This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json) Hash identifier: fhORfv4cDX+sQodaFnCFb9cmpSPXcxBJ6QKXSm5fw8Q= Subject key identifier: C8:F5:8C:32:75:8C:97:A0:4E:75:FA:72:F7:13:5D:0C:2D:9E:38:57 Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59 Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59 Certificate serial: 019B405B7A8A5EAEDAE4AA26EDF7F2446996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:01:35 +0000 Manifest this update: Sun 21 Dec 2025 10:01:35 +0000 Manifest next update: Mon 22 Dec 2025 10:01:35 +0000 Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: Ao3oNBEwZe6/3evxuYzOOf3nB4xwBrc+aM/Q1H4e14U=) 2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:7a:8a:5e:ae:da:e4:aa:26:ed:f7:f2:44:69:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59 Validity Not Before: Dec 21 10:01:35 2025 GMT Not After : Dec 22 10:01:35 2025 GMT Subject: CN=c8f58c32758c97a04e75fa72f7135d0c2d9e3857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:6a:01:06:6b:e1:b9:4a:29:7e:e3:f0:29: 8e:a7:3b:fd:60:07:ed:59:cb:b4:1b:7a:02:c9:c1: c6:bc:7b:d1:e4:f6:b6:36:f5:f2:6b:ae:4e:67:4a: 9b:82:9c:2a:ee:a2:c4:f2:9c:c9:fe:72:08:00:73: 8d:30:9a:09:16:6e:ed:c6:20:0d:c5:b9:8a:8e:9d: 7e:7a:49:d9:6f:87:76:00:03:67:ca:53:64:24:cb: 66:57:d0:8c:10:09:89:cd:42:3d:a3:02:0e:d7:0e: 70:8f:c3:5c:d7:7a:c8:62:4c:0d:7a:0e:e4:24:a7: 72:5e:53:8d:ba:34:24:13:33:e3:b0:fb:94:66:67: c3:ff:c2:50:43:2b:4f:89:ad:4a:0c:52:d5:c0:89: 9d:e8:62:5c:a2:a4:df:35:af:ce:9c:60:5b:e0:f3: 7e:74:19:6e:10:2c:c1:27:c8:f0:f2:45:61:e0:0f: fe:82:54:18:5a:a6:89:1f:9b:9c:e2:1b:ea:79:ab: 97:92:d2:7b:bf:9c:ff:dd:fe:2a:77:8d:0a:d0:45: 60:f2:97:41:f3:c8:67:fb:bd:f6:e9:ad:7a:f3:2d: cd:3e:95:73:87:0d:e7:51:90:e4:e4:ba:b3:15:55: a3:51:3b:11:48:8a:b5:d4:38:87:57:69:a4:9a:99: 38:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F5:8C:32:75:8C:97:A0:4E:75:FA:72:F7:13:5D:0C:2D:9E:38:57 X509v3 Authority Key Identifier: keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:69:0c:2c:8a:ec:07:67:0f:77:2d:fc:55:a9:8a:ea:83:7b: e8:cc:4a:10:b1:46:cf:e8:3c:90:93:bc:40:b0:5f:fd:2b:01: 0b:fe:f2:57:92:80:ab:81:8e:fe:b6:55:cf:fc:13:23:e3:47: 8c:05:0d:db:22:a3:91:23:65:ac:44:7e:b5:6c:f1:71:ea:b4: a4:5e:ba:6e:0c:75:a5:4b:65:27:68:d6:a1:53:e4:57:6b:53: 6b:12:ec:b0:79:0e:45:1e:56:8f:77:8d:d3:f2:49:85:c6:7f: bc:49:4b:ae:55:46:9e:0a:b7:c8:04:66:05:13:66:19:65:b8: 4d:de:4c:94:0d:af:a3:a5:ae:ed:16:73:30:a1:99:a1:ba:b7: b1:7c:8a:19:34:78:77:08:66:4f:80:b2:eb:9f:7f:20:13:3c: 89:59:e8:32:bc:9c:47:02:b2:2d:16:99:2e:a8:9a:63:8e:c0: 37:d8:5c:67:eb:2d:9f:4c:c2:fc:be:b0:90:03:ad:5f:19:96: ad:a4:01:1c:5c:2b:94:46:24:6a:13:e8:6f:f5:4c:be:6b:bd: f3:1c:1b:ae:f9:ca:8e:41:0f:48:1e:d4:52:8c:c2:63:49:5d: f8:14:3c:4f:e9:23:48:56:91:2a:82:1c:8e:d8:d3:20:55:56: 8b:b8:98:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW3qKXq7a5Kom7ffyRGmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTVjNmY4MTVjNzBlZjE5MTBkMzc0OTM5NjM0NDVhZjkx OGFiNTkwHhcNMjUxMjIxMTAwMTM1WhcNMjUxMjIyMTAwMTM1WjAzMTEwLwYDVQQD EyhjOGY1OGMzMjc1OGM5N2EwNGU3NWZhNzJmNzEzNWQwYzJkOWUzODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMZqAQZr4blKKX7j8CmOpzv9YAft Wcu0G3oCycHGvHvR5Pa2NvXya65OZ0qbgpwq7qLE8pzJ/nIIAHONMJoJFm7txiAN xbmKjp1+eknZb4d2AANnylNkJMtmV9CMEAmJzUI9owIO1w5wj8Nc13rIYkwNeg7k JKdyXlONujQkEzPjsPuUZmfD/8JQQytPia1KDFLVwImd6GJcoqTfNa/OnGBb4PN+ dBluECzBJ8jw8kVh4A/+glQYWqaJH5uc4hvqeauXktJ7v5z/3f4qd40K0EVg8pdB 88hn+7326a168y3NPpVzhw3nUZDk5LqzFVWjUTsRSIq11DiHV2mkmpk4OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMj1jDJ1jJegTnX6cvcTXQwtnjhXMB8GA1UdIwQY MBaAFBSVxvgVxw7xkQ03STljRFr5GKtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYt MjUwMDQyMDM2NmZiLzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYtMjUwMDQyMDM2NmZi LzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGkMLIrs B2cPdy38VamK6oN76MxKELFGz+g8kJO8QLBf/SsBC/7yV5KAq4GO/rZVz/wTI+NH jAUN2yKjkSNlrER+tWzxceq0pF66bgx1pUtlJ2jWoVPkV2tTaxLssHkORR5Wj3eN 0/JJhcZ/vElLrlVGngq3yARmBRNmGWW4Td5MlA2vo6Wu7RZzMKGZobq3sXyKGTR4 dwhmT4Cy659/IBM8iVnoMrycRwKyLRaZLqiaY47AN9hcZ+stn0zC/L6wkAOtXxmW raQBHFwrlEYkahPob/VMvmu98xwbrvnKjkEPSB7UUozCY0ld+BQ8T+kjSFaRKoIc jtjTIFVWi7iYZg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:33:32 2025 by rpki-client