This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json) Hash identifier: XqPGz+W8yZjysWrnhXGUyweRnX/wJ3mTeWHPHu83/nc= Subject key identifier: BB:B0:F9:75:4D:FC:5D:35:50:AE:90:7F:A0:57:FE:AC:73:BE:AD:C2 Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01 Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501 Certificate serial: 019B3E6DA5893DBB96582B72CD528507AB87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft Manifest number: 034E Signing time: Sun 21 Dec 2025 01:02:11 +0000 Manifest this update: Sun 21 Dec 2025 01:02:11 +0000 Manifest next update: Mon 22 Dec 2025 01:02:11 +0000 Files and hashes: 1: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (hash: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=) 2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: mzlWR7BWkaectXrbNDSNioZ9VjFZwCof9HN5QvHkx6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:a5:89:3d:bb:96:58:2b:72:cd:52:85:07:ab:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501 Validity Not Before: Dec 21 01:02:11 2025 GMT Not After : Dec 22 01:02:11 2025 GMT Subject: CN=bbb0f9754dfc5d3550ae907fa057feac73beadc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:46:fd:70:6e:7f:c6:98:8b:76:2d:40:8e: 6c:78:3a:9d:35:5a:76:6f:f7:ef:fe:f5:84:f9:73: 0d:34:79:e3:60:ce:20:7f:c6:25:93:c2:1c:2b:ef: 80:f0:c2:12:0f:17:26:df:24:00:a6:73:0f:79:54: eb:80:dc:a1:fe:f5:ce:c4:80:aa:6d:1d:ad:cd:b9: d6:b1:4f:1b:44:1d:d8:ae:93:b0:22:9a:b7:6d:de: 7a:b6:7c:81:d3:bc:db:8b:44:84:05:07:ee:2b:23: 83:27:d0:1d:db:0d:6e:a4:27:09:6b:01:91:5a:c6: 9c:18:cb:5d:00:38:7a:42:17:06:95:41:8e:2f:7c: 52:7f:bf:d9:80:e7:c3:d2:12:f3:ef:ed:a1:97:e8: bb:82:52:52:22:22:28:f4:4a:be:d1:84:f9:7f:e2: 17:5d:b5:50:bd:6b:ef:97:cd:84:2e:07:8a:5e:ed: b7:df:92:9e:d6:ca:7e:a5:53:ec:a4:2d:d5:b0:71: 39:86:c8:58:1e:40:60:f0:c8:e9:1d:57:2d:1b:b9: 24:b7:2c:12:e0:cc:40:56:07:aa:cd:5a:cb:57:df: 0b:63:5a:0d:f0:25:7f:39:9b:25:7f:19:61:6b:28: cf:f4:71:02:a5:09:bf:59:fb:39:89:a1:9e:5e:ba: c0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:F9:75:4D:FC:5D:35:50:AE:90:7F:A0:57:FE:AC:73:BE:AD:C2 X509v3 Authority Key Identifier: keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:03:8a:29:2c:92:e9:6b:47:62:8e:ab:38:8f:14:24:57:cc: e4:bd:72:7e:82:c3:b8:6b:39:e7:32:66:7d:fb:2b:25:eb:2a: 72:90:01:04:cb:dd:a6:1d:de:2d:ef:15:07:56:d9:b6:55:ae: 50:e9:cb:f5:5c:8c:67:55:4f:8d:de:af:b3:b9:e6:5e:02:5f: 83:90:e4:fb:e0:8f:21:ea:10:e2:a4:be:56:72:14:c2:be:4a: ea:de:c4:aa:25:1e:57:86:19:d9:85:8c:6a:55:bc:85:ed:95: e7:77:82:6b:e7:75:87:3b:2b:9f:1c:c1:5b:d7:d4:c8:7b:59: bd:20:ae:16:e8:f9:89:07:40:90:57:4d:6c:00:b1:7c:74:25: e4:57:0f:77:7e:f9:5f:aa:ee:d1:b1:5e:50:15:6d:9c:a8:26: f2:96:bb:39:85:7a:c9:d2:bd:24:55:63:b2:a9:fe:f0:0c:68: 15:bf:b6:21:91:9d:e1:87:1b:dc:cb:88:6e:36:d0:36:0c:ef: 16:8b:cc:e1:c7:02:d5:d8:33:d9:91:67:ce:15:e1:25:8f:c3: 92:97:4f:24:b2:b8:61:fe:20:86:bc:fe:d1:2d:d5:c8:a2:19: c6:8d:aa:ad:e9:37:27:4e:61:55:4c:52:fe:2a:14:16:e5:d8: 9e:c6:da:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+baWJPbuWWCtyzVKFB6uHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NTIwNmIxZDZmMzkxMmE4NmViNjI4ZjYxOWM1YTU1MmM1 NTM1MDEwHhcNMjUxMjIxMDEwMjExWhcNMjUxMjIyMDEwMjExWjAzMTEwLwYDVQQD EyhiYmIwZjk3NTRkZmM1ZDM1NTBhZTkwN2ZhMDU3ZmVhYzczYmVhZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiapG/XBuf8aYi3YtQI5seDqdNVp2 b/fv/vWE+XMNNHnjYM4gf8Ylk8IcK++A8MISDxcm3yQApnMPeVTrgNyh/vXOxICq bR2tzbnWsU8bRB3YrpOwIpq3bd56tnyB07zbi0SEBQfuKyODJ9Ad2w1upCcJawGR WsacGMtdADh6QhcGlUGOL3xSf7/ZgOfD0hLz7+2hl+i7glJSIiIo9Eq+0YT5f+IX XbVQvWvvl82ELgeKXu2335Ke1sp+pVPspC3VsHE5hshYHkBg8MjpHVctG7kktywS 4MxAVgeqzVrLV98LY1oN8CV/OZslfxlhayjP9HECpQm/Wfs5iaGeXrrAEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuw+XVN/F01UK6Qf6BX/qxzvq3CMB8GA1UdIwQY MBaAFMRSBrHW85Eqhutij2GcWlUsVTUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUt NWJlNDBiMTRmOGRmLzEveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jYzgzNWYtNDkwNi00Yzk1LWI4ZTUtNWJlNDBiMTRmOGRm LzEveEZJR3NkYnprU3FHNjJLUFlaeGFWU3hWTlFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewOKKSyS 6WtHYo6rOI8UJFfM5L1yfoLDuGs55zJmffsrJesqcpABBMvdph3eLe8VB1bZtlWu UOnL9VyMZ1VPjd6vs7nmXgJfg5Dk++CPIeoQ4qS+VnIUwr5K6t7EqiUeV4YZ2YWM alW8he2V53eCa+d1hzsrnxzBW9fUyHtZvSCuFuj5iQdAkFdNbACxfHQl5FcPd375 X6ru0bFeUBVtnKgm8pa7OYV6ydK9JFVjsqn+8AxoFb+2IZGd4Ycb3MuIbjbQNgzv FovM4ccC1dgz2ZFnzhXhJY/DkpdPJLK4Yf4ghrz+0S3VyKIZxo2qrek3J05hVUxS /ioUFuXYnsbaUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:31:56 2025 by rpki-client