This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json) Hash identifier: RKKm7WYiGr3E8uzDuRyNbarjrmqz4Xv5l328xxOxa18= Subject key identifier: 58:78:58:EF:2B:1A:42:2A:4B:5E:E4:47:DF:42:44:55:F0:3F:77:24 Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46 Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946 Certificate serial: 019AF23FAE18641A70A1288DA4F3095439C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: 2Yn0j0BryV3TRhZu+iO6aI3pNXHes1K0tRd0Cr94Rsw=) 2: pjFDM6wzAyFnV_7W_SHgCVJP4hc.roa (hash: 25g7lwwxP1qGazXdPhbau6vE9l12B9+J1HdSOR/R0VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ae:18:64:1a:70:a1:28:8d:a4:f3:09:54:39:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946 Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=587858ef2b1a422a4b5ee447df424455f03f7724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:35:7e:ac:bc:49:ce:8e:d2:ee:9e:80:7a:53: 1e:0e:a3:69:50:65:0f:40:14:dc:1d:21:ae:ff:b0: 2e:4b:08:20:e2:ee:49:43:0a:86:49:89:bb:d2:76: f8:d0:ae:8c:43:4a:47:60:6d:a8:b9:44:a4:b6:89: 12:44:e3:08:ed:a5:de:ae:18:24:83:02:3e:c0:28: 17:97:82:85:0b:0a:3d:91:e2:97:e2:67:af:dd:7e: 38:10:5c:58:93:07:81:3c:09:49:41:b6:11:3b:48: a7:22:15:8d:f2:b7:b3:29:80:36:75:b4:80:db:fb: fb:69:e9:fb:8e:58:b8:83:55:6b:17:bb:52:3a:25: 9e:9a:03:84:02:4c:76:a1:e7:03:69:d7:89:96:5d: a6:e5:d1:af:f1:13:db:fa:b4:8e:e7:cc:16:be:82: ad:6a:40:01:8f:46:51:87:15:1d:5b:2a:f2:ee:65: 0c:0b:e7:69:6c:37:8f:dd:40:5d:1f:d5:0d:ad:9a: 0a:71:b7:8e:1f:5f:7e:54:67:ad:22:99:0c:e4:f0: 9a:1a:57:44:9b:1d:84:05:e5:ea:7b:f5:1a:43:70: 4d:f2:ac:fa:24:88:df:2c:56:bf:a6:9a:13:f1:b2: 12:7c:95:f1:36:75:67:3e:04:0c:1e:ec:cf:b3:11: 2d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:78:58:EF:2B:1A:42:2A:4B:5E:E4:47:DF:42:44:55:F0:3F:77:24 X509v3 Authority Key Identifier: keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:44:c2:52:c5:de:9f:ca:3c:a8:ff:d9:cc:a3:18:87:1c:d3: a3:13:12:c9:75:6e:42:aa:ad:b0:90:5e:29:75:7b:db:3a:76: e7:9f:b7:da:51:90:1f:c6:cd:34:80:78:8d:24:c1:ab:75:38: 6c:b2:46:bf:68:bb:36:ec:98:7d:e9:e1:c3:e4:cc:0c:70:de: 42:bf:50:f2:bd:ec:62:83:e8:76:ac:0a:f9:98:de:b3:35:84: c6:c8:fc:6a:2e:df:66:e5:63:0c:2a:0d:cf:e8:c8:14:ac:74: 20:fc:fa:59:f1:58:1e:f0:36:1c:c5:88:34:2b:ed:ab:ac:01: c5:20:8c:86:86:93:ce:7b:69:e9:b4:56:b2:6f:e5:1f:76:f8: 91:db:74:ac:76:ce:67:2f:c7:88:b7:38:a6:3b:7a:83:d3:19: 2b:96:8d:18:9c:b5:d4:be:ef:fb:33:80:4d:69:63:35:68:cd: 97:b3:48:0a:59:3e:b2:99:c9:ce:7e:9e:66:7a:a8:1e:e4:ba: 7f:b7:2b:e9:32:32:18:86:db:16:ec:4a:73:9b:e4:6f:29:03: cc:49:ce:de:ab:f5:27:94:66:ed:1b:7f:fc:4e:eb:ed:27:db: 95:89:01:d2:8e:69:41:24:65:1f:8b:30:c3:09:8f:10:c9:fb: 64:eb:17:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP64YZBpwoSiNpPMJVDnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTE0MTZhZTM5MjlkZjM3YmY2NmE0NTljZDNhY2E2Mzg5 MWU5NDYwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD Eyg1ODc4NThlZjJiMWE0MjJhNGI1ZWU0NDdkZjQyNDQ1NWYwM2Y3NzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jV+rLxJzo7S7p6AelMeDqNpUGUP QBTcHSGu/7AuSwgg4u5JQwqGSYm70nb40K6MQ0pHYG2ouUSktokSROMI7aXerhgk gwI+wCgXl4KFCwo9keKX4mev3X44EFxYkweBPAlJQbYRO0inIhWN8rezKYA2dbSA 2/v7aen7jli4g1VrF7tSOiWemgOEAkx2oecDadeJll2m5dGv8RPb+rSO58wWvoKt akABj0ZRhxUdWyry7mUMC+dpbDeP3UBdH9UNrZoKcbeOH19+VGetIpkM5PCaGldE mx2EBeXqe/UaQ3BN8qz6JIjfLFa/ppoT8bISfJXxNnVnPgQMHuzPsxEtmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFh4WO8rGkIqS17kR99CRFXwP3ckMB8GA1UdIwQY MBaAFH8RQWrjkp3ze/ZqRZzTrKY4kelGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQt Njc1NmY3YjBjMGRiLzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQtNjc1NmY3YjBjMGRi LzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoETCUsXe n8o8qP/ZzKMYhxzToxMSyXVuQqqtsJBeKXV72zp255+32lGQH8bNNIB4jSTBq3U4 bLJGv2i7NuyYfenhw+TMDHDeQr9Q8r3sYoPodqwK+ZjeszWExsj8ai7fZuVjDCoN z+jIFKx0IPz6WfFYHvA2HMWINCvtq6wBxSCMhoaTzntp6bRWsm/lH3b4kdt0rHbO Zy/HiLc4pjt6g9MZK5aNGJy11L7v+zOATWljNWjNl7NIClk+spnJzn6eZnqoHuS6 f7cr6TIyGIbbFuxKc5vkbykDzEnO3qv1J5Rm7Rt//E7r7SfblYkB0o5pQSRlH4sw wwmPEMn7ZOsXtw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:25 2025 by rpki-client