This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft File: 95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json) Hash identifier: 66oB3w4ag6ohAD6P6XdAx5mSzeVBrg2h3Q1LuMCnmLU= Subject key identifier: 71:55:6D:B9:82:07:DD:1A:96:BF:6A:A5:A6:B6:26:29:54:07:87:8E Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5 Certificate issuer: /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5 Certificate serial: 019B4EF23B3E03A56B00FDDCF01142CC8120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 06:00:56 +0000 Manifest this update: Wed 24 Dec 2025 06:00:56 +0000 Manifest next update: Thu 25 Dec 2025 06:00:56 +0000 Files and hashes: 1: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: 5atkZO8a3WqLtTljYn/o52y7TprsjESyQ640ZIKiAhg=) 2: HZJZK1LDGniWHSTreLFu2CqFoKw.roa (hash: 40ZMLNytGhjN7rMLqzH8llTGFye5F6mDvh5SBtZYngo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:3b:3e:03:a5:6b:00:fd:dc:f0:11:42:cc:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5 Validity Not Before: Dec 24 06:00:56 2025 GMT Not After : Dec 25 06:00:56 2025 GMT Subject: CN=71556db98207dd1a96bf6aa5a6b626295407878e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:39:e0:bc:28:20:87:96:3a:9f:bb:9c:f0: 3a:7a:f7:5c:5e:a2:c5:2d:e5:ff:e9:a3:c4:ef:2a: b2:25:a8:02:86:27:8d:e9:f0:c3:21:9d:37:21:9b: d0:68:e1:a1:f4:6d:35:b0:67:d0:f5:10:9d:7a:99: 62:e4:3e:ba:3b:19:6f:db:85:45:7b:09:1c:db:c0: a1:1b:e5:66:41:5d:cf:24:76:d2:7b:8f:9b:dc:e1: d8:13:b0:aa:b8:1c:f5:14:e0:06:83:3b:e7:3b:62: 06:04:23:3d:d8:8c:22:34:6e:71:97:d2:0d:ab:6b: 1c:07:3c:2f:fc:5c:9d:b1:6b:ab:d2:79:d7:50:b1: 6e:ff:20:2e:f5:dd:2f:9c:5f:16:1d:d0:dc:3f:b6: 3e:97:17:3e:1d:7d:cd:f1:0a:fe:0d:09:5e:8a:e6: 69:a8:9b:9d:df:32:4a:38:20:b2:ed:62:80:c1:0a: ea:a3:51:e1:90:d9:ed:53:10:bb:65:c8:36:d1:02: 24:ec:59:a9:25:6e:d4:f9:60:7d:f4:84:a0:5a:e8: 70:c4:1c:fe:3f:48:44:2e:cf:a0:c4:f0:14:65:df: e0:32:2e:08:13:8d:1f:e4:44:f3:12:70:ab:96:ae: eb:36:8d:ae:56:7c:71:af:25:36:33:fb:d4:9f:2f: 93:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:55:6D:B9:82:07:DD:1A:96:BF:6A:A5:A6:B6:26:29:54:07:87:8E X509v3 Authority Key Identifier: keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:23:31:b8:4e:3b:04:19:66:32:e5:24:3d:52:11:e7:34:e2: fc:0a:73:f8:64:61:b3:c9:01:da:39:6d:de:95:8e:54:14:df: 11:ea:af:09:12:8b:e6:8e:7c:f4:70:92:cd:a0:b8:dd:85:0b: c8:23:58:a6:47:8b:e6:ad:ef:42:8f:97:15:a7:21:f3:54:5c: 80:2f:6d:79:a3:39:b8:eb:6f:cb:d2:da:4e:6d:09:38:88:66: cf:45:55:7e:9b:72:33:ec:46:42:9f:bc:dc:75:32:6b:0f:a7: ad:40:d7:38:d8:dd:e8:9b:ae:2b:7c:46:f0:44:34:fa:e8:48: 1f:3a:c8:1b:99:e7:9d:12:11:54:c5:d8:90:2c:17:3a:df:33: c0:5b:c2:81:93:1f:b7:ae:2a:1e:8b:39:f1:55:07:51:07:b0: 29:9c:40:4f:89:7a:87:43:87:b1:4e:7f:55:55:e5:26:8c:ce: 21:35:55:12:a4:66:6b:f9:88:e5:dc:0a:ae:72:b8:7a:1a:9b: e5:b4:a6:9a:fc:d7:ed:1f:1c:d2:26:84:da:a0:23:8a:3f:c6: 91:ba:17:a7:a2:c4:2b:08:2a:2e:7c:e6:3f:36:95:bc:91:2a: af:4a:21:d4:a9:89:38:be:31:7b:cc:71:f6:fb:ac:de:6d:0c: 33:ef:f4:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8js+A6VrAP3c8BFCzIEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3OTE3MTRlYjZhNGIyYWZlZjgwMmU5YzE3OWRjMmNmYzJk MWNjZTUwHhcNMjUxMjI0MDYwMDU2WhcNMjUxMjI1MDYwMDU2WjAzMTEwLwYDVQQD Eyg3MTU1NmRiOTgyMDdkZDFhOTZiZjZhYTVhNmI2MjYyOTU0MDc4NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/854LwoIIeWOp+7nPA6evdcXqLF LeX/6aPE7yqyJagChieN6fDDIZ03IZvQaOGh9G01sGfQ9RCdepli5D66Oxlv24VF ewkc28ChG+VmQV3PJHbSe4+b3OHYE7CquBz1FOAGgzvnO2IGBCM92IwiNG5xl9IN q2scBzwv/FydsWur0nnXULFu/yAu9d0vnF8WHdDcP7Y+lxc+HX3N8Qr+DQleiuZp qJud3zJKOCCy7WKAwQrqo1HhkNntUxC7Zcg20QIk7FmpJW7U+WB99ISgWuhwxBz+ P0hELs+gxPAUZd/gMi4IE40f5ETzEnCrlq7rNo2uVnxxryU2M/vUny+TUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFVbbmCB90alr9qpaa2JilUB4eOMB8GA1UdIwQY MBaAFPeRcU62pLKv74AunBedws/C0czlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84NjJmYzAtNWNiZS00Y2E3LWE0NDUt M2FlZTQwODdiNTZmLzEvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84NjJmYzAtNWNiZS00Y2E3LWE0NDUtM2FlZTQwODdiNTZm LzEvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryMxuE47 BBlmMuUkPVIR5zTi/Apz+GRhs8kB2jlt3pWOVBTfEeqvCRKL5o589HCSzaC43YUL yCNYpkeL5q3vQo+XFach81RcgC9teaM5uOtvy9LaTm0JOIhmz0VVfptyM+xGQp+8 3HUyaw+nrUDXONjd6JuuK3xG8EQ0+uhIHzrIG5nnnRIRVMXYkCwXOt8zwFvCgZMf t64qHos58VUHUQewKZxAT4l6h0OHsU5/VVXlJozOITVVEqRma/mI5dwKrnK4ehqb 5bSmmvzX7R8c0iaE2qAjij/GkboXp6LEKwgqLnzmPzaVvJEqr0oh1KmJOL4xe8xx 9vus3m0MM+/0zA== -----END CERTIFICATE-----Generated at Wed Dec 24 15:11:28 2025 by rpki-client