This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json) Hash identifier: Bo77jDJBor2BvQPOV4iD8rKICt5pX7rSRCFanet4/QE= Subject key identifier: AB:6D:CD:41:0B:7A:35:92:C3:2C:E2:31:21:B4:21:E3:FE:A1:38:B0 Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46 Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946 Certificate serial: 019B4EF2531DF6E6AEED3668903DA127E8F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft Manifest number: 178D Signing time: Wed 24 Dec 2025 06:01:02 +0000 Manifest this update: Wed 24 Dec 2025 06:01:02 +0000 Manifest next update: Thu 25 Dec 2025 06:01:02 +0000 Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: 7sz42wb+tIjdNBi0wTo2Gjll5+HE+rTZV63+75zJWiI=) 2: pjFDM6wzAyFnV_7W_SHgCVJP4hc.roa (hash: 25g7lwwxP1qGazXdPhbau6vE9l12B9+J1HdSOR/R0VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:53:1d:f6:e6:ae:ed:36:68:90:3d:a1:27:e8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946 Validity Not Before: Dec 24 06:01:02 2025 GMT Not After : Dec 25 06:01:02 2025 GMT Subject: CN=ab6dcd410b7a3592c32ce23121b421e3fea138b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:20:f5:0e:6f:7a:47:28:a1:8a:8d:81:f3: b5:b4:0f:2e:c5:c1:79:eb:b8:93:ad:d5:66:93:47: ca:ae:c1:14:30:09:56:0c:2b:ca:ab:78:48:fc:02: 63:5b:40:3e:03:04:8d:18:49:01:0e:25:c9:d7:66: 05:8d:44:14:86:12:2c:a1:29:de:cc:b1:95:b9:7b: a2:e0:c6:c9:da:48:01:db:32:ec:71:0e:f5:ec:c0: 36:31:c7:42:db:96:3f:12:a2:c9:27:64:45:96:ee: 25:85:ea:6a:8e:3d:08:1b:81:f3:09:9c:51:ef:f4: e3:09:00:71:67:23:c6:b7:0a:21:ca:83:22:46:02: a5:f7:aa:ee:fa:45:36:01:72:20:eb:92:83:9c:92: 98:fe:e0:43:58:ee:06:5c:8a:0c:b7:6e:a7:2b:d3: 01:66:fc:ca:94:f9:6a:9e:b1:6b:84:4b:8b:12:ed: 29:74:d0:9b:6a:c2:d8:ca:08:46:e6:6b:60:f8:51: ac:c1:2a:92:0f:3d:2a:52:94:f5:c6:ea:c4:04:b4: b9:8c:f9:1b:30:6c:28:24:82:c1:cf:ba:8f:e8:63: 71:a1:de:3e:0c:2e:70:f5:f4:4c:ff:fc:25:9f:df: 98:d6:c6:d1:c9:cf:ad:9d:d9:a9:f0:9b:0f:c8:00: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6D:CD:41:0B:7A:35:92:C3:2C:E2:31:21:B4:21:E3:FE:A1:38:B0 X509v3 Authority Key Identifier: keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:01:93:be:8a:e4:48:3d:cd:11:b1:e0:f1:5e:54:19:9c:3a: cc:7f:c7:87:d1:c8:5e:cc:d1:39:7d:27:f6:04:c9:ea:28:78: 7b:96:18:97:b2:03:e3:6e:86:ec:96:aa:39:da:9c:b0:5f:a8: 8d:ac:3c:a7:a6:2b:8b:f7:b8:a9:b2:e4:0d:39:27:7d:97:2c: e0:80:e4:e3:6a:7a:99:3a:e8:79:f1:48:be:04:84:ab:8b:01: da:11:46:3f:cd:d7:a6:ef:17:31:0c:12:4f:ac:ac:e5:df:b4: 87:0d:ab:15:61:38:d1:a1:e0:7e:39:af:02:b9:c8:b6:f3:4f: df:24:9b:8e:01:e0:9c:42:6e:64:80:a4:f7:e3:f1:9c:73:f2: 98:81:79:a7:a3:59:b1:55:1d:1f:88:d9:a0:ff:95:d4:53:9f: 1b:35:21:53:a3:a7:89:e4:0d:b1:cc:e9:32:17:2b:a9:ed:aa: e1:08:c0:2b:fc:a1:23:42:81:33:bb:08:00:73:b4:79:99:02: 1c:e0:93:ef:4e:cf:08:9f:40:57:f9:95:94:1e:0c:b3:66:df: d3:f2:f8:18:c7:82:93:12:7a:df:4f:5c:30:81:13:8b:77:ab: a1:92:64:00:82:5f:33:49:97:ae:e6:00:29:13:7b:cd:7d:6d: 6c:a7:7d:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8lMd9uau7TZokD2hJ+j1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTE0MTZhZTM5MjlkZjM3YmY2NmE0NTljZDNhY2E2Mzg5 MWU5NDYwHhcNMjUxMjI0MDYwMTAyWhcNMjUxMjI1MDYwMTAyWjAzMTEwLwYDVQQD EyhhYjZkY2Q0MTBiN2EzNTkyYzMyY2UyMzEyMWI0MjFlM2ZlYTEzOGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHEg9Q5vekcooYqNgfO1tA8uxcF5 67iTrdVmk0fKrsEUMAlWDCvKq3hI/AJjW0A+AwSNGEkBDiXJ12YFjUQUhhIsoSne zLGVuXui4MbJ2kgB2zLscQ717MA2McdC25Y/EqLJJ2RFlu4lhepqjj0IG4HzCZxR 7/TjCQBxZyPGtwohyoMiRgKl96ru+kU2AXIg65KDnJKY/uBDWO4GXIoMt26nK9MB ZvzKlPlqnrFrhEuLEu0pdNCbasLYyghG5mtg+FGswSqSDz0qUpT1xurEBLS5jPkb MGwoJILBz7qP6GNxod4+DC5w9fRM//wln9+Y1sbRyc+tndmp8JsPyACEDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKttzUELejWSwyziMSG0IeP+oTiwMB8GA1UdIwQY MBaAFH8RQWrjkp3ze/ZqRZzTrKY4kelGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQt Njc1NmY3YjBjMGRiLzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQtNjc1NmY3YjBjMGRi LzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegGTvork SD3NEbHg8V5UGZw6zH/Hh9HIXszROX0n9gTJ6ih4e5YYl7ID426G7JaqOdqcsF+o jaw8p6Yri/e4qbLkDTknfZcs4IDk42p6mTroefFIvgSEq4sB2hFGP83Xpu8XMQwS T6ys5d+0hw2rFWE40aHgfjmvArnItvNP3ySbjgHgnEJuZICk9+PxnHPymIF5p6NZ sVUdH4jZoP+V1FOfGzUhU6OnieQNsczpMhcrqe2q4QjAK/yhI0KBM7sIAHO0eZkC HOCT707PCJ9AV/mVlB4Ms2bf0/L4GMeCkxJ6309cMIETi3eroZJkAIJfM0mXruYA KRN7zX1tbKd92Q== -----END CERTIFICATE-----Generated at Wed Dec 24 12:32:36 2025 by rpki-client