This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json) Hash identifier: nJi5Ys6iMNVYswo7oz21PzOz2ucv9wEJtSLR+bmbzDU= Subject key identifier: C1:6F:18:B4:14:0A:EC:56:65:0F:2E:77:1A:0D:31:8F:77:91:E7:1B Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Certificate serial: 019B3E6DA200DAB1346085C35081CB866A9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft Manifest number: 1760 Signing time: Sun 21 Dec 2025 01:02:10 +0000 Manifest this update: Sun 21 Dec 2025 01:02:10 +0000 Manifest next update: Mon 22 Dec 2025 01:02:10 +0000 Files and hashes: 1: F3Fzvuewg5rSmt66kLcFE3kwwlY.roa (hash: hcOeaGo4+3IDIEKUeW5pWD/4vLI+EphBbol71rMrCqA=) 2: RkNSHPxeGyuQWaphLZeft9rG6t4.roa (hash: c7vEvcPCr8KpDOxbqsIVXnfktutvPBP6mswtibwiwTc=) 3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: rO/FUaTh1O6n2sIu9LPMGFEemHGKMf9nYaYQs3H4sWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:a2:00:da:b1:34:60:85:c3:50:81:cb:86:6a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Validity Not Before: Dec 21 01:02:10 2025 GMT Not After : Dec 22 01:02:10 2025 GMT Subject: CN=c16f18b4140aec56650f2e771a0d318f7791e71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:25:28:5b:2f:d1:d2:03:91:69:b9:b4:63: e1:95:df:0b:89:bb:4f:4f:b4:a9:77:2c:d7:54:88: b0:04:a2:b5:0a:ab:46:63:f5:aa:43:0f:c2:b0:4b: a7:26:77:59:a8:a3:08:cf:52:51:03:c1:f6:c2:17: 18:7f:8d:c2:01:c8:7e:36:25:4a:6c:fa:84:64:be: 18:56:6f:07:f1:39:2c:35:84:e2:f0:44:22:27:b8: e0:42:67:2b:64:aa:78:81:ec:20:97:51:e8:37:79: a3:cd:a2:57:70:88:bb:e5:49:fb:85:12:df:cc:59: 3e:06:aa:c2:63:9e:fe:ef:ce:eb:52:fc:9f:04:af: fa:c4:9b:16:dd:61:af:5a:23:77:45:85:b8:3e:44: 1c:dc:cd:73:94:21:f9:4e:df:51:af:c9:5c:d0:65: 90:db:6b:24:3d:2e:e2:76:a9:86:af:9b:b9:48:6e: 0a:c6:d7:fa:51:52:2c:ab:5a:04:ec:d5:66:be:34: cd:13:a9:5a:37:21:88:63:74:e4:6b:8c:7c:83:9c: d7:cf:9f:93:bb:a9:92:8d:86:87:45:12:2e:2f:f5: 2b:54:07:67:79:66:45:3c:24:07:42:13:4c:41:2e: 1e:c2:2c:09:dc:28:df:e6:ad:a9:95:82:96:91:19: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6F:18:B4:14:0A:EC:56:65:0F:2E:77:1A:0D:31:8F:77:91:E7:1B X509v3 Authority Key Identifier: keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:4d:fa:7f:6e:3d:f2:c8:d5:31:83:27:c7:83:45:e4:32:08: 8d:e1:96:d8:fb:2d:84:96:c5:1c:26:df:14:75:db:51:aa:4a: 79:a3:05:20:9f:ac:39:61:0c:ba:91:f8:6a:21:bb:0d:68:1d: 9a:f5:9e:a6:09:a6:2f:e1:35:04:f4:43:6c:fe:67:b0:95:97: d9:81:a3:76:44:f8:9b:67:ca:95:bc:f7:64:6a:99:b2:5a:da: d1:3f:94:ff:3f:1b:76:a1:5d:33:9d:db:c8:fc:80:6b:49:9c: 99:d8:70:54:35:33:5d:76:96:55:5c:fd:b8:e1:3d:d3:9a:1a: 5c:08:c7:60:32:9f:c8:4c:16:b4:51:20:64:7d:c8:b2:1b:08: 8d:e3:b8:84:09:9c:70:73:1e:f6:92:53:54:bb:bf:b3:67:93: 7d:eb:7e:3a:67:06:25:65:dc:0d:05:eb:35:e5:55:00:c3:aa: 54:c0:b3:39:9b:2d:16:11:d6:a9:db:82:a6:fa:57:49:88:54: 54:c5:7d:3d:03:b8:08:82:5e:83:e7:46:f6:4c:c2:92:d6:49: 3a:23:2b:90:b8:ad:52:e2:00:40:e7:7e:64:92:ef:e1:4b:17: ce:1c:17:0a:e7:89:13:2d:1d:b8:f8:8e:d8:8c:ee:bd:6c:7b: be:82:16:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+baIA2rE0YIXDUIHLhmqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz OWE3YzQwHhcNMjUxMjIxMDEwMjEwWhcNMjUxMjIyMDEwMjEwWjAzMTEwLwYDVQQD EyhjMTZmMThiNDE0MGFlYzU2NjUwZjJlNzcxYTBkMzE4Zjc3OTFlNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0IlKFsv0dIDkWm5tGPhld8LibtP T7SpdyzXVIiwBKK1CqtGY/WqQw/CsEunJndZqKMIz1JRA8H2whcYf43CAch+NiVK bPqEZL4YVm8H8TksNYTi8EQiJ7jgQmcrZKp4gewgl1HoN3mjzaJXcIi75Un7hRLf zFk+BqrCY57+787rUvyfBK/6xJsW3WGvWiN3RYW4PkQc3M1zlCH5Tt9Rr8lc0GWQ 22skPS7idqmGr5u5SG4Kxtf6UVIsq1oE7NVmvjTNE6laNyGIY3Tka4x8g5zXz5+T u6mSjYaHRRIuL/UrVAdneWZFPCQHQhNMQS4ewiwJ3Cjf5q2plYKWkRmdxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFvGLQUCuxWZQ8udxoNMY93kecbMB8GA1UdIwQY MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt OGMzMmMzNTFlZTcwLzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr036f249 8sjVMYMnx4NF5DIIjeGW2PsthJbFHCbfFHXbUapKeaMFIJ+sOWEMupH4aiG7DWgd mvWepgmmL+E1BPRDbP5nsJWX2YGjdkT4m2fKlbz3ZGqZslra0T+U/z8bdqFdM53b yPyAa0mcmdhwVDUzXXaWVVz9uOE905oaXAjHYDKfyEwWtFEgZH3IshsIjeO4hAmc cHMe9pJTVLu/s2eTfet+OmcGJWXcDQXrNeVVAMOqVMCzOZstFhHWqduCpvpXSYhU VMV9PQO4CIJeg+dG9kzCktZJOiMrkLitUuIAQOd+ZJLv4UsXzhwXCueJEy0duPiO 2IzuvWx7voIWxQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:10:24 2025 by rpki-client