This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json) Hash identifier: dI5ro+QgFFFHylqITOp4dTOXwAw+d3Y7Zm7w+78hapc= Subject key identifier: 4C:11:47:28:1C:E4:E5:E5:C6:3A:BD:42:B2:BC:D5:4A:CF:AC:FE:89 Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22 Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22 Certificate serial: 019B4E4DA29FCDAC1FC879F0CB27D81F3003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft Manifest number: 1204 Signing time: Wed 24 Dec 2025 03:01:09 +0000 Manifest this update: Wed 24 Dec 2025 03:01:09 +0000 Manifest next update: Thu 25 Dec 2025 03:01:09 +0000 Files and hashes: 1: aO3R8Yo3eBCEfuvERnCJCw4GHKw.roa (hash: 0+s8Oxr+vc9N7zEky4ZV5zDnUpXVmpiBsxhTGsefbzg=) 2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: ltpBOemj0nzeOubgp8WpKyL8KtoGuYW31qdvP0tNg9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:a2:9f:cd:ac:1f:c8:79:f0:cb:27:d8:1f:30:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22 Validity Not Before: Dec 24 03:01:09 2025 GMT Not After : Dec 25 03:01:09 2025 GMT Subject: CN=4c1147281ce4e5e5c63abd42b2bcd54acfacfe89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:17:ed:8f:dd:04:b3:c5:f9:8c:eb:7e:20: b4:6c:b5:b6:bc:7f:47:ca:14:7c:4a:d4:9e:c6:be: c9:27:71:41:74:f7:c1:5f:1e:01:34:68:65:ac:1c: cd:22:ea:86:a3:fb:e8:f5:15:e0:97:d2:44:9f:2c: a0:93:e5:9b:87:cf:21:1c:ea:1b:ab:6c:6d:c4:fb: da:56:ba:91:6b:f6:78:1c:38:31:db:b5:8a:6e:b8: a4:ee:6e:f7:be:67:fc:10:2c:0d:6e:15:e6:9f:e5: 71:cd:ae:89:15:5b:cb:77:78:4b:d3:16:8f:8f:49: d5:b1:49:af:39:fd:9b:da:cb:f3:78:da:d7:e8:e7: 04:6b:59:88:bb:28:72:53:d4:bb:07:c1:79:fc:78: 4b:cd:b3:26:a5:bd:36:c6:3e:fc:70:9c:0b:1d:bf: 2e:e2:6c:e6:2e:fe:40:ee:0d:1b:70:68:a5:3b:72: a6:cb:74:b6:26:32:ea:5f:42:57:1a:70:f7:58:1c: f7:32:81:51:e7:26:3f:ff:70:59:cd:fa:6e:6b:f3: f3:e9:15:d2:7b:fb:f6:86:85:a7:32:78:35:58:aa: 5c:50:b1:2a:cb:9d:ec:e9:50:09:bc:da:d6:83:96: 92:83:87:ce:c7:f6:52:0a:c3:89:e3:b5:b7:dc:7a: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:11:47:28:1C:E4:E5:E5:C6:3A:BD:42:B2:BC:D5:4A:CF:AC:FE:89 X509v3 Authority Key Identifier: keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b5:ce:bf:1c:be:d5:17:0e:a1:f3:22:c3:13:d1:e3:c1:e6: 3d:cb:ed:4b:44:39:89:36:51:39:e0:fe:71:ca:d7:08:df:1c: 86:b4:05:98:c8:66:a5:a1:18:af:01:ac:6a:eb:37:6b:49:96: 97:61:9c:97:fe:e7:f1:5b:75:c5:47:13:a8:1f:80:5b:be:07: f9:32:5c:24:f6:74:cc:a8:62:97:d7:ea:86:a7:fe:20:07:fe: b5:fc:d1:0f:84:66:f6:87:ee:67:2e:b6:d6:72:c5:3e:68:66: f4:07:65:68:4b:01:dc:2a:4b:e2:bf:cd:41:51:bf:92:50:49: 28:24:73:bc:67:62:9c:cc:c8:ab:d2:65:6a:1b:a0:65:34:dd: e5:52:2d:b0:27:5b:94:ea:83:b4:30:22:ed:22:50:a1:bd:12: a9:56:23:90:94:ca:c1:ff:48:0f:54:8a:31:34:53:9d:86:d8: aa:e2:90:e6:f1:19:86:8d:3d:16:55:fe:d2:c0:fc:2b:14:d1: b9:3c:a3:f6:40:28:e5:cf:89:be:55:63:3a:f5:d3:a4:fb:e8: 2d:a8:61:fa:73:fc:c1:d4:a1:64:55:95:56:9a:32:fe:dd:ed: 2c:1d:39:d1:91:31:4a:b3:94:8d:25:d0:25:62:83:0c:6c:c1: e1:76:72:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTaKfzawfyHnwyyfYHzADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTc4ZmFmNjQwMWUyZjM3MTZlMzE3NjQ1NjlkZjczMWRm NThmMjIwHhcNMjUxMjI0MDMwMTA5WhcNMjUxMjI1MDMwMTA5WjAzMTEwLwYDVQQD Eyg0YzExNDcyODFjZTRlNWU1YzYzYWJkNDJiMmJjZDU0YWNmYWNmZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGAX7Y/dBLPF+YzrfiC0bLW2vH9H yhR8StSexr7JJ3FBdPfBXx4BNGhlrBzNIuqGo/vo9RXgl9JEnyygk+Wbh88hHOob q2xtxPvaVrqRa/Z4HDgx27WKbrik7m73vmf8ECwNbhXmn+Vxza6JFVvLd3hL0xaP j0nVsUmvOf2b2svzeNrX6OcEa1mIuyhyU9S7B8F5/HhLzbMmpb02xj78cJwLHb8u 4mzmLv5A7g0bcGilO3Kmy3S2JjLqX0JXGnD3WBz3MoFR5yY//3BZzfpua/Pz6RXS e/v2hoWnMng1WKpcULEqy53s6VAJvNrWg5aSg4fOx/ZSCsOJ47W33HrifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwRRygc5OXlxjq9QrK81UrPrP6JMB8GA1UdIwQY MBaAFH8Xj69kAeLzcW4xdkVp33Md9Y8iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYjc5NjgtY2E0ZC00NWY0LWI2NzEt MmU3Zjc4NDg5Y2QzLzEvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xYjc5NjgtY2E0ZC00NWY0LWI2NzEtMmU3Zjc4NDg5Y2Qz LzEvZnhlUHIyUUI0dk54YmpGMlJXbmZjeDMxanlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbXOvxy+ 1RcOofMiwxPR48HmPcvtS0Q5iTZROeD+ccrXCN8chrQFmMhmpaEYrwGsaus3a0mW l2Gcl/7n8Vt1xUcTqB+AW74H+TJcJPZ0zKhil9fqhqf+IAf+tfzRD4Rm9ofuZy62 1nLFPmhm9AdlaEsB3CpL4r/NQVG/klBJKCRzvGdinMzIq9JlahugZTTd5VItsCdb lOqDtDAi7SJQob0SqVYjkJTKwf9ID1SKMTRTnYbYquKQ5vEZho09FlX+0sD8KxTR uTyj9kAo5c+JvlVjOvXTpPvoLahh+nP8wdShZFWVVpoy/t3tLB050ZExSrOUjSXQ JWKDDGzB4XZyrQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:22:15 2025 by rpki-client