This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json) Hash identifier: ukly5MUywx5t8XAcPs0Tp9CAzHIQuSP8mRvJqyY+sWA= Subject key identifier: 03:62:CF:D4:43:53:34:2E:67:AC:0F:3F:98:27:5E:C9:81:F3:A9:BD Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a Certificate serial: 019B2D0C5FF9E73C6486555A7FB3263903C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 16:02:24 +0000 Manifest this update: Wed 17 Dec 2025 16:02:24 +0000 Manifest next update: Thu 18 Dec 2025 16:02:24 +0000 Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=) 2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: tSHjuV9KcpHUY331GTC3W6H0UHV9mJ0sz4W52if9j7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:5f:f9:e7:3c:64:86:55:5a:7f:b3:26:39:03:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a Validity Not Before: Dec 17 16:02:24 2025 GMT Not After : Dec 18 16:02:24 2025 GMT Subject: CN=0362cfd44353342e67ac0f3f98275ec981f3a9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ff:3b:24:6a:da:8b:fa:65:cf:cf:4c:12:8e: 05:ec:4f:36:8d:cd:34:29:ed:73:48:1b:d0:85:1b: bd:d8:04:75:94:60:38:32:4f:95:19:82:46:be:35: ed:5d:5f:d3:4d:14:56:fa:2e:78:db:3d:e4:ba:58: e3:ec:db:cf:69:86:3c:e3:03:ac:8f:59:8f:01:60: 6e:e7:06:44:c2:ab:a4:b8:04:c0:55:47:84:28:70: 62:c9:c4:75:77:72:6a:7d:c4:ef:0b:4d:82:2d:0b: aa:59:9f:fa:74:d9:98:c9:06:6b:d4:8b:74:64:f7: cd:fa:a4:2d:b9:c6:a2:25:e0:db:ca:e1:cb:0b:6c: 0b:7c:df:d6:cc:a7:14:06:d1:48:18:99:63:da:06: fd:3d:9c:20:56:8e:f9:7a:b7:9c:52:e8:2e:a8:1a: 78:c6:45:f9:67:89:18:76:a9:ca:d7:d0:eb:ff:78: fd:f7:48:bc:d2:ff:cd:0b:c2:b7:1a:e8:44:bf:5d: c8:35:82:ab:61:ae:f3:58:7b:14:e9:7c:32:62:bf: 36:74:92:9f:1f:d3:d0:a1:14:c2:64:29:44:80:e3: d6:23:84:77:57:6b:34:4c:90:0a:69:b5:94:6b:b3: 35:ea:12:5f:33:7b:5b:69:47:4e:24:e4:5f:87:76: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:62:CF:D4:43:53:34:2E:67:AC:0F:3F:98:27:5E:C9:81:F3:A9:BD X509v3 Authority Key Identifier: keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:31:64:0d:0d:93:35:3d:dc:58:2d:99:a6:eb:ba:33:43:e7: 21:a3:02:3c:7b:a4:e6:54:71:13:47:69:8d:8b:bc:9f:26:4a: 5d:70:96:47:92:96:9d:02:2c:3e:7d:74:90:7f:98:3e:98:ca: e4:f3:8b:08:ba:f6:5b:3d:77:77:90:cc:ac:7c:69:99:9c:f5: fc:14:49:0a:e3:b6:6c:31:1e:10:fb:17:42:8f:a0:d6:25:6a: b5:23:56:25:c6:92:e5:75:07:10:e9:0c:e5:db:f0:c5:0b:b5: 4c:71:da:53:41:f1:4b:b9:7b:28:15:ea:a7:26:85:0f:2a:8e: e9:cc:0f:8d:93:aa:3c:b1:26:b6:1f:c7:40:70:e9:50:b8:d9: 33:c9:23:9c:b2:a8:d9:35:74:0f:5d:97:a2:a2:da:66:d9:e0: a2:55:fc:b2:b7:c7:8f:60:15:74:3b:67:cc:e8:3e:d5:5a:30: 0e:8f:c6:fb:58:5a:63:81:76:0b:5a:92:53:19:a7:35:c7:8c: aa:38:60:e6:49:53:15:99:1e:97:bf:99:6b:a6:08:fa:97:35: d1:6a:31:39:fc:27:07:c5:fa:d1:f5:af:5f:54:50:d7:85:72: 28:13:21:19:aa:a6:ec:ad:a8:74:9f:18:cf:4c:b4:e4:3c:47: 05:f9:7f:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDF/55zxkhlVaf7MmOQPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3 OTg5MmEwHhcNMjUxMjE3MTYwMjI0WhcNMjUxMjE4MTYwMjI0WjAzMTEwLwYDVQQD EygwMzYyY2ZkNDQzNTMzNDJlNjdhYzBmM2Y5ODI3NWVjOTgxZjNhOWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f87JGrai/plz89MEo4F7E82jc00 Ke1zSBvQhRu92AR1lGA4Mk+VGYJGvjXtXV/TTRRW+i542z3kuljj7NvPaYY84wOs j1mPAWBu5wZEwqukuATAVUeEKHBiycR1d3JqfcTvC02CLQuqWZ/6dNmYyQZr1It0 ZPfN+qQtucaiJeDbyuHLC2wLfN/WzKcUBtFIGJlj2gb9PZwgVo75erecUuguqBp4 xkX5Z4kYdqnK19Dr/3j990i80v/NC8K3GuhEv13INYKrYa7zWHsU6XwyYr82dJKf H9PQoRTCZClEgOPWI4R3V2s0TJAKabWUa7M16hJfM3tbaUdOJORfh3a8bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANiz9RDUzQuZ6wPP5gnXsmB86m9MB8GA1UdIwQY MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzFkDQ2T NT3cWC2Zpuu6M0PnIaMCPHuk5lRxE0dpjYu8nyZKXXCWR5KWnQIsPn10kH+YPpjK 5POLCLr2Wz13d5DMrHxpmZz1/BRJCuO2bDEeEPsXQo+g1iVqtSNWJcaS5XUHEOkM 5dvwxQu1THHaU0HxS7l7KBXqpyaFDyqO6cwPjZOqPLEmth/HQHDpULjZM8kjnLKo 2TV0D12XoqLaZtngolX8srfHj2AVdDtnzOg+1VowDo/G+1haY4F2C1qSUxmnNceM qjhg5klTFZkel7+Za6YI+pc10WoxOfwnB8X60fWvX1RQ14VyKBMhGaqm7K2odJ8Y z0y05DxHBfl/dw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:51:43 2025 by rpki-client