This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json) Hash identifier: 3hAn8jwvavLn0zRjh3N8gyjInmu9zHaAz/AItsSRz/E= Subject key identifier: 04:F9:4C:95:A4:0D:13:28:90:B1:25:B4:43:51:DD:6E:38:3A:94:22 Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C Certificate issuer: /CN=7d7856c97beb97c2b386fb958c2db122c57db36c Certificate serial: 019B4E8430169926AA020F8327AC0F620C12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft Manifest number: 05DA Signing time: Wed 24 Dec 2025 04:00:44 +0000 Manifest this update: Wed 24 Dec 2025 04:00:44 +0000 Manifest next update: Thu 25 Dec 2025 04:00:44 +0000 Files and hashes: 1: 7IU0huufqQxYxItg8zFZPOwzYRM.roa (hash: I4C8M2jxvU1m60xK7AT2Uz7jOA8Cd0LrtZ3lmEnNBLc=) 2: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: aERUMSqIJsVU26F6Amvf87KfvnmYc+lFl36N+kOkLkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:30:16:99:26:aa:02:0f:83:27:ac:0f:62:0c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c Validity Not Before: Dec 24 04:00:44 2025 GMT Not After : Dec 25 04:00:44 2025 GMT Subject: CN=04f94c95a40d132890b125b44351dd6e383a9422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:84:db:9c:fe:3a:b8:d0:61:b5:83:c1:b1: b6:83:b3:81:ba:a9:2a:78:97:b1:62:67:f8:89:52: eb:01:4d:7b:28:c9:a6:2f:80:16:87:a1:e4:88:c9: 75:4f:62:16:b6:22:f4:fe:03:d6:bb:d3:f0:da:d3: 4d:70:46:76:3e:98:13:26:5e:0a:f2:01:ee:d4:e3: 21:e0:4c:00:43:68:3c:c1:86:43:5c:3c:b1:3d:d6: 6b:51:a5:11:25:ae:8e:7c:95:81:f7:56:75:68:82: 86:9b:c2:b8:18:08:cb:78:98:3f:a9:b2:a4:07:b0: 77:24:07:dc:42:d1:12:55:df:ad:70:c4:82:08:97: ce:97:2c:e9:1b:6d:7b:91:5e:05:f6:81:be:a0:d5: ff:24:9c:34:9a:3c:00:7b:4f:3f:45:1d:be:2d:9f: 53:41:67:b1:64:3b:20:46:1d:0c:f4:18:5c:33:f9: 29:42:73:fd:10:cf:0a:0f:31:3b:66:26:58:42:b8: b7:e8:4b:58:2d:6b:a0:71:dc:01:72:db:23:78:60: 28:c9:af:20:06:3e:0d:45:a8:76:6e:f5:db:34:ab: 9c:cf:20:0d:d3:3c:bd:d7:e8:71:3e:5e:2f:b9:a3: 22:32:c2:91:e2:f8:cc:80:29:6d:24:ca:45:05:21: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F9:4C:95:A4:0D:13:28:90:B1:25:B4:43:51:DD:6E:38:3A:94:22 X509v3 Authority Key Identifier: keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:18:f8:38:38:07:e9:f9:3d:55:6f:eb:8c:ec:23:22:97:4e: 80:c7:08:2d:b3:5b:e0:00:c0:ac:fe:0b:a1:99:3c:5e:68:5f: 86:e9:4a:6c:83:e5:a2:a1:5a:79:00:33:fd:4e:89:0f:02:a2: 63:0c:57:f5:b1:05:20:b4:2a:62:17:ed:a1:45:05:96:7d:f9: 2a:ad:7a:13:a4:cc:10:02:1e:8a:94:1f:e1:3a:ca:a1:44:93: ba:3e:5c:f0:95:ac:bb:2f:ad:3c:0f:1a:64:ca:61:1a:93:ed: a3:38:39:58:ce:13:1f:63:f9:ee:46:c1:a5:eb:b8:dc:06:2f: 66:4e:5c:a0:00:80:31:1c:fe:53:82:07:72:c1:f4:b8:f9:6a: d0:f0:fa:54:31:5d:03:00:03:f2:1c:50:24:77:dc:c5:01:c8: 24:7f:87:fe:75:8b:e9:89:51:4a:f8:b9:24:06:85:63:a0:4e: 81:c6:78:84:ce:b9:96:11:37:71:91:c6:72:58:ec:5c:67:97: d5:5d:73:c8:a7:f3:23:c1:e7:ab:25:59:5a:03:6f:14:b0:6f: 84:c9:0e:e6:d1:48:c1:6a:56:9b:a2:2d:9e:b2:3a:99:88:b1: 27:90:4a:22:1a:bc:80:c9:72:6e:70:0f:67:f4:0c:8e:23:5d: 72:ce:65:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhDAWmSaqAg+DJ6wPYgwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNzg1NmM5N2JlYjk3YzJiMzg2ZmI5NThjMmRiMTIyYzU3 ZGIzNmMwHhcNMjUxMjI0MDQwMDQ0WhcNMjUxMjI1MDQwMDQ0WjAzMTEwLwYDVQQD EygwNGY5NGM5NWE0MGQxMzI4OTBiMTI1YjQ0MzUxZGQ2ZTM4M2E5NDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJCE25z+OrjQYbWDwbG2g7OBuqkq eJexYmf4iVLrAU17KMmmL4AWh6HkiMl1T2IWtiL0/gPWu9Pw2tNNcEZ2PpgTJl4K 8gHu1OMh4EwAQ2g8wYZDXDyxPdZrUaURJa6OfJWB91Z1aIKGm8K4GAjLeJg/qbKk B7B3JAfcQtESVd+tcMSCCJfOlyzpG217kV4F9oG+oNX/JJw0mjwAe08/RR2+LZ9T QWexZDsgRh0M9BhcM/kpQnP9EM8KDzE7ZiZYQri36EtYLWugcdwBctsjeGAoya8g Bj4NRah2bvXbNKuczyAN0zy91+hxPl4vuaMiMsKR4vjMgCltJMpFBSHUEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT5TJWkDRMokLEltENR3W44OpQiMB8GA1UdIwQY MBaAFH14Vsl765fCs4b7lYwtsSLFfbNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEt M2M3Mzg1NDQ0ODJlLzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEtM2M3Mzg1NDQ0ODJl LzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhj4ODgH 6fk9VW/rjOwjIpdOgMcILbNb4ADArP4LoZk8XmhfhulKbIPloqFaeQAz/U6JDwKi YwxX9bEFILQqYhftoUUFln35Kq16E6TMEAIeipQf4TrKoUSTuj5c8JWsuy+tPA8a ZMphGpPtozg5WM4TH2P57kbBpeu43AYvZk5coACAMRz+U4IHcsH0uPlq0PD6VDFd AwAD8hxQJHfcxQHIJH+H/nWL6YlRSvi5JAaFY6BOgcZ4hM65lhE3cZHGcljsXGeX 1V1zyKfzI8HnqyVZWgNvFLBvhMkO5tFIwWpWm6ItnrI6mYixJ5BKIhq8gMlybnAP Z/QMjiNdcs5lVg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:22 2025 by rpki-client