This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft File: FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json) Hash identifier: pCmZt/ReR5B9O29pAbayVCMnYdkE9QrDXNCvfvKQswY= Subject key identifier: 3D:66:F9:5D:DC:D8:93:AB:12:1C:47:24:2A:4B:24:CC:2D:E7:AC:AF Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45 Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345 Certificate serial: 019B59AC8A432312276430E6D41063B97204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 08:00:38 +0000 Manifest this update: Fri 26 Dec 2025 08:00:38 +0000 Manifest next update: Sat 27 Dec 2025 08:00:38 +0000 Files and hashes: 1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: 0a9mbXocuoAfMFMJgobj2urt1pgZJ6c5AGJKQeKAlXg=) 2: qrHcalRy_JXYvUIS1tkkzHH6ZPM.roa (hash: B5LhQQeMhbxhyP/euiUVZeJTjZ4f803srjRMUk59y8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:8a:43:23:12:27:64:30:e6:d4:10:63:b9:72:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345 Validity Not Before: Dec 26 08:00:38 2025 GMT Not After : Dec 27 08:00:38 2025 GMT Subject: CN=3d66f95ddcd893ab121c47242a4b24cc2de7acaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:07:51:e8:bb:0a:3c:35:4b:a8:a8:e7:a0:da: a9:85:25:e1:28:29:80:60:a7:7d:a6:d8:15:68:db: 78:d1:4c:c5:8d:fb:6e:6e:eb:5e:b2:7d:4b:84:a6: 4e:7f:c2:53:df:40:96:d2:b5:11:91:08:7e:3e:81: 21:a1:0b:30:c4:c8:92:12:bb:61:24:b9:a5:13:e0: 89:79:bb:c5:70:c4:67:88:e6:21:aa:52:0b:f3:87: ad:72:99:97:fa:48:d3:98:9a:ff:3a:13:70:cb:e6: bb:db:e6:91:b5:11:e2:e7:87:56:4a:81:f2:27:77: 4f:0c:8b:33:bb:7f:d7:a5:d7:c6:ba:87:2d:ae:2e: 78:c0:4c:35:aa:aa:d2:35:a6:88:46:bf:0e:76:69: 17:4c:9e:39:16:c2:f1:04:47:a4:9b:99:b4:87:f5: 5f:c5:ae:3a:7b:db:1e:d5:cb:6c:5f:cb:d2:ef:61: 54:62:09:0e:94:d4:82:64:5b:a6:d6:82:f2:df:ab: 7c:00:28:59:1b:2c:36:55:87:be:b5:a0:c0:e7:71: 87:5b:f9:4e:fe:9d:ae:6f:6a:3b:09:7f:41:19:54: 6a:ab:9c:c6:a2:7a:2c:1d:1e:f5:eb:7c:ce:97:05: 87:5d:5a:38:2f:81:12:32:4a:bd:11:ae:13:82:3d: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:66:F9:5D:DC:D8:93:AB:12:1C:47:24:2A:4B:24:CC:2D:E7:AC:AF X509v3 Authority Key Identifier: keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0c:ee:93:b2:7e:15:c8:b7:ce:e2:10:28:61:85:b1:ea:28: 3f:73:78:53:19:ce:f2:de:35:42:8b:aa:4b:ff:66:35:45:5a: db:88:b3:db:4c:82:d3:c1:81:16:dc:e3:b5:31:66:12:03:7b: de:10:e5:aa:e3:13:34:be:fe:89:93:f7:0b:63:3f:9b:b5:d9: 53:d9:5b:fd:c1:62:dc:88:0f:64:10:02:84:91:85:1a:a3:46: 7b:13:03:a0:50:74:a7:f0:94:c4:1e:c8:83:8e:4b:59:ee:c7: c2:4f:36:45:fe:99:9e:5c:71:14:ac:19:48:9e:ed:ce:27:6b: 9c:1f:da:58:5f:a8:03:2c:1e:cd:39:de:21:c3:05:6e:d3:80: 05:bb:fd:80:f7:6e:4f:eb:43:87:cf:2f:87:25:e7:be:53:e2: ec:13:6f:d9:5d:d2:55:55:0a:7f:3f:a9:ce:c0:ee:8a:2f:57: cb:b1:84:d9:6d:9e:f8:98:43:28:58:bc:d3:a3:2a:a8:b6:1f: de:e5:c9:9e:5a:42:74:cb:68:e7:c9:05:37:19:7e:0c:7a:68: 37:c5:6e:ed:4c:11:b1:88:39:4e:65:73:ff:fa:b7:ae:f8:c2: 66:6a:c2:9a:0b:3d:40:54:bc:d8:12:17:a8:df:bf:51:0d:b3: a5:1d:84:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIpDIxInZDDm1BBjuXIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTlkMGJjMDQ0Y2RhYTIzNDE4MDlkMDAwZjBmYzRlMWRl ZGIzNDUwHhcNMjUxMjI2MDgwMDM4WhcNMjUxMjI3MDgwMDM4WjAzMTEwLwYDVQQD EygzZDY2Zjk1ZGRjZDg5M2FiMTIxYzQ3MjQyYTRiMjRjYzJkZTdhY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QdR6LsKPDVLqKjnoNqphSXhKCmA YKd9ptgVaNt40UzFjftubutesn1LhKZOf8JT30CW0rURkQh+PoEhoQswxMiSErth JLmlE+CJebvFcMRniOYhqlIL84etcpmX+kjTmJr/OhNwy+a72+aRtRHi54dWSoHy J3dPDIszu3/XpdfGuoctri54wEw1qqrSNaaIRr8OdmkXTJ45FsLxBEekm5m0h/Vf xa46e9se1ctsX8vS72FUYgkOlNSCZFum1oLy36t8AChZGyw2VYe+taDA53GHW/lO /p2ub2o7CX9BGVRqq5zGonosHR7163zOlwWHXVo4L4ESMkq9Ea4Tgj38zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1m+V3c2JOrEhxHJCpLJMwt56yvMB8GA1UdIwQY MBaAFBcZ0LwETNqiNBgJ0ADw/E4d7bNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUt MDRhYzBhNWU4MTQzLzEvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUtMDRhYzBhNWU4MTQz LzEvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgzuk7J+ Fci3zuIQKGGFseooP3N4UxnO8t41QouqS/9mNUVa24iz20yC08GBFtzjtTFmEgN7 3hDlquMTNL7+iZP3C2M/m7XZU9lb/cFi3IgPZBAChJGFGqNGexMDoFB0p/CUxB7I g45LWe7Hwk82Rf6ZnlxxFKwZSJ7tzidrnB/aWF+oAywezTneIcMFbtOABbv9gPdu T+tDh88vhyXnvlPi7BNv2V3SVVUKfz+pzsDuii9Xy7GE2W2e+JhDKFi806MqqLYf 3uXJnlpCdMto58kFNxl+DHpoN8Vu7UwRsYg5TmVz//q3rvjCZmrCmgs9QFS82BIX qN+/UQ2zpR2EGA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:29 2025 by rpki-client