This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json) Hash identifier: 0dLlmLuvZlnR7YwNYozDhu+Sq0gUOAR+8f0CitAY/G8= Subject key identifier: FC:ED:54:49:3D:33:8E:6A:71:75:8B:E1:D5:77:1B:BF:9B:E4:26:FE Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26 Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26 Certificate serial: 019B514E2DC30915A8444F5D469FB783AE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft Manifest number: 1165 Signing time: Wed 24 Dec 2025 17:00:36 +0000 Manifest this update: Wed 24 Dec 2025 17:00:36 +0000 Manifest next update: Thu 25 Dec 2025 17:00:36 +0000 Files and hashes: 1: AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa (hash: d5gxdyXpVK75f5B2dssNKeXHA5IUThR6PGmkaU8utQY=) 2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: /XIovzS5FrPTp/1ansvzWBsj+gw0g/UcbI6om7b//Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:2d:c3:09:15:a8:44:4f:5d:46:9f:b7:83:ae:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26 Validity Not Before: Dec 24 17:00:36 2025 GMT Not After : Dec 25 17:00:36 2025 GMT Subject: CN=fced54493d338e6a71758be1d5771bbf9be426fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:97:58:1b:e6:b0:a1:87:f2:bf:e9:12:af: 0d:84:6c:91:8d:b1:a9:92:ba:84:e2:ff:eb:ba:9e: 17:80:5a:c4:87:33:89:21:f1:62:2f:67:82:5a:c8: 9a:fb:b2:0d:4e:77:b7:84:2f:ed:c8:21:61:fb:da: 8b:92:28:16:e6:9e:e6:10:a6:17:89:27:5e:a0:64: 01:cc:0c:e8:0e:e1:24:ec:2e:39:61:b6:cf:52:0a: ba:27:9d:33:d3:77:62:7a:53:d1:e2:d9:b5:44:22: 12:de:4e:fe:ef:33:68:e0:d5:a1:b8:3d:a0:f6:c0: 27:c3:c5:70:03:36:82:9d:30:80:d7:90:60:66:26: a7:77:c8:1e:54:0c:ca:ca:86:33:d8:46:a5:75:fc: 85:8c:90:28:34:d4:6a:b4:9c:b6:a5:09:c5:db:32: d5:20:dc:99:1c:a5:d7:1d:95:cf:58:ee:d1:6e:64: aa:63:d2:4f:c7:b0:1c:09:70:2a:fe:77:89:a3:1a: e0:8d:9e:cc:04:fe:59:0e:00:f2:e1:92:70:2e:82: 7c:de:34:de:87:72:0d:c4:6f:c6:19:0e:f7:b1:ca: 37:0a:d8:de:9d:18:0e:9f:c2:f5:89:30:eb:0b:90: 86:e2:b1:ab:f2:6f:ac:c6:47:67:e0:3d:c7:5c:2e: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:54:49:3D:33:8E:6A:71:75:8B:E1:D5:77:1B:BF:9B:E4:26:FE X509v3 Authority Key Identifier: keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:cf:4c:47:9b:62:04:93:a5:5d:85:a5:f0:98:dc:60:a4:b9: 0c:74:79:16:05:29:70:50:9d:dc:6e:56:97:08:cb:72:9d:e2: 94:91:e4:01:79:01:57:ce:20:65:1e:25:3a:21:e2:8a:a2:14: bf:48:09:d5:b0:95:31:6b:70:a6:91:72:73:50:46:f1:5d:30: 46:23:6f:46:e4:b9:47:72:31:58:f4:8f:84:7e:76:b7:78:da: 14:03:6c:ce:b0:36:f9:e1:77:06:89:28:fe:0b:53:34:13:0f: f9:a3:2c:7a:e9:07:a1:3e:f1:5c:22:b6:9d:b5:dc:d1:47:19: f1:c6:cf:0a:64:b7:7d:e3:3e:51:a6:0a:01:38:12:b4:62:da: e3:b2:34:5e:ea:4a:c8:c0:9d:c0:cc:37:6c:5c:3a:17:1f:75: b6:3f:b3:5e:ec:67:19:2f:05:66:1f:49:e7:4e:f4:67:75:e7: 75:67:14:1f:82:c8:ee:4f:b2:71:c7:3f:fc:f3:d7:e4:25:89: dc:1a:f7:e2:88:3b:2b:6b:68:66:61:40:ee:ed:0b:3b:0b:a5: 7c:bc:c3:90:2a:b2:30:7c:c3:e3:c1:4a:e9:f6:08:a1:68:27: e0:b7:a4:b7:0d:fb:f2:17:76:db:b6:08:b5:5b:93:ae:40:2c: c0:69:74:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTi3DCRWoRE9dRp+3g65+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OThkNzVlOGUzMmQ1ZTg0N2RmNGFhMWEzNWMyOTM0NGM5 NzZlMjYwHhcNMjUxMjI0MTcwMDM2WhcNMjUxMjI1MTcwMDM2WjAzMTEwLwYDVQQD EyhmY2VkNTQ0OTNkMzM4ZTZhNzE3NThiZTFkNTc3MWJiZjliZTQyNmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo+XWBvmsKGH8r/pEq8NhGyRjbGp krqE4v/rup4XgFrEhzOJIfFiL2eCWsia+7INTne3hC/tyCFh+9qLkigW5p7mEKYX iSdeoGQBzAzoDuEk7C45YbbPUgq6J50z03dielPR4tm1RCIS3k7+7zNo4NWhuD2g 9sAnw8VwAzaCnTCA15BgZiand8geVAzKyoYz2EaldfyFjJAoNNRqtJy2pQnF2zLV INyZHKXXHZXPWO7RbmSqY9JPx7AcCXAq/neJoxrgjZ7MBP5ZDgDy4ZJwLoJ83jTe h3INxG/GGQ73sco3CtjenRgOn8L1iTDrC5CG4rGr8m+sxkdn4D3HXC7VxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPztVEk9M45qcXWL4dV3G7+b5Cb+MB8GA1UdIwQY MBaAFBWY116OMtXoR99KoaNcKTRMl24mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGIt M2JjNmJjMzA2Zjg5LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGItM2JjNmJjMzA2Zjg5 LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArc9MR5ti BJOlXYWl8JjcYKS5DHR5FgUpcFCd3G5WlwjLcp3ilJHkAXkBV84gZR4lOiHiiqIU v0gJ1bCVMWtwppFyc1BG8V0wRiNvRuS5R3IxWPSPhH52t3jaFANszrA2+eF3Boko /gtTNBMP+aMseukHoT7xXCK2nbXc0UcZ8cbPCmS3feM+UaYKATgStGLa47I0XupK yMCdwMw3bFw6Fx91tj+zXuxnGS8FZh9J5070Z3XndWcUH4LI7k+yccc//PPX5CWJ 3Br34og7K2toZmFA7u0LOwulfLzDkCqyMHzD48FK6fYIoWgn4Lektw378hd227YI tVuTrkAswGl0xw== -----END CERTIFICATE-----Generated at Thu Dec 25 00:41:19 2025 by rpki-client