This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json) Hash identifier: gQ4g5xw03mjfqBaxWkamuqOD/jzpcjkp7Ym99z2ZZkQ= Subject key identifier: B1:4F:93:37:1C:50:40:AC:1F:45:6E:6B:1A:BE:55:77:58:D0:98:C2 Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1 Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1 Certificate serial: 019B4E16BC8FF38A0712DCC37F3D7607FF91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft Manifest number: 06D1 Signing time: Wed 24 Dec 2025 02:01:11 +0000 Manifest this update: Wed 24 Dec 2025 02:01:11 +0000 Manifest next update: Thu 25 Dec 2025 02:01:11 +0000 Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=) 2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: RLwwF+vu1/4f+wPO9NK+IOSCKPHRI+7xM5EO+MrLK8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:bc:8f:f3:8a:07:12:dc:c3:7f:3d:76:07:ff:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1 Validity Not Before: Dec 24 02:01:11 2025 GMT Not After : Dec 25 02:01:11 2025 GMT Subject: CN=b14f93371c5040ac1f456e6b1abe557758d098c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:5a:45:4a:2b:78:1c:47:b9:42:99:c9:3f: 66:24:68:c5:6c:56:12:77:f9:36:cd:7d:ac:09:c4: 81:23:c5:a4:08:44:aa:ea:46:a4:c1:52:26:1f:f8: 9f:0c:fb:0a:b5:86:d4:4b:d7:37:e1:d5:5c:b2:c2: 20:c2:66:53:96:a6:c9:ac:e7:46:f4:2f:f9:44:d6: 5b:78:ba:d3:a3:52:81:92:88:f6:09:05:cf:df:22: f3:e0:1e:24:02:3f:2a:b8:09:8d:ed:7b:65:3e:c2: ea:5b:61:70:b9:27:21:16:89:ec:be:f9:2e:01:cd: 76:69:75:54:de:22:5c:7d:70:6f:c3:89:40:ee:23: b9:66:6a:09:fd:87:e4:ea:7a:e9:fb:d4:6c:76:dc: 3c:97:0a:c2:ef:16:26:75:ce:66:0e:47:7f:bc:3a: d0:d7:5e:ad:71:0f:2f:6c:be:01:e7:2e:ba:98:81: 9d:c7:92:87:e8:39:8b:73:20:c9:cb:5b:2c:95:a3: 18:57:6b:38:c7:e5:97:89:b0:2f:80:70:dc:7b:82: ff:bf:1b:1a:ae:0b:e7:b1:bf:fe:2c:1f:61:73:a5: fa:ea:51:12:0f:98:bb:2d:65:9b:25:38:41:39:da: 5c:ba:ef:09:ad:26:29:9e:59:3b:b9:81:58:52:b4: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4F:93:37:1C:50:40:AC:1F:45:6E:6B:1A:BE:55:77:58:D0:98:C2 X509v3 Authority Key Identifier: keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e4:f4:a5:d1:e9:09:c3:73:9b:e9:dd:ea:20:b2:2c:9c:b0: f0:0c:c2:db:48:25:d1:c7:1c:c1:59:b9:b9:bd:cd:b3:2d:ef: f8:1f:56:1f:9e:d4:b6:4d:09:3d:60:b9:25:9d:5d:62:cb:32: 1b:ab:3e:aa:2e:25:16:8f:c6:8a:72:ee:b3:87:71:10:61:70: ae:1c:a6:68:ba:f1:a3:dc:96:f4:60:79:19:27:53:3e:83:dc: d9:ac:34:eb:92:b1:4f:05:e9:9b:9e:0a:7a:6b:7e:16:5e:2f: 6e:e8:3c:da:50:1c:52:3a:bc:89:47:f3:8c:fe:cc:2e:fc:68: 9e:fb:ae:c2:c9:51:c5:94:6e:53:b1:ec:a5:b2:80:e9:d0:1b: 7d:a8:53:bb:89:26:02:9b:09:1e:a0:1d:66:6c:ee:72:57:92: 60:b3:6f:26:84:46:75:90:0d:85:0d:94:e0:4d:ed:aa:ad:72: 17:1e:c9:7d:8d:89:b1:cb:b3:ca:49:fd:85:57:dd:ac:55:f2: 98:4e:9d:69:3c:4e:89:37:df:2b:9b:94:fc:d7:0c:19:6e:69: 08:8f:2c:08:00:37:be:7e:17:28:31:67:03:d5:7f:40:7a:e9: 2f:f9:17:d9:3e:f2:a6:13:04:12:e2:33:6e:09:71:92:d2:71: f4:cb:ef:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFryP84oHEtzDfz12B/+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5 YmE5ZjEwHhcNMjUxMjI0MDIwMTExWhcNMjUxMjI1MDIwMTExWjAzMTEwLwYDVQQD EyhiMTRmOTMzNzFjNTA0MGFjMWY0NTZlNmIxYWJlNTU3NzU4ZDA5OGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqdaRUoreBxHuUKZyT9mJGjFbFYS d/k2zX2sCcSBI8WkCESq6kakwVImH/ifDPsKtYbUS9c34dVcssIgwmZTlqbJrOdG 9C/5RNZbeLrTo1KBkoj2CQXP3yLz4B4kAj8quAmN7XtlPsLqW2FwuSchFonsvvku Ac12aXVU3iJcfXBvw4lA7iO5ZmoJ/Yfk6nrp+9Rsdtw8lwrC7xYmdc5mDkd/vDrQ 116tcQ8vbL4B5y66mIGdx5KH6DmLcyDJy1sslaMYV2s4x+WXibAvgHDce4L/vxsa rgvnsb/+LB9hc6X66lESD5i7LWWbJThBOdpcuu8JrSYpnlk7uYFYUrSnVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFPkzccUECsH0Vuaxq+VXdY0JjCMB8GA1UdIwQY MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseT0pdHp CcNzm+nd6iCyLJyw8AzC20gl0cccwVm5ub3Nsy3v+B9WH57Utk0JPWC5JZ1dYssy G6s+qi4lFo/GinLus4dxEGFwrhymaLrxo9yW9GB5GSdTPoPc2aw065KxTwXpm54K emt+Fl4vbug82lAcUjq8iUfzjP7MLvxonvuuwslRxZRuU7HspbKA6dAbfahTu4km ApsJHqAdZmzucleSYLNvJoRGdZANhQ2U4E3tqq1yFx7JfY2Jscuzykn9hVfdrFXy mE6daTxOiTffK5uU/NcMGW5pCI8sCAA3vn4XKDFnA9V/QHrpL/kX2T7yphMEEuIz bglxktJx9Mvv6A== -----END CERTIFICATE-----Generated at Wed Dec 24 12:27:09 2025 by rpki-client