This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json) Hash identifier: r4QOudLaJpwXH5ZTJfVApQJm6K0/hRSSnzlM7vuplPQ= Subject key identifier: F4:63:3C:7F:55:D8:6A:9B:F3:B4:53:75:C5:4F:B5:BB:5B:05:2F:36 Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a Certificate serial: 019B3A8FBF5AFE97220FD8C6AF2E468CF8CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 07:00:57 +0000 Manifest this update: Sat 20 Dec 2025 07:00:57 +0000 Manifest next update: Sun 21 Dec 2025 07:00:57 +0000 Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=) 2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: kYcZ04MFlv/29gCkCcA+jUlHWGh48LO+nlWo4rzhpTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:bf:5a:fe:97:22:0f:d8:c6:af:2e:46:8c:f8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a Validity Not Before: Dec 20 07:00:57 2025 GMT Not After : Dec 21 07:00:57 2025 GMT Subject: CN=f4633c7f55d86a9bf3b45375c54fb5bb5b052f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:fb:9c:d1:2a:85:d0:cc:fd:06:92:1b:56: eb:14:07:8c:af:45:e5:73:e8:37:a3:f1:c4:ba:11: cf:69:1f:a7:58:34:db:c6:95:9f:42:77:ea:b8:4b: 9f:d4:2f:56:3c:4d:ea:52:79:8e:5b:33:ff:10:a9: 10:72:9b:72:69:a9:ba:55:e6:eb:a2:a3:61:eb:7f: f8:6e:26:03:2a:58:59:d3:19:12:da:b1:09:4b:fa: 1c:67:6f:e7:75:c6:17:a9:53:2f:70:b8:75:21:26: b7:55:b6:85:53:67:63:8f:b8:82:b7:73:8e:eb:51: 1e:43:d8:57:ec:ea:85:4d:20:22:08:1b:25:8a:67: 32:03:77:60:01:3d:cf:f7:6c:bd:46:84:97:8f:b4: d3:31:c8:aa:4d:e0:2c:fe:85:24:d3:e2:d5:eb:0e: ed:e0:c1:f7:58:05:5a:aa:16:a0:d6:17:a7:9b:13: dc:70:28:46:4e:75:9c:0f:e8:1f:23:ee:0b:24:44: ac:dc:84:d6:0a:78:a9:9a:b0:ec:5b:a5:27:d3:81: 87:35:4d:06:cb:77:57:ec:65:8b:36:57:40:e6:ef: d9:b3:73:9e:2e:7c:d0:26:3f:0c:df:74:d8:eb:69: c9:71:04:56:f8:73:32:e0:66:a3:f6:38:d0:a3:24: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:63:3C:7F:55:D8:6A:9B:F3:B4:53:75:C5:4F:B5:BB:5B:05:2F:36 X509v3 Authority Key Identifier: keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1d:04:be:80:ea:ed:1e:4b:0c:76:5b:16:03:a4:4d:d5:df: 91:35:ad:e3:99:71:5c:4d:e8:01:77:0d:89:aa:de:dd:5f:87: af:73:b4:70:6c:32:02:b8:30:af:13:77:85:e1:23:c0:89:69: 84:79:a9:84:ed:91:e2:b8:c9:2c:39:03:c4:5e:12:8c:cd:c5: 2e:d7:04:17:c9:a0:3f:3d:0b:07:f2:f5:08:bd:d0:8f:5e:31: 4c:09:6e:87:75:c4:0d:0c:0e:1a:e3:d7:43:54:60:3c:0a:1e: 2f:ec:ea:cb:b6:58:d9:5e:2b:27:de:e2:8b:22:20:f8:65:f3: 64:19:1f:86:01:6a:67:13:1d:86:8c:a6:3b:5e:eb:da:4d:24: d2:83:88:ce:02:33:64:08:93:18:69:ec:45:a2:52:cc:e9:8c: e8:47:87:35:0e:5d:d7:a8:d4:e1:96:bd:cc:6d:87:6e:d4:a0: 13:04:cf:bb:e2:cf:c2:7e:46:6a:98:5c:da:c9:12:83:eb:bd: 5c:21:48:c8:7b:e4:21:89:a4:14:1e:17:0e:26:44:75:80:89: e2:41:00:14:eb:c2:19:7e:b3:b2:d0:c6:25:39:dd:c8:f5:e7: 44:b7:56:1f:7a:e3:76:8f:e7:49:45:5a:1e:ca:0b:4a:07:d5: 03:69:5b:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j79a/pciD9jGry5GjPjLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3 OTg5MmEwHhcNMjUxMjIwMDcwMDU3WhcNMjUxMjIxMDcwMDU3WjAzMTEwLwYDVQQD EyhmNDYzM2M3ZjU1ZDg2YTliZjNiNDUzNzVjNTRmYjViYjViMDUyZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0f7nNEqhdDM/QaSG1brFAeMr0Xl c+g3o/HEuhHPaR+nWDTbxpWfQnfquEuf1C9WPE3qUnmOWzP/EKkQcptyaam6Vebr oqNh63/4biYDKlhZ0xkS2rEJS/ocZ2/ndcYXqVMvcLh1ISa3VbaFU2djj7iCt3OO 61EeQ9hX7OqFTSAiCBslimcyA3dgAT3P92y9RoSXj7TTMciqTeAs/oUk0+LV6w7t 4MH3WAVaqhag1henmxPccChGTnWcD+gfI+4LJESs3ITWCnipmrDsW6Un04GHNU0G y3dX7GWLNldA5u/Zs3OeLnzQJj8M33TY62nJcQRW+HMy4Gaj9jjQoyQuAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRjPH9V2Gqb87RTdcVPtbtbBS82MB8GA1UdIwQY MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnh0EvoDq 7R5LDHZbFgOkTdXfkTWt45lxXE3oAXcNiare3V+Hr3O0cGwyArgwrxN3heEjwIlp hHmphO2R4rjJLDkDxF4SjM3FLtcEF8mgPz0LB/L1CL3Qj14xTAluh3XEDQwOGuPX Q1RgPAoeL+zqy7ZY2V4rJ97iiyIg+GXzZBkfhgFqZxMdhoymO17r2k0k0oOIzgIz ZAiTGGnsRaJSzOmM6EeHNQ5d16jU4Za9zG2HbtSgEwTPu+LPwn5Gaphc2skSg+u9 XCFIyHvkIYmkFB4XDiZEdYCJ4kEAFOvCGX6zstDGJTndyPXnRLdWH3rjdo/nSUVa HsoLSgfVA2lbaA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:58:33 2025 by rpki-client