This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft File: 95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json) Hash identifier: /j1Wcfm030IFK40vTS1hdCw/qd7uo8+89RWA3dLxFjs= Subject key identifier: 73:CD:54:05:3E:92:10:95:10:69:62:C0:E5:F3:57:10:85:69:53:A8 Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5 Certificate issuer: /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5 Certificate serial: 019B5A88734E22B8D9CF31C1DB1A5A053D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 12:00:50 +0000 Manifest this update: Fri 26 Dec 2025 12:00:50 +0000 Manifest next update: Sat 27 Dec 2025 12:00:50 +0000 Files and hashes: 1: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: H6J3EOTEqizQ3nDPXI1IQfKq5E+a3JmTnP9MNpQ9xaQ=) 2: HZJZK1LDGniWHSTreLFu2CqFoKw.roa (hash: 40ZMLNytGhjN7rMLqzH8llTGFye5F6mDvh5SBtZYngo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:73:4e:22:b8:d9:cf:31:c1:db:1a:5a:05:3d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5 Validity Not Before: Dec 26 12:00:50 2025 GMT Not After : Dec 27 12:00:50 2025 GMT Subject: CN=73cd54053e921095106962c0e5f35710856953a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8e:10:d5:9f:a2:c7:d1:7a:54:c6:0a:80:d4: a2:43:00:c0:68:9a:05:fa:30:54:37:12:b4:52:05: bf:76:92:84:d2:3f:18:81:ec:d5:4c:fd:69:ca:04: 23:b4:43:85:52:c9:51:7b:02:e7:4b:41:b5:91:d6: 32:8b:34:e4:a0:8b:0d:64:3b:75:19:a9:37:bd:d4: 7d:53:25:49:a8:82:83:82:0e:db:6b:0e:f7:fc:53: 98:f3:d3:87:44:e0:ca:ee:24:c6:92:df:ae:51:61: 0d:e5:c9:f7:f6:59:ea:4e:0d:e1:36:44:90:c4:da: f7:a2:bd:75:1e:c5:2a:f1:fc:9c:22:a3:ef:1e:c8: a9:16:86:81:de:a2:b2:1a:76:53:8d:6d:7d:c5:45: e9:3e:48:4b:91:74:3b:f1:64:8f:98:71:70:51:01: 6d:8e:af:25:14:39:48:de:2b:c6:3d:49:fb:15:73: a6:b5:08:2f:02:33:67:98:f8:5e:15:97:d8:61:72: 50:2a:6b:c9:f8:ec:36:30:dc:86:6c:ee:fd:0f:6d: 6d:1b:7f:a7:63:8f:20:3b:a7:b4:5c:8d:22:44:82: c1:b1:9c:f1:0d:7e:af:e4:9d:12:6b:8b:c5:47:1d: e4:0c:ca:69:8b:d5:56:08:f6:51:32:bf:f0:8d:32: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CD:54:05:3E:92:10:95:10:69:62:C0:E5:F3:57:10:85:69:53:A8 X509v3 Authority Key Identifier: keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:f0:49:ef:10:9b:24:13:9b:a3:17:9a:94:cb:25:ff:1b:bc: 7e:03:cc:f9:c1:56:b6:ed:ba:7d:60:91:16:b7:54:5a:f0:e7: e1:27:dc:bb:e4:b6:e1:40:7b:a6:db:ab:09:c3:38:d2:bd:71: 5e:8f:d3:d8:6e:9a:32:9f:dd:cf:d1:ea:d2:7f:8b:9f:b2:72: fe:7e:d9:c5:96:1b:b8:4f:36:80:1a:62:d5:02:70:aa:ee:de: 7c:f3:2f:34:9e:e6:4a:0b:d3:4b:c3:6d:ab:9f:54:29:18:a3: 93:9c:9b:80:94:0b:c2:84:3b:f7:a8:9e:73:e1:9a:40:3c:16: 14:bb:d7:fd:45:d7:62:f4:d1:1a:cd:5c:4f:42:b3:f4:ff:60: ee:d2:7a:89:33:0d:2d:da:43:a8:6f:e5:d7:3a:0c:1f:1f:76: 51:92:f0:9e:20:33:68:1a:08:b0:83:4c:79:16:a8:3c:80:dd: f7:e9:c0:89:56:30:2a:de:de:c8:03:d6:23:3c:d3:51:d2:97: d6:91:5b:38:e3:18:26:e2:bf:cc:9a:14:5b:db:3f:23:06:c5: ed:0e:a8:72:f6:9e:44:a7:29:96:76:67:82:f9:81:1e:2a:97: 25:f4:02:f1:5d:ea:81:05:f6:d7:eb:90:31:7b:b4:0d:2c:25: fa:80:8d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHNOIrjZzzHB2xpaBT0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3OTE3MTRlYjZhNGIyYWZlZjgwMmU5YzE3OWRjMmNmYzJk MWNjZTUwHhcNMjUxMjI2MTIwMDUwWhcNMjUxMjI3MTIwMDUwWjAzMTEwLwYDVQQD Eyg3M2NkNTQwNTNlOTIxMDk1MTA2OTYyYzBlNWYzNTcxMDg1Njk1M2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o4Q1Z+ix9F6VMYKgNSiQwDAaJoF +jBUNxK0UgW/dpKE0j8YgezVTP1pygQjtEOFUslRewLnS0G1kdYyizTkoIsNZDt1 Gak3vdR9UyVJqIKDgg7baw73/FOY89OHRODK7iTGkt+uUWEN5cn39lnqTg3hNkSQ xNr3or11HsUq8fycIqPvHsipFoaB3qKyGnZTjW19xUXpPkhLkXQ78WSPmHFwUQFt jq8lFDlI3ivGPUn7FXOmtQgvAjNnmPheFZfYYXJQKmvJ+Ow2MNyGbO79D21tG3+n Y48gO6e0XI0iRILBsZzxDX6v5J0Sa4vFRx3kDMppi9VWCPZRMr/wjTL60wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPNVAU+khCVEGliwOXzVxCFaVOoMB8GA1UdIwQY MBaAFPeRcU62pLKv74AunBedws/C0czlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84NjJmYzAtNWNiZS00Y2E3LWE0NDUt M2FlZTQwODdiNTZmLzEvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84NjJmYzAtNWNiZS00Y2E3LWE0NDUtM2FlZTQwODdiNTZm LzEvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwfBJ7xCb JBOboxealMsl/xu8fgPM+cFWtu26fWCRFrdUWvDn4Sfcu+S24UB7pturCcM40r1x Xo/T2G6aMp/dz9Hq0n+Ln7Jy/n7ZxZYbuE82gBpi1QJwqu7efPMvNJ7mSgvTS8Nt q59UKRijk5ybgJQLwoQ796iec+GaQDwWFLvX/UXXYvTRGs1cT0Kz9P9g7tJ6iTMN LdpDqG/l1zoMHx92UZLwniAzaBoIsINMeRaoPIDd9+nAiVYwKt7eyAPWIzzTUdKX 1pFbOOMYJuK/zJoUW9s/IwbF7Q6ocvaeRKcplnZngvmBHiqXJfQC8V3qgQX21+uQ MXu0DSwl+oCNeA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:24 2025 by rpki-client