This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft File: _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json) Hash identifier: iQ2JrWWVP6GsjfelkdDOg2apVTp+wwjJNANFELV4QGA= Subject key identifier: 16:45:CD:E2:C1:11:2E:25:F2:E5:D4:B3:D5:49:D2:F4:95:6D:1D:4D Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751 Certificate serial: 019B3BD97271BCB1217946565EBA6B07A75C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft Manifest number: 1274 Signing time: Sat 20 Dec 2025 13:01:04 +0000 Manifest this update: Sat 20 Dec 2025 13:01:04 +0000 Manifest next update: Sun 21 Dec 2025 13:01:04 +0000 Files and hashes: 1: UdqqtZGpIUJuO-T8u_MZQwitL4U.roa (hash: hH2jMQqs4CekxdYoCxAKkLi/f8EnWwbUlFfsT0U+1TE=) 2: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: 7aMYhxkUM9Usg6aflEa2TuTVvq41qHsG9TQV/6N2npw=) 3: yh5VzgeOwtUgAcziSiqUhcW6kK8.roa (hash: hvI53ao0Y2iffOi0mRz/DzGNpvNOk5YefpCNLUXPIjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:72:71:bc:b1:21:79:46:56:5e:ba:6b:07:a7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751 Validity Not Before: Dec 20 13:01:04 2025 GMT Not After : Dec 21 13:01:04 2025 GMT Subject: CN=1645cde2c1112e25f2e5d4b3d549d2f4956d1d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:72:97:e5:1a:95:8a:4b:e2:36:f4:23:2b:b1: c8:a0:ae:e4:a9:bf:a6:30:f7:6c:3b:0a:df:01:38: 59:67:f2:eb:6b:45:d0:f2:ca:76:4a:51:c9:71:49: b1:0d:c0:cf:07:1c:6a:f5:2f:cf:72:8a:f6:37:99: 0e:18:ea:0d:e5:3d:8e:8a:32:a6:73:d4:64:9b:78: d4:76:fe:01:1b:48:ae:be:45:02:de:f2:cd:b5:60: fd:8f:5f:40:d3:9b:a7:a2:67:b6:31:c4:47:c9:22: 0d:5f:74:29:e8:e2:9b:c7:ca:8c:02:bd:45:ac:69: 15:22:0f:ae:d9:72:d1:3c:26:49:9d:e1:19:09:ba: d9:5c:c0:0e:c7:67:72:2d:0b:cb:2d:18:ac:9e:a5: 72:f5:d5:ec:f5:8b:66:7c:28:2d:e9:6d:31:67:4e: 37:c4:ae:8c:4b:91:ef:4b:85:20:3b:84:4b:ac:90: e0:43:76:96:27:09:89:4c:fa:71:dd:fb:66:e1:f7: 9a:59:14:2d:4f:2f:fc:da:b4:57:39:58:0f:d6:d4: 5c:55:21:8e:97:3f:2a:24:ff:2a:f3:ee:5a:fc:cb: 2a:59:d4:fb:1e:de:57:71:9e:d8:c4:a8:2d:cd:58: 3d:a3:c9:53:9e:26:17:e0:5e:fa:34:e9:e5:5e:ce: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:45:CD:E2:C1:11:2E:25:F2:E5:D4:B3:D5:49:D2:F4:95:6D:1D:4D X509v3 Authority Key Identifier: keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:02:a2:8f:42:9c:3d:bb:4e:c5:35:60:30:05:85:3a:3d:de: 12:20:cf:1e:31:1b:a0:c8:c0:0b:41:a0:fb:79:dc:eb:38:92: 7e:6b:20:f7:32:bf:11:40:49:b4:72:ad:f9:e8:a2:22:42:17: 37:79:40:db:11:5d:d1:67:1d:90:09:79:13:11:71:5d:2a:3e: 13:2f:96:1c:dc:8c:38:55:76:e5:63:74:09:66:9a:05:3f:2f: ab:51:15:f1:a2:39:52:d2:84:13:e6:1e:db:d4:e7:c8:9d:7d: 0a:7d:aa:fd:1f:f0:ab:3c:eb:87:1a:33:41:2f:f6:c6:93:6b: f2:26:30:50:07:06:84:45:47:8a:d5:0a:02:60:b4:c6:59:da: 3b:c6:80:e8:60:9e:68:8c:9f:ab:93:2e:13:f3:2a:01:42:c2: c3:70:8e:33:9f:65:72:f0:8f:52:63:c5:0d:83:6c:5c:66:ba: 4f:ad:86:87:e4:ce:03:76:1a:98:a9:15:a8:44:f7:f6:e2:4f: b5:39:55:18:35:a8:b9:aa:f0:ea:75:3c:f1:bf:8c:dd:5e:dd: 68:72:e3:ad:91:69:99:03:33:b0:4b:43:b4:33:97:24:49:dc: 4f:27:39:c6:9a:43:d6:0f:ce:57:15:6d:c1:7d:26:54:46:42: cf:0b:90:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72XJxvLEheUZWXrprB6dcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTVlMDUzM2VmYWE1NjI0ZjUzOGI5MmVkMWE5NzNmZWZm ODk3NTEwHhcNMjUxMjIwMTMwMTA0WhcNMjUxMjIxMTMwMTA0WjAzMTEwLwYDVQQD EygxNjQ1Y2RlMmMxMTEyZTI1ZjJlNWQ0YjNkNTQ5ZDJmNDk1NmQxZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknKX5RqVikviNvQjK7HIoK7kqb+m MPdsOwrfAThZZ/Lra0XQ8sp2SlHJcUmxDcDPBxxq9S/Pcor2N5kOGOoN5T2OijKm c9Rkm3jUdv4BG0iuvkUC3vLNtWD9j19A05unome2McRHySINX3Qp6OKbx8qMAr1F rGkVIg+u2XLRPCZJneEZCbrZXMAOx2dyLQvLLRisnqVy9dXs9YtmfCgt6W0xZ043 xK6MS5HvS4UgO4RLrJDgQ3aWJwmJTPpx3ftm4feaWRQtTy/82rRXOVgP1tRcVSGO lz8qJP8q8+5a/MsqWdT7Ht5XcZ7YxKgtzVg9o8lTniYX4F76NOnlXs5WKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZFzeLBES4l8uXUs9VJ0vSVbR1NMB8GA1UdIwQY MBaAFPxV4FM++qViT1OLku0alz/v+JdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODIt YTUyODYyYjQ0NTYzLzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODItYTUyODYyYjQ0NTYz LzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQKij0Kc PbtOxTVgMAWFOj3eEiDPHjEboMjAC0Gg+3nc6ziSfmsg9zK/EUBJtHKt+eiiIkIX N3lA2xFd0WcdkAl5ExFxXSo+Ey+WHNyMOFV25WN0CWaaBT8vq1EV8aI5UtKEE+Ye 29TnyJ19Cn2q/R/wqzzrhxozQS/2xpNr8iYwUAcGhEVHitUKAmC0xlnaO8aA6GCe aIyfq5MuE/MqAULCw3COM59lcvCPUmPFDYNsXGa6T62Gh+TOA3YamKkVqET39uJP tTlVGDWouarw6nU88b+M3V7daHLjrZFpmQMzsEtDtDOXJEncTyc5xppD1g/OVxVt wX0mVEZCzwuQAA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:41 2025 by rpki-client