This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json) Hash identifier: nJ6PyV/BgCYT4xUWExtANgF26PN4iEpVuCBKbc2WDvQ= Subject key identifier: D6:50:A7:6D:EA:E4:4C:42:4C:BE:CD:24:F6:06:AC:F5:92:2D:FC:C5 Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f Certificate serial: 019B2B1D3B9ED5EBA84885295A55D6007D4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft Manifest number: 103B Signing time: Wed 17 Dec 2025 07:01:34 +0000 Manifest this update: Wed 17 Dec 2025 07:01:34 +0000 Manifest next update: Thu 18 Dec 2025 07:01:34 +0000 Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: S4kNsDpL6J/LbJ6FNLVjuYsNvlTWQI0bhC9A35LWfkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:3b:9e:d5:eb:a8:48:85:29:5a:55:d6:00:7d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f Validity Not Before: Dec 17 07:01:34 2025 GMT Not After : Dec 18 07:01:34 2025 GMT Subject: CN=d650a76deae44c424cbecd24f606acf5922dfcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:fb:a4:f6:b2:97:f3:51:a9:16:9b:32:50: 7b:ae:f2:0e:18:dd:08:45:7d:76:21:6f:d0:c4:ba: d8:be:19:af:4d:74:5d:c9:28:a0:3c:d4:49:50:9d: 69:7c:11:e3:21:ab:f2:50:fa:fb:ff:c8:c9:16:1e: 66:ab:a0:19:a0:37:48:76:18:95:8e:9c:2a:e7:d6: 87:bd:89:a5:04:41:81:38:bf:d8:69:d4:85:05:98: db:87:1e:53:1b:59:0f:e6:1f:da:0d:ee:bd:93:7f: 7f:4a:9b:be:a9:97:0d:4d:91:d6:43:94:99:ec:46: 93:23:cd:cc:7a:2f:0b:9e:3f:fd:84:a2:f9:d6:cf: 7c:1a:2f:1b:1c:46:b7:e3:00:78:33:a4:e8:de:9f: a5:c2:89:e7:bd:86:12:d0:74:5f:e7:ee:bb:ad:37: 4a:e1:77:5e:47:5e:b8:19:2a:f3:04:20:d8:4f:ad: cb:bb:03:eb:f3:9e:e1:6a:20:78:d5:73:8f:b9:b6: ed:01:71:45:24:59:df:7a:28:e9:f7:23:7d:cb:97: 6b:21:fc:0a:58:3e:84:a9:25:02:5d:27:f3:f8:6b: 9f:b1:f9:1b:8e:7a:0b:fa:fa:93:cc:ea:43:1c:ee: 60:95:0f:cc:29:c5:4c:f6:16:e6:71:ba:e2:6e:6b: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:50:A7:6D:EA:E4:4C:42:4C:BE:CD:24:F6:06:AC:F5:92:2D:FC:C5 X509v3 Authority Key Identifier: keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:af:43:ff:a6:16:3c:72:99:ae:ba:49:a9:18:fc:81:e2:c0: 67:a8:0f:ec:a7:e4:3b:a2:97:de:64:33:bb:44:9f:84:f3:45: ec:7e:a1:02:8c:af:d6:b8:1f:d9:09:d5:2a:d9:b1:ab:84:93: 0f:c5:6e:49:01:42:40:6c:24:c0:35:60:a1:50:0d:6c:66:2b: 88:0c:14:87:90:ff:f7:41:82:1e:c2:39:f2:eb:e1:47:3c:a7: 7e:22:ad:ce:97:f0:83:15:8b:ea:58:4a:08:f0:15:5c:7c:f8: 10:c3:b2:53:f5:3a:a0:f8:78:d8:88:21:98:82:43:57:1f:d8: 1f:5e:e8:e5:53:29:4d:71:85:32:52:86:70:81:9d:ee:ad:cc: d7:c9:30:92:ea:97:9b:ee:ff:2d:d2:cb:5e:d5:72:0e:03:f1: fd:52:7f:89:ac:2a:34:82:9c:b5:3b:08:64:9e:eb:4d:74:4b: f8:0e:c4:63:70:77:78:0d:6a:bf:2f:4f:37:78:ee:d4:6a:d6: 4e:c5:b3:c6:87:70:73:84:56:7b:ef:3c:f1:de:72:a4:a3:43: 17:86:33:9c:d5:44:cc:0e:3a:9f:fe:18:25:82:1a:c0:00:b8: 44:47:a6:ac:77:71:3c:8f:4e:16:bb:d4:fd:7d:3d:14:4b:25: bc:0c:59:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHTue1euoSIUpWlXWAH1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTRjZTgxMDNiNzg1ZjM1MDRiYzRiMzJmMWY0YzliNzBj ZTNmN2YwHhcNMjUxMjE3MDcwMTM0WhcNMjUxMjE4MDcwMTM0WjAzMTEwLwYDVQQD EyhkNjUwYTc2ZGVhZTQ0YzQyNGNiZWNkMjRmNjA2YWNmNTkyMmRmY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy77pPayl/NRqRabMlB7rvIOGN0I RX12IW/QxLrYvhmvTXRdySigPNRJUJ1pfBHjIavyUPr7/8jJFh5mq6AZoDdIdhiV jpwq59aHvYmlBEGBOL/YadSFBZjbhx5TG1kP5h/aDe69k39/Spu+qZcNTZHWQ5SZ 7EaTI83Mei8Lnj/9hKL51s98Gi8bHEa34wB4M6To3p+lwonnvYYS0HRf5+67rTdK 4XdeR164GSrzBCDYT63LuwPr857haiB41XOPubbtAXFFJFnfeijp9yN9y5drIfwK WD6EqSUCXSfz+GufsfkbjnoL+vqTzOpDHO5glQ/MKcVM9hbmcbribmvhaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZQp23q5ExCTL7NJPYGrPWSLfzFMB8GA1UdIwQY MBaAFH8UzoEDt4XzUEvEsy8fTJtwzj9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2It ZjYxNjBmYTFmYjAyLzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2ItZjYxNjBmYTFmYjAy LzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiq9D/6YW PHKZrrpJqRj8geLAZ6gP7KfkO6KX3mQzu0SfhPNF7H6hAoyv1rgf2QnVKtmxq4ST D8VuSQFCQGwkwDVgoVANbGYriAwUh5D/90GCHsI58uvhRzynfiKtzpfwgxWL6lhK CPAVXHz4EMOyU/U6oPh42IghmIJDVx/YH17o5VMpTXGFMlKGcIGd7q3M18kwkuqX m+7/LdLLXtVyDgPx/VJ/iawqNIKctTsIZJ7rTXRL+A7EY3B3eA1qvy9PN3ju1GrW TsWzxodwc4RWe+888d5ypKNDF4YznNVEzA46n/4YJYIawAC4REemrHdxPI9OFrvU /X09FEslvAxZXg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:23:47 2025 by rpki-client