This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json) Hash identifier: PGqA/z3XRx+0MsLJliHW8eFNvAqib+WSayzjju4lZXA= Subject key identifier: 08:BF:97:A9:A2:FC:EF:54:06:C7:A4:C7:AA:C2:2C:E8:2C:E4:46:FB Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0 Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0 Certificate serial: 019B45820A61EA44B7D6C711C50564605CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 10:01:48 +0000 Manifest this update: Mon 22 Dec 2025 10:01:48 +0000 Manifest next update: Tue 23 Dec 2025 10:01:48 +0000 Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=) 2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=) 3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: fbHF4b6nhO+zf7HFvz2qPgpcjflvJWSL2UU9jYDMh9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:82:0a:61:ea:44:b7:d6:c7:11:c5:05:64:60:5c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0 Validity Not Before: Dec 22 10:01:48 2025 GMT Not After : Dec 23 10:01:48 2025 GMT Subject: CN=08bf97a9a2fcef5406c7a4c7aac22ce82ce446fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:53:e8:75:a6:7f:b5:fe:06:76:9e:f4:65:92: 83:26:bc:a3:8d:73:1a:54:b2:4a:29:c4:4b:1a:42: bb:32:0a:eb:0b:3e:01:54:cd:f0:9f:0a:08:50:68: 29:0f:72:e4:00:46:3e:33:0e:b7:b3:14:5e:ae:c5: e0:1f:44:fd:02:fb:16:52:7f:12:67:ab:6b:28:45: 88:e9:16:f2:24:85:4c:6d:2b:49:2c:71:5f:70:58: 37:10:77:83:d9:90:59:7a:00:7b:5d:c1:f4:ba:a6: 13:c4:ea:49:1b:a5:9e:6f:13:53:7f:76:0d:f2:f0: 9c:97:11:70:fe:d9:36:80:5e:60:62:74:5e:27:fe: 27:39:5d:30:2f:d3:60:2e:e6:f6:c1:70:fd:80:09: 5e:39:c8:ef:49:d5:aa:f1:a4:d7:e5:11:cb:83:4b: 56:24:d9:69:c6:00:4e:69:dd:d0:a9:5e:96:69:8c: d0:f9:6b:a7:cf:ed:ca:bc:34:18:3a:2d:6b:01:fd: eb:84:b1:05:8d:d4:ca:0e:28:9e:98:37:1c:db:96: 11:fa:e7:71:f6:85:52:f9:eb:f5:4a:70:38:6e:5e: b1:5c:12:c4:d9:88:52:e8:34:36:21:8b:8c:d1:35: 7c:38:33:9f:bb:10:17:04:29:a7:01:cb:99:5c:a0: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BF:97:A9:A2:FC:EF:54:06:C7:A4:C7:AA:C2:2C:E8:2C:E4:46:FB X509v3 Authority Key Identifier: keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8d:0d:00:bd:3f:7f:38:62:76:c0:91:23:b3:66:dc:c2:ed: f4:92:84:f4:e2:1c:15:66:b3:56:6b:bf:96:21:7c:f1:4d:2d: e7:44:7c:02:dc:17:42:3e:48:05:0a:2e:30:61:18:66:70:e1: db:08:5c:62:16:71:15:91:b8:7b:b2:5e:99:58:83:49:14:f1: 99:88:0e:90:aa:79:d8:ee:3f:b2:19:ed:f1:6d:15:dc:7e:79: 79:05:ca:0e:89:46:ae:0f:d1:1e:b0:9f:9c:79:8f:42:28:40: fe:6f:22:33:06:b9:ec:b7:4b:a9:00:8b:f0:84:71:21:eb:0e: 2e:40:5b:2c:0e:01:1b:44:5e:77:13:25:4b:85:35:ba:db:5b: 28:f1:d3:2f:40:13:04:97:3f:ac:d6:68:2d:cc:fb:89:7b:bf: b2:71:08:4b:b1:49:58:9f:88:27:25:15:50:21:6b:b9:dc:f0: 11:d9:38:00:39:eb:6a:db:d8:3d:9d:6c:53:e8:c0:07:f4:36: 43:68:68:10:13:25:ce:78:04:00:bb:fe:b3:61:cb:bd:33:9e: 19:8a:65:40:cf:80:bb:da:15:00:7f:29:b1:31:f8:6c:1f:6a: 38:98:f0:bc:ec:af:fa:b2:43:23:34:93:22:ac:70:c4:9b:7d: 23:1b:ee:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFggph6kS31scRxQVkYFzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTMxMjllZjRmYTQ1NGUwZjBhYzQwN2UwMDhlOTU3YTFi Nzk1YTAwHhcNMjUxMjIyMTAwMTQ4WhcNMjUxMjIzMTAwMTQ4WjAzMTEwLwYDVQQD EygwOGJmOTdhOWEyZmNlZjU0MDZjN2E0YzdhYWMyMmNlODJjZTQ0NmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lPodaZ/tf4Gdp70ZZKDJryjjXMa VLJKKcRLGkK7MgrrCz4BVM3wnwoIUGgpD3LkAEY+Mw63sxRersXgH0T9AvsWUn8S Z6trKEWI6RbyJIVMbStJLHFfcFg3EHeD2ZBZegB7XcH0uqYTxOpJG6WebxNTf3YN 8vCclxFw/tk2gF5gYnReJ/4nOV0wL9NgLub2wXD9gAleOcjvSdWq8aTX5RHLg0tW JNlpxgBOad3QqV6WaYzQ+Wunz+3KvDQYOi1rAf3rhLEFjdTKDiiemDcc25YR+udx 9oVS+ev1SnA4bl6xXBLE2YhS6DQ2IYuM0TV8ODOfuxAXBCmnAcuZXKBrqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi/l6mi/O9UBsekx6rCLOgs5Eb7MB8GA1UdIwQY MBaAFBcTEp70+kVODwrEB+AI6Veht5WgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEt YzI1ZmRjNGNhMmY2LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEtYzI1ZmRjNGNhMmY2 LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAko0NAL0/ fzhidsCRI7Nm3MLt9JKE9OIcFWazVmu/liF88U0t50R8AtwXQj5IBQouMGEYZnDh 2whcYhZxFZG4e7JemViDSRTxmYgOkKp52O4/shnt8W0V3H55eQXKDolGrg/RHrCf nHmPQihA/m8iMwa57LdLqQCL8IRxIesOLkBbLA4BG0RedxMlS4U1uttbKPHTL0AT BJc/rNZoLcz7iXu/snEIS7FJWJ+IJyUVUCFrudzwEdk4ADnratvYPZ1sU+jAB/Q2 Q2hoEBMlzngEALv+s2HLvTOeGYplQM+Au9oVAH8psTH4bB9qOJjwvOyv+rJDIzST IqxwxJt9IxvuVA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:14:30 2025 by rpki-client