This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json) Hash identifier: zTspahiAv9eYdEkft/A/2Ihu4TUqY3IZi9HiVb1c6GI= Subject key identifier: 65:A2:9B:42:EE:E4:7A:EF:EC:FA:83:7E:E2:35:E8:5A:D4:B9:24:84 Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Certificate serial: 019B11CA7929F85EAD2E2ED7E715D28D826C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft Manifest number: 0479 Signing time: Fri 12 Dec 2025 09:00:40 +0000 Manifest this update: Fri 12 Dec 2025 09:00:40 +0000 Manifest next update: Sat 13 Dec 2025 09:00:40 +0000 Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: y3C08U1HpRZAqNpAQ0docdT2NWifqR2QcwM1hG8l8zo=) 2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:ca:79:29:f8:5e:ad:2e:2e:d7:e7:15:d2:8d:82:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Validity Not Before: Dec 12 09:00:40 2025 GMT Not After : Dec 13 09:00:40 2025 GMT Subject: CN=65a29b42eee47aefecfa837ee235e85ad4b92484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:f9:98:22:f7:8d:22:2b:7c:7a:03:14:57: 24:a8:e3:3e:3e:0b:fb:a4:f9:38:15:e7:38:84:c3: c2:0d:d8:59:0d:80:79:b3:33:61:4c:aa:7b:7a:77: 84:49:de:14:57:ad:8d:f4:9e:63:c3:b0:50:c3:b8: 45:89:13:cb:5e:5c:8c:ff:74:33:32:b4:03:aa:ac: 10:c7:c6:f3:32:32:e8:de:f2:7e:84:e8:f6:0b:fc: a8:48:d1:92:3d:cd:97:d1:cb:f2:23:22:4c:78:e1: 16:97:50:c7:6b:72:e8:d2:a3:81:e3:3c:bd:5f:eb: bc:f7:1d:b3:08:a5:42:bc:50:3e:77:3b:51:c5:5c: 99:ec:0c:31:f6:b9:fc:36:70:33:6b:b5:73:f3:10: 8c:92:c8:06:59:39:73:2b:44:e0:b5:7e:66:65:60: 98:fb:77:17:89:05:c7:12:43:20:93:78:68:0a:6f: af:6c:b8:a5:98:74:2a:71:2f:d5:2c:b6:ad:46:4a: 21:03:c1:1c:61:41:bb:98:04:27:be:cd:85:81:48: a5:5c:1b:06:36:9d:5d:6b:1b:b0:4f:87:b4:ca:ed: 47:b9:39:48:37:26:3d:6c:07:fa:f4:9d:eb:57:7f: 67:98:f1:f5:94:65:e7:25:8d:b4:db:29:46:8f:ae: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A2:9B:42:EE:E4:7A:EF:EC:FA:83:7E:E2:35:E8:5A:D4:B9:24:84 X509v3 Authority Key Identifier: keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d7:87:af:11:2b:24:9b:e6:ac:50:ab:0a:70:02:cf:b7:ea: fa:16:ed:a7:2a:c3:a5:96:37:fa:50:3a:b8:f0:ca:bb:81:de: 6c:94:8d:42:dc:4b:c5:c1:c6:a3:9b:1b:70:cc:a0:a2:e3:e9: 3b:e2:4d:0a:47:89:13:fb:6a:e3:60:4c:6a:f7:e9:43:c1:53: cb:76:5a:92:3e:f2:00:81:4f:7c:0a:c7:f3:79:18:d8:23:17: 17:ff:04:33:4e:3c:1c:80:21:2b:ec:8c:e3:c4:b5:ee:fc:f0: 66:e5:46:71:c5:d0:28:6b:82:d3:cf:82:2a:b5:a6:31:ea:ca: 63:b6:07:df:0e:d1:26:ce:87:98:56:62:46:64:1e:47:57:66: d8:76:44:46:f6:02:ad:ea:c5:ad:ae:b1:0c:83:5d:4a:3c:d5: 1e:50:15:91:e7:9d:4f:36:16:8d:21:0b:19:e2:4f:ab:3f:ab: 6a:d6:de:6b:e1:bf:cf:f7:97:1f:c9:12:b0:f8:72:46:b1:e6: f0:bf:ad:b5:a4:92:25:42:e7:9b:01:59:76:d4:84:fb:47:58: 88:3e:a6:f2:f5:ac:cc:0f:f8:3a:57:a0:f4:ae:f9:ee:67:55: ee:ae:fd:80:e1:e7:5f:a4:bf:4d:24:70:fb:e2:55:f4:30:9f: ec:a8:21:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRynkp+F6tLi7X5xXSjYJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTVjN2NjN2I1NDI0ZGE1YTIxMTE2ZmVmNzJjZTVjZDU2 NGMwZjEwHhcNMjUxMjEyMDkwMDQwWhcNMjUxMjEzMDkwMDQwWjAzMTEwLwYDVQQD Eyg2NWEyOWI0MmVlZTQ3YWVmZWNmYTgzN2VlMjM1ZTg1YWQ0YjkyNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+T5mCL3jSIrfHoDFFckqOM+Pgv7 pPk4Fec4hMPCDdhZDYB5szNhTKp7eneESd4UV62N9J5jw7BQw7hFiRPLXlyM/3Qz MrQDqqwQx8bzMjLo3vJ+hOj2C/yoSNGSPc2X0cvyIyJMeOEWl1DHa3Lo0qOB4zy9 X+u89x2zCKVCvFA+dztRxVyZ7Awx9rn8NnAza7Vz8xCMksgGWTlzK0TgtX5mZWCY +3cXiQXHEkMgk3hoCm+vbLilmHQqcS/VLLatRkohA8EcYUG7mAQnvs2FgUilXBsG Np1daxuwT4e0yu1HuTlINyY9bAf69J3rV39nmPH1lGXnJY202ylGj67yfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWim0Lu5Hrv7PqDfuI16FrUuSSEMB8GA1UdIwQY MBaAFBcVx8x7VCTaWiERb+9yzlzVZMDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYt YzUzNmJmNzM5ODY5LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYtYzUzNmJmNzM5ODY5 LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdeHrxEr JJvmrFCrCnACz7fq+hbtpyrDpZY3+lA6uPDKu4HebJSNQtxLxcHGo5sbcMygouPp O+JNCkeJE/tq42BMavfpQ8FTy3Zakj7yAIFPfArH83kY2CMXF/8EM048HIAhK+yM 48S17vzwZuVGccXQKGuC08+CKrWmMerKY7YH3w7RJs6HmFZiRmQeR1dm2HZERvYC rerFra6xDINdSjzVHlAVkeedTzYWjSELGeJPqz+ratbea+G/z/eXH8kSsPhyRrHm 8L+ttaSSJULnmwFZdtSE+0dYiD6m8vWszA/4Oleg9K757mdV7q79gOHnX6S/TSRw ++JV9DCf7KghAg== -----END CERTIFICATE-----Generated at Fri Dec 12 19:08:15 2025 by rpki-client