This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json) Hash identifier: SKcVJRX0kgRWQjCe91oCzzXI8ON+E8rjP1Ia9ruGpLE= Subject key identifier: 81:1B:1D:87:3E:32:BF:F0:8A:61:EB:46:CF:CE:D0:7F:39:79:22:B9 Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22 Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22 Certificate serial: 019B4882F38BB40934EB9A7D28FFEF36EC69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft Manifest number: 1201 Signing time: Tue 23 Dec 2025 00:01:40 +0000 Manifest this update: Tue 23 Dec 2025 00:01:40 +0000 Manifest next update: Wed 24 Dec 2025 00:01:40 +0000 Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=) 2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: g2jz4umXUm3Vkl0moc2oiG02PO771fhORuN/RYZ/HHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:f3:8b:b4:09:34:eb:9a:7d:28:ff:ef:36:ec:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22 Validity Not Before: Dec 23 00:01:40 2025 GMT Not After : Dec 24 00:01:40 2025 GMT Subject: CN=811b1d873e32bff08a61eb46cfced07f397922b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:e5:9b:7c:c3:5f:09:93:ef:fb:88:c5:fa: fd:ce:0f:ea:b0:30:fb:79:67:00:24:e7:84:85:4a: 0a:25:c3:f7:5a:1f:4a:f6:f6:4a:fa:75:c4:ff:ab: 2b:f5:5e:53:e1:3b:5e:8f:07:c1:8c:12:f9:fd:ad: 73:cb:d2:73:44:07:f3:a5:b3:ef:f1:fe:7a:06:27: 1b:93:2d:e3:4b:61:09:6b:07:64:fe:c2:78:f8:58: 4f:1b:3e:cd:f5:e6:ca:b3:9a:a6:04:a1:18:8e:fe: 76:5b:a6:b5:5e:e7:2d:7d:fe:a5:09:03:43:8c:fc: 8e:1e:74:ee:0a:10:6d:cd:66:7f:1c:3f:71:78:94: 51:dc:94:8d:c1:bc:73:3c:9a:97:ee:6c:77:cf:25: 06:14:54:1c:70:30:17:fa:f4:1f:03:36:b8:24:17: e3:df:ef:1d:78:47:90:28:ff:7a:18:99:30:44:77: 8d:00:9b:1f:a3:e9:3c:89:d6:84:b5:a5:8b:ee:a3: 8d:2c:83:91:76:3c:35:30:2c:93:a0:93:69:f7:8c: 1b:16:12:31:2f:84:fb:ea:75:7c:73:1a:1c:33:26: ac:5f:d5:b6:70:af:2a:19:3a:02:79:eb:ab:e6:c8: 8f:95:4f:8c:d0:d5:9a:f1:14:ea:bf:48:34:ac:f5: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1B:1D:87:3E:32:BF:F0:8A:61:EB:46:CF:CE:D0:7F:39:79:22:B9 X509v3 Authority Key Identifier: keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:15:4a:c1:3d:4c:c6:fa:96:76:45:38:28:54:5c:43:d8:e6: 4d:03:ac:f5:ff:74:52:47:70:7a:18:f5:af:09:75:7c:c5:bb: 95:28:33:e7:c4:f1:19:30:c7:ef:b3:b3:04:83:89:e2:93:ad: 81:d6:61:e7:b2:2e:da:3f:d6:9f:6a:95:23:30:af:2b:cd:d9: 3b:f6:91:c1:f5:71:7a:f7:c5:68:c8:5d:23:69:45:94:13:a9: 90:68:a3:9b:ba:e2:89:ce:cd:a4:ec:95:f8:78:09:c9:08:83: 39:90:17:3b:e7:4b:a1:d3:7d:62:b7:5b:05:0c:6c:0f:c1:88: fd:5b:60:02:5b:ba:c6:b1:67:d5:52:12:82:35:81:2d:d8:7a: 54:c0:78:6a:7f:18:2b:bf:29:78:59:11:4d:26:1c:85:a0:26: 1b:9f:c4:b6:5c:5d:a3:0b:1a:a2:e3:3f:bd:11:c1:c2:d2:06: d2:27:5b:ce:e0:3a:86:a7:24:20:17:78:89:bd:c4:d2:7d:37: 2d:7a:78:cf:d6:f1:1a:1c:11:0f:29:22:e4:63:30:76:80:b9: 2a:29:ef:2d:23:13:f0:2d:24:93:d0:f0:f0:75:5f:a2:e7:0f: c9:a9:76:2a:37:fa:3c:ba:b6:22:07:b3:43:24:f8:da:77:05: d4:da:c9:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgvOLtAk065p9KP/vNuxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTc4ZmFmNjQwMWUyZjM3MTZlMzE3NjQ1NjlkZjczMWRm NThmMjIwHhcNMjUxMjIzMDAwMTQwWhcNMjUxMjI0MDAwMTQwWjAzMTEwLwYDVQQD Eyg4MTFiMWQ4NzNlMzJiZmYwOGE2MWViNDZjZmNlZDA3ZjM5NzkyMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0blm3zDXwmT7/uIxfr9zg/qsDD7 eWcAJOeEhUoKJcP3Wh9K9vZK+nXE/6sr9V5T4TtejwfBjBL5/a1zy9JzRAfzpbPv 8f56Bicbky3jS2EJawdk/sJ4+FhPGz7N9ebKs5qmBKEYjv52W6a1Xuctff6lCQND jPyOHnTuChBtzWZ/HD9xeJRR3JSNwbxzPJqX7mx3zyUGFFQccDAX+vQfAza4JBfj 3+8deEeQKP96GJkwRHeNAJsfo+k8idaEtaWL7qONLIORdjw1MCyToJNp94wbFhIx L4T76nV8cxocMyasX9W2cK8qGToCeeur5siPlU+M0NWa8RTqv0g0rPVaXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEbHYc+Mr/wimHrRs/O0H85eSK5MB8GA1UdIwQY MBaAFH8Xj69kAeLzcW4xdkVp33Md9Y8iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYjc5NjgtY2E0ZC00NWY0LWI2NzEt MmU3Zjc4NDg5Y2QzLzEvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xYjc5NjgtY2E0ZC00NWY0LWI2NzEtMmU3Zjc4NDg5Y2Qz LzEvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRVKwT1M xvqWdkU4KFRcQ9jmTQOs9f90Ukdwehj1rwl1fMW7lSgz58TxGTDH77OzBIOJ4pOt gdZh57Iu2j/Wn2qVIzCvK83ZO/aRwfVxevfFaMhdI2lFlBOpkGijm7riic7NpOyV +HgJyQiDOZAXO+dLodN9YrdbBQxsD8GI/VtgAlu6xrFn1VISgjWBLdh6VMB4an8Y K78peFkRTSYchaAmG5/EtlxdowsaouM/vRHBwtIG0idbzuA6hqckIBd4ib3E0n03 LXp4z9bxGhwRDyki5GMwdoC5KinvLSMT8C0kk9Dw8HVfoucPyal2Kjf6PLq2Igez QyT42ncF1NrJcA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:10:11 2025 by rpki-client