This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json) Hash identifier: FaHJVAoFFAd795muguFAkhw/QDjboCAKmjGc1yg/uw0= Subject key identifier: FB:2C:CD:B3:A5:7C:EE:8C:9D:D7:1E:76:4D:31:43:E9:86:6B:EA:20 Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Certificate serial: 019B3C46EC294B4A811188650BCC8E4B762E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft Manifest number: 048F Signing time: Sat 20 Dec 2025 15:00:39 +0000 Manifest this update: Sat 20 Dec 2025 15:00:39 +0000 Manifest next update: Sun 21 Dec 2025 15:00:39 +0000 Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: 6+04cUXT9tokArhPtA/hcpjHWvVsxlFz7M8FQYbMixg=) 2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:ec:29:4b:4a:81:11:88:65:0b:cc:8e:4b:76:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Validity Not Before: Dec 20 15:00:39 2025 GMT Not After : Dec 21 15:00:39 2025 GMT Subject: CN=fb2ccdb3a57cee8c9dd71e764d3143e9866bea20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f4:f6:29:86:54:02:74:4b:21:0e:d6:64:72: 36:e1:0b:c9:8c:2b:03:49:b8:39:ac:f2:29:57:c9: 6e:82:c9:21:ad:68:46:47:01:e2:51:e3:04:d8:f6: 67:ad:f0:e2:bd:7e:78:9d:65:50:3f:60:2a:b9:8b: 78:9b:f5:10:dc:e0:f5:95:3c:b6:e9:ae:b8:cf:9a: 87:f2:76:0c:f8:1c:c3:5b:35:55:71:f4:ad:be:1e: f1:50:e2:b2:81:18:75:b3:b2:ad:a6:56:05:9e:04: d6:c7:79:84:f5:9f:87:6f:29:01:21:f1:8a:79:ac: 8b:fa:03:d8:77:56:35:41:14:9a:c5:91:11:16:bb: f2:55:90:5e:c9:55:e4:ca:74:6f:c6:c4:21:27:7d: d0:7f:2c:01:e2:7b:b2:5b:c2:f6:31:5b:4b:fe:59: ea:dd:e8:6d:f9:5a:fd:f0:36:62:2a:7c:57:4c:6b: 5e:99:04:b0:9c:c9:55:51:d4:9a:bd:43:25:a0:ea: 9b:c0:b4:db:ab:27:ec:73:de:58:cc:58:e7:ab:ee: 1c:1e:47:22:d0:77:20:54:dc:4c:9e:4e:44:7a:ab: ca:55:1a:56:bc:68:33:4f:a7:54:c1:91:da:2a:ef: 89:4f:7f:8f:b5:8f:28:25:dd:9c:f9:a3:67:02:0b: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2C:CD:B3:A5:7C:EE:8C:9D:D7:1E:76:4D:31:43:E9:86:6B:EA:20 X509v3 Authority Key Identifier: keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ca:0e:81:75:40:1c:01:3f:7f:68:10:b9:31:70:45:83:4e: f0:90:be:9c:77:94:f6:64:2e:c7:97:32:71:8c:26:6a:1e:24: db:18:69:27:57:c8:d3:86:21:96:3d:90:d1:60:66:eb:9b:7d: c6:25:96:68:3a:29:46:f1:64:b0:b5:1f:ff:27:c3:6b:af:24: bd:00:9b:65:11:c3:5e:62:4b:67:2f:9d:0e:68:5f:63:d9:f0: 6c:ae:0b:06:81:7b:76:e7:63:2f:ec:6d:e3:98:d6:9a:a9:43: 30:21:fb:c1:dc:23:cf:54:da:92:c7:3d:43:63:b4:ae:b3:e6: 8e:52:28:71:05:91:52:db:f6:95:1a:03:8a:cf:16:61:42:c7: 09:de:e8:d7:b4:b5:ec:f8:22:55:76:9c:2d:1d:db:9f:53:06: 0b:94:e3:11:a3:ca:ee:26:13:14:3c:2e:bd:9b:c3:6c:e0:3e: 37:a9:78:fc:89:ae:8a:42:df:16:25:fe:51:89:d5:e6:7e:0e: 17:5e:6f:82:b1:28:cb:b2:26:54:3e:c2:8b:18:f3:1f:c7:ef: aa:3a:ea:16:66:10:83:60:a2:3e:34:83:01:14:4e:80:75:e6: 36:3c:be:46:86:5d:17:0c:51:67:de:12:ea:07:36:74:37:fe: 21:22:56:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RuwpS0qBEYhlC8yOS3YuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTVjN2NjN2I1NDI0ZGE1YTIxMTE2ZmVmNzJjZTVjZDU2 NGMwZjEwHhcNMjUxMjIwMTUwMDM5WhcNMjUxMjIxMTUwMDM5WjAzMTEwLwYDVQQD EyhmYjJjY2RiM2E1N2NlZThjOWRkNzFlNzY0ZDMxNDNlOTg2NmJlYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPT2KYZUAnRLIQ7WZHI24QvJjCsD Sbg5rPIpV8lugskhrWhGRwHiUeME2PZnrfDivX54nWVQP2AquYt4m/UQ3OD1lTy2 6a64z5qH8nYM+BzDWzVVcfStvh7xUOKygRh1s7KtplYFngTWx3mE9Z+HbykBIfGK eayL+gPYd1Y1QRSaxZERFrvyVZBeyVXkynRvxsQhJ33QfywB4nuyW8L2MVtL/lnq 3eht+Vr98DZiKnxXTGtemQSwnMlVUdSavUMloOqbwLTbqyfsc95YzFjnq+4cHkci 0HcgVNxMnk5EeqvKVRpWvGgzT6dUwZHaKu+JT3+PtY8oJd2c+aNnAgvW/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsszbOlfO6Mndcedk0xQ+mGa+ogMB8GA1UdIwQY MBaAFBcVx8x7VCTaWiERb+9yzlzVZMDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYt YzUzNmJmNzM5ODY5LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYtYzUzNmJmNzM5ODY5 LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsoOgXVA HAE/f2gQuTFwRYNO8JC+nHeU9mQux5cycYwmah4k2xhpJ1fI04Yhlj2Q0WBm65t9 xiWWaDopRvFksLUf/yfDa68kvQCbZRHDXmJLZy+dDmhfY9nwbK4LBoF7dudjL+xt 45jWmqlDMCH7wdwjz1Taksc9Q2O0rrPmjlIocQWRUtv2lRoDis8WYULHCd7o17S1 7PgiVXacLR3bn1MGC5TjEaPK7iYTFDwuvZvDbOA+N6l4/ImuikLfFiX+UYnV5n4O F15vgrEoy7ImVD7CixjzH8fvqjrqFmYQg2CiPjSDARROgHXmNjy+RoZdFwxRZ94S 6gc2dDf+ISJWnw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:02:34 2025 by rpki-client