This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft File: _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json) Hash identifier: jWg4dkC95DWsjqzDVuOxP8/tr3KBnq0lMgWQEiU978E= Subject key identifier: 0A:AC:4E:21:18:33:2A:89:3C:22:25:74:75:07:42:16:34:47:44:CD Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751 Certificate serial: 019B05C69C3CC0C6F54A6C9068EAA2F38502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft Manifest number: 1258 Signing time: Wed 10 Dec 2025 01:01:00 +0000 Manifest this update: Wed 10 Dec 2025 01:01:00 +0000 Manifest next update: Thu 11 Dec 2025 01:01:00 +0000 Files and hashes: 1: UdqqtZGpIUJuO-T8u_MZQwitL4U.roa (hash: hH2jMQqs4CekxdYoCxAKkLi/f8EnWwbUlFfsT0U+1TE=) 2: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: dB8U/S3DL8ARrZ5lJDReTIwijEyoDj9ilfmqeeBB+CI=) 3: yh5VzgeOwtUgAcziSiqUhcW6kK8.roa (hash: hvI53ao0Y2iffOi0mRz/DzGNpvNOk5YefpCNLUXPIjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:9c:3c:c0:c6:f5:4a:6c:90:68:ea:a2:f3:85:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751 Validity Not Before: Dec 10 01:01:00 2025 GMT Not After : Dec 11 01:01:00 2025 GMT Subject: CN=0aac4e2118332a893c22257475074216344744cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:85:a3:f4:f9:75:7e:b3:23:55:d9:21:3c: 63:e1:78:d9:45:76:ae:e5:5c:07:af:9a:b4:55:6a: cb:0a:82:04:61:c4:da:02:53:16:54:91:ab:6f:ac: 6c:17:ee:e3:8c:ca:11:df:94:c3:9b:59:d7:73:4e: ce:e8:bc:47:1f:1e:ae:75:d1:39:38:3a:4a:d5:2c: b0:48:9c:dc:42:cc:b4:14:85:48:31:c3:4f:65:7e: 9a:ee:14:8c:8b:5e:4b:fa:64:b7:cd:69:c7:8f:3a: 90:04:ce:90:11:49:59:af:fd:21:6c:16:0c:bc:10: d4:32:2e:9b:0e:54:b3:31:9a:3f:c6:d0:2e:81:a2: 32:6b:5d:4c:9a:da:de:28:be:3c:44:1d:0f:b6:fb: 1b:d4:dd:bb:2a:8f:62:3f:ad:1d:7c:ea:a4:13:2c: ca:3d:38:11:2f:84:7c:73:7f:44:52:d9:87:f8:6c: da:47:1a:e4:98:6a:5b:53:b3:f2:6a:7a:15:10:6c: 36:99:f8:86:08:5c:d6:f1:bd:94:05:94:2a:04:a0: ed:8e:41:96:1c:bb:49:cb:d6:cc:fb:2f:36:98:1e: 5b:f5:b6:6a:d3:4c:b2:91:20:9b:39:26:23:45:44: 69:f1:5b:b0:4a:60:4e:03:bd:03:c2:1b:1c:bd:41: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AC:4E:21:18:33:2A:89:3C:22:25:74:75:07:42:16:34:47:44:CD X509v3 Authority Key Identifier: keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:05:fc:23:03:04:2c:f8:fa:7e:bf:1e:4f:fe:f3:10:d0:28: 2a:65:68:e1:29:b9:cc:cc:b1:27:cb:42:b7:cb:dd:c4:d0:d7: 34:30:08:9b:9b:e4:62:0d:87:83:e9:85:f1:a5:2d:72:b2:57: 96:e8:ee:46:5d:1a:34:5c:4d:47:87:ec:df:6c:e6:a2:3b:cf: 49:b3:0c:9a:30:12:86:01:ef:93:3f:61:ad:62:96:1d:21:cb: 4f:f6:c7:2e:d1:a6:fb:d5:14:c1:77:df:4a:b1:cb:8e:5f:d3: 59:ff:ea:a9:44:cc:dc:09:26:b6:c1:8e:d4:15:65:62:c9:b7: d1:a5:75:62:e4:8d:23:53:5c:e3:8e:67:16:1c:0b:c8:b7:4c: 2c:7c:6b:72:c4:f3:98:1a:1b:36:72:64:64:aa:d6:0a:67:73: 0b:5f:50:5d:b2:46:61:34:70:a1:c3:dc:61:19:bd:81:89:4c: f8:af:bc:7f:47:8d:34:f0:1b:18:d3:10:3b:af:13:5d:bd:9c: 8c:2f:7a:d1:a6:00:03:fd:ef:81:35:ad:3d:df:df:ba:20:7e: b3:2c:28:65:de:8e:52:4f:09:96:9b:7b:a1:9c:77:7a:94:ec: d7:8e:ba:a6:fa:78:e0:01:be:24:ee:a0:3c:17:a9:5f:12:a6: 88:30:b5:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxpw8wMb1SmyQaOqi84UCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTVlMDUzM2VmYWE1NjI0ZjUzOGI5MmVkMWE5NzNmZWZm ODk3NTEwHhcNMjUxMjEwMDEwMTAwWhcNMjUxMjExMDEwMTAwWjAzMTEwLwYDVQQD EygwYWFjNGUyMTE4MzMyYTg5M2MyMjI1NzQ3NTA3NDIxNjM0NDc0NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM6Fo/T5dX6zI1XZITxj4XjZRXau 5VwHr5q0VWrLCoIEYcTaAlMWVJGrb6xsF+7jjMoR35TDm1nXc07O6LxHHx6uddE5 ODpK1SywSJzcQsy0FIVIMcNPZX6a7hSMi15L+mS3zWnHjzqQBM6QEUlZr/0hbBYM vBDUMi6bDlSzMZo/xtAugaIya11MmtreKL48RB0Ptvsb1N27Ko9iP60dfOqkEyzK PTgRL4R8c39EUtmH+GzaRxrkmGpbU7PyanoVEGw2mfiGCFzW8b2UBZQqBKDtjkGW HLtJy9bM+y82mB5b9bZq00yykSCbOSYjRURp8VuwSmBOA70DwhscvUGkGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqsTiEYMyqJPCIldHUHQhY0R0TNMB8GA1UdIwQY MBaAFPxV4FM++qViT1OLku0alz/v+JdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODIt YTUyODYyYjQ0NTYzLzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODItYTUyODYyYjQ0NTYz LzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgX8IwME LPj6fr8eT/7zENAoKmVo4Sm5zMyxJ8tCt8vdxNDXNDAIm5vkYg2Hg+mF8aUtcrJX lujuRl0aNFxNR4fs32zmojvPSbMMmjAShgHvkz9hrWKWHSHLT/bHLtGm+9UUwXff SrHLjl/TWf/qqUTM3AkmtsGO1BVlYsm30aV1YuSNI1Nc445nFhwLyLdMLHxrcsTz mBobNnJkZKrWCmdzC19QXbJGYTRwocPcYRm9gYlM+K+8f0eNNPAbGNMQO68TXb2c jC960aYAA/3vgTWtPd/fuiB+sywoZd6OUk8Jlpt7oZx3epTs1466pvp44AG+JO6g PBepXxKmiDC1MA== -----END CERTIFICATE-----Generated at Wed Dec 10 09:22:15 2025 by rpki-client