:fc:30: f0:c0:1c:60:c2:7f:4c:52:f9:05:2d:60:78:3a:ca:12:9e:a9: 4b:0e:a6:e7:03:50:4f:51:6c:2f:d4:c9:df:e8:8a:3c:b3:2f: fc:d6:57:e7:82:09:b2:d3:a0:1e:ff:bd:62:bb:14:3c:7c:e9: c7:22:63:de:91:7a:f9:26:dd:39:97:30:b8:ad:d9:e6:c6:88: 3f:29:bd:6f:f1:3e:0a:27:d6:60:f0:30:57:19:e7:08:7e:c8: 2b:d0:b5:93:96:28:c7:ca:5c:ef:49:03:40:55:af:2f:0d:b9: 49:d9:7d:7e:66:de:28:ea:59:05:60:98:76:d5:e4:de:be:f3: 4e:b3:28:fa:f4:dd:cf:26:f4:7b:0c:c0:11:d5:3c:44:10:5c: ab:0c:39:51:05:f3:08:cb:86:5c:86:b1:0d:a9:b7:32:44:66: 26:e4:00:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUdaYtdniDhcs0jozQngyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTA5ZWI2MzAzNTdlYmRjNjI5ODExYTYyZTYyYjE4NTdh NzEzMmEwHhcNMjUxMjI2MTEwMTExWhcNMjUxMjI3MTEwMTExWjAzMTEwLwYDVQQD Eyg2MzU0MDU3MDJiNjczNzMxYWZlZTg0Yjg3NTNiOGIwNTY1YTY1M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4xhfTYm7h4B+hx0dV9xCxqgaIqP VJwH1fwaZGrZqmUDAXGglXtr591Hnj+4SOLyJtxkuh1yHdj9C0moJGWlEYuIjx0H U+X4Jym2Xbj0SRf5/sNhKx2/9UdqpXM97DmK2fVl94O1CvS4xQAY4nQmGPPHTvSv irxlxZZvYHuEYugvUO2n+WmVVHRB9zFFgbFJJzb2x8Rda5a247Oqy3u77BlwkQb8 r/jBYBYSBc0a9aMWcdhJTv3Rb9acuTOw17XdZT2DlfrcfcpANMv5QyGaswzJPl5A sisQDWyK0mb91W+kzDOr1Y1fAZ30Czhpw/muVylHgOd6cuiucqMqzbDx+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNUBXArZzcxr+6EuHU7iwVlplOjMB8GA1UdIwQY MBaAFH8QnrYwNX69ximBGmLmKxhXpxMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhDZXRqQTFmcjNHS1lFYVl1WXJHRmVuRXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NTAzMGUtYzVjYi00NWJmLWEzZDkt ZjhiNjNkZWRlNTZjLzEvZnhDZXRqQTFmcjNHS1lFYVl1WXJHRmVuRXlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NTAzMGUtYzVjYi00NWJmLWEzZDktZjhiNjNkZWRlNTZj LzEvZnhDZXRqQTFmcjNHS1lFYVl1WXJHRmVuRXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6V9Jsp1 IXj2fKLXd/bSLFcjI2MagFFFbnEM6V0/kjY1RVzqBjImOpfTHZXgcI32oE3eHa4E 7fTShxhlDnbMulSDqSFpOKD2EogiwSr2Ez4km3J9InW5c/ww8MAcYMJ/TFL5BS1g eDrKEp6pSw6m5wNQT1FsL9TJ3+iKPLMv/NZX54IJstOgHv+9YrsUPHzpxyJj3pF6 +SbdOZcwuK3Z5saIPym9b/E+CifWYPAwVxnnCH7IK9C1k5Yox8pc70kDQFWvLw25 Sdl9fmbeKOpZBWCYdtXk3r7zTrMo+vTdzyb0ewzAEdU8RBBcqww5UQXzCMuGXIax Dam3MkRmJuQARw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:11 2025 by rpki-client