This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft File: fPxZzhNuPpOobeVfBdSaWeFcu78.mft (raw, json) Hash identifier: jL+TNCL1D6ZODUNhNzjf7XD2qOr60X+Mms/d9VEqrBU= Subject key identifier: D8:F8:99:45:A1:E6:54:0E:05:89:50:C8:4A:05:55:0C:F0:BD:CF:65 Authority key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF Certificate issuer: /CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf Certificate serial: 019B2C66DEEAD26F15A5502311CC2D6385D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft Manifest number: 0B1C Signing time: Wed 17 Dec 2025 13:01:37 +0000 Manifest this update: Wed 17 Dec 2025 13:01:37 +0000 Manifest next update: Thu 18 Dec 2025 13:01:37 +0000 Files and hashes: 1: fPxZzhNuPpOobeVfBdSaWeFcu78.crl (hash: lZxaezAHdUJZG3SEfhLiVwdhnBFi9hCRwiSGS7fufFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:de:ea:d2:6f:15:a5:50:23:11:cc:2d:63:85:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf Validity Not Before: Dec 17 13:01:37 2025 GMT Not After : Dec 18 13:01:37 2025 GMT Subject: CN=d8f89945a1e6540e058950c84a05550cf0bdcf65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:12:bc:df:fa:07:33:f3:70:b9:de:07:7c:e7: a1:c5:0a:99:e8:3b:3a:6d:a1:42:52:58:bc:a6:ed: f5:00:a9:41:ef:e2:ee:cb:33:c4:df:9f:4a:55:43: 3a:1f:b1:95:63:c3:7d:69:43:16:01:30:81:72:7e: ac:7f:b0:a6:21:80:26:5f:0d:1f:69:d4:c3:3b:7f: 49:84:1e:80:ed:2d:0b:a8:77:f3:ba:3e:9a:7c:67: 22:9f:5f:3b:f6:83:3c:55:86:e3:6e:84:fe:dd:c9: e3:fe:52:af:1e:11:5f:3e:f9:00:53:f0:1a:59:2d: 2f:6c:97:af:53:2d:dd:31:8e:84:8a:8f:ad:f0:39: 1a:47:63:ef:d0:b4:e5:ed:db:f3:82:a2:25:5e:ac: 1e:3c:9e:15:1d:53:6e:60:af:8b:09:40:72:28:27: 50:9a:1f:dc:bb:2f:1c:7b:3e:74:13:1f:fd:11:81: bd:05:99:6a:55:38:d3:16:0f:7c:9d:14:dc:23:a8: f8:42:0e:56:35:a7:d7:80:3d:19:9f:e6:15:a4:4b: b9:b0:f0:42:ab:f7:25:e5:1e:22:38:ec:8c:72:32: bf:9b:a9:51:b9:e0:7d:9d:de:ce:1a:66:fa:3f:b9: c4:cf:a8:08:13:a8:27:e3:d6:57:56:04:a5:fd:ef: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F8:99:45:A1:E6:54:0E:05:89:50:C8:4A:05:55:0C:F0:BD:CF:65 X509v3 Authority Key Identifier: keyid:7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ff:05:aa:fe:92:f3:4f:26:ad:30:3c:c2:f0:51:b7:f5:28: 3e:03:cf:dc:b9:ba:15:b0:97:e9:4e:85:22:1f:89:d0:ac:e5: 68:d6:c7:0f:98:5d:d9:ce:76:e6:c9:2d:f0:46:a5:99:3b:ba: a9:c0:47:a3:48:c8:83:7c:da:de:dc:b7:64:b4:a5:3d:e1:d9: 9f:d1:c4:08:7a:be:9d:37:92:f2:bb:8c:fe:46:4b:80:23:50: 4c:d1:c1:50:2b:cf:6a:19:52:55:4a:4a:f1:f0:e4:0f:7f:1c: 32:20:f1:8d:f2:fe:ec:be:e0:65:a3:44:26:ca:fc:bd:75:b6: 5b:57:e2:b6:1c:00:b9:d6:06:4c:2b:54:01:26:3f:ab:d0:fc: d1:2a:6a:4f:bc:3a:0f:f1:f7:2c:f3:e3:37:a1:99:92:e4:6d: e3:04:15:27:8b:d0:26:e1:a3:ef:5f:bd:80:b9:8c:f3:84:6d: ff:3c:4a:5a:85:3f:e5:64:8b:7e:3f:0e:93:c6:9a:92:b8:bf: 91:55:0d:0e:e2:ea:2a:89:ca:3e:6d:7f:c4:d6:a0:99:ff:4c: f5:66:ef:9b:72:51:ee:0e:33:d9:c0:be:7e:a3:ca:c1:a8:31: ab:23:e3:22:b3:5d:40:2c:b5:8a:69:d6:e5:aa:14:67:ed:1b: 99:1b:a0:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZt7q0m8VpVAjEcwtY4XXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZmM1OWNlMTM2ZTNlOTNhODZkZTU1ZjA1ZDQ5YTU5ZTE1 Y2JiYmYwHhcNMjUxMjE3MTMwMTM3WhcNMjUxMjE4MTMwMTM3WjAzMTEwLwYDVQQD EyhkOGY4OTk0NWExZTY1NDBlMDU4OTUwYzg0YTA1NTUwY2YwYmRjZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxK83/oHM/Nwud4HfOehxQqZ6Ds6 baFCUli8pu31AKlB7+LuyzPE359KVUM6H7GVY8N9aUMWATCBcn6sf7CmIYAmXw0f adTDO39JhB6A7S0LqHfzuj6afGcin1879oM8VYbjboT+3cnj/lKvHhFfPvkAU/Aa WS0vbJevUy3dMY6Eio+t8DkaR2Pv0LTl7dvzgqIlXqwePJ4VHVNuYK+LCUByKCdQ mh/cuy8cez50Ex/9EYG9BZlqVTjTFg98nRTcI6j4Qg5WNafXgD0Zn+YVpEu5sPBC q/cl5R4iOOyMcjK/m6lRueB9nd7OGmb6P7nEz6gIE6gn49ZXVgSl/e+fwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj4mUWh5lQOBYlQyEoFVQzwvc9lMB8GA1UdIwQY MBaAFHz8Wc4Tbj6TqG3lXwXUmlnhXLu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2Mt ODA4OTVmODhmNWQ1LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2MtODA4OTVmODhmNWQ1 LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/8Fqv6S 808mrTA8wvBRt/UoPgPP3Lm6FbCX6U6FIh+J0KzlaNbHD5hd2c525skt8EalmTu6 qcBHo0jIg3za3ty3ZLSlPeHZn9HECHq+nTeS8ruM/kZLgCNQTNHBUCvPahlSVUpK 8fDkD38cMiDxjfL+7L7gZaNEJsr8vXW2W1fithwAudYGTCtUASY/q9D80SpqT7w6 D/H3LPPjN6GZkuRt4wQVJ4vQJuGj71+9gLmM84Rt/zxKWoU/5WSLfj8Ok8aakri/ kVUNDuLqKonKPm1/xNagmf9M9Wbvm3JR7g4z2cC+fqPKwagxqyPjIrNdQCy1imnW 5aoUZ+0bmRug+g== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:01 2025 by rpki-client