This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json) Hash identifier: SPTpGDrQIanZwHSrDrJCgD4Yzza+JPXQ7Dn764eFKIc= Subject key identifier: D9:24:2A:6D:C4:E5:66:50:6E:2B:21:A0:12:AF:0E:EF:81:12:99:A4 Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Certificate serial: 019B2364592354B53D3771C56A9EAB13BC0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft Manifest number: 1752 Signing time: Mon 15 Dec 2025 19:02:17 +0000 Manifest this update: Mon 15 Dec 2025 19:02:17 +0000 Manifest next update: Tue 16 Dec 2025 19:02:17 +0000 Files and hashes: 1: F3Fzvuewg5rSmt66kLcFE3kwwlY.roa (hash: hcOeaGo4+3IDIEKUeW5pWD/4vLI+EphBbol71rMrCqA=) 2: RkNSHPxeGyuQWaphLZeft9rG6t4.roa (hash: c7vEvcPCr8KpDOxbqsIVXnfktutvPBP6mswtibwiwTc=) 3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: UtACBUAgzq7S6ge/EahHBaLsZwRM60Th79iN6fW5JLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:59:23:54:b5:3d:37:71:c5:6a:9e:ab:13:bc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Validity Not Before: Dec 15 19:02:17 2025 GMT Not After : Dec 16 19:02:17 2025 GMT Subject: CN=d9242a6dc4e566506e2b21a012af0eef811299a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3a:85:bf:e4:55:79:af:ae:6f:d0:25:da:fb: 92:52:10:56:ac:75:99:ed:bc:d0:f6:0b:30:2c:d1: e9:c5:90:4e:41:37:80:ed:37:7f:69:12:66:b7:f5: 75:1c:5e:37:92:8f:2d:ff:de:74:46:37:d2:ab:ed: 8d:06:c5:b5:48:97:52:ca:68:6e:d1:3d:87:7f:32: 20:7c:c5:ee:ab:c7:ad:8b:63:51:ac:7b:00:b5:dd: 42:9f:90:d7:3f:0a:49:f9:28:65:8a:60:75:b8:8f: c6:d2:ba:06:24:0d:77:92:7c:0b:17:04:9e:79:5c: 57:44:ae:73:4c:e2:21:70:2e:5d:23:e7:f0:55:f1: fc:2d:30:01:8e:7a:da:54:7d:2a:c5:16:20:b3:1f: df:b6:ac:97:a2:44:51:51:95:ab:65:4e:c6:31:40: 51:a5:9a:02:c4:73:70:50:dd:2a:13:ff:6c:06:bd: 89:89:8f:b8:18:60:55:61:93:e9:d7:d9:2d:a4:e0: 15:a6:a3:5b:cb:ec:42:4b:a0:2c:4d:84:f6:a0:b9: a9:f0:69:b0:ca:96:7f:ba:84:48:1f:ef:d3:ed:1e: 09:d6:a4:71:48:6e:93:3d:53:ba:6f:79:83:23:08: 85:ed:da:47:40:79:74:4c:45:5a:58:0f:61:ac:f6: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:24:2A:6D:C4:E5:66:50:6E:2B:21:A0:12:AF:0E:EF:81:12:99:A4 X509v3 Authority Key Identifier: keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:73:ce:e3:cd:18:39:e4:69:36:6d:da:eb:54:41:a7:a5:4b: c3:df:e3:c1:bd:63:3f:06:37:dc:fc:62:79:9a:42:2b:d2:df: 13:22:d3:51:30:cb:84:f1:0d:61:da:e4:6a:a8:1b:7f:1c:b3: 3a:58:53:f5:99:99:3f:29:c1:ba:8c:a9:fa:e1:9c:4e:54:34: ff:57:7e:00:5c:be:c7:18:03:7d:ae:bd:c8:0f:24:0f:3a:98: a9:26:b5:d2:a2:04:80:21:77:fc:8e:d5:44:db:7d:46:8b:d5: 5e:6f:17:b6:2c:7b:1d:dc:c7:a8:04:de:e9:72:2f:6a:c4:a5: 5d:cc:f6:b0:9f:35:9c:cf:b9:d6:0f:99:79:bb:d2:5b:b7:34: ff:8b:00:d3:17:b5:4d:19:35:47:c5:47:c3:0d:65:d5:0e:7a: aa:6b:62:2e:63:ec:08:9a:8e:85:00:89:4f:06:3e:a5:a4:19: 3f:9e:4e:8c:a9:52:e9:a9:09:f7:5b:4a:da:f0:21:e3:11:53: bf:f2:82:37:2f:6e:fc:e2:93:1c:bf:eb:81:62:2b:84:87:32: 0c:6f:83:9b:08:fa:d1:ca:c0:47:79:96:00:4f:0c:95:09:71: aa:a0:a8:33:6a:cc:42:29:5f:a8:7b:e8:9b:6c:c5:f1:87:27: 81:de:05:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZFkjVLU9N3HFap6rE7wNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz OWE3YzQwHhcNMjUxMjE1MTkwMjE3WhcNMjUxMjE2MTkwMjE3WjAzMTEwLwYDVQQD EyhkOTI0MmE2ZGM0ZTU2NjUwNmUyYjIxYTAxMmFmMGVlZjgxMTI5OWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jqFv+RVea+ub9Al2vuSUhBWrHWZ 7bzQ9gswLNHpxZBOQTeA7Td/aRJmt/V1HF43ko8t/950RjfSq+2NBsW1SJdSymhu 0T2HfzIgfMXuq8eti2NRrHsAtd1Cn5DXPwpJ+ShlimB1uI/G0roGJA13knwLFwSe eVxXRK5zTOIhcC5dI+fwVfH8LTABjnraVH0qxRYgsx/ftqyXokRRUZWrZU7GMUBR pZoCxHNwUN0qE/9sBr2JiY+4GGBVYZPp19ktpOAVpqNby+xCS6AsTYT2oLmp8Gmw ypZ/uoRIH+/T7R4J1qRxSG6TPVO6b3mDIwiF7dpHQHl0TEVaWA9hrPZoXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkkKm3E5WZQbishoBKvDu+BEpmkMB8GA1UdIwQY MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt OGMzMmMzNTFlZTcwLzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXPO480Y OeRpNm3a61RBp6VLw9/jwb1jPwY33PxieZpCK9LfEyLTUTDLhPENYdrkaqgbfxyz OlhT9ZmZPynBuoyp+uGcTlQ0/1d+AFy+xxgDfa69yA8kDzqYqSa10qIEgCF3/I7V RNt9RovVXm8Xtix7HdzHqATe6XIvasSlXcz2sJ81nM+51g+ZebvSW7c0/4sA0xe1 TRk1R8VHww1l1Q56qmtiLmPsCJqOhQCJTwY+paQZP55OjKlS6akJ91tK2vAh4xFT v/KCNy9u/OKTHL/rgWIrhIcyDG+Dmwj60crAR3mWAE8MlQlxqqCoM2rMQilfqHvo m2zF8Ycngd4Fjg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:39 2025 by rpki-client