This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json) Hash identifier: YelrmAtTm5IlcgUhiqVZrNMH1A7lHPHV59VNdqs7SY0= Subject key identifier: 54:52:C4:0E:42:63:27:B0:0D:7E:DC:97:99:55:88:8D:FC:FE:38:65 Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf Certificate serial: 019B3F484E2AC603F0B14E0ACE5FB843489B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft Manifest number: 155F Signing time: Sun 21 Dec 2025 05:01:01 +0000 Manifest this update: Sun 21 Dec 2025 05:01:01 +0000 Manifest next update: Mon 22 Dec 2025 05:01:01 +0000 Files and hashes: 1: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (hash: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=) 2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: i8oYRw6TLI0bFet7NMwAuJpmxzMMYEH9PU5xMNutqvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:4e:2a:c6:03:f0:b1:4e:0a:ce:5f:b8:43:48:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf Validity Not Before: Dec 21 05:01:01 2025 GMT Not After : Dec 22 05:01:01 2025 GMT Subject: CN=5452c40e426327b00d7edc979955888dfcfe3865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:c8:c9:1d:13:af:9d:fe:a9:07:ac:74:d8: 3f:15:83:a1:e3:71:7a:95:89:18:69:72:d7:54:28: 32:c4:55:11:3e:93:1e:74:75:e1:4e:36:12:6d:0b: 62:7a:ff:39:68:18:67:38:c5:8f:3c:88:c3:5c:dd: 17:bb:bb:2d:5d:52:47:ce:c5:9a:ac:cc:23:52:37: 07:ef:cf:45:b0:77:bd:32:c8:01:70:4d:6f:f0:02: 84:5b:c5:5d:1b:45:01:e3:49:0b:98:14:83:ff:1d: 39:9f:8a:db:24:7a:ab:e7:3f:79:da:9b:ea:01:60: 8e:58:8e:e3:8b:c3:0c:c4:1e:0d:7a:86:e7:8d:84: 19:e9:16:f2:8b:23:67:35:d5:e1:e5:c8:84:76:27: b4:91:60:89:d8:08:8c:51:f8:22:d6:95:0c:db:17: 6e:36:5a:ad:19:8f:df:06:cc:68:5d:d0:7e:ba:5f: 47:6b:7c:af:28:ff:7f:47:8f:a7:44:cb:aa:72:91: a3:9f:49:00:c5:b3:f1:3b:da:6d:fb:23:43:71:e6: 4b:40:f4:88:e7:d7:ac:4d:18:7d:db:d7:16:0d:ef: 31:9a:93:c8:97:b8:35:73:4b:10:b9:af:e5:a7:82: 61:c6:19:a5:67:d0:b2:ef:5b:c4:02:07:f4:10:21: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:52:C4:0E:42:63:27:B0:0D:7E:DC:97:99:55:88:8D:FC:FE:38:65 X509v3 Authority Key Identifier: keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8b:70:a1:ad:c6:fa:8d:5e:13:cb:17:03:ef:d6:70:0e:5a: d7:d4:0e:5c:f8:62:c4:9b:ec:44:9f:08:31:69:bb:f7:8f:ea: 52:78:af:7f:60:e8:65:e9:25:06:d0:cd:af:dc:70:4c:fb:d3: 45:63:48:75:09:28:c3:76:69:88:05:9c:dc:d2:64:51:68:91: 49:ed:bd:41:35:48:34:33:17:de:8f:71:68:38:9c:d0:56:2f: db:18:1e:71:07:a9:52:37:67:6d:87:bc:ac:d4:ee:1c:cf:be: b6:b0:d0:eb:b2:de:94:05:3c:f0:9a:8a:b5:e8:67:59:0e:ed: 1c:f3:56:b7:af:23:24:25:9f:a1:3e:b0:0f:dc:0c:6f:a5:b8: 11:5e:00:d8:ce:e7:68:55:91:86:c9:c0:51:26:d7:ea:10:94: 44:2f:be:fd:f8:eb:8f:1b:80:f4:1d:b5:02:52:97:18:0d:99: a8:2a:fa:73:c3:3d:63:c0:69:71:16:91:29:23:60:47:7e:29: 19:7d:1e:09:68:54:03:b6:43:a8:9c:b6:5a:f8:b2:8c:8f:03: 00:f5:5d:03:a5:5b:b3:40:87:6a:80:7b:a9:3f:3a:20:9c:f3: ec:3d:67:42:3d:17:78:e4:aa:18:f8:a5:78:b2:06:57:a3:86: b2:25:06:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SE4qxgPwsU4Kzl+4Q0ibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMWQwZTMyOThiZWQzYTdmMzlmYjNiMjQ0ZWQ5MThiZjZj NGQ3YmYwHhcNMjUxMjIxMDUwMTAxWhcNMjUxMjIyMDUwMTAxWjAzMTEwLwYDVQQD Eyg1NDUyYzQwZTQyNjMyN2IwMGQ3ZWRjOTc5OTU1ODg4ZGZjZmUzODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvXIyR0Tr53+qQesdNg/FYOh43F6 lYkYaXLXVCgyxFURPpMedHXhTjYSbQtiev85aBhnOMWPPIjDXN0Xu7stXVJHzsWa rMwjUjcH789FsHe9MsgBcE1v8AKEW8VdG0UB40kLmBSD/x05n4rbJHqr5z952pvq AWCOWI7ji8MMxB4NeobnjYQZ6RbyiyNnNdXh5ciEdie0kWCJ2AiMUfgi1pUM2xdu NlqtGY/fBsxoXdB+ul9Ha3yvKP9/R4+nRMuqcpGjn0kAxbPxO9pt+yNDceZLQPSI 59esTRh929cWDe8xmpPIl7g1c0sQua/lp4JhxhmlZ9Cy71vEAgf0ECFJcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRSxA5CYyewDX7cl5lViI38/jhlMB8GA1UdIwQY MBaAFH8dDjKYvtOn85+zskTtkYv2xNe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMt MjFhZjNkZWU4ZWU5LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMtMjFhZjNkZWU4ZWU5 LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjItwoa3G +o1eE8sXA+/WcA5a19QOXPhixJvsRJ8IMWm794/qUnivf2DoZeklBtDNr9xwTPvT RWNIdQkow3ZpiAWc3NJkUWiRSe29QTVINDMX3o9xaDic0FYv2xgecQepUjdnbYe8 rNTuHM++trDQ67LelAU88JqKtehnWQ7tHPNWt68jJCWfoT6wD9wMb6W4EV4A2M7n aFWRhsnAUSbX6hCURC++/fjrjxuA9B21AlKXGA2ZqCr6c8M9Y8BpcRaRKSNgR34p GX0eCWhUA7ZDqJy2WviyjI8DAPVdA6Vbs0CHaoB7qT86IJzz7D1nQj0XeOSqGPil eLIGV6OGsiUGxg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:15:25 2025 by rpki-client