This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft File: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft (raw, json) Hash identifier: 8SbAnPeP0MtdRrmtILHV9qEf5ZDFYfsLoO4Db2YjhMs= Subject key identifier: 23:AC:C6:5B:1E:DB:E2:F8:D7:B6:F8:41:3F:09:9B:EA:AE:17:14:5E Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41 Certificate issuer: /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41 Certificate serial: 019B6D6A3BAF3899AF34679DFA755DD15268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 04:00:37 +0000 Manifest this update: Tue 30 Dec 2025 04:00:37 +0000 Manifest next update: Wed 31 Dec 2025 04:00:37 +0000 Files and hashes: 1: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl (hash: xJPvLSdFfGDutIHfuBE0xFN3qiaT0pfwObTjGoApEcs=) 2: sXBgVFkVLsDSLFu0VPEzayMbTVY.roa (hash: 9PH3zbHvy0n97ISInagYoPKrYxbqwVNlm+VRnpV8hJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:3b:af:38:99:af:34:67:9d:fa:75:5d:d1:52:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41 Validity Not Before: Dec 30 04:00:37 2025 GMT Not After : Dec 31 04:00:37 2025 GMT Subject: CN=23acc65b1edbe2f8d7b6f8413f099beaae17145e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:09:d3:15:da:ee:33:92:c1:ca:79:4a:16: 51:ac:79:dd:66:b4:c7:4a:ec:bb:fc:3d:c3:6b:d1: 95:f6:de:59:57:87:e5:de:df:0e:24:74:53:ad:5b: 99:1e:46:a2:0c:6e:f4:6a:a2:74:64:7f:a1:1b:71: c5:ef:7e:96:9e:0c:eb:df:aa:3e:95:5b:5c:41:cb: ae:eb:47:60:57:b9:dc:61:8e:79:e7:3e:17:c2:9e: 26:e6:37:d5:f7:63:da:2b:6f:e1:ea:3e:d2:92:25: dc:aa:33:bc:65:4c:47:6f:a6:0b:5d:d7:1d:4b:08: 12:99:3a:d2:20:8f:24:c2:75:ee:54:a8:67:53:3b: 9f:82:51:13:1f:94:63:31:c0:c9:b8:00:e2:14:54: a7:5f:21:6b:ff:c2:f2:b7:6e:2a:87:03:67:e9:0f: 65:76:cb:73:0c:e1:a9:ef:f6:91:fb:d4:d1:05:82: 7e:f3:95:77:be:60:81:fe:e2:3f:a8:0d:cb:0e:7b: fb:7f:0f:da:f3:3e:57:a4:55:4f:ff:1b:31:29:0f: 00:9b:10:cf:b5:f3:e0:71:2b:e4:d9:ba:5d:2e:62: 7a:5f:9a:98:aa:86:8d:ed:90:87:7e:49:bb:9e:67: e2:0c:56:23:97:e5:b4:85:b5:f5:ad:91:9c:ee:af: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AC:C6:5B:1E:DB:E2:F8:D7:B6:F8:41:3F:09:9B:EA:AE:17:14:5E X509v3 Authority Key Identifier: keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:28:fa:0a:ad:55:7d:80:53:37:fd:f0:ae:07:04:d3:29:20: 50:7e:a9:4c:d9:94:4b:f0:ac:57:b8:a3:a7:03:c8:2e:b0:c0: d3:56:10:3a:8e:c6:34:16:77:7f:b4:6e:0c:cd:3f:69:c5:82: 55:b3:32:9f:86:5c:e9:f7:e6:49:fa:6b:cc:3c:db:b5:55:2f: 21:57:19:9e:4b:c5:b8:e1:02:aa:99:4b:36:a2:63:96:9d:e3: 7e:7b:bc:c2:38:53:68:d7:35:34:bf:f0:f3:e5:3c:bc:25:07: 9a:c3:e0:19:fe:57:b1:c5:f2:e2:ef:04:77:3e:af:f6:ab:19: a8:56:00:f3:18:12:e9:b5:75:85:00:49:c3:e6:8c:84:c6:e0: 3c:df:30:50:fc:a2:ea:a4:7f:5f:55:94:5d:1e:7a:f9:59:0a: af:f7:a1:b8:8b:4a:7d:5f:b9:42:16:76:25:1e:31:99:76:47: d5:c9:24:ee:2e:8a:f2:bc:68:0a:94:c2:0f:d0:95:34:44:20: 06:a8:25:6e:e7:4d:e3:dd:9a:cb:75:7a:09:ce:37:af:ab:62: 11:05:58:c2:81:d2:42:c3:88:13:ff:3b:3c:02:ed:13:b1:dd: 60:78:85:1b:f0:58:fc:e2:76:4d:a7:60:02:2e:0e:64:a0:5c: 71:b8:03:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttajuvOJmvNGed+nVd0VJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTlhYWQ1ZDRiMjJmNDg3M2UwOTQ3YmM3ZjQyZmExZGQ1 YzFmNDEwHhcNMjUxMjMwMDQwMDM3WhcNMjUxMjMxMDQwMDM3WjAzMTEwLwYDVQQD EygyM2FjYzY1YjFlZGJlMmY4ZDdiNmY4NDEzZjA5OWJlYWFlMTcxNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0YJ0xXa7jOSwcp5ShZRrHndZrTH Suy7/D3Da9GV9t5ZV4fl3t8OJHRTrVuZHkaiDG70aqJ0ZH+hG3HF736Wngzr36o+ lVtcQcuu60dgV7ncYY555z4Xwp4m5jfV92PaK2/h6j7SkiXcqjO8ZUxHb6YLXdcd SwgSmTrSII8kwnXuVKhnUzufglETH5RjMcDJuADiFFSnXyFr/8Lyt24qhwNn6Q9l dstzDOGp7/aR+9TRBYJ+85V3vmCB/uI/qA3LDnv7fw/a8z5XpFVP/xsxKQ8AmxDP tfPgcSvk2bpdLmJ6X5qYqoaN7ZCHfkm7nmfiDFYjl+W0hbX1rZGc7q+nWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOsxlse2+L417b4QT8Jm+quFxReMB8GA1UdIwQY MBaAFBcZqtXUsi9Ic+CUe8f0L6HdXB9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhtcTFkU3lMMGh6NEpSN3hfUXZvZDFjSDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yOTBmZWMtMjhmMy00NGIwLTljZmYt MzMxZDRhMGQxNDI3LzEvRnhtcTFkU3lMMGh6NEpSN3hfUXZvZDFjSDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yOTBmZWMtMjhmMy00NGIwLTljZmYtMzMxZDRhMGQxNDI3 LzEvRnhtcTFkU3lMMGh6NEpSN3hfUXZvZDFjSDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATij6Cq1V fYBTN/3wrgcE0ykgUH6pTNmUS/CsV7ijpwPILrDA01YQOo7GNBZ3f7RuDM0/acWC VbMyn4Zc6ffmSfprzDzbtVUvIVcZnkvFuOECqplLNqJjlp3jfnu8wjhTaNc1NL/w 8+U8vCUHmsPgGf5XscXy4u8Edz6v9qsZqFYA8xgS6bV1hQBJw+aMhMbgPN8wUPyi 6qR/X1WUXR56+VkKr/ehuItKfV+5QhZ2JR4xmXZH1ckk7i6K8rxoCpTCD9CVNEQg BqglbudN492ay3V6Cc43r6tiEQVYwoHSQsOIE/87PALtE7HdYHiFG/BY/OJ2Tadg Ai4OZKBccbgDFQ== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:25 2025 by rpki-client