This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json) Hash identifier: p6iFGC2G2HWceACge2D5SXiU/ODdgXU6LZHucuHqa34= Subject key identifier: 28:71:F4:68:D5:7B:6D:C7:35:40:B8:4C:7F:92:47:59:37:7B:CE:F9 Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0 Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0 Certificate serial: 019B3DC7FF58DB125611ED1E158EBADEE133 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:01:15 +0000 Manifest this update: Sat 20 Dec 2025 22:01:15 +0000 Manifest next update: Sun 21 Dec 2025 22:01:15 +0000 Files and hashes: 1: Awd1yGOmw0G9ufYkJyOwIDHo3Qk.roa (hash: NpDJRKt/f4syIfXokbOL4x73rCHTvURrkdu0Yrl2tN4=) 2: BIIEZlMRbg4gFcs3vd0E2vnjAC0.roa (hash: dLd9sOD+PRZDAt8utITG0xeDO7qLojT8kdoKvMI+HQ0=) 3: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: GQyNlDP16MIRQG3hGfcMi319J7L4TpUkW5X6gbMsDS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ff:58:db:12:56:11:ed:1e:15:8e:ba:de:e1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0 Validity Not Before: Dec 20 22:01:15 2025 GMT Not After : Dec 21 22:01:15 2025 GMT Subject: CN=2871f468d57b6dc73540b84c7f924759377bcef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8e:7f:c3:71:b4:da:09:d2:ec:89:09:be:be: 01:94:49:50:c7:19:51:ee:80:98:a7:f1:0b:eb:e8: 1b:1a:fb:f8:72:c7:84:d6:9d:29:5c:7e:12:12:d3: e1:81:8b:a2:83:b8:1b:ac:81:e3:f7:1b:fb:2e:e3: 32:f7:cd:8e:cb:e5:c9:a8:67:cf:ae:31:8f:2f:20: 5b:1f:4a:64:98:37:7f:8e:d9:6d:f4:df:7c:64:fd: fe:6e:f7:3a:d9:2c:98:0a:83:b7:76:f3:83:e0:90: f9:17:e8:0a:fd:05:8a:29:07:8d:75:4d:9c:f3:c3: e3:83:1d:28:2c:12:31:87:29:d6:b9:e0:a4:85:98: 8d:e5:c3:a7:f7:c3:f4:83:cd:2b:37:01:4c:f0:cc: 2d:1d:32:2a:8c:c0:de:b4:be:d4:b5:cb:ff:df:b7: 7f:8e:2c:e0:51:bc:db:59:e1:99:ef:70:bb:8b:ef: 39:97:5b:2a:6a:3c:86:aa:1a:4e:3c:f5:94:3f:80: 5e:24:28:cd:b2:3e:05:e2:7d:d6:a8:b1:84:71:fc: dd:d6:a9:d3:11:13:97:b6:90:ea:b0:86:9c:60:b6: 84:e2:12:c7:12:63:96:ad:e0:ff:53:d8:8b:d1:17: 56:03:20:1e:28:f3:42:54:99:8d:56:80:7c:09:19: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:71:F4:68:D5:7B:6D:C7:35:40:B8:4C:7F:92:47:59:37:7B:CE:F9 X509v3 Authority Key Identifier: keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4d:a1:f6:c1:7e:f6:dc:ed:89:0c:99:2f:f3:29:86:d3:59: eb:fa:f5:4b:b5:e2:a4:8c:5a:ee:dc:30:ef:de:e4:b8:95:ad: 58:b3:db:a0:e0:3e:7a:0d:45:bd:96:03:db:35:0d:8e:bc:b8: db:2c:21:13:77:1b:ee:61:62:0a:c6:d6:ec:8f:be:74:4b:ea: d2:60:56:cf:20:1e:f3:34:2c:8e:49:36:5e:5e:8e:1e:1f:4a: c9:cb:db:30:b0:d7:30:03:da:3d:c5:f6:ff:79:bb:18:49:cc: 06:fb:46:34:82:20:8e:df:97:f0:25:7d:5c:0c:4d:89:95:89: c6:82:e0:44:8d:ac:f5:d8:b4:04:f5:01:d7:ac:35:94:3e:50: 20:cf:b2:91:7e:29:d7:53:2c:a3:34:4c:84:3d:01:2b:73:ce: bc:e7:ad:50:49:4f:2e:5f:cc:86:2a:0a:d1:0c:3b:fd:57:35: 41:ca:e1:fa:68:aa:06:d2:39:34:3f:54:08:3a:d3:90:83:27: 4b:d3:2b:f5:63:60:c2:52:eb:ff:10:e1:79:06:52:aa:03:ec: 45:37:17:3e:a4:2a:a1:5d:7f:21:81:80:67:c6:79:ec:2e:22: aa:dd:74:2c:db:e7:45:85:86:9b:9a:67:b0:11:f2:12:36:8c: ce:76:a8:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x/9Y2xJWEe0eFY663uEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTMxMjllZjRmYTQ1NGUwZjBhYzQwN2UwMDhlOTU3YTFi Nzk1YTAwHhcNMjUxMjIwMjIwMTE1WhcNMjUxMjIxMjIwMTE1WjAzMTEwLwYDVQQD EygyODcxZjQ2OGQ1N2I2ZGM3MzU0MGI4NGM3ZjkyNDc1OTM3N2JjZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY5/w3G02gnS7IkJvr4BlElQxxlR 7oCYp/EL6+gbGvv4cseE1p0pXH4SEtPhgYuig7gbrIHj9xv7LuMy982Oy+XJqGfP rjGPLyBbH0pkmDd/jtlt9N98ZP3+bvc62SyYCoO3dvOD4JD5F+gK/QWKKQeNdU2c 88Pjgx0oLBIxhynWueCkhZiN5cOn98P0g80rNwFM8MwtHTIqjMDetL7Utcv/37d/ jizgUbzbWeGZ73C7i+85l1sqajyGqhpOPPWUP4BeJCjNsj4F4n3WqLGEcfzd1qnT EROXtpDqsIacYLaE4hLHEmOWreD/U9iL0RdWAyAeKPNCVJmNVoB8CRlL4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChx9GjVe23HNUC4TH+SR1k3e875MB8GA1UdIwQY MBaAFBcTEp70+kVODwrEB+AI6Veht5WgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEt YzI1ZmRjNGNhMmY2LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEtYzI1ZmRjNGNhMmY2 LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACU2h9sF+ 9tztiQyZL/MphtNZ6/r1S7XipIxa7tww797kuJWtWLPboOA+eg1FvZYD2zUNjry4 2ywhE3cb7mFiCsbW7I++dEvq0mBWzyAe8zQsjkk2Xl6OHh9KycvbMLDXMAPaPcX2 /3m7GEnMBvtGNIIgjt+X8CV9XAxNiZWJxoLgRI2s9di0BPUB16w1lD5QIM+ykX4p 11MsozRMhD0BK3POvOetUElPLl/MhioK0Qw7/Vc1Qcrh+miqBtI5ND9UCDrTkIMn S9Mr9WNgwlLr/xDheQZSqgPsRTcXPqQqoV1/IYGAZ8Z57C4iqt10LNvnRYWGm5pn sBHyEjaMznaojQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:28 2025 by rpki-client