This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json) Hash identifier: shXTgZae136qbq8NjyvZytxoWGBtfB4IQTNm7MFVQW8= Subject key identifier: C2:79:83:9F:9A:B1:CA:43:95:F3:77:B7:EA:33:29:89:3C:3E:43:F3 Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f Certificate serial: 019B40FFF40B23F9A9CDA1067E1978BF0F51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 13:01:14 +0000 Manifest this update: Sun 21 Dec 2025 13:01:14 +0000 Manifest next update: Mon 22 Dec 2025 13:01:14 +0000 Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=) 2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: gAenm4n1cRvABRv9r0+5vwmEdrjgTfvo23UF/pPuppk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:f4:0b:23:f9:a9:cd:a1:06:7e:19:78:bf:0f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f Validity Not Before: Dec 21 13:01:14 2025 GMT Not After : Dec 22 13:01:14 2025 GMT Subject: CN=c279839f9ab1ca4395f377b7ea3329893c3e43f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3f:d9:24:0d:f0:c5:e1:55:61:ba:3e:b3:32: 31:3d:d1:fa:76:5e:d4:40:ae:fc:26:13:45:33:c6: 09:32:22:7a:31:3b:73:cb:09:3d:51:89:be:47:9b: b2:d3:2c:cd:7b:75:fa:fc:15:c2:93:e0:35:6c:3e: 65:97:71:19:ab:34:b9:20:fa:21:2f:a0:f5:d6:92: 04:47:1e:c7:d9:2b:95:4e:ee:60:00:81:4e:14:7b: bd:90:6b:5d:64:ab:20:13:d5:17:65:36:34:2a:d5: 2a:cd:9e:e3:ee:6e:cd:35:1e:24:38:1a:c1:f1:6e: a9:02:17:e5:64:1d:6a:6d:18:d5:03:13:cb:38:66: 89:83:d1:1e:cc:17:08:43:e0:44:ab:c1:51:3e:98: d9:d1:93:51:74:17:f4:68:97:92:40:ac:a8:ca:8d: 86:92:3c:f1:8e:f8:01:47:67:44:bf:b3:de:95:5e: 85:a3:4b:f5:0a:16:88:af:8b:ad:08:3d:cd:8d:ed: 50:39:36:00:ed:04:6e:04:11:57:01:99:7b:86:66: c8:9e:24:b6:38:ab:42:05:d3:8d:c3:5e:3d:d2:35: f5:8a:ce:26:17:7f:a6:03:3c:1b:22:4c:f3:52:fa: 60:b0:45:ef:05:cc:4f:1f:ba:02:3f:3d:fd:7f:84: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:79:83:9F:9A:B1:CA:43:95:F3:77:B7:EA:33:29:89:3C:3E:43:F3 X509v3 Authority Key Identifier: keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:57:7c:dc:8a:cd:df:31:89:1a:0c:63:36:40:55:46:76:7c: 09:8d:b6:b8:83:38:e7:37:a6:2f:3a:33:18:e5:d4:bb:e6:7b: 79:cf:6c:0b:c4:8e:1c:cd:7f:d8:d5:03:2d:09:f5:a1:2d:8e: e0:b5:66:2a:41:dc:c8:41:39:7e:61:94:c2:87:40:b2:c2:78: d1:3a:b1:c7:8f:f4:7d:d9:13:b1:65:05:3f:b0:42:6c:f0:14: d7:b7:93:15:c2:c0:f2:58:f0:dd:8b:f9:bc:04:70:ff:44:fe: 79:09:9c:93:8d:4f:03:80:0f:49:10:1e:d9:14:fd:45:af:72: 64:ac:53:ad:4f:72:14:f1:ea:4b:ab:61:77:0f:85:4a:e5:93: 30:8b:20:f7:dc:5a:ae:be:c6:42:a8:6d:15:85:fa:43:bb:ee: 7e:e8:bb:54:d9:03:69:c9:73:d0:33:58:5d:c9:0e:dd:ad:c2: 41:a8:de:b2:2c:88:6e:81:ee:a4:84:c9:de:b4:06:ae:05:e5: 02:1c:ea:d9:19:c3:11:d1:96:d6:e5:84:f8:b4:b9:33:0b:f6: 07:d7:de:1a:14:c4:a2:4f:b7:a1:18:44:d2:70:52:fb:e5:28: b0:8c:7b:6d:10:07:b5:76:62:32:ef:f6:ce:19:e7:29:72:b5: a9:a7:d5:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//QLI/mpzaEGfhl4vw9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTdkN2EyZDU3NjYxZjZjM2M2ZWE3NjM2Y2EwZmYyMzAw YzE0NmYwHhcNMjUxMjIxMTMwMTE0WhcNMjUxMjIyMTMwMTE0WjAzMTEwLwYDVQQD EyhjMjc5ODM5ZjlhYjFjYTQzOTVmMzc3YjdlYTMzMjk4OTNjM2U0M2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z/ZJA3wxeFVYbo+szIxPdH6dl7U QK78JhNFM8YJMiJ6MTtzywk9UYm+R5uy0yzNe3X6/BXCk+A1bD5ll3EZqzS5IPoh L6D11pIERx7H2SuVTu5gAIFOFHu9kGtdZKsgE9UXZTY0KtUqzZ7j7m7NNR4kOBrB 8W6pAhflZB1qbRjVAxPLOGaJg9EezBcIQ+BEq8FRPpjZ0ZNRdBf0aJeSQKyoyo2G kjzxjvgBR2dEv7PelV6Fo0v1ChaIr4utCD3Nje1QOTYA7QRuBBFXAZl7hmbIniS2 OKtCBdONw1490jX1is4mF3+mAzwbIkzzUvpgsEXvBcxPH7oCPz39f4R4+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ5g5+ascpDlfN3t+ozKYk8PkPzMB8GA1UdIwQY MBaAFPxX16LVdmH2w8bqdjbKD/IwDBRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMt NzMxZjQ3ODIwYjIwLzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMtNzMxZjQ3ODIwYjIw LzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1d83IrN 3zGJGgxjNkBVRnZ8CY22uIM45zemLzozGOXUu+Z7ec9sC8SOHM1/2NUDLQn1oS2O 4LVmKkHcyEE5fmGUwodAssJ40Tqxx4/0fdkTsWUFP7BCbPAU17eTFcLA8ljw3Yv5 vARw/0T+eQmck41PA4APSRAe2RT9Ra9yZKxTrU9yFPHqS6thdw+FSuWTMIsg99xa rr7GQqhtFYX6Q7vufui7VNkDaclz0DNYXckO3a3CQajesiyIboHupITJ3rQGrgXl Ahzq2RnDEdGW1uWE+LS5Mwv2B9feGhTEok+3oRhE0nBS++UosIx7bRAHtXZiMu/2 zhnnKXK1qafVGw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:34:49 2025 by rpki-client