This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft File: 95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json) Hash identifier: 7Ni2USaP6Uek0gig2v6ntgCMv9J/sIzrjmp43xjMyD0= Subject key identifier: F2:62:6C:CE:0C:84:69:7B:1F:74:2D:0A:46:E6:48:0C:FF:67:84:3B Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5 Certificate issuer: /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5 Certificate serial: 019AF23FCA5D0F9F1951CD869BBECCCB2B1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: Pwe4lEwnfE7vFhillHWRPtkYgO4MfPFujgSxNtKDOXE=) 2: HZJZK1LDGniWHSTreLFu2CqFoKw.roa (hash: 40ZMLNytGhjN7rMLqzH8llTGFye5F6mDvh5SBtZYngo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ca:5d:0f:9f:19:51:cd:86:9b:be:cc:cb:2b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5 Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=f2626cce0c84697b1f742d0a46e6480cff67843b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:ea:ac:dd:b6:d8:d4:81:9f:b6:0a:92:56: de:83:c7:4b:16:fc:73:50:b9:18:9e:4b:07:2e:e6: b2:97:6e:63:c0:41:fa:32:c1:3c:56:f7:3b:d7:c8: 6b:44:7b:31:0c:d7:cb:4d:83:67:1a:5d:ea:20:07: aa:7d:de:1f:10:f8:af:2f:d0:c1:80:4c:db:05:19: 4d:8c:16:ab:65:57:36:62:cc:88:c6:f5:c8:46:b1: cd:b0:45:28:66:65:d4:13:ad:01:1d:86:a2:fa:3e: aa:ce:a9:03:48:3e:d7:1a:f8:d9:aa:c0:f1:91:66: 5d:55:9b:82:bc:b1:bb:54:64:01:0f:9d:fa:0e:47: 9c:e1:95:ee:e9:67:82:22:e9:65:b0:7d:37:9d:cf: 53:f8:d7:af:f9:0f:cb:03:dd:ee:5c:5f:eb:f4:6c: d8:c1:43:69:5d:28:36:93:e1:19:28:76:2a:fb:6c: d7:48:85:8f:e5:51:2f:a6:3f:37:96:0d:10:dc:ac: 36:20:25:8c:c1:c3:ef:fe:2b:e2:61:f4:1d:b1:ef: bd:93:ef:61:90:31:24:ad:97:4b:a2:be:09:5a:b5: 55:62:f9:9b:6e:7f:bf:d5:71:a3:25:33:c3:18:d0: f1:c9:fd:f4:5a:69:7f:81:cd:37:b3:4c:38:3f:5d: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:62:6C:CE:0C:84:69:7B:1F:74:2D:0A:46:E6:48:0C:FF:67:84:3B X509v3 Authority Key Identifier: keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:34:a5:c6:3f:29:e1:f2:0f:6e:03:36:b2:5d:83:29:5b:85: 3a:e3:1e:72:1d:52:53:3c:ff:1c:d0:d8:a4:9a:3f:60:15:dc: 99:d3:c4:1b:0e:07:34:15:9f:4f:21:43:e9:64:29:8a:ce:75: c7:6f:1d:cf:27:fb:9e:92:d0:fe:31:09:c4:90:68:c5:8b:7d: 8f:08:5c:a8:aa:e0:4b:0f:c3:3f:5a:84:83:a1:9a:fb:d5:41: c8:9b:58:1e:d7:15:16:a2:da:ae:ad:83:6b:9c:90:69:4f:4e: a6:ea:96:98:ce:ab:b4:4e:f3:99:ca:e4:f9:1d:3d:d3:37:f7: 95:fc:01:69:b8:ff:2a:41:55:c7:45:5f:e4:bb:9e:b6:1d:67: 67:31:da:18:0b:19:ca:8b:7e:a7:f9:de:b0:49:4f:0e:ed:9e: e1:f9:9d:cd:c4:86:f5:61:92:1a:bd:74:a4:43:7f:5e:8a:66: f4:d7:ae:10:f0:7f:f0:59:2b:78:3a:d1:05:ee:ce:63:d8:f6: ee:c5:c4:fe:3e:f6:28:00:a0:21:58:41:ca:41:e4:c2:63:b1: 1d:0d:b5:15:ea:77:55:ee:18:58:9c:6b:d0:f4:c4:f2:59:51: 95:39:d1:7d:86:10:42:41:80:64:1c:05:91:2c:b5:2d:54:2e: 49:fe:b7:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8pdD58ZUc2Gm77MyyseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3OTE3MTRlYjZhNGIyYWZlZjgwMmU5YzE3OWRjMmNmYzJk MWNjZTUwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EyhmMjYyNmNjZTBjODQ2OTdiMWY3NDJkMGE0NmU2NDgwY2ZmNjc4NDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysPqrN222NSBn7YKklbeg8dLFvxz ULkYnksHLuayl25jwEH6MsE8Vvc718hrRHsxDNfLTYNnGl3qIAeqfd4fEPivL9DB gEzbBRlNjBarZVc2YsyIxvXIRrHNsEUoZmXUE60BHYai+j6qzqkDSD7XGvjZqsDx kWZdVZuCvLG7VGQBD536Dkec4ZXu6WeCIullsH03nc9T+Nev+Q/LA93uXF/r9GzY wUNpXSg2k+EZKHYq+2zXSIWP5VEvpj83lg0Q3Kw2ICWMwcPv/iviYfQdse+9k+9h kDEkrZdLor4JWrVVYvmbbn+/1XGjJTPDGNDxyf30Wml/gc03s0w4P13wlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJibM4MhGl7H3QtCkbmSAz/Z4Q7MB8GA1UdIwQY MBaAFPeRcU62pLKv74AunBedws/C0czlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84NjJmYzAtNWNiZS00Y2E3LWE0NDUt M2FlZTQwODdiNTZmLzEvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84NjJmYzAtNWNiZS00Y2E3LWE0NDUtM2FlZTQwODdiNTZm LzEvOTVGeFRyYWtzcV92Z0M2Y0Y1M0N6OExSek9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTSlxj8p 4fIPbgM2sl2DKVuFOuMech1SUzz/HNDYpJo/YBXcmdPEGw4HNBWfTyFD6WQpis51 x28dzyf7npLQ/jEJxJBoxYt9jwhcqKrgSw/DP1qEg6Ga+9VByJtYHtcVFqLarq2D a5yQaU9OpuqWmM6rtE7zmcrk+R090zf3lfwBabj/KkFVx0Vf5Lueth1nZzHaGAsZ yot+p/nesElPDu2e4fmdzcSG9WGSGr10pEN/Xopm9NeuEPB/8FkreDrRBe7OY9j2 7sXE/j72KACgIVhBykHkwmOxHQ21Fep3Ve4YWJxr0PTE8llRlTnRfYYQQkGAZBwF kSy1LVQuSf63Dg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:14 2025 by rpki-client