This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json) Hash identifier: TKoOe4AWhnXNpDcY7u4D9HFmb0OXFBjwBk1/ECKLr3Q= Subject key identifier: 78:5D:92:77:4A:F3:17:9D:0D:1A:E1:07:0F:C8:F8:30:6C:9B:E7:7E Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Certificate serial: 019B766D1A1BF1B37230C17D4F72921ED783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft Manifest number: 177D Signing time: Wed 31 Dec 2025 22:00:20 +0000 Manifest this update: Wed 31 Dec 2025 22:00:20 +0000 Manifest next update: Thu 01 Jan 2026 22:00:20 +0000 Files and hashes: 1: F3Fzvuewg5rSmt66kLcFE3kwwlY.roa (hash: hcOeaGo4+3IDIEKUeW5pWD/4vLI+EphBbol71rMrCqA=) 2: RkNSHPxeGyuQWaphLZeft9rG6t4.roa (hash: c7vEvcPCr8KpDOxbqsIVXnfktutvPBP6mswtibwiwTc=) 3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: yEur/E7khbXOotVX2x1FwdEkdd8qLgCcNyUy78v1Gq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6d:1a:1b:f1:b3:72:30:c1:7d:4f:72:92:1e:d7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Validity Not Before: Dec 31 22:00:20 2025 GMT Not After : Jan 1 22:00:20 2026 GMT Subject: CN=785d92774af3179d0d1ae1070fc8f8306c9be77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:82:63:ce:82:53:ab:57:37:c6:3a:41:5f: bf:c5:07:14:73:aa:75:36:8a:3b:ec:75:1f:86:48: fe:bf:c8:25:e1:e0:af:4d:62:e5:2b:2b:da:9e:99: 0b:32:f2:06:78:5b:9e:f5:fb:2d:02:0b:26:a4:78: 77:6a:c1:1e:72:1d:3f:f5:d2:72:62:6f:49:d9:1c: ee:65:5f:30:c6:42:ac:11:61:01:f2:cb:b3:4f:03: c3:be:2e:d4:81:7b:62:a7:d0:ae:48:73:be:a0:c1: 02:fb:1e:9a:3d:85:b5:32:6e:30:bd:2c:39:50:9d: 4d:f1:4c:51:a4:28:25:45:f7:be:ac:9e:4c:90:e0: 4e:66:96:b2:bf:9f:d6:1f:a5:46:ae:76:76:63:1e: f8:7a:67:d7:bd:d3:7a:77:6c:ac:bd:70:e9:b7:3c: 27:04:20:b1:b2:52:88:62:96:71:11:c8:21:d7:11: 9b:a0:55:f9:91:28:dc:44:67:2a:91:67:cf:be:f9: 65:4b:a1:04:46:01:5e:4d:45:02:37:e6:3b:36:83: e7:7a:bb:95:4d:0a:5b:4a:d4:0f:e8:2f:bb:36:1f: 2f:06:89:e9:f8:ca:26:7d:7d:98:26:8d:45:75:8a: fd:5d:b8:41:de:d9:0f:72:61:93:68:33:5b:a5:af: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:92:77:4A:F3:17:9D:0D:1A:E1:07:0F:C8:F8:30:6C:9B:E7:7E X509v3 Authority Key Identifier: keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c3:36:7a:15:23:6d:6a:1e:c8:c7:5f:10:62:cb:98:7b:8e: 6d:66:64:7b:cb:00:90:6c:5c:d9:c0:b4:df:cd:7e:91:39:15: a9:e3:cd:d5:c2:ee:b2:14:ff:7e:f0:42:72:17:1a:cd:a8:b2: 55:85:f7:84:c9:b5:1e:4a:0f:b9:46:43:ae:78:32:21:a0:e9: 73:4e:c3:d0:7b:f4:51:d5:cc:18:a5:a6:0c:78:cf:55:ce:e8: 76:ea:12:68:df:b7:8c:77:c5:03:25:95:85:59:a3:f7:24:8b: 22:82:eb:92:27:91:f5:e6:84:a1:56:3b:a6:c8:e2:0b:ca:76: 50:f3:18:3f:34:56:24:0f:20:f6:04:35:25:6a:bd:c9:b0:df: 74:14:f5:06:fc:d1:d7:15:48:f2:d0:5b:0c:8e:22:11:13:3b: b4:c1:85:1b:74:af:f1:20:b3:1a:58:49:28:95:14:a6:5d:f3: e5:7e:ef:ae:70:b0:7b:e3:bd:59:b0:fc:6c:7a:9c:a5:7e:25: 48:d1:e2:b4:06:d3:94:1b:37:55:17:30:fa:51:c9:fc:ad:84: 99:7c:6c:31:bf:10:f5:cf:cb:8d:97:91:a6:20:dd:e2:a9:5f: 49:52:16:91:d3:3e:9d:05:a4:71:10:d4:f3:ec:56:9b:cd:a4: 4b:93:6d:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bRob8bNyMMF9T3KSHteDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz OWE3YzQwHhcNMjUxMjMxMjIwMDIwWhcNMjYwMTAxMjIwMDIwWjAzMTEwLwYDVQQD Eyg3ODVkOTI3NzRhZjMxNzlkMGQxYWUxMDcwZmM4ZjgzMDZjOWJlNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaGCY86CU6tXN8Y6QV+/xQcUc6p1 Noo77HUfhkj+v8gl4eCvTWLlKyvanpkLMvIGeFue9fstAgsmpHh3asEech0/9dJy Ym9J2RzuZV8wxkKsEWEB8suzTwPDvi7UgXtip9CuSHO+oMEC+x6aPYW1Mm4wvSw5 UJ1N8UxRpCglRfe+rJ5MkOBOZpayv5/WH6VGrnZ2Yx74emfXvdN6d2ysvXDptzwn BCCxslKIYpZxEcgh1xGboFX5kSjcRGcqkWfPvvllS6EERgFeTUUCN+Y7NoPneruV TQpbStQP6C+7Nh8vBonp+MomfX2YJo1FdYr9XbhB3tkPcmGTaDNbpa+0KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhdkndK8xedDRrhBw/I+DBsm+d+MB8GA1UdIwQY MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt OGMzMmMzNTFlZTcwLzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMM2ehUj bWoeyMdfEGLLmHuObWZke8sAkGxc2cC0381+kTkVqePN1cLushT/fvBCchcazaiy VYX3hMm1HkoPuUZDrngyIaDpc07D0Hv0UdXMGKWmDHjPVc7oduoSaN+3jHfFAyWV hVmj9ySLIoLrkieR9eaEoVY7psjiC8p2UPMYPzRWJA8g9gQ1JWq9ybDfdBT1BvzR 1xVI8tBbDI4iERM7tMGFG3Sv8SCzGlhJKJUUpl3z5X7vrnCwe+O9WbD8bHqcpX4l SNHitAbTlBs3VRcw+lHJ/K2EmXxsMb8Q9c/LjZeRpiDd4qlfSVIWkdM+nQWkcRDU 8+xWm82kS5NtSw== -----END CERTIFICATE-----Generated at Thu Jan 1 07:38:22 2026 by rpki-client