This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json) Hash identifier: cX/iFTmjAHWAAsMp0yahcekISEMIXzUGVzmihIrljBU= Subject key identifier: DB:C3:05:B1:B1:A2:AC:97:75:21:A0:59:D5:56:61:22:E0:8A:74:34 Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59 Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59 Certificate serial: 019AF50A6C1D18C857C6112C8D5D6A28BF9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:32 +0000 Manifest this update: Sat 06 Dec 2025 19:01:32 +0000 Manifest next update: Sun 07 Dec 2025 19:01:32 +0000 Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: b+FN0wbFXB7+pC5OafIOyF4sohHWthzQsCxodGuVcd4=) 2: pS03aj6wmU86Zu9PqgpTPjvPCgM.roa (hash: aUGGuBTytMASII0PgxjFCUwQN+XTGnbhLsjxVU+JfJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:6c:1d:18:c8:57:c6:11:2c:8d:5d:6a:28:bf:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59 Validity Not Before: Dec 6 19:01:32 2025 GMT Not After : Dec 7 19:01:32 2025 GMT Subject: CN=dbc305b1b1a2ac977521a059d5566122e08a7434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:4c:7e:bd:66:45:13:86:c0:09:48:53:f8: 75:99:0b:e6:14:35:46:b7:63:9f:8a:d7:50:1f:0d: ef:5a:2b:67:ac:95:33:f0:63:a6:ad:26:a5:ed:fc: e3:b4:4a:96:1b:b8:13:27:f2:d2:88:c6:c8:4c:2e: ce:73:b9:43:aa:2e:13:df:68:80:53:61:26:e0:50: 4b:5b:6a:fd:0b:11:50:a2:e5:5e:c5:36:34:0b:a4: 4a:53:21:d4:d1:b1:a7:56:10:58:39:ef:6f:cf:25: 06:c6:19:70:d9:97:75:66:5a:51:93:1f:37:f5:0b: a4:56:53:5b:03:56:c5:de:2c:e5:de:f6:f6:d6:72: 06:ce:4e:d0:ba:f6:66:b3:e5:b4:bf:c5:d4:46:c9: a7:a2:eb:1c:6c:60:1c:e8:fc:4f:52:30:df:6d:9f: 08:d8:e0:d6:b5:f1:31:21:5c:4a:68:95:6b:41:3c: d3:1c:50:87:47:f3:fb:96:e3:33:f1:83:c6:22:1c: 6c:2a:9b:96:11:fd:e8:21:29:13:ff:75:63:bc:9c: 4b:66:68:89:c5:a8:d4:a0:4b:0f:62:cb:d8:34:2e: f5:03:6a:56:f0:20:1e:07:f5:45:7c:2e:f8:1a:1f: 0a:eb:70:0c:75:10:3a:b6:50:2d:a4:98:bb:c6:21: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C3:05:B1:B1:A2:AC:97:75:21:A0:59:D5:56:61:22:E0:8A:74:34 X509v3 Authority Key Identifier: keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:97:ab:11:c6:30:af:25:d4:27:b6:31:ba:f5:bf:72:57:3b: 5b:ae:cb:30:5d:bf:b9:7a:b1:c4:c5:ef:7a:de:ea:50:3b:ba: ca:c1:54:52:38:d3:c7:36:7b:98:cc:8d:e6:85:8e:16:a0:30: 46:fb:3a:e6:fc:f0:63:59:59:54:0d:d0:04:3a:50:20:bf:c8: 5c:e7:5c:34:d0:f9:be:78:0f:69:62:60:06:76:3f:78:e2:5f: fc:41:17:0f:8d:76:3c:fd:59:1d:57:25:0f:31:71:e7:73:e8: 11:32:de:e4:bf:d1:ea:fe:20:a5:f2:1b:cc:c4:eb:0b:55:32: 20:28:b9:33:a7:8e:fc:09:2b:9b:b2:8c:d1:b6:20:73:64:8c: ed:b9:06:1f:af:07:9f:e4:a6:7c:20:78:2d:13:c9:f9:db:ce: 78:85:d5:0c:63:56:aa:5c:a5:c2:38:5b:cf:1d:fd:39:cd:cc: ba:ea:d5:de:54:d2:65:ca:1e:4b:ae:3e:fb:5c:41:60:7f:7e: de:ef:42:11:a6:3b:6d:51:34:08:78:f3:f5:d6:cb:6e:42:d6: c5:4a:43:8b:76:63:32:38:66:0c:2e:87:04:a5:f3:1d:c9:05: d7:da:be:fc:54:aa:b7:eb:df:9c:db:1b:b1:be:be:67:73:4b: 39:a1:5c:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CmwdGMhXxhEsjV1qKL+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTVjNmY4MTVjNzBlZjE5MTBkMzc0OTM5NjM0NDVhZjkx OGFiNTkwHhcNMjUxMjA2MTkwMTMyWhcNMjUxMjA3MTkwMTMyWjAzMTEwLwYDVQQD EyhkYmMzMDViMWIxYTJhYzk3NzUyMWEwNTlkNTU2NjEyMmUwOGE3NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZZMfr1mRROGwAlIU/h1mQvmFDVG t2OfitdQHw3vWitnrJUz8GOmrSal7fzjtEqWG7gTJ/LSiMbITC7Oc7lDqi4T32iA U2Em4FBLW2r9CxFQouVexTY0C6RKUyHU0bGnVhBYOe9vzyUGxhlw2Zd1ZlpRkx83 9QukVlNbA1bF3izl3vb21nIGzk7QuvZms+W0v8XURsmnouscbGAc6PxPUjDfbZ8I 2ODWtfExIVxKaJVrQTzTHFCHR/P7luMz8YPGIhxsKpuWEf3oISkT/3VjvJxLZmiJ xajUoEsPYsvYNC71A2pW8CAeB/VFfC74Gh8K63AMdRA6tlAtpJi7xiFkfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvDBbGxoqyXdSGgWdVWYSLginQ0MB8GA1UdIwQY MBaAFBSVxvgVxw7xkQ03STljRFr5GKtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYt MjUwMDQyMDM2NmZiLzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYtMjUwMDQyMDM2NmZi LzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJerEcYw ryXUJ7YxuvW/clc7W67LMF2/uXqxxMXvet7qUDu6ysFUUjjTxzZ7mMyN5oWOFqAw Rvs65vzwY1lZVA3QBDpQIL/IXOdcNND5vngPaWJgBnY/eOJf/EEXD412PP1ZHVcl DzFx53PoETLe5L/R6v4gpfIbzMTrC1UyICi5M6eO/Akrm7KM0bYgc2SM7bkGH68H n+SmfCB4LRPJ+dvOeIXVDGNWqlylwjhbzx39Oc3MuurV3lTSZcoeS64++1xBYH9+ 3u9CEaY7bVE0CHjz9dbLbkLWxUpDi3ZjMjhmDC6HBKXzHckF19q+/FSqt+vfnNsb sb6+Z3NLOaFcQQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:03:46 2025 by rpki-client