This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft File: fPxZzhNuPpOobeVfBdSaWeFcu78.mft (raw, json) Hash identifier: bfPNkz5UC4glmgf6k8fFcHvZIBjwBO3BRl+IWKXeKPs= Subject key identifier: 8F:EC:5A:33:B6:E6:80:EF:BA:A1:52:2D:89:3B:88:6D:EC:55:BE:DF Authority key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF Certificate issuer: /CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf Certificate serial: 019AF2769BB224CD025724E71AF33D29AB02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft Manifest number: 0AFE Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: fPxZzhNuPpOobeVfBdSaWeFcu78.crl (hash: 1yXzFHwDPBuUqnL8pHxt3nv4m7LSwWNxzgxpMzNXUz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9b:b2:24:cd:02:57:24:e7:1a:f3:3d:29:ab:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=8fec5a33b6e680efbaa1522d893b886dec55bedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:0e:e7:5c:42:2c:8b:72:9c:97:9b:15:9d: c4:5a:00:c2:7b:a0:67:91:89:11:70:c6:28:fe:f6: f4:3f:3d:44:96:49:02:52:e9:06:5c:10:27:f9:e3: e8:48:d3:59:8d:e4:3c:36:c1:b1:5b:b8:99:b5:ba: 8b:2f:3d:1e:58:bf:cc:30:bc:4b:09:31:9d:97:89: d6:f6:22:b8:90:68:fa:03:7c:c0:93:6a:f6:c1:bb: 5c:a9:87:e9:f1:25:1f:0e:16:50:57:b4:1f:cf:1e: d1:04:78:14:aa:7f:66:25:ef:78:aa:6d:37:8d:f4: fb:98:34:64:88:54:21:bb:c0:e5:02:8f:77:89:d3: 6b:15:0d:a4:1a:1d:73:a9:db:39:fc:75:d0:01:44: dc:cc:fe:57:02:c8:7a:67:f9:02:0b:a9:1b:a5:59: a5:7f:da:ed:fe:f1:44:f7:e7:4d:d4:59:5f:26:e1: 30:f0:49:c6:82:c1:2a:e2:e7:b7:34:c0:a3:b0:96: 7b:36:44:3e:2e:f0:cb:d0:42:4a:ec:3c:68:ce:94: d5:2a:11:0e:c9:37:c3:c3:d1:e4:4c:0f:0d:31:75: 0b:73:bb:ad:c4:4f:a5:2c:14:3d:b4:c8:f2:f1:02: fa:62:e6:4d:25:3f:c4:fd:c0:a4:64:82:08:52:cf: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EC:5A:33:B6:E6:80:EF:BA:A1:52:2D:89:3B:88:6D:EC:55:BE:DF X509v3 Authority Key Identifier: keyid:7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:dc:9c:31:01:46:b1:f2:f3:bd:e1:07:61:07:e8:7b:77:70: d0:11:8d:ee:53:48:7b:b4:9e:f3:4f:5a:aa:e3:3f:c0:55:37: 48:46:b8:48:dc:a0:6f:5e:a4:80:96:81:7a:4e:bc:7d:4b:59: e6:f9:76:ec:58:b5:7d:20:79:c6:bf:09:c6:0e:c9:9a:cf:72: ab:b4:06:a6:44:22:00:bb:a6:0d:53:43:31:cb:d2:cd:7d:83: 57:98:75:5e:3f:e0:90:b1:fe:a1:e0:99:06:4b:24:3b:70:47: 8e:96:77:7c:e6:b7:50:75:23:0d:72:35:61:cb:2a:21:3e:9a: 88:d4:14:e5:f3:00:47:58:bf:7e:6b:2c:a5:e8:be:1a:21:c1: 90:0e:d7:eb:0a:61:84:75:85:d6:5f:05:62:56:5c:c3:ef:40: 6e:ba:1a:ca:21:99:4c:51:11:02:d0:f8:4a:a3:47:c0:e7:d7: d8:27:b5:80:cc:36:85:2a:27:32:59:af:ee:98:48:c6:01:ca: 50:84:c9:65:7e:3d:51:de:f8:25:d4:e6:32:82:89:8f:fb:f7: f0:87:51:ef:14:6d:a4:73:38:38:05:34:c5:2e:ea:19:1f:88: 4d:ed:a5:eb:c1:5a:5a:05:38:8a:74:4f:57:99:b6:c0:c0:6c: 72:3b:b2:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpuyJM0CVyTnGvM9KasCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZmM1OWNlMTM2ZTNlOTNhODZkZTU1ZjA1ZDQ5YTU5ZTE1 Y2JiYmYwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD Eyg4ZmVjNWEzM2I2ZTY4MGVmYmFhMTUyMmQ4OTNiODg2ZGVjNTViZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwEO51xCLItynJebFZ3EWgDCe6Bn kYkRcMYo/vb0Pz1ElkkCUukGXBAn+ePoSNNZjeQ8NsGxW7iZtbqLLz0eWL/MMLxL CTGdl4nW9iK4kGj6A3zAk2r2wbtcqYfp8SUfDhZQV7Qfzx7RBHgUqn9mJe94qm03 jfT7mDRkiFQhu8DlAo93idNrFQ2kGh1zqds5/HXQAUTczP5XAsh6Z/kCC6kbpVml f9rt/vFE9+dN1FlfJuEw8EnGgsEq4ue3NMCjsJZ7NkQ+LvDL0EJK7DxozpTVKhEO yTfDw9HkTA8NMXULc7utxE+lLBQ9tMjy8QL6YuZNJT/E/cCkZIIIUs+uRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/sWjO25oDvuqFSLYk7iG3sVb7fMB8GA1UdIwQY MBaAFHz8Wc4Tbj6TqG3lXwXUmlnhXLu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2Mt ODA4OTVmODhmNWQ1LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2MtODA4OTVmODhmNWQ1 LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotycMQFG sfLzveEHYQfoe3dw0BGN7lNIe7Se809aquM/wFU3SEa4SNygb16kgJaBek68fUtZ 5vl27Fi1fSB5xr8Jxg7Jms9yq7QGpkQiALumDVNDMcvSzX2DV5h1Xj/gkLH+oeCZ BkskO3BHjpZ3fOa3UHUjDXI1YcsqIT6aiNQU5fMAR1i/fmsspei+GiHBkA7X6wph hHWF1l8FYlZcw+9AbroayiGZTFERAtD4SqNHwOfX2Ce1gMw2hSonMlmv7phIxgHK UITJZX49Ud74JdTmMoKJj/v38IdR7xRtpHM4OAU0xS7qGR+ITe2l68FaWgU4inRP V5m2wMBscjuylg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:08 2025 by rpki-client