This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json) Hash identifier: /8oTeIAxEdLt2cDbaAaqWWjkwqDCDwUv++7NGOFUp7w= Subject key identifier: 33:D6:51:E2:9D:A0:7B:ED:33:D0:0E:3E:DB:F4:F3:B7:47:79:EE:27 Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85 Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385 Certificate serial: 019B3A91123AA02A8E42E204FDE0C4C8F189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft Manifest number: 1716 Signing time: Sat 20 Dec 2025 07:02:24 +0000 Manifest this update: Sat 20 Dec 2025 07:02:24 +0000 Manifest next update: Sun 21 Dec 2025 07:02:24 +0000 Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: FvESe7No1NLEISObSlxhyAvZEZQYrnG8YBYlIA1+U+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:12:3a:a0:2a:8e:42:e2:04:fd:e0:c4:c8:f1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385 Validity Not Before: Dec 20 07:02:24 2025 GMT Not After : Dec 21 07:02:24 2025 GMT Subject: CN=33d651e29da07bed33d00e3edbf4f3b74779ee27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:88:0f:99:7e:5f:1e:9a:4e:1f:89:10:ac: b7:ee:7d:d8:44:4e:03:09:06:a1:79:3c:d0:38:74: e4:01:2f:10:8c:b3:84:71:81:b2:08:14:c0:3d:8a: 3b:36:38:3a:52:a6:e9:c3:82:8c:06:9f:c7:85:55: 26:c7:32:95:a9:14:b6:b3:f4:c4:92:7d:fe:0f:e7: 04:5f:4b:d2:69:b5:4c:0e:63:9d:ff:c5:a8:07:98: 98:8a:ee:24:04:32:ea:7b:85:c4:df:f7:3c:bd:f5: b3:11:9d:39:1a:e8:a1:3c:a8:5e:d1:3b:9e:76:b7: b4:fc:e8:8d:a7:90:b1:fa:8e:70:1d:c3:8f:33:c5: 20:f7:cf:d3:3b:94:ac:7f:43:2c:9a:65:46:16:c0: d3:0a:0a:a9:0f:d1:e0:5e:79:d1:46:72:18:5c:5c: 6a:8d:53:c3:cb:3a:a3:b5:bb:91:7c:c0:02:28:e0: da:f3:76:81:b6:de:4d:c4:aa:01:57:d9:aa:32:fc: e1:c7:7d:51:d6:3c:b4:92:10:5e:e3:89:67:08:9a: a3:51:81:b8:51:c7:96:15:cc:a5:a9:06:fe:9e:e4: 5e:43:a3:89:7b:5c:c6:2d:75:9b:12:c7:93:a2:51: 15:de:8c:13:b9:ee:d2:ea:3b:bd:f8:71:ea:4b:c4: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D6:51:E2:9D:A0:7B:ED:33:D0:0E:3E:DB:F4:F3:B7:47:79:EE:27 X509v3 Authority Key Identifier: keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:70:6a:dd:e3:f8:f0:7c:78:d4:16:a8:55:e7:b4:0b:08:71: bc:5d:94:3a:f2:db:38:c8:56:06:6e:5c:b8:cb:70:cc:72:dd: 87:4f:a0:f2:c8:4a:5f:b8:0d:20:c0:e6:4f:42:74:dd:dd:6b: ae:0a:39:d2:c0:df:df:42:44:dc:84:6b:b6:c2:63:c7:ed:ab: 1c:d3:97:66:a5:fc:68:cd:6f:30:b1:bf:9a:7b:4a:3d:34:f4: e3:77:3a:2d:eb:89:72:3c:21:a9:02:4f:da:ee:15:0f:69:0d: bd:cc:6a:de:dd:c6:1e:c4:3b:be:26:d5:6b:b6:4c:26:05:d9: 76:77:d8:a4:c1:68:6a:47:bb:ad:16:6a:66:13:b7:a1:6e:63: 30:62:e0:eb:9d:7c:02:f4:b4:95:33:ac:cf:06:b8:bc:56:73: 30:8f:bd:e3:23:57:9e:55:07:fb:2f:88:55:3b:f9:55:c0:20: 92:9f:a0:38:6f:f6:5b:01:47:95:1a:15:81:8e:77:83:20:ff: 01:20:10:8a:94:56:e0:5f:28:a1:c7:98:e8:46:3a:a3:85:7e: fc:5d:31:61:34:8e:d2:a6:b3:8e:ba:00:63:93:64:25:93:54: f4:85:ef:41:99:c1:57:6e:b0:70:0e:98:47:bd:fe:6d:52:74: cf:c4:3f:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kRI6oCqOQuIE/eDEyPGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTgzOWEwYjY0NzZkZmJmODMzNTEwMTYxM2NlMWE3NzIx ZWYzODUwHhcNMjUxMjIwMDcwMjI0WhcNMjUxMjIxMDcwMjI0WjAzMTEwLwYDVQQD EygzM2Q2NTFlMjlkYTA3YmVkMzNkMDBlM2VkYmY0ZjNiNzQ3NzllZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM2ID5l+Xx6aTh+JEKy37n3YRE4D CQaheTzQOHTkAS8QjLOEcYGyCBTAPYo7Njg6Uqbpw4KMBp/HhVUmxzKVqRS2s/TE kn3+D+cEX0vSabVMDmOd/8WoB5iYiu4kBDLqe4XE3/c8vfWzEZ05GuihPKhe0Tue dre0/OiNp5Cx+o5wHcOPM8Ug98/TO5Ssf0MsmmVGFsDTCgqpD9HgXnnRRnIYXFxq jVPDyzqjtbuRfMACKODa83aBtt5NxKoBV9mqMvzhx31R1jy0khBe44lnCJqjUYG4 UceWFcylqQb+nuReQ6OJe1zGLXWbEseTolEV3owTue7S6ju9+HHqS8RVhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPWUeKdoHvtM9AOPtv087dHee4nMB8GA1UdIwQY MBaAFBcYOaC2R237+DNRAWE84adyHvOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhnNW9MWkhiZnY0TTFFQllUemhwM0llODRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOTM1YTEtMmFlYi00Nzk4LWFhZGIt MjUxZTJkY2IzOTlmLzEvRnhnNW9MWkhiZnY0TTFFQllUemhwM0llODRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8yOTM1YTEtMmFlYi00Nzk4LWFhZGItMjUxZTJkY2IzOTlm LzEvRnhnNW9MWkhiZnY0TTFFQllUemhwM0llODRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3Bq3eP4 8Hx41BaoVee0CwhxvF2UOvLbOMhWBm5cuMtwzHLdh0+g8shKX7gNIMDmT0J03d1r rgo50sDf30JE3IRrtsJjx+2rHNOXZqX8aM1vMLG/mntKPTT043c6LeuJcjwhqQJP 2u4VD2kNvcxq3t3GHsQ7vibVa7ZMJgXZdnfYpMFoake7rRZqZhO3oW5jMGLg6518 AvS0lTOszwa4vFZzMI+94yNXnlUH+y+IVTv5VcAgkp+gOG/2WwFHlRoVgY53gyD/ ASAQipRW4F8ooceY6EY6o4V+/F0xYTSO0qazjroAY5NkJZNU9IXvQZnBV26wcA6Y R73+bVJ0z8Q/IA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:01:55 2025 by rpki-client