This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json) Hash identifier: lWM4E+5uq/CXt5GWKWUH/JKj6RJB6H5OhJprWn7DGkQ= Subject key identifier: A0:BD:CD:2A:D8:3B:34:27:04:3D:3A:66:7F:AD:4F:90:73:D5:85:C1 Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46 Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946 Certificate serial: 019B35D721EBD587C54AB3E504CA7140B624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 09:00:49 +0000 Manifest this update: Fri 19 Dec 2025 09:00:49 +0000 Manifest next update: Sat 20 Dec 2025 09:00:49 +0000 Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: 8PXvyp6c3avtSByRJ5cwcRm1aALENzyeQenyZLKm5NM=) 2: pjFDM6wzAyFnV_7W_SHgCVJP4hc.roa (hash: 25g7lwwxP1qGazXdPhbau6vE9l12B9+J1HdSOR/R0VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:21:eb:d5:87:c5:4a:b3:e5:04:ca:71:40:b6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946 Validity Not Before: Dec 19 09:00:49 2025 GMT Not After : Dec 20 09:00:49 2025 GMT Subject: CN=a0bdcd2ad83b3427043d3a667fad4f9073d585c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:b9:c6:ea:33:f4:18:89:72:f4:08:23:60: 4f:98:62:81:e9:35:1a:70:b3:81:93:73:1d:6d:15: 19:3d:49:96:db:89:6b:0a:5f:ee:25:c5:e5:90:0c: e7:bc:f3:86:16:09:03:85:59:c2:6c:69:83:52:ab: cf:64:5a:16:a6:64:98:46:63:86:f5:75:df:67:53: b6:a0:1d:8d:8e:06:b4:e6:78:2b:90:0c:0d:e3:23: 2f:ee:1f:9a:e6:f0:37:8e:20:83:52:c6:b7:95:be: 77:d1:ea:d9:63:48:ff:3b:0d:51:0b:98:67:c6:d2: c2:de:51:c9:5c:d0:74:7f:b7:cd:00:ce:9a:8a:fc: f2:b3:e5:c5:e0:45:a0:8b:ff:6e:52:9f:15:fb:8b: 1a:b5:1e:cf:b9:ff:8d:6c:e6:29:25:84:e5:b2:8d: 7f:bd:8d:36:7a:85:35:42:2c:e6:18:f7:05:6b:0f: a0:12:1a:4f:0b:d7:6f:82:ac:23:d0:4d:ed:52:2d: 1e:e5:c7:61:d1:1b:12:4d:60:1d:e0:e4:d2:e9:ae: 1b:04:94:0a:2a:9f:d7:eb:0c:2a:a6:ca:1d:a5:76: 28:28:08:24:48:87:e5:e1:c6:83:77:85:9c:2b:55: da:cd:e5:98:c7:e9:c8:2b:b7:c2:99:16:17:ac:48: c6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BD:CD:2A:D8:3B:34:27:04:3D:3A:66:7F:AD:4F:90:73:D5:85:C1 X509v3 Authority Key Identifier: keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:72:99:da:40:67:b1:80:0b:27:a1:e4:af:0a:3e:96:a5:d9: 03:9b:13:f6:34:d8:8b:3b:d6:3b:7a:da:90:c7:f5:3d:2d:97: da:b3:b7:6f:35:a1:83:aa:ca:5c:70:cf:79:8b:87:16:8d:52: d8:40:07:e2:e2:a3:33:9f:30:db:50:0c:0c:56:a1:c8:51:d1: 1f:b8:ff:9d:67:f6:f8:89:56:c2:22:ab:14:74:0f:a7:92:3c: 5f:dc:97:e4:53:45:dd:2d:79:d0:28:cb:bb:d7:5a:13:1d:44: f9:62:97:99:34:57:2a:7c:34:35:67:10:0b:02:27:90:ab:79: b9:78:67:27:40:cd:d2:14:0d:70:e6:e4:5b:64:b6:1a:38:34: 50:74:84:24:c7:78:1d:dc:e7:57:fc:df:40:08:61:32:82:da: e7:ed:d9:1f:e5:19:9f:60:78:f2:bc:b5:6e:9a:49:0e:45:46: fc:d4:93:e5:ef:79:75:41:71:a4:0a:9d:2f:9b:ae:9d:be:b8: 94:97:1b:3e:11:a2:22:04:0e:18:41:0b:d2:71:81:81:9e:23: a8:6b:de:f9:75:a7:94:90:71:1f:40:81:43:fc:37:37:6a:bf: 5b:9e:ee:05:a2:44:60:f1:d0:e0:72:50:10:c3:70:1c:48:03: 46:79:9b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11yHr1YfFSrPlBMpxQLYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTE0MTZhZTM5MjlkZjM3YmY2NmE0NTljZDNhY2E2Mzg5 MWU5NDYwHhcNMjUxMjE5MDkwMDQ5WhcNMjUxMjIwMDkwMDQ5WjAzMTEwLwYDVQQD EyhhMGJkY2QyYWQ4M2IzNDI3MDQzZDNhNjY3ZmFkNGY5MDczZDU4NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhq5xuoz9BiJcvQII2BPmGKB6TUa cLOBk3MdbRUZPUmW24lrCl/uJcXlkAznvPOGFgkDhVnCbGmDUqvPZFoWpmSYRmOG 9XXfZ1O2oB2Njga05ngrkAwN4yMv7h+a5vA3jiCDUsa3lb530erZY0j/Ow1RC5hn xtLC3lHJXNB0f7fNAM6aivzys+XF4EWgi/9uUp8V+4satR7Puf+NbOYpJYTlso1/ vY02eoU1QizmGPcFaw+gEhpPC9dvgqwj0E3tUi0e5cdh0RsSTWAd4OTS6a4bBJQK Kp/X6wwqpsodpXYoKAgkSIfl4caDd4WcK1XazeWYx+nIK7fCmRYXrEjGeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC9zSrYOzQnBD06Zn+tT5Bz1YXBMB8GA1UdIwQY MBaAFH8RQWrjkp3ze/ZqRZzTrKY4kelGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQt Njc1NmY3YjBjMGRiLzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQtNjc1NmY3YjBjMGRi LzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXKZ2kBn sYALJ6Hkrwo+lqXZA5sT9jTYizvWO3rakMf1PS2X2rO3bzWhg6rKXHDPeYuHFo1S 2EAH4uKjM58w21AMDFahyFHRH7j/nWf2+IlWwiKrFHQPp5I8X9yX5FNF3S150CjL u9daEx1E+WKXmTRXKnw0NWcQCwInkKt5uXhnJ0DN0hQNcObkW2S2Gjg0UHSEJMd4 HdznV/zfQAhhMoLa5+3ZH+UZn2B48ry1bppJDkVG/NST5e95dUFxpAqdL5uunb64 lJcbPhGiIgQOGEEL0nGBgZ4jqGve+XWnlJBxH0CBQ/w3N2q/W57uBaJEYPHQ4HJQ EMNwHEgDRnmbNA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:09 2025 by rpki-client