This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: W4/XhEVZKNPG/aoxiHjzSKJObJa1g8x/jAbSYcTJGrM=
Subject key identifier: 5D:1D:DE:76:B0:80:54:61:BD:2A:97:29:AF:24:97:12:B5:5C:D9:F5
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 019B077E1CE268255B4C6A8A5548027CA02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0BDB
Signing time: Wed 10 Dec 2025 09:01:04 +0000
Manifest this update: Wed 10 Dec 2025 09:01:04 +0000
Manifest next update: Thu 11 Dec 2025 09:01:04 +0000
Files and hashes: 1: ACD72rE-jioyxPH9RAuGb5mC6oU.roa (hash: QtFylWnulCc2yQBn+mtJTIcyYgVI68tUvXBBF4rKnVc=)
2: _4IIJhtFlJdrkjSOppTsaFBNkrg.roa (hash: r5hI609ZhZ4xyXvkrk1Z26XwV02QOdDJJ0CIfMyhg7s=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: zDbiXzsN1PQpq3CDq+hjWa8PsEOqBM/10jqDOYcN4Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:07:7e:1c:e2:68:25:5b:4c:6a:8a:55:48:02:7c:a0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Dec 10 09:01:04 2025 GMT
Not After : Dec 11 09:01:04 2025 GMT
Subject: CN=5d1dde76b0805461bd2a9729af249712b55cd9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:ed:16:f4:6f:1d:2b:bb:ac:50:6c:59:28:
68:bb:d4:4c:f5:ab:4e:1e:88:b4:a3:40:0a:66:b1:
d5:61:7d:ed:01:5f:b5:c8:1a:ff:75:3f:de:8a:3a:
d7:d6:b2:68:e1:fd:b4:21:e4:86:61:c7:60:ad:0a:
af:98:1a:5b:c1:40:ae:c5:5f:af:b9:09:48:e5:aa:
0f:be:2c:3e:7f:bb:05:a8:e6:87:18:45:06:7c:13:
8f:52:b4:2c:f8:23:9c:d6:5b:8d:65:78:82:d0:6a:
2d:27:ef:33:3a:14:9e:f3:eb:b8:f1:15:5f:92:49:
df:06:ad:ac:35:10:9e:d1:e5:cc:14:16:86:57:0c:
d4:ff:3c:70:02:1c:a1:92:9a:63:92:95:e5:ee:f8:
16:8f:93:53:73:8f:7d:b3:0f:ca:bc:24:42:70:52:
d7:4a:9e:01:8d:7a:9f:26:f5:7b:2f:9f:d7:b4:89:
ec:be:0d:8e:5e:ed:c7:15:3e:41:15:6c:29:88:17:
6e:2f:34:f1:9c:ac:3f:93:9e:45:43:9e:47:5a:b6:
dd:0e:43:e5:50:af:f6:cf:f3:d4:77:56:6c:15:84:
16:0d:3e:23:fe:8f:df:e3:60:ea:ef:69:97:65:33:
ef:e2:75:08:8a:f0:a1:b2:ea:b5:4e:ee:75:73:b2:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1D:DE:76:B0:80:54:61:BD:2A:97:29:AF:24:97:12:B5:5C:D9:F5
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b9:dd:b2:34:fc:17:b5:5c:7e:ab:77:5a:fb:4c:15:fb:b1:
5b:16:96:e2:eb:a9:b9:74:33:2f:59:65:07:fd:89:27:06:ab:
78:01:98:6c:ed:b1:98:5e:88:e5:25:77:cd:b6:36:a4:31:4a:
44:82:52:37:a6:13:39:60:77:fc:ab:45:e4:4c:ba:8c:e7:be:
5e:f7:80:7d:02:a8:78:9b:0c:a0:1e:ac:5b:62:69:7f:58:f1:
8a:fb:eb:4b:b6:28:05:fd:1a:87:d2:97:44:4a:b0:4c:b0:7e:
4c:da:c1:19:71:ce:75:33:6f:44:ce:25:f3:a0:e8:4c:27:f6:
83:e2:9b:f5:cc:c3:d2:5e:de:e1:10:32:46:3c:85:47:7d:18:
31:eb:e4:df:0a:bc:86:dc:f3:3e:29:0a:ae:04:62:cc:de:58:
57:e4:fc:60:14:cd:aa:95:f6:0c:8c:50:6d:2b:9e:97:b8:2f:
19:88:ef:0f:81:d3:e1:ce:08:4e:68:d8:34:ea:1d:40:68:47:
f3:a1:1a:fc:10:a0:a3:1d:be:00:5a:62:19:a9:e3:8a:92:11:
84:b4:d0:96:e4:2b:17:ef:f2:68:7b:b3:65:17:7b:28:67:4d:
f2:78:27:56:ff:4a:1b:69:5b:92:cc:7d:24:53:b6:d3:0b:97:
6e:4c:a6:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsHfhziaCVbTGqKVUgCfKAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTY4MDI4ZWMwZGFiNjY4YTY3ZDViZjZmNTM1OGNhYWJl
MzM3YTgwHhcNMjUxMjEwMDkwMTA0WhcNMjUxMjExMDkwMTA0WjAzMTEwLwYDVQQD
Eyg1ZDFkZGU3NmIwODA1NDYxYmQyYTk3MjlhZjI0OTcxMmI1NWNkOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj/tFvRvHSu7rFBsWShou9RM9atO
Hoi0o0AKZrHVYX3tAV+1yBr/dT/eijrX1rJo4f20IeSGYcdgrQqvmBpbwUCuxV+v
uQlI5aoPviw+f7sFqOaHGEUGfBOPUrQs+COc1luNZXiC0GotJ+8zOhSe8+u48RVf
kknfBq2sNRCe0eXMFBaGVwzU/zxwAhyhkppjkpXl7vgWj5NTc499sw/KvCRCcFLX
Sp4BjXqfJvV7L5/XtInsvg2OXu3HFT5BFWwpiBduLzTxnKw/k55FQ55HWrbdDkPl
UK/2z/PUd1ZsFYQWDT4j/o/f42Dq72mXZTPv4nUIivChsuq1Tu51c7LTowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0d3nawgFRhvSqXKa8klxK1XNn1MB8GA1UdIwQY
MBaAFH8WgCjsDatmimfVv29TWMqr4zeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUt
N2ZhZGY1MGEyZTM3LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUtN2ZhZGY1MGEyZTM3
LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLndsjT8
F7Vcfqt3WvtMFfuxWxaW4uupuXQzL1llB/2JJwareAGYbO2xmF6I5SV3zbY2pDFK
RIJSN6YTOWB3/KtF5Ey6jOe+XveAfQKoeJsMoB6sW2Jpf1jxivvrS7YoBf0ah9KX
REqwTLB+TNrBGXHOdTNvRM4l86DoTCf2g+Kb9czD0l7e4RAyRjyFR30YMevk3wq8
htzzPikKrgRizN5YV+T8YBTNqpX2DIxQbSuel7gvGYjvD4HT4c4ITmjYNOodQGhH
86Ea/BCgox2+AFpiGanjipIRhLTQluQrF+/yaHuzZRd7KGdN8ngnVv9KG2lbksx9
JFO20wuXbkymzA==
-----END CERTIFICATE-----
Generated at Wed Dec 10 18:09:18 2025 by rpki-client