This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft File: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json) Hash identifier: ypj8BqeKcg/kn+81p4xDinROXhtudoovg/c3ClPKUng= Subject key identifier: 70:5C:66:4B:05:AA:94:C5:D8:78:D2:92:2A:6A:06:7C:81:8D:E0:EB Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B Certificate issuer: /CN=171bfdd42fa9484f56e189ba683d5188c524083b Certificate serial: 019B4324F809D8C280C73C547511AE7A6324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft Manifest number: 01F2 Signing time: Sun 21 Dec 2025 23:00:54 +0000 Manifest this update: Sun 21 Dec 2025 23:00:54 +0000 Manifest next update: Mon 22 Dec 2025 23:00:54 +0000 Files and hashes: 1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: FIn7/tuXp/7dbDhYh9WDkfa2qzAC2qi25oarcZkmxtw=) 2: TRbKL4kGxrCFAvUXltN0ocBpT58.roa (hash: oZP4etk1n3bpFlXee7D7+3mgIQiNQb5oae2tqJgBRbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:f8:09:d8:c2:80:c7:3c:54:75:11:ae:7a:63:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b Validity Not Before: Dec 21 23:00:54 2025 GMT Not After : Dec 22 23:00:54 2025 GMT Subject: CN=705c664b05aa94c5d878d2922a6a067c818de0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:48:8f:3d:c2:fc:77:c7:f5:26:6e:b3:96: 57:08:fa:68:d1:ae:02:9e:43:e7:03:ee:fe:32:93: d2:66:97:36:95:f9:0b:e5:36:4f:58:7f:e5:e3:7c: 4c:5d:5d:31:b2:ea:4e:b7:b9:bc:7c:49:c5:58:34: 9d:18:e8:dc:fd:ba:de:cf:c8:60:66:c2:dd:7f:f2: c3:de:3b:64:1c:3d:ab:8f:a6:6d:67:5e:f1:2f:99: fd:b0:51:d7:4e:6e:2b:d7:de:3a:b9:0c:c7:07:99: f8:34:83:c1:a5:1b:1f:65:50:a2:1c:8f:b9:d5:46: d1:44:65:fd:52:bd:d0:59:bb:1e:0f:46:9e:63:a4: 86:f3:15:ce:c3:b0:ca:dc:0b:cb:bb:f0:ec:2b:ab: b8:5c:64:54:86:0c:34:1a:5f:7d:2a:fa:75:5a:34: 60:7b:52:a5:6a:95:8e:76:f5:45:48:5e:43:99:fe: 69:4a:4c:1d:6b:80:68:e4:f6:78:38:f7:15:8d:b3: d6:89:97:5f:1c:37:5d:90:d7:91:94:c4:f8:5d:d4: d0:3f:f1:58:41:74:1a:51:bf:e6:e1:00:b9:b8:5f: a9:db:a0:be:d8:f5:d5:48:ea:57:7c:8b:aa:16:c4: 97:34:17:86:42:14:8a:8e:20:2a:f6:bd:52:ca:0b: 8f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:66:4B:05:AA:94:C5:D8:78:D2:92:2A:6A:06:7C:81:8D:E0:EB X509v3 Authority Key Identifier: keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cf:7b:89:87:71:37:8e:aa:45:a7:03:a9:a7:30:53:cc:08: ac:48:21:21:81:1d:2d:97:88:24:0b:91:e1:9b:a1:f5:2b:5e: 56:f8:bf:2f:fe:b2:6b:87:46:fa:e4:18:2e:ac:f5:df:08:aa: 81:7f:fa:45:89:7c:f6:9d:cb:95:9e:52:fe:0b:24:8a:ea:26: 39:34:89:49:d8:0f:30:60:e2:3e:66:9a:b2:5a:7d:b7:ec:a4: b3:ea:ab:a3:ad:65:2e:95:c7:70:af:5b:6e:44:bb:ee:6c:6d: 6e:e8:92:1f:11:52:6e:cc:54:c0:0f:18:37:d0:ae:5b:a9:c0: 73:19:21:27:a3:ba:e9:1f:bf:a1:cc:cf:65:05:e3:8b:1b:74: 0e:83:4d:39:22:58:fe:41:a2:24:eb:8a:e6:3f:b2:54:be:58: a3:a9:0a:c5:00:a0:9b:44:b3:37:07:20:7d:c0:4d:0f:fa:66: 54:90:b4:78:87:48:04:61:0d:a8:c7:86:32:c3:a6:bf:d0:a3: 6c:de:ef:b6:94:8d:6a:9c:d0:b3:4f:1b:28:f1:4e:32:f0:a2: 93:e3:7b:3c:8b:5a:56:8f:cc:c1:3a:31:e5:b9:a4:fb:c3:15: ec:87:57:a7:4f:b1:4a:f6:03:54:a8:46:8a:cf:2b:5e:92:bc: b0:a3:71:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJPgJ2MKAxzxUdRGuemMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MWJmZGQ0MmZhOTQ4NGY1NmUxODliYTY4M2Q1MTg4YzUy NDA4M2IwHhcNMjUxMjIxMjMwMDU0WhcNMjUxMjIyMjMwMDU0WjAzMTEwLwYDVQQD Eyg3MDVjNjY0YjA1YWE5NGM1ZDg3OGQyOTIyYTZhMDY3YzgxOGRlMGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQtIjz3C/HfH9SZus5ZXCPpo0a4C nkPnA+7+MpPSZpc2lfkL5TZPWH/l43xMXV0xsupOt7m8fEnFWDSdGOjc/brez8hg ZsLdf/LD3jtkHD2rj6ZtZ17xL5n9sFHXTm4r1946uQzHB5n4NIPBpRsfZVCiHI+5 1UbRRGX9Ur3QWbseD0aeY6SG8xXOw7DK3AvLu/DsK6u4XGRUhgw0Gl99Kvp1WjRg e1KlapWOdvVFSF5Dmf5pSkwda4Bo5PZ4OPcVjbPWiZdfHDddkNeRlMT4XdTQP/FY QXQaUb/m4QC5uF+p26C+2PXVSOpXfIuqFsSXNBeGQhSKjiAq9r1SyguP0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBcZksFqpTF2HjSkipqBnyBjeDrMB8GA1UdIwQY MBaAFBcb/dQvqUhPVuGJumg9UYjFJAg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2Yt YjRkOTY0Nzc2Yzg1LzEvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2YtYjRkOTY0Nzc2Yzg1 LzEvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEc97iYdx N46qRacDqacwU8wIrEghIYEdLZeIJAuR4Zuh9SteVvi/L/6ya4dG+uQYLqz13wiq gX/6RYl89p3LlZ5S/gskiuomOTSJSdgPMGDiPmaaslp9t+yks+qro61lLpXHcK9b bkS77mxtbuiSHxFSbsxUwA8YN9CuW6nAcxkhJ6O66R+/oczPZQXjixt0DoNNOSJY /kGiJOuK5j+yVL5Yo6kKxQCgm0SzNwcgfcBND/pmVJC0eIdIBGENqMeGMsOmv9Cj bN7vtpSNapzQs08bKPFOMvCik+N7PItaVo/MwTox5bmk+8MV7IdXp0+xSvYDVKhG is8rXpK8sKNxQg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:24:47 2025 by rpki-client