This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft File: FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json) Hash identifier: g0zPwDSi+I/kjEMdYSa87BI0/jCOrJKGqQ4WY8pDB6I= Subject key identifier: 39:CE:E7:B6:36:00:EC:C9:AE:6E:3F:A1:C6:DE:25:44:1B:26:04:6B Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45 Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345 Certificate serial: 019B330CD7A427050333551069E9AEF11A1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 20:00:38 +0000 Manifest this update: Thu 18 Dec 2025 20:00:38 +0000 Manifest next update: Fri 19 Dec 2025 20:00:38 +0000 Files and hashes: 1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: Z+4I9uCXTVdBiod7Sh89BrI8iiuo29bZYsYFJK2sXCM=) 2: qrHcalRy_JXYvUIS1tkkzHH6ZPM.roa (hash: B5LhQQeMhbxhyP/euiUVZeJTjZ4f803srjRMUk59y8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:d7:a4:27:05:03:33:55:10:69:e9:ae:f1:1a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345 Validity Not Before: Dec 18 20:00:38 2025 GMT Not After : Dec 19 20:00:38 2025 GMT Subject: CN=39cee7b63600ecc9ae6e3fa1c6de25441b26046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:e3:25:e6:fd:a6:20:87:02:c2:4d:b3:90: 13:33:f8:de:df:f4:e4:63:e0:d4:0d:00:1f:5d:cb: be:dc:f5:c5:59:29:d2:25:d7:32:05:9d:87:fa:1f: b1:d0:2b:20:66:b6:7d:5d:60:74:1a:ad:c5:24:b2: 61:63:ae:7b:8b:b0:a0:86:e1:6f:22:c4:b4:46:cf: 08:e6:e6:ee:e7:b1:3b:35:dd:24:d9:05:2b:dc:ca: 50:28:a1:37:5d:9f:a9:9e:07:22:90:fb:68:17:51: c3:39:1e:48:0e:2b:de:ec:46:b0:e2:bb:5a:8b:e7: 5e:bd:43:0f:f3:06:ab:50:80:10:99:9a:66:d4:d0: 23:04:ac:16:39:e4:ec:87:18:1d:2b:4d:77:82:5d: bc:07:e8:91:27:bd:ef:29:ed:3b:2b:00:51:0b:d5: d2:fd:b8:a9:fd:15:71:be:0b:62:78:42:49:ea:a7: 00:2e:3a:36:23:af:8a:b5:57:5e:fe:0f:a9:49:11: 3b:3e:43:b9:32:e5:4c:7e:59:3d:b3:90:0a:36:d1: 42:3b:01:be:f4:07:9c:7a:ad:fd:7f:54:71:0a:0c: d8:f4:41:a7:b3:4a:94:9a:b2:53:97:e4:44:42:6d: 3b:58:bb:9c:f5:85:9a:89:81:d0:08:e0:c4:98:7b: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CE:E7:B6:36:00:EC:C9:AE:6E:3F:A1:C6:DE:25:44:1B:26:04:6B X509v3 Authority Key Identifier: keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:62:26:1c:75:4f:ae:f9:04:38:de:64:08:f2:43:1f:9e:d1: d5:e6:6e:8c:35:88:c3:ea:43:9e:a2:0a:7a:f2:1f:0e:31:6d: ce:bb:7e:1d:e3:10:d8:ce:b2:ab:b4:39:e6:4f:ab:2e:44:94: b3:12:fc:0c:bd:66:f1:e5:95:63:76:52:af:9b:05:87:dd:8e: 9b:75:49:65:c3:4a:8e:bf:5c:d8:ba:0a:e2:6f:f2:e7:40:70: 6c:03:60:ff:7c:59:d3:0b:cb:29:f4:17:c3:f0:9c:2d:13:e9: 10:8d:a2:24:05:a1:bd:8c:db:a5:8b:34:ea:de:06:6a:2b:78: ed:8a:55:7d:f9:d1:84:12:e4:9d:9f:41:30:53:e9:3c:97:f6: ad:7a:ab:27:5e:a9:cf:d6:7e:cf:cc:6b:ae:54:1e:0b:1f:b9: 41:32:f8:72:c2:c4:67:6c:84:a4:c6:a5:54:6b:79:3f:dc:7a: 91:46:9e:ed:7a:1c:c6:69:a9:eb:26:b0:4e:c7:94:d0:53:f9: 9d:82:f8:ef:ba:f0:c0:fa:31:55:43:a9:ae:2b:9d:04:71:f2: 22:23:67:8e:fd:2e:25:4d:5c:fa:5b:93:97:40:ce:05:10:99: 09:a4:ae:90:e0:95:b4:81:8e:7e:e6:aa:36:25:bf:81:ca:68: 37:dd:c2:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDNekJwUDM1UQaemu8RoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTlkMGJjMDQ0Y2RhYTIzNDE4MDlkMDAwZjBmYzRlMWRl ZGIzNDUwHhcNMjUxMjE4MjAwMDM4WhcNMjUxMjE5MjAwMDM4WjAzMTEwLwYDVQQD EygzOWNlZTdiNjM2MDBlY2M5YWU2ZTNmYTFjNmRlMjU0NDFiMjYwNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzjjJeb9piCHAsJNs5ATM/je3/Tk Y+DUDQAfXcu+3PXFWSnSJdcyBZ2H+h+x0CsgZrZ9XWB0Gq3FJLJhY657i7CghuFv IsS0Rs8I5ubu57E7Nd0k2QUr3MpQKKE3XZ+pngcikPtoF1HDOR5IDive7Eaw4rta i+devUMP8warUIAQmZpm1NAjBKwWOeTshxgdK013gl28B+iRJ73vKe07KwBRC9XS /bip/RVxvgtieEJJ6qcALjo2I6+KtVde/g+pSRE7PkO5MuVMflk9s5AKNtFCOwG+ 9Aeceq39f1RxCgzY9EGns0qUmrJTl+REQm07WLuc9YWaiYHQCODEmHvNjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnO57Y2AOzJrm4/ocbeJUQbJgRrMB8GA1UdIwQY MBaAFBcZ0LwETNqiNBgJ0ADw/E4d7bNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUt MDRhYzBhNWU4MTQzLzEvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9jMDNlYWUtMzlhZS00MDAyLWI2NmUtMDRhYzBhNWU4MTQz LzEvRnhuUXZBUk0ycUkwR0FuUUFQRDhUaDN0czBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2ImHHVP rvkEON5kCPJDH57R1eZujDWIw+pDnqIKevIfDjFtzrt+HeMQ2M6yq7Q55k+rLkSU sxL8DL1m8eWVY3ZSr5sFh92Om3VJZcNKjr9c2LoK4m/y50BwbANg/3xZ0wvLKfQX w/CcLRPpEI2iJAWhvYzbpYs06t4Gait47YpVffnRhBLknZ9BMFPpPJf2rXqrJ16p z9Z+z8xrrlQeCx+5QTL4csLEZ2yEpMalVGt5P9x6kUae7Xocxmmp6yawTseU0FP5 nYL477rwwPoxVUOpriudBHHyIiNnjv0uJU1c+luTl0DOBRCZCaSukOCVtIGOfuaq NiW/gcpoN93CTw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:41 2025 by rpki-client