This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json) Hash identifier: Dx93WVflB5/49ChSOCa6gG3V5SQ/ZXL9sAhraAo4J+g= Subject key identifier: CF:D1:2E:FE:34:68:6E:87:ED:F2:7B:09:87:3E:DE:FA:D1:79:B5:D2 Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Certificate serial: 019B386A109FB049177EBD057DC1BE21FE89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft Manifest number: 048D Signing time: Fri 19 Dec 2025 21:00:33 +0000 Manifest this update: Fri 19 Dec 2025 21:00:33 +0000 Manifest next update: Sat 20 Dec 2025 21:00:33 +0000 Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: fCBflaY2fuDRbJ+R5/9Tn0Kil4c1iTLjnWTxbNfLjrU=) 2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:10:9f:b0:49:17:7e:bd:05:7d:c1:be:21:fe:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Validity Not Before: Dec 19 21:00:33 2025 GMT Not After : Dec 20 21:00:33 2025 GMT Subject: CN=cfd12efe34686e87edf27b09873edefad179b5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b5:69:5a:90:a1:1d:e8:15:bf:44:b5:25:92: ba:c8:e8:5b:44:1e:24:d9:87:fd:66:e0:db:b2:54: dc:25:e9:87:8f:ea:ba:dd:b3:7e:81:73:3e:bd:e2: 19:2d:5f:51:6b:89:f2:a9:3e:ea:0e:ef:b9:0f:2b: aa:ac:8f:23:c7:a0:9c:a8:f8:00:b4:01:a8:14:b8: 3c:8e:3b:c3:9b:2b:3b:fc:6f:cd:93:1e:58:88:d1: b5:a1:19:ca:7f:06:90:e0:8f:e6:d4:9c:6a:e2:45: 72:cc:64:39:07:c1:2a:b1:58:16:8e:e8:6a:b9:c0: 12:c8:dd:d4:db:ac:75:2f:14:5b:0f:d5:a3:ff:11: e4:62:fa:8f:1d:75:a9:f5:72:9e:6b:fd:c7:a0:a3: 58:93:58:dc:90:8d:55:6a:a4:e3:55:23:a3:a1:77: 63:85:f7:b7:00:c7:56:e6:55:6b:4e:e1:7b:0a:ac: 56:c1:2b:50:1d:1d:2a:08:07:a5:79:70:9e:45:23: 5e:1a:94:ce:c4:1b:3d:5d:6b:d3:f6:9a:9f:cf:0f: 13:2b:ed:45:ef:e2:bd:4a:82:d9:58:6e:2b:ce:e7: 25:fc:51:87:09:42:31:7d:10:fe:bd:e2:2a:25:b7: af:1b:b2:df:6f:b7:51:7d:e6:3f:c6:a8:87:09:d4: 13:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D1:2E:FE:34:68:6E:87:ED:F2:7B:09:87:3E:DE:FA:D1:79:B5:D2 X509v3 Authority Key Identifier: keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9e:2e:93:b0:c4:56:f6:33:1b:30:3b:b5:38:0d:83:09:1b: 2f:e0:a0:52:c1:aa:75:e2:16:d0:21:63:43:89:b5:90:69:1c: bd:2b:2f:dd:d1:b2:1f:d1:b3:c9:98:5a:31:40:c6:3b:92:09: c1:84:71:b7:d2:14:b8:97:77:d2:2a:7a:80:7d:e6:14:b7:bd: d5:81:bd:4d:9a:26:cf:b2:d1:a2:8b:18:5a:c1:fa:91:14:11: 09:5e:88:fb:84:40:48:bd:34:1d:1c:3f:5c:c1:ac:b9:c0:b8: 76:58:07:61:1e:76:22:c2:46:ee:82:17:39:f7:8f:64:6c:81: a1:0e:35:46:3c:0e:1d:de:2b:39:17:80:68:5f:65:4b:59:69: b8:10:b7:2e:1f:ba:f2:45:bd:61:83:b7:46:31:4c:c8:57:f7: 02:45:69:f0:5b:86:d9:94:16:f7:14:ae:4e:45:4d:2c:d4:0c: a3:c3:00:11:e5:3e:d3:0c:c2:62:7e:50:4a:66:2f:a5:55:77: 12:0c:73:f4:fc:e8:e7:a4:ac:ad:63:cf:2a:96:1c:20:b1:f9: b2:4d:a3:82:bb:7e:97:d4:e5:10:a6:51:76:f8:e3:61:90:fc: 89:60:0d:91:3a:5e:68:1b:86:53:44:02:ea:73:f5:d1:ba:0c: 2b:d7:99:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ahCfsEkXfr0FfcG+If6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTVjN2NjN2I1NDI0ZGE1YTIxMTE2ZmVmNzJjZTVjZDU2 NGMwZjEwHhcNMjUxMjE5MjEwMDMzWhcNMjUxMjIwMjEwMDMzWjAzMTEwLwYDVQQD EyhjZmQxMmVmZTM0Njg2ZTg3ZWRmMjdiMDk4NzNlZGVmYWQxNzliNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrVpWpChHegVv0S1JZK6yOhbRB4k 2Yf9ZuDbslTcJemHj+q63bN+gXM+veIZLV9Ra4nyqT7qDu+5DyuqrI8jx6CcqPgA tAGoFLg8jjvDmys7/G/Nkx5YiNG1oRnKfwaQ4I/m1Jxq4kVyzGQ5B8EqsVgWjuhq ucASyN3U26x1LxRbD9Wj/xHkYvqPHXWp9XKea/3HoKNYk1jckI1VaqTjVSOjoXdj hfe3AMdW5lVrTuF7CqxWwStQHR0qCAeleXCeRSNeGpTOxBs9XWvT9pqfzw8TK+1F 7+K9SoLZWG4rzucl/FGHCUIxfRD+veIqJbevG7Lfb7dRfeY/xqiHCdQTPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/RLv40aG6H7fJ7CYc+3vrRebXSMB8GA1UdIwQY MBaAFBcVx8x7VCTaWiERb+9yzlzVZMDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYt YzUzNmJmNzM5ODY5LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYtYzUzNmJmNzM5ODY5 LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn54uk7DE VvYzGzA7tTgNgwkbL+CgUsGqdeIW0CFjQ4m1kGkcvSsv3dGyH9GzyZhaMUDGO5IJ wYRxt9IUuJd30ip6gH3mFLe91YG9TZomz7LRoosYWsH6kRQRCV6I+4RASL00HRw/ XMGsucC4dlgHYR52IsJG7oIXOfePZGyBoQ41RjwOHd4rOReAaF9lS1lpuBC3Lh+6 8kW9YYO3RjFMyFf3AkVp8FuG2ZQW9xSuTkVNLNQMo8MAEeU+0wzCYn5QSmYvpVV3 Egxz9Pzo56SsrWPPKpYcILH5sk2jgrt+l9TlEKZRdvjjYZD8iWANkTpeaBuGU0QC 6nP10boMK9eZKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:50:40 2025 by rpki-client