This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json) Hash identifier: 16/G7lTvOaiVag+6V/XALfm/sQJ9TEBfl54UIv88YBQ= Subject key identifier: 29:F4:B0:85:B6:FC:44:1B:25:6D:65:A0:82:6A:38:6A:DE:CC:47:E6 Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf Certificate serial: 019B43252C2DF342C2759473F60349BE32D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft Manifest number: 1561 Signing time: Sun 21 Dec 2025 23:01:08 +0000 Manifest this update: Sun 21 Dec 2025 23:01:08 +0000 Manifest next update: Mon 22 Dec 2025 23:01:08 +0000 Files and hashes: 1: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (hash: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=) 2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: rqXbahwwPzwratESaZnGvebPw432PbWIXNLeN6XNBK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:2c:2d:f3:42:c2:75:94:73:f6:03:49:be:32:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf Validity Not Before: Dec 21 23:01:08 2025 GMT Not After : Dec 22 23:01:08 2025 GMT Subject: CN=29f4b085b6fc441b256d65a0826a386adecc47e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:e9:01:fa:d9:bd:1b:cf:eb:ee:16:56:1c: d5:40:29:e4:c3:db:09:a6:b7:49:85:3b:02:7b:97: 69:0c:a8:bb:ee:42:77:36:bf:01:8f:be:84:3e:8e: 4a:3e:c8:a1:82:9f:e9:16:76:5a:39:a2:01:23:65: b1:1a:8d:e0:5a:52:b2:f2:d2:b5:3d:70:7d:25:52: d4:13:4d:11:10:25:2d:a3:29:b0:24:c8:c4:90:86: 4e:5c:4a:b1:f6:84:73:18:ea:4b:fe:7c:53:e0:18: 0a:b9:fd:ba:11:1b:16:90:2d:c9:43:23:ac:9f:76: 08:29:7e:a7:50:2e:3e:3b:84:38:23:94:65:e2:b9: d3:62:c0:1e:05:cf:4c:97:24:5f:20:9f:17:29:19: 3e:8d:86:ec:71:34:d5:0b:e6:c1:ae:1d:bc:dd:e3: 22:38:10:e1:a8:cb:50:17:af:c9:33:55:a0:7e:f6: 64:a2:c5:23:dc:59:9b:d3:8b:20:cc:df:0a:c8:97: dd:09:a2:d1:88:c8:56:34:97:52:85:d4:16:42:b2: 51:52:83:72:41:1f:c4:ab:7b:ca:fc:05:01:c4:b5: 4d:21:6f:29:34:17:0c:91:8e:82:0a:35:72:1b:9a: aa:3f:a8:58:de:dc:a7:fc:a9:9a:e0:9f:95:9f:8a: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F4:B0:85:B6:FC:44:1B:25:6D:65:A0:82:6A:38:6A:DE:CC:47:E6 X509v3 Authority Key Identifier: keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:41:4b:12:6e:d5:36:34:3e:4f:06:48:ac:fc:94:74:78:d4: 21:81:73:46:b0:b7:d9:10:44:26:15:43:b6:1c:36:c4:01:d6: 5f:ef:6a:11:6e:85:08:f6:9e:35:17:05:5c:45:19:78:66:e5: db:62:c5:de:4a:0c:bb:95:11:60:66:9f:71:62:d7:00:e8:f2: b8:e3:20:ce:f8:84:a8:a0:f8:7e:ba:f5:21:c9:52:a9:a6:e7: b8:9c:b3:ca:98:ab:f3:95:81:7a:a8:95:90:fb:74:a3:6e:b2: 97:cc:6e:70:fe:09:ad:5a:74:ce:17:72:cd:d0:35:1f:82:22: 6a:54:5c:e4:76:5c:d0:90:34:36:48:8c:23:b5:d0:58:a1:16: 9e:02:34:c9:94:e6:ea:7c:d0:b2:7b:d7:58:72:72:05:70:1a: 72:dc:64:ac:b7:de:ef:cd:13:c5:97:fa:c4:92:6c:d1:14:57: 43:5b:98:89:de:e2:d7:5a:02:52:89:5d:d3:97:5c:a2:50:ed: 38:fc:26:b6:6f:b6:0b:04:eb:f7:65:4b:d2:64:37:cf:c7:af: fc:68:f9:8f:4c:fa:c7:3a:14:b2:4d:1c:4e:3c:1e:24:72:72: c9:02:0f:8e:90:6e:87:02:64:e1:66:f1:08:3d:89:11:24:1b: 3b:44:7e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJSwt80LCdZRz9gNJvjLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMWQwZTMyOThiZWQzYTdmMzlmYjNiMjQ0ZWQ5MThiZjZj NGQ3YmYwHhcNMjUxMjIxMjMwMTA4WhcNMjUxMjIyMjMwMTA4WjAzMTEwLwYDVQQD EygyOWY0YjA4NWI2ZmM0NDFiMjU2ZDY1YTA4MjZhMzg2YWRlY2M0N2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG3pAfrZvRvP6+4WVhzVQCnkw9sJ prdJhTsCe5dpDKi77kJ3Nr8Bj76EPo5KPsihgp/pFnZaOaIBI2WxGo3gWlKy8tK1 PXB9JVLUE00RECUtoymwJMjEkIZOXEqx9oRzGOpL/nxT4BgKuf26ERsWkC3JQyOs n3YIKX6nUC4+O4Q4I5Rl4rnTYsAeBc9MlyRfIJ8XKRk+jYbscTTVC+bBrh283eMi OBDhqMtQF6/JM1WgfvZkosUj3Fmb04sgzN8KyJfdCaLRiMhWNJdShdQWQrJRUoNy QR/Eq3vK/AUBxLVNIW8pNBcMkY6CCjVyG5qqP6hY3tyn/Kma4J+Vn4q07QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCn0sIW2/EQbJW1loIJqOGrezEfmMB8GA1UdIwQY MBaAFH8dDjKYvtOn85+zskTtkYv2xNe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMt MjFhZjNkZWU4ZWU5LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMtMjFhZjNkZWU4ZWU5 LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokFLEm7V NjQ+TwZIrPyUdHjUIYFzRrC32RBEJhVDthw2xAHWX+9qEW6FCPaeNRcFXEUZeGbl 22LF3koMu5URYGafcWLXAOjyuOMgzviEqKD4frr1IclSqabnuJyzypir85WBeqiV kPt0o26yl8xucP4JrVp0zhdyzdA1H4IialRc5HZc0JA0NkiMI7XQWKEWngI0yZTm 6nzQsnvXWHJyBXAactxkrLfe780TxZf6xJJs0RRXQ1uYid7i11oCUold05dcolDt OPwmtm+2CwTr92VL0mQ3z8ev/Gj5j0z6xzoUsk0cTjweJHJyyQIPjpBuhwJk4Wbx CD2JESQbO0R+DQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:26:04 2025 by rpki-client