This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json) Hash identifier: fyscF5Dv9WV0ZSi1uQD2cKtYfXIiNQqKctX4mdggXRc= Subject key identifier: B6:6A:B5:1A:54:8A:7A:57:E9:6C:13:B5:9F:E2:C6:2C:BC:AE:B9:DB Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c Certificate serial: 019AF08879E682EF6C652DEB5A8EE3144522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft Manifest number: 0EE1 Signing time: Fri 05 Dec 2025 22:01:07 +0000 Manifest this update: Fri 05 Dec 2025 22:01:07 +0000 Manifest next update: Sat 06 Dec 2025 22:01:07 +0000 Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: ZWA03NuStF1NNmge4UJHH8qKapzHqTgQhXWCRnIJzKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:79:e6:82:ef:6c:65:2d:eb:5a:8e:e3:14:45:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c Validity Not Before: Dec 5 22:01:07 2025 GMT Not After : Dec 6 22:01:07 2025 GMT Subject: CN=b66ab51a548a7a57e96c13b59fe2c62cbcaeb9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:95:ab:ed:c5:bf:8d:e3:94:35:85:74:d7: 77:9d:fc:ba:de:5b:ce:f2:28:45:5d:35:6a:99:3b: 43:bf:41:8f:c7:1a:b1:d4:22:ac:35:ce:46:72:96: 54:d2:b4:ab:f1:db:d1:36:f0:c6:f0:85:b3:a4:65: 73:f9:0a:8b:ad:5f:98:a9:7c:5c:56:4f:02:b1:69: a9:99:2f:fd:5d:b9:66:8a:a6:8b:7a:9e:43:9c:91: a1:bd:04:44:9f:91:74:8e:48:81:dc:8a:7b:3c:1a: 59:90:c4:d7:29:f6:6b:31:25:dd:e4:f3:12:15:f4: 89:9e:66:60:a4:16:ac:0c:b5:cb:3c:f2:1e:1e:85: 34:8e:f4:01:4c:fc:e5:68:6f:6d:8c:96:f6:4e:1c: 1d:a1:06:2b:15:eb:6b:fe:c8:51:26:f4:48:f6:96: 7b:a8:1e:19:ae:1e:7f:8d:9c:28:19:d2:05:43:f7: 84:e9:44:74:89:8b:89:96:93:b5:d7:08:54:c2:9a: ec:fc:2c:db:97:b4:b9:c8:2a:d5:e1:d2:b5:51:22: a4:74:e9:d8:54:d5:56:b8:12:97:fe:c8:df:6a:a8: bf:92:24:6f:43:24:02:02:42:3d:4d:e9:50:77:a8: 24:49:b6:da:04:02:04:94:0d:9c:70:30:db:15:2f: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6A:B5:1A:54:8A:7A:57:E9:6C:13:B5:9F:E2:C6:2C:BC:AE:B9:DB X509v3 Authority Key Identifier: keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6c:61:73:f4:7f:9e:42:7b:ec:98:96:f7:11:c3:62:a5:a2: f9:8b:0a:4f:c6:16:40:74:1e:1f:90:c0:21:26:cc:d8:a7:dc: b3:95:5e:68:ac:6f:94:8f:f1:67:f3:bf:54:fd:92:9a:d7:53: 4d:d2:2f:03:97:5b:57:82:40:a0:85:29:cc:90:e6:b8:6d:f2: 1f:83:6b:dd:61:7b:dc:37:cb:24:ec:cf:43:78:75:c5:5b:cc: 34:d2:cd:4d:2a:05:62:d7:dd:76:95:cc:17:14:3e:bb:1e:00: 32:c6:82:d3:b1:62:80:ec:ad:23:65:32:bd:a5:7b:a9:ac:52: da:97:09:ce:62:47:16:af:99:85:76:7e:19:1e:d6:d8:7c:1f: 45:2d:ef:8d:ed:47:96:12:15:fd:e7:50:c3:0a:38:d0:19:2b: f7:09:7e:44:a4:82:63:d8:ef:66:84:64:16:86:d5:5c:a6:e7: 4c:35:3e:5d:e0:fd:ac:ba:70:d8:8b:38:a0:a3:ea:93:36:2e: f7:7c:c3:da:7b:83:b3:41:18:2c:f5:b1:15:5c:66:f6:41:f9: 90:c6:5a:79:3e:f7:dd:b3:7f:e2:6f:8a:9e:5b:cd:89:bd:dc: 25:78:16:4e:86:dd:b2:88:35:35:e7:59:13:5b:19:2d:77:27: ba:23:04:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHnmgu9sZS3rWo7jFEUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTdiNmY5MzIzOTlkNTg1MDkzZDE4NzMzOTRlYmZlMWIy OWY5OGMwHhcNMjUxMjA1MjIwMTA3WhcNMjUxMjA2MjIwMTA3WjAzMTEwLwYDVQQD EyhiNjZhYjUxYTU0OGE3YTU3ZTk2YzEzYjU5ZmUyYzYyY2JjYWViOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT2Vq+3Fv43jlDWFdNd3nfy63lvO 8ihFXTVqmTtDv0GPxxqx1CKsNc5GcpZU0rSr8dvRNvDG8IWzpGVz+QqLrV+YqXxc Vk8CsWmpmS/9XblmiqaLep5DnJGhvQREn5F0jkiB3Ip7PBpZkMTXKfZrMSXd5PMS FfSJnmZgpBasDLXLPPIeHoU0jvQBTPzlaG9tjJb2ThwdoQYrFetr/shRJvRI9pZ7 qB4Zrh5/jZwoGdIFQ/eE6UR0iYuJlpO11whUwprs/Czbl7S5yCrV4dK1USKkdOnY VNVWuBKX/sjfaqi/kiRvQyQCAkI9TelQd6gkSbbaBAIElA2ccDDbFS88iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZqtRpUinpX6WwTtZ/ixiy8rrnbMB8GA1UdIwQY MBaAFH8XtvkyOZ1YUJPRhzOU6/4bKfmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jYzAyMDAtYmIyYy00NWY2LWFjNzUt ODI3NTc3ZGY4ZWRjLzEvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jYzAyMDAtYmIyYy00NWY2LWFjNzUtODI3NTc3ZGY4ZWRj LzEvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGxhc/R/ nkJ77JiW9xHDYqWi+YsKT8YWQHQeH5DAISbM2Kfcs5VeaKxvlI/xZ/O/VP2SmtdT TdIvA5dbV4JAoIUpzJDmuG3yH4Nr3WF73DfLJOzPQ3h1xVvMNNLNTSoFYtfddpXM FxQ+ux4AMsaC07FigOytI2UyvaV7qaxS2pcJzmJHFq+ZhXZ+GR7W2HwfRS3vje1H lhIV/edQwwo40Bkr9wl+RKSCY9jvZoRkFobVXKbnTDU+XeD9rLpw2Is4oKPqkzYu 93zD2nuDs0EYLPWxFVxm9kH5kMZaeT733bN/4m+KnlvNib3cJXgWTobdsog1NedZ E1sZLXcnuiMEYA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:28 2025 by rpki-client