This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json) Hash identifier: AUPORPHK6AcCGpEROTyLvTF+MJgLj9EJIQ7BKK8UNFY= Subject key identifier: 7B:3C:6C:CB:02:62:FB:22:C5:EB:04:0B:AA:A4:1D:58:F3:19:AA:84 Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf Certificate serial: 019AF19ABF165525FBBCAF16E852571192FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft Manifest number: 1061 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: K1e6ttewcgip2A4Waj3GcipKU7hZRNqhG6ltPCp9SJw=) 2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bf:16:55:25:fb:bc:af:16:e8:52:57:11:92:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=7b3c6ccb0262fb22c5eb040baaa41d58f319aa84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:a4:ef:a3:10:fb:e1:a5:8f:5f:d1:47:8d: 5d:dc:80:a1:3d:e5:94:5f:56:2b:78:18:1d:ce:c3: ba:f6:73:22:53:4b:1b:0f:af:e9:8d:68:d9:a0:38: 49:28:24:3d:67:8a:9f:8c:26:79:20:72:75:e1:42: 3b:3f:c0:fa:d4:34:1a:aa:f7:c7:c4:6e:7a:53:90: 13:0f:0b:df:c0:ef:36:85:b7:ff:9b:1d:87:f2:ec: e3:3d:49:73:03:59:48:f5:08:9e:0a:ba:4e:e4:3b: 14:c7:32:fb:db:5e:00:be:93:8d:72:cf:9d:44:7f: f0:7f:b1:c4:6f:97:cd:f3:0a:ee:54:0b:e8:1f:2e: 53:0e:d0:3c:64:9b:ec:21:57:d0:a4:1d:ec:96:5c: 1f:d4:5b:ec:ae:4e:8e:42:9b:ce:24:19:a9:1f:4a: 23:3d:ba:3d:86:6a:b8:4d:cf:c6:0a:54:08:b1:3e: e2:57:02:0b:8c:1e:0f:af:3f:d5:f0:d7:d6:a8:a8: c0:e4:fe:0c:54:8e:5c:ba:a3:6d:b2:7f:f4:24:f5: ce:db:e7:70:f2:da:25:55:83:51:99:7f:9d:08:f5: 3f:4f:43:16:ae:ac:45:25:b1:5d:84:89:1b:a5:e5: e9:1a:b7:3c:20:94:b6:5f:ef:8e:6e:4b:48:ec:e5: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3C:6C:CB:02:62:FB:22:C5:EB:04:0B:AA:A4:1D:58:F3:19:AA:84 X509v3 Authority Key Identifier: keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4b:58:af:76:95:32:09:b9:ae:68:c5:ad:6a:d5:1f:4b:08: 22:6f:e9:77:e5:ac:48:ae:60:16:e2:5f:ef:88:e6:93:64:e5: b5:d2:44:b1:ca:ab:e1:39:f8:67:67:ea:38:c3:18:5b:3b:41: 5c:92:79:dd:c0:74:0e:e2:f2:d7:36:a2:e6:02:f9:6f:de:cd: 8b:52:d4:74:bd:71:94:bd:80:62:57:f0:61:22:c5:1b:44:94: 09:94:87:1d:8b:2f:ba:6e:35:96:f7:f4:cd:e6:bf:e4:a9:e9: 9f:83:f3:69:a0:11:2d:dc:11:7b:39:fd:e1:58:8b:8f:95:7f: 9b:f6:30:de:b3:c7:de:8d:e1:13:69:01:cc:26:26:82:09:2c: ad:05:45:1a:08:00:99:aa:7a:bd:fb:36:ef:d8:8d:cc:c7:64: e5:3e:ee:2f:9c:28:c6:ed:e9:bf:3a:49:1d:56:94:89:2f:dd: 02:92:91:22:35:4f:19:a0:f9:f3:63:bd:75:70:72:c0:ee:bc: 3a:b8:7d:3e:0f:41:7a:e3:37:37:15:1c:92:6e:c4:b7:71:f0: 29:d4:1c:4e:a0:e8:00:70:73:80:4f:27:31:e5:37:eb:33:c2: 76:81:62:0a:ec:e7:44:ed:85:c6:93:8e:5f:f6:c5:a5:80:91: 66:7a:04:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr8WVSX7vK8W6FJXEZL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkN2NiMjk3OGJiNTRlYjU1N2NhZTNmZmIzNWU0NmFjNGQ1 YzIyYmYwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD Eyg3YjNjNmNjYjAyNjJmYjIyYzVlYjA0MGJhYWE0MWQ1OGYzMTlhYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocyk76MQ++Glj1/RR41d3IChPeWU X1YreBgdzsO69nMiU0sbD6/pjWjZoDhJKCQ9Z4qfjCZ5IHJ14UI7P8D61DQaqvfH xG56U5ATDwvfwO82hbf/mx2H8uzjPUlzA1lI9QieCrpO5DsUxzL7214AvpONcs+d RH/wf7HEb5fN8wruVAvoHy5TDtA8ZJvsIVfQpB3sllwf1Fvsrk6OQpvOJBmpH0oj Pbo9hmq4Tc/GClQIsT7iVwILjB4Prz/V8NfWqKjA5P4MVI5cuqNtsn/0JPXO2+dw 8tolVYNRmX+dCPU/T0MWrqxFJbFdhIkbpeXpGrc8IJS2X++ObktI7OXtzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHs8bMsCYvsixesEC6qkHVjzGaqEMB8GA1UdIwQY MBaAFH18speLtU61V8rj/7NeRqxNXCK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5Mzct MjRjM2Q5ZTI1NDAxLzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5MzctMjRjM2Q5ZTI1NDAx LzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUtYr3aV Mgm5rmjFrWrVH0sIIm/pd+WsSK5gFuJf74jmk2TltdJEscqr4Tn4Z2fqOMMYWztB XJJ53cB0DuLy1zai5gL5b97Ni1LUdL1xlL2AYlfwYSLFG0SUCZSHHYsvum41lvf0 zea/5Knpn4PzaaARLdwRezn94ViLj5V/m/Yw3rPH3o3hE2kBzCYmggksrQVFGggA map6vfs279iNzMdk5T7uL5woxu3pvzpJHVaUiS/dApKRIjVPGaD582O9dXBywO68 Orh9Pg9BeuM3NxUckm7Et3HwKdQcTqDoAHBzgE8nMeU36zPCdoFiCuznRO2FxpOO X/bFpYCRZnoEbg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:53 2025 by rpki-client