This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json) Hash identifier: ram1Gvm6t81FeZTRaVJ1kL7J3alncslquyLFY6hRWkQ= Subject key identifier: 0A:72:20:98:19:2C:8F:F4:99:18:FB:85:F8:40:D8:07:14:83:67:2C Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df Certificate serial: 019B39B3D9AFA17A9495294150AAA35E0714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft Manifest number: 1545 Signing time: Sat 20 Dec 2025 03:00:46 +0000 Manifest this update: Sat 20 Dec 2025 03:00:46 +0000 Manifest next update: Sun 21 Dec 2025 03:00:46 +0000 Files and hashes: 1: V86UJA1O-8HYQT54CIctp1oCO8c.roa (hash: J5EsS3YJMQEhACG+1Y3yRobs5dYSCmigi0dhNvrKc7I=) 2: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: A4LbEiMQKizZ4Ygo1q8Mdbw5BjqIMu4riofENzXuKyk=) 3: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (hash: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:d9:af:a1:7a:94:95:29:41:50:aa:a3:5e:07:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df Validity Not Before: Dec 20 03:00:46 2025 GMT Not After : Dec 21 03:00:46 2025 GMT Subject: CN=0a722098192c8ff49918fb85f840d8071483672c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:41:93:b4:c8:98:ad:47:97:c0:00:8c:26:00: 95:dc:df:18:59:1a:0d:6a:3c:25:ab:98:35:3f:46: 9e:68:b7:0b:5c:9f:0b:9d:b5:ac:fa:70:5b:89:ba: 37:92:60:0e:18:06:89:6d:4a:49:d1:ef:39:5e:ba: 85:7c:17:d8:4d:10:3d:5b:ff:04:32:95:46:07:0f: a7:73:a2:9d:cd:58:61:67:1c:23:65:ca:fc:f0:49: ec:8f:35:cb:d9:50:84:aa:23:69:26:30:d4:44:bf: 50:6c:a6:34:fc:78:fe:32:e2:65:f3:91:2b:48:7b: 5f:91:d5:7d:d8:0f:10:c6:5b:85:7a:74:48:7c:32: f4:a1:68:da:8d:ab:59:2b:0a:54:5f:10:fd:d5:1a: d2:8b:7e:61:15:45:84:7a:fa:95:99:1e:bd:a0:c2: 80:77:dd:c5:66:82:b4:b3:0e:bc:19:03:c7:7b:f9: c7:1e:fe:d5:63:d7:ad:d3:76:e2:7c:7a:05:9a:a7: 0b:c1:a4:be:8e:11:39:a4:e8:e1:c6:1b:63:ca:52: 7c:69:f6:17:be:25:69:ee:72:28:cb:3b:40:37:fe: a8:0d:28:0a:86:b2:18:7c:1b:53:c2:29:1e:eb:7b: 40:8c:3b:0e:c1:ea:e5:bd:c7:45:c4:ad:8e:ef:fe: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:72:20:98:19:2C:8F:F4:99:18:FB:85:F8:40:D8:07:14:83:67:2C X509v3 Authority Key Identifier: keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f5:c6:b8:fd:f5:7c:8d:d5:69:3f:7f:da:c7:48:57:e2:98: 2d:b0:17:34:12:ba:c7:d6:a5:e4:df:ab:16:5c:53:3a:08:fc: cb:38:2f:d7:b5:62:59:d3:ec:9d:62:d2:40:7d:a9:55:a9:a7: 4b:a6:2d:00:39:08:02:7a:8f:d0:08:65:dc:a5:2e:b7:50:a0: 16:13:33:8b:8e:9d:c4:89:78:47:ff:27:03:fd:d3:6a:6b:42: a6:4b:af:5e:7d:73:cd:c7:19:cc:01:b0:04:10:0b:00:8c:db: 84:db:af:d4:e3:4f:19:59:33:ee:69:b8:50:14:f4:80:8c:79: 5c:59:82:76:5d:6b:46:ab:aa:d8:82:91:58:f9:99:2a:0e:b2: be:30:59:8a:33:b6:fd:a4:eb:be:4e:1b:95:45:65:cd:37:bb: 32:09:d4:8e:0c:98:43:79:2b:ce:7f:96:9c:2e:0a:ba:50:d0: 4c:63:51:e7:05:fd:f7:5a:5c:ba:a1:4f:93:62:23:e5:42:4d: 41:7b:5e:f3:c6:bf:0b:18:7e:46:a2:9f:0d:e3:88:7b:6f:62: 64:41:17:f5:33:09:da:9b:2e:ea:af:d0:c3:81:e7:d8:21:2a: d3:e5:aa:78:20:63:1b:08:81:68:66:60:82:8c:fe:15:b6:13: 1e:8a:d5:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s9mvoXqUlSlBUKqjXgcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkN2I0YmNhYmViMjk2MDVlYTUxMWRlOTczZTQ2NzVjNGI4 YTI5ZGYwHhcNMjUxMjIwMDMwMDQ2WhcNMjUxMjIxMDMwMDQ2WjAzMTEwLwYDVQQD EygwYTcyMjA5ODE5MmM4ZmY0OTkxOGZiODVmODQwZDgwNzE0ODM2NzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kGTtMiYrUeXwACMJgCV3N8YWRoN ajwlq5g1P0aeaLcLXJ8LnbWs+nBbibo3kmAOGAaJbUpJ0e85XrqFfBfYTRA9W/8E MpVGBw+nc6KdzVhhZxwjZcr88EnsjzXL2VCEqiNpJjDURL9QbKY0/Hj+MuJl85Er SHtfkdV92A8QxluFenRIfDL0oWjajatZKwpUXxD91RrSi35hFUWEevqVmR69oMKA d93FZoK0sw68GQPHe/nHHv7VY9et03bifHoFmqcLwaS+jhE5pOjhxhtjylJ8afYX viVp7nIoyztAN/6oDSgKhrIYfBtTwike63tAjDsOwerlvcdFxK2O7/7k2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApyIJgZLI/0mRj7hfhA2AcUg2csMB8GA1UdIwQY MBaAFH17S8q+spYF6lEd6XPkZ1xLiinfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGIt NDQ3NjE3YTRhNzQ0LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGItNDQ3NjE3YTRhNzQ0 LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvXGuP31 fI3VaT9/2sdIV+KYLbAXNBK6x9al5N+rFlxTOgj8yzgv17ViWdPsnWLSQH2pVamn S6YtADkIAnqP0Ahl3KUut1CgFhMzi46dxIl4R/8nA/3TamtCpkuvXn1zzccZzAGw BBALAIzbhNuv1ONPGVkz7mm4UBT0gIx5XFmCdl1rRquq2IKRWPmZKg6yvjBZijO2 /aTrvk4blUVlzTe7MgnUjgyYQ3krzn+WnC4KulDQTGNR5wX991pcuqFPk2Ij5UJN QXte88a/Cxh+RqKfDeOIe29iZEEX9TMJ2psu6q/Qw4Hn2CEq0+WqeCBjGwiBaGZg goz+FbYTHorVYQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:40:08 2025 by rpki-client