This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft File: FxGAccwfrZwvkqEikhrUeLE0ew4.mft (raw, json) Hash identifier: 39BGYxgwtzxg6EkXEuM2D+zBJVoibL4Oq++5QGN2aFk= Subject key identifier: 18:45:A5:E3:D5:4E:CF:F5:90:22:23:9F:C4:76:18:D2:96:33:5E:F6 Authority key identifier: 17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E Certificate issuer: /CN=17118071cc1fad9c2f92a122921ad478b1347b0e Certificate serial: 019B747F004DDCD645AB19AC3502636298D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft Manifest number: 0843 Signing time: Wed 31 Dec 2025 13:00:38 +0000 Manifest this update: Wed 31 Dec 2025 13:00:38 +0000 Manifest next update: Thu 01 Jan 2026 13:00:38 +0000 Files and hashes: 1: FxGAccwfrZwvkqEikhrUeLE0ew4.crl (hash: RN/lm5ohrKYo/PpjaHOF93eaDt9G2M9RSd++cPbaq2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7f:00:4d:dc:d6:45:ab:19:ac:35:02:63:62:98:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17118071cc1fad9c2f92a122921ad478b1347b0e Validity Not Before: Dec 31 13:00:38 2025 GMT Not After : Jan 1 13:00:38 2026 GMT Subject: CN=1845a5e3d54ecff59022239fc47618d296335ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:78:d4:65:46:78:66:f5:8d:1c:58:e7:3f: 4d:96:4d:8c:ae:46:51:fb:8c:fe:86:29:da:37:a2: 9c:ca:4e:99:64:cb:3c:72:cf:04:c1:3e:95:ea:7f: 86:3a:34:02:5b:09:29:9c:78:11:45:78:92:82:dc: b6:34:fb:19:af:a6:90:33:ce:68:c5:b1:a2:a2:24: 8e:6b:69:13:2b:6b:e0:e5:f2:d4:66:5e:f2:68:fd: f1:e1:b3:a4:03:31:ba:c2:c7:28:d0:40:cc:5d:b6: b0:51:8a:79:77:55:41:22:5d:18:b9:3a:fe:ad:65: cb:fe:ab:48:24:e4:b9:ec:b6:f3:84:a1:b6:a9:e9: aa:c6:31:7b:51:ed:da:bd:35:cd:b5:58:1e:70:1a: 4e:a8:db:5b:8d:40:05:3a:76:1b:9a:67:70:69:d8: a0:d8:45:bb:57:bc:49:fb:9c:68:5a:6a:29:79:80: 10:4a:ba:7e:b3:16:70:dd:e6:50:f7:32:bd:73:e3: 8a:ed:bf:4d:3b:76:47:c6:b8:30:b3:c9:ea:ef:7e: b7:ed:54:2b:8b:3a:52:a5:fb:9d:b3:15:31:21:2b: b9:b9:f4:47:30:1b:ac:17:22:b3:29:55:94:7f:7b: c8:30:a4:ab:77:c4:99:ae:79:ba:f0:cf:84:ff:42: b4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:45:A5:E3:D5:4E:CF:F5:90:22:23:9F:C4:76:18:D2:96:33:5E:F6 X509v3 Authority Key Identifier: keyid:17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c6:9f:31:7b:bf:77:bd:38:90:02:62:0c:90:ea:98:90:03: fc:fe:07:a9:27:d4:e2:5e:29:50:b0:29:6d:49:b4:c6:d8:c5: 28:e1:0e:9f:8b:b7:a1:ac:30:74:2b:a7:b6:59:ee:60:4f:81: e1:86:6e:08:fe:15:be:cc:78:8b:8a:a3:77:99:a9:b1:17:89: 4b:9e:05:b1:e8:4a:45:52:6a:d2:59:30:85:b8:46:31:53:c8: 86:d2:d7:d9:fb:3e:2e:1f:1b:54:15:6a:b7:dc:a9:67:de:24: 17:99:45:ad:cf:5a:b8:0a:85:51:25:38:27:d7:15:62:e6:52: 74:0a:a7:02:d9:9a:e9:0c:34:c7:60:77:5a:79:ba:b7:b3:38: 2e:f5:e0:75:6d:fe:d9:98:7a:bc:99:c5:9d:34:12:19:30:d5: 26:83:5e:40:61:bf:ff:86:89:ee:59:0d:dc:79:7d:f4:8e:87: 8e:a4:f7:1d:32:4b:ab:e0:4f:ad:20:d0:d8:e7:b9:41:a8:04: b5:2f:e9:80:aa:9f:ee:4d:67:b8:0c:41:15:04:fb:89:b9:32: 52:49:d3:e4:41:74:b0:6c:fb:b2:49:f1:d9:ca:97:c2:f6:69: 39:4a:20:8a:55:8d:bf:5b:e6:eb:34:9b:4e:7f:90:0f:c8:3d: a6:23:03:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0fwBN3NZFqxmsNQJjYpjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTE4MDcxY2MxZmFkOWMyZjkyYTEyMjkyMWFkNDc4YjEz NDdiMGUwHhcNMjUxMjMxMTMwMDM4WhcNMjYwMTAxMTMwMDM4WjAzMTEwLwYDVQQD EygxODQ1YTVlM2Q1NGVjZmY1OTAyMjIzOWZjNDc2MThkMjk2MzM1ZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5h41GVGeGb1jRxY5z9Nlk2MrkZR +4z+hinaN6Kcyk6ZZMs8cs8EwT6V6n+GOjQCWwkpnHgRRXiSgty2NPsZr6aQM85o xbGioiSOa2kTK2vg5fLUZl7yaP3x4bOkAzG6wsco0EDMXbawUYp5d1VBIl0YuTr+ rWXL/qtIJOS57LbzhKG2qemqxjF7Ue3avTXNtVgecBpOqNtbjUAFOnYbmmdwadig 2EW7V7xJ+5xoWmopeYAQSrp+sxZw3eZQ9zK9c+OK7b9NO3ZHxrgws8nq73637VQr izpSpfudsxUxISu5ufRHMBusFyKzKVWUf3vIMKSrd8SZrnm68M+E/0K04wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhFpePVTs/1kCIjn8R2GNKWM172MB8GA1UdIwQY MBaAFBcRgHHMH62cL5KhIpIa1HixNHsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZDM4YmYtNjM0ZS00NjRiLWI0NjYt ZTkwZjE2ZmM2ZmM0LzEvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81ZDM4YmYtNjM0ZS00NjRiLWI0NjYtZTkwZjE2ZmM2ZmM0 LzEvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsafMXu/ d704kAJiDJDqmJAD/P4HqSfU4l4pULApbUm0xtjFKOEOn4u3oawwdCuntlnuYE+B 4YZuCP4Vvsx4i4qjd5mpsReJS54FsehKRVJq0lkwhbhGMVPIhtLX2fs+Lh8bVBVq t9ypZ94kF5lFrc9auAqFUSU4J9cVYuZSdAqnAtma6Qw0x2B3Wnm6t7M4LvXgdW3+ 2Zh6vJnFnTQSGTDVJoNeQGG//4aJ7lkN3Hl99I6HjqT3HTJLq+BPrSDQ2Oe5QagE tS/pgKqf7k1nuAxBFQT7ibkyUknT5EF0sGz7sknx2cqXwvZpOUogilWNv1vm6zSb Tn+QD8g9piMDxQ== -----END CERTIFICATE-----Generated at Wed Dec 31 19:39:04 2025 by rpki-client