This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json) Hash identifier: o/aokqe5PoPJ6I7UM6QGGZ7N4CX3RXPoqlEAHdh1Fko= Subject key identifier: 22:FD:7B:91:8B:5B:1C:3E:47:AC:E3:B9:8D:80:68:B4:3D:2E:A4:63 Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15 Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315 Certificate serial: 019B43929872FAFBA5718A38E506A3ECBD86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft Manifest number: 11FB Signing time: Mon 22 Dec 2025 01:00:39 +0000 Manifest this update: Mon 22 Dec 2025 01:00:39 +0000 Manifest next update: Tue 23 Dec 2025 01:00:39 +0000 Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: KpZCiPOc/VXyf9DzHuBFJkHhS1QrCc6jiVMmncSeniA=) 2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:98:72:fa:fb:a5:71:8a:38:e5:06:a3:ec:bd:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f188adab5b552081ecac821c9b090394873b315 Validity Not Before: Dec 22 01:00:39 2025 GMT Not After : Dec 23 01:00:39 2025 GMT Subject: CN=22fd7b918b5b1c3e47ace3b98d8068b43d2ea463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:56:0f:88:26:63:ff:f8:0c:ee:f8:06:cd: 59:ef:ff:7e:8e:8d:24:41:b0:2e:a0:4a:d8:38:3f: 60:7b:37:5d:e4:ab:1d:0e:d1:8a:bd:c9:70:58:53: 3e:1c:24:ed:1c:b7:f2:98:5e:e1:2e:6f:74:3b:cf: c4:1e:2d:e7:23:a7:12:22:4a:80:48:fa:45:c4:ef: 4b:aa:0d:6b:28:43:c3:3d:29:1f:48:2a:ab:0b:0e: 9f:94:8a:ea:d4:9c:54:e0:9d:d9:60:d4:e1:39:b2: 1c:8b:50:ca:54:f2:55:1a:f1:ca:14:4c:f5:65:f2: 9b:6b:ad:00:1b:f3:af:54:3c:80:91:fc:22:4b:97: b5:3b:9f:e1:8d:ba:cb:d6:81:29:56:b8:56:15:10: 52:bb:08:d7:87:92:98:8d:61:8c:2b:d0:52:e3:f9: 4a:cb:d3:7f:23:d7:5f:81:94:dd:21:e6:de:54:db: d3:b1:9d:46:d0:18:18:db:bd:af:73:39:74:f0:c4: c4:cd:d1:44:49:ec:7d:5d:24:19:49:ab:f9:4c:79: b5:ff:65:17:eb:6d:21:79:27:e0:13:7b:54:e9:7e: 9f:3f:74:b0:d1:86:27:4e:d0:b2:42:8c:6d:70:5f: e4:ad:fe:f4:61:b9:ad:46:35:51:9a:89:67:a0:c5: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:7B:91:8B:5B:1C:3E:47:AC:E3:B9:8D:80:68:B4:3D:2E:A4:63 X509v3 Authority Key Identifier: keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:19:d5:54:90:6b:d9:14:8e:2c:7f:ab:16:74:c2:9c:17:97: 72:5b:36:c6:26:95:eb:26:5b:77:b6:f6:25:ea:89:64:45:59: 46:42:2c:c6:f3:70:f5:42:6f:b8:90:22:cd:b6:e9:9c:74:f0: 2f:9d:14:52:6a:b2:53:70:9c:a1:3e:a3:ea:71:68:d1:0a:37: 95:e7:fc:ef:d7:1f:33:f9:ac:ec:e8:9e:fd:9b:89:68:12:58: fc:43:41:cb:0d:bd:81:42:7b:bb:e0:eb:25:82:04:17:90:27: d8:53:f5:e5:ce:5b:13:2e:a7:05:2d:6e:87:4c:4a:7f:1a:37: bf:75:78:05:92:d4:9f:fe:8f:b2:bb:f2:f6:96:9d:68:88:7c: 12:a6:4e:25:cb:d0:89:c8:81:0d:13:44:4e:46:24:37:78:cf: b2:ed:9e:51:b9:82:56:aa:67:96:4a:d1:2b:ea:90:34:d2:5c: be:ed:93:8a:bf:de:b6:ba:37:af:6d:a5:c2:33:d6:54:5a:72: 2b:d4:07:ea:bd:37:0e:2c:f4:c6:1f:7b:5a:b1:2d:c6:e6:56: 1a:ed:b9:73:03:7f:ee:66:8e:2a:c7:1e:b3:9a:ba:7b:bc:de: 01:ff:08:bc:6c:08:d5:1e:5f:47:ad:bb:98:45:69:a8:8c:e5: 96:03:c3:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkphy+vulcYo45Qaj7L2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTg4YWRhYjViNTUyMDgxZWNhYzgyMWM5YjA5MDM5NDg3 M2IzMTUwHhcNMjUxMjIyMDEwMDM5WhcNMjUxMjIzMDEwMDM5WjAzMTEwLwYDVQQD EygyMmZkN2I5MThiNWIxYzNlNDdhY2UzYjk4ZDgwNjhiNDNkMmVhNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2hWD4gmY//4DO74Bs1Z7/9+jo0k QbAuoErYOD9gezdd5KsdDtGKvclwWFM+HCTtHLfymF7hLm90O8/EHi3nI6cSIkqA SPpFxO9Lqg1rKEPDPSkfSCqrCw6flIrq1JxU4J3ZYNThObIci1DKVPJVGvHKFEz1 ZfKba60AG/OvVDyAkfwiS5e1O5/hjbrL1oEpVrhWFRBSuwjXh5KYjWGMK9BS4/lK y9N/I9dfgZTdIebeVNvTsZ1G0BgY272vczl08MTEzdFESex9XSQZSav5THm1/2UX 620heSfgE3tU6X6fP3Sw0YYnTtCyQoxtcF/krf70YbmtRjVRmolnoMU/TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCL9e5GLWxw+R6zjuY2AaLQ9LqRjMB8GA1UdIwQY MBaAFH8Yitq1tVIIHsrIIcmwkDlIc7MVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhpSzJyVzFVZ2dleXNnaHliQ1FPVWh6c3hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hNjU1MjItZjdjNS00ODdiLWI3Yjgt MmU0NjE0MTQxYWE0LzEvZnhpSzJyVzFVZ2dleXNnaHliQ1FPVWh6c3hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9hNjU1MjItZjdjNS00ODdiLWI3YjgtMmU0NjE0MTQxYWE0 LzEvZnhpSzJyVzFVZ2dleXNnaHliQ1FPVWh6c3hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhnVVJBr 2RSOLH+rFnTCnBeXcls2xiaV6yZbd7b2JeqJZEVZRkIsxvNw9UJvuJAizbbpnHTw L50UUmqyU3CcoT6j6nFo0Qo3lef879cfM/ms7Oie/ZuJaBJY/ENByw29gUJ7u+Dr JYIEF5An2FP15c5bEy6nBS1uh0xKfxo3v3V4BZLUn/6Psrvy9padaIh8EqZOJcvQ iciBDRNETkYkN3jPsu2eUbmCVqpnlkrRK+qQNNJcvu2Tir/etro3r22lwjPWVFpy K9QH6r03Diz0xh97WrEtxuZWGu25cwN/7maOKsces5q6e7zeAf8IvGwI1R5fR627 mEVpqIzllgPDOw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:11 2025 by rpki-client