This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft File: fPxZzhNuPpOobeVfBdSaWeFcu78.mft (raw, json) Hash identifier: gw1ksRFG79LcubcdQdDIOl8cxefbGJ4xAgfOePE09wQ= Subject key identifier: 4C:A3:3C:23:E3:F8:9C:20:03:F3:EA:47:89:91:1D:65:56:D7:0C:6D Authority key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF Certificate issuer: /CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf Certificate serial: 019B1EE2057FAB7D607189543C5CBEEBE013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft Manifest number: 0B15 Signing time: Sun 14 Dec 2025 22:01:27 +0000 Manifest this update: Sun 14 Dec 2025 22:01:27 +0000 Manifest next update: Mon 15 Dec 2025 22:01:27 +0000 Files and hashes: 1: fPxZzhNuPpOobeVfBdSaWeFcu78.crl (hash: 46Bz420xC+LReMqpzVJloLEheUPX+p2Uqkgyy+4rJbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e2:05:7f:ab:7d:60:71:89:54:3c:5c:be:eb:e0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf Validity Not Before: Dec 14 22:01:27 2025 GMT Not After : Dec 15 22:01:27 2025 GMT Subject: CN=4ca33c23e3f89c2003f3ea4789911d6556d70c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c1:cf:80:58:bb:29:ba:c5:e5:4e:49:61:17: 67:c3:7a:a9:e8:1b:29:d7:d7:30:1a:7d:a5:7b:b8: bf:4b:9c:a0:5f:c8:03:f1:b4:6e:cc:b3:53:47:9c: 05:9f:59:95:9b:c1:c8:15:fc:c0:c8:52:63:73:c1: e3:18:f9:26:e9:db:ad:15:06:94:1a:f7:8c:41:8d: 27:b6:2d:b9:29:bb:32:1b:df:d8:5c:49:c7:0b:fe: c4:d7:10:8a:96:ea:b6:c1:3c:31:d7:57:85:29:4d: e8:0b:e4:62:28:8a:6f:fe:e3:9b:90:1a:03:be:b1: 5f:7f:9e:a0:71:0b:f5:10:07:48:0d:97:00:d5:23: b3:22:1a:2d:3b:c4:70:3f:de:99:b9:2c:ac:e9:2f: cb:5b:a0:87:fc:58:ee:41:6a:e0:fe:d7:3f:6c:cb: 9f:86:ca:70:03:fb:c5:6c:a4:01:d0:40:51:43:9d: a3:fb:fe:f6:73:00:17:7c:ec:ef:36:d2:38:30:7e: 83:b8:d9:40:d3:a8:1e:df:41:22:6e:b1:40:99:37: 07:29:0e:a7:3f:55:8b:71:50:b6:0a:26:47:31:97: 8e:25:eb:28:ac:07:c5:3f:6d:5e:87:2c:8b:2a:18: 84:a8:ef:38:7b:67:92:53:3d:96:56:d5:21:72:c0: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:3C:23:E3:F8:9C:20:03:F3:EA:47:89:91:1D:65:56:D7:0C:6D X509v3 Authority Key Identifier: keyid:7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:93:12:5a:3e:c5:ac:97:3a:f4:8d:9a:ed:54:de:47:b9:c1: af:8b:ee:b9:e5:81:15:b8:0a:80:00:ac:95:23:74:65:a3:6c: 00:70:6f:2c:05:6e:e7:28:19:5d:8c:fc:a8:ed:a7:44:69:5d: a3:51:a0:75:92:24:37:8b:65:71:5e:a8:a9:4d:e9:5c:6c:b1: 32:b5:ab:81:d6:9b:f1:84:bc:c8:38:0f:53:5f:8c:45:c6:70: e5:1f:7f:85:20:34:f9:b7:eb:d1:10:fd:d2:0f:77:36:f4:65: d6:c9:93:22:32:05:6f:6e:a0:35:98:77:47:f5:9b:0f:67:1e: d0:b0:7e:d4:7c:98:e9:7b:08:41:fd:bb:f7:60:73:59:0e:d9: 41:30:56:fc:b6:d8:82:08:79:83:d2:09:0f:4e:86:db:7a:e0: 97:e1:ec:de:db:73:68:57:14:fb:b2:96:84:02:39:87:8c:19: 55:f5:6f:14:9a:3d:a6:bc:5f:a3:ea:a1:1d:9b:1f:6c:90:ad: f5:a1:79:92:cf:80:6a:92:c5:5b:b9:60:fc:62:a7:7a:d6:bc: 35:50:ec:27:90:26:39:71:28:25:80:b7:2c:6d:21:a2:32:9a: 30:e2:9e:f4:83:8e:04:0a:90:f2:3b:de:89:79:4b:f9:28:d5: aa:d0:cf:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4gV/q31gcYlUPFy+6+ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZmM1OWNlMTM2ZTNlOTNhODZkZTU1ZjA1ZDQ5YTU5ZTE1 Y2JiYmYwHhcNMjUxMjE0MjIwMTI3WhcNMjUxMjE1MjIwMTI3WjAzMTEwLwYDVQQD Eyg0Y2EzM2MyM2UzZjg5YzIwMDNmM2VhNDc4OTkxMWQ2NTU2ZDcwYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cHPgFi7KbrF5U5JYRdnw3qp6Bsp 19cwGn2le7i/S5ygX8gD8bRuzLNTR5wFn1mVm8HIFfzAyFJjc8HjGPkm6dutFQaU GveMQY0nti25KbsyG9/YXEnHC/7E1xCKluq2wTwx11eFKU3oC+RiKIpv/uObkBoD vrFff56gcQv1EAdIDZcA1SOzIhotO8RwP96ZuSys6S/LW6CH/FjuQWrg/tc/bMuf hspwA/vFbKQB0EBRQ52j+/72cwAXfOzvNtI4MH6DuNlA06ge30EibrFAmTcHKQ6n P1WLcVC2CiZHMZeOJesorAfFP21ehyyLKhiEqO84e2eSUz2WVtUhcsCnswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyjPCPj+JwgA/PqR4mRHWVW1wxtMB8GA1UdIwQY MBaAFHz8Wc4Tbj6TqG3lXwXUmlnhXLu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2Mt ODA4OTVmODhmNWQ1LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2MtODA4OTVmODhmNWQ1 LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJMSWj7F rJc69I2a7VTeR7nBr4vuueWBFbgKgACslSN0ZaNsAHBvLAVu5ygZXYz8qO2nRGld o1GgdZIkN4tlcV6oqU3pXGyxMrWrgdab8YS8yDgPU1+MRcZw5R9/hSA0+bfr0RD9 0g93NvRl1smTIjIFb26gNZh3R/WbD2ce0LB+1HyY6XsIQf2792BzWQ7ZQTBW/LbY ggh5g9IJD06G23rgl+Hs3ttzaFcU+7KWhAI5h4wZVfVvFJo9prxfo+qhHZsfbJCt 9aF5ks+AapLFW7lg/GKneta8NVDsJ5AmOXEoJYC3LG0hojKaMOKe9IOOBAqQ8jve iXlL+SjVqtDPnw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:56:56 2025 by rpki-client