This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json) Hash identifier: IbrGXLL6IUXP04/dy5rUp7lUHyzeLRqwvF0/ZW3i3p4= Subject key identifier: A7:89:A3:F8:B4:4D:B9:08:B9:01:A4:BF:FE:00:67:84:2D:63:83:4A Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Certificate serial: 019B3D59C3F09E5B7FF6C0BA7BD04C6469E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 20:00:51 +0000 Manifest this update: Sat 20 Dec 2025 20:00:51 +0000 Manifest next update: Sun 21 Dec 2025 20:00:51 +0000 Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: zC2SEwRHE8OEghpAGGMRbysKjO/oy3RP9jDsciioTu0=) 2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=) 3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=) 4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:c3:f0:9e:5b:7f:f6:c0:ba:7b:d0:4c:64:69:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Validity Not Before: Dec 20 20:00:51 2025 GMT Not After : Dec 21 20:00:51 2025 GMT Subject: CN=a789a3f8b44db908b901a4bffe0067842d63834a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:93:58:54:b3:9a:d9:9a:f3:66:a1:18:bd:8f: 16:fa:9d:fa:28:e6:2a:79:79:7b:15:11:7a:e0:87: e2:fa:09:c8:01:6c:d5:60:df:70:94:6b:a2:47:70: d4:84:26:01:eb:8b:9a:7b:05:d1:67:65:e8:82:97: 79:36:c2:cb:3c:37:c0:82:a1:9e:c8:f0:85:77:a1: ac:d8:4a:ec:8f:24:1b:11:fc:95:66:1e:0e:8d:c9: 7f:78:b3:13:2c:a5:66:12:79:eb:b1:76:c4:e2:6d: c5:99:c2:2a:4a:3e:86:ea:99:5c:b9:6f:2a:5b:1b: 60:c8:68:1e:ec:7b:48:b2:f5:41:29:5f:19:3a:7f: c4:aa:3f:43:ee:b8:a9:42:6b:56:a8:3f:66:c6:8a: de:a9:58:67:6a:a8:e1:b5:1c:75:ff:46:63:be:5a: dd:20:63:9a:0d:de:d1:ab:6c:ab:8e:63:2e:a1:44: 11:5b:b5:2a:bb:02:8c:71:42:ba:22:80:56:d6:4b: 38:ce:e8:4a:cb:13:b5:36:68:f6:03:b7:00:ef:83: 30:6e:95:a0:56:65:20:6a:2a:87:cc:3d:14:64:a8: d7:fb:50:48:6d:18:7b:22:91:0b:b1:79:4b:c5:18: 19:fa:ff:79:3e:5e:83:46:e6:77:73:da:52:33:52: 09:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:89:A3:F8:B4:4D:B9:08:B9:01:A4:BF:FE:00:67:84:2D:63:83:4A X509v3 Authority Key Identifier: keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:51:4d:14:62:3f:2f:36:2a:41:04:3f:9a:23:c9:70:70:ed: d0:4e:74:cc:57:b4:33:ae:4c:de:7b:46:1d:b0:ca:c8:ce:33: d7:ce:9c:36:4d:71:61:92:d4:5c:17:b9:69:f9:9f:f0:b2:0b: c5:e5:70:a3:74:48:5a:86:54:ae:c2:a9:d1:57:09:0a:49:68: b2:b7:38:e3:f7:f9:b6:e4:0d:a4:c8:e6:c1:d3:54:1a:2a:d1: c3:9e:16:68:7f:9f:68:8d:29:ca:75:13:ba:d0:2e:fb:5a:a7: 7c:6e:22:25:b0:95:d5:fc:d7:a7:c3:87:a0:7a:bd:04:51:ec: 77:fe:f1:4e:c0:a0:5d:4d:c6:91:cd:78:77:10:96:06:e1:59: 17:fa:1d:c9:1e:3f:4e:8d:3c:e4:81:6d:03:7e:7f:0e:b0:0d: cc:65:6f:1d:b3:62:b4:a5:c3:a9:c3:cd:ab:a9:b5:09:5f:08: 13:76:d0:48:58:91:99:28:3f:eb:5d:3f:8a:12:0e:a5:fc:8d: 23:f1:55:cd:b2:e4:ce:60:3f:a2:98:a1:b4:b5:54:09:16:9a: 96:c5:68:48:1c:8f:84:44:40:c2:89:38:71:11:95:9a:d8:79: f6:ba:3e:3b:a3:86:64:d8:78:23:c9:d8:a0:60:44:7b:44:21: 16:f6:13:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WcPwnlt/9sC6e9BMZGnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx ZGYzOTAwHhcNMjUxMjIwMjAwMDUxWhcNMjUxMjIxMjAwMDUxWjAzMTEwLwYDVQQD EyhhNzg5YTNmOGI0NGRiOTA4YjkwMWE0YmZmZTAwNjc4NDJkNjM4MzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pNYVLOa2ZrzZqEYvY8W+p36KOYq eXl7FRF64Ifi+gnIAWzVYN9wlGuiR3DUhCYB64uaewXRZ2Xogpd5NsLLPDfAgqGe yPCFd6Gs2ErsjyQbEfyVZh4Ojcl/eLMTLKVmEnnrsXbE4m3FmcIqSj6G6plcuW8q WxtgyGge7HtIsvVBKV8ZOn/Eqj9D7ripQmtWqD9mxoreqVhnaqjhtRx1/0Zjvlrd IGOaDd7Rq2yrjmMuoUQRW7UquwKMcUK6IoBW1ks4zuhKyxO1Nmj2A7cA74MwbpWg VmUgaiqHzD0UZKjX+1BIbRh7IpELsXlLxRgZ+v95Pl6DRuZ3c9pSM1IJTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeJo/i0TbkIuQGkv/4AZ4QtY4NKMB8GA1UdIwQY MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0 LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlFNFGI/ LzYqQQQ/miPJcHDt0E50zFe0M65M3ntGHbDKyM4z186cNk1xYZLUXBe5afmf8LIL xeVwo3RIWoZUrsKp0VcJCklosrc44/f5tuQNpMjmwdNUGirRw54WaH+faI0pynUT utAu+1qnfG4iJbCV1fzXp8OHoHq9BFHsd/7xTsCgXU3Gkc14dxCWBuFZF/odyR4/ To085IFtA35/DrANzGVvHbNitKXDqcPNq6m1CV8IE3bQSFiRmSg/610/ihIOpfyN I/FVzbLkzmA/opihtLVUCRaalsVoSByPhERAwok4cRGVmth59ro+O6OGZNh4I8nY oGBEe0QhFvYTww== -----END CERTIFICATE-----Generated at Sat Dec 20 23:40:27 2025 by rpki-client