This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft File: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json) Hash identifier: BwVJqD+YZ5ele31EUaiUtfpgsp6ExPwPmTF4y/qhX2w= Subject key identifier: B3:D5:A5:80:3C:1D:EA:E0:41:A4:FE:5E:4D:A9:CE:F5:D3:16:EB:C8 Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B Certificate issuer: /CN=171bfdd42fa9484f56e189ba683d5188c524083b Certificate serial: 019AF208C68D35F3375AC458464018D621CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft Manifest number: 01C8 Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: ECqPFCsuBuGYgWtF2oRvcnnwndyYOf474R5k8jUmEqA=) 2: TRbKL4kGxrCFAvUXltN0ocBpT58.roa (hash: oZP4etk1n3bpFlXee7D7+3mgIQiNQb5oae2tqJgBRbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c6:8d:35:f3:37:5a:c4:58:46:40:18:d6:21:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=b3d5a5803c1deae041a4fe5e4da9cef5d316ebc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:22:70:dd:ae:1f:a5:17:90:17:b6:47:79: ca:f8:b8:e2:0d:a6:ee:07:40:16:42:33:70:8d:43: 41:b7:cf:5d:74:37:b4:12:21:f9:e3:ae:e6:74:b7: e8:23:13:f3:5b:d1:77:bd:f8:f5:f6:29:47:ec:11: b0:3c:9c:06:58:9a:07:d8:4e:7e:5e:e7:a7:f3:0c: 58:d1:ee:87:55:f4:8f:63:4c:8e:45:cf:5e:c1:60: 90:fd:1d:0b:99:61:3b:85:28:7d:72:bc:95:fb:36: 94:0c:ea:4c:48:1e:ab:a9:03:12:00:b4:80:da:8a: 5f:2a:98:57:59:29:c8:26:cd:2e:d7:76:35:66:71: 4d:9e:20:fc:22:9d:02:0a:3e:aa:23:dd:9a:e1:4a: ac:dc:96:68:4a:fa:64:35:ec:55:db:ac:c8:6a:da: 19:30:a3:33:e6:f9:fd:62:e9:8d:20:ce:b4:6c:e2: 3b:b3:19:08:47:0e:09:d8:84:a7:1c:d7:60:ea:53: 43:c7:5d:ad:b2:38:60:eb:bb:57:b4:36:ca:af:e9: c1:40:81:20:01:a1:f9:dd:8a:9b:eb:4c:8c:2c:be: c4:b5:9f:f5:e6:55:42:46:74:35:98:a1:65:e1:7b: 12:93:5d:40:00:98:af:5d:46:1f:4c:56:c8:0c:f9: 25:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D5:A5:80:3C:1D:EA:E0:41:A4:FE:5E:4D:A9:CE:F5:D3:16:EB:C8 X509v3 Authority Key Identifier: keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d8:d4:89:11:34:ca:85:02:a2:e0:e1:35:22:cc:5d:42:2f: 9e:b4:43:b5:02:d2:60:6c:14:4d:22:2a:64:44:b2:a9:6a:1d: d8:90:44:7a:f7:0b:a4:42:30:81:1a:03:ba:1c:a3:72:b8:d2: 2a:97:aa:bd:13:b9:06:4a:b9:3a:e4:7e:1c:15:44:5e:0e:f0: a9:4f:c3:ac:e5:05:43:ea:a1:31:6c:07:9b:71:21:bd:c0:0a: 8d:c4:67:e2:eb:ba:ad:fe:e3:e0:e4:50:3a:83:9d:02:24:b9: ac:57:f9:b2:19:69:c6:9e:0f:bd:06:02:3d:97:ac:e9:7e:c5: 2b:b2:1a:67:a8:45:ef:c5:5b:91:91:40:63:4a:4f:ac:bc:47: 39:d9:c1:08:47:8d:de:0b:bf:ee:30:99:1c:d3:99:d3:c9:6b: 57:3d:a4:f6:32:98:bb:3f:92:18:23:0c:28:87:c6:a5:8e:5d: 2b:ff:d1:26:82:eb:19:9f:56:45:8a:bc:a4:0f:b4:ad:63:a5: 12:e0:e3:97:3f:3c:c7:07:94:6b:f6:3b:30:0a:e9:c7:e0:79: fa:69:80:87:c3:e1:dd:e0:b4:d3:99:71:39:96:fd:ee:e4:9d: 4e:a4:b1:5c:aa:bc:95:52:d7:f8:fe:18:d9:ec:04:4f:25:3f: 6c:af:ca:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMaNNfM3WsRYRkAY1iHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MWJmZGQ0MmZhOTQ4NGY1NmUxODliYTY4M2Q1MTg4YzUy NDA4M2IwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EyhiM2Q1YTU4MDNjMWRlYWUwNDFhNGZlNWU0ZGE5Y2VmNWQzMTZlYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHgicN2uH6UXkBe2R3nK+LjiDabu B0AWQjNwjUNBt89ddDe0EiH5467mdLfoIxPzW9F3vfj19ilH7BGwPJwGWJoH2E5+ Xuen8wxY0e6HVfSPY0yORc9ewWCQ/R0LmWE7hSh9cryV+zaUDOpMSB6rqQMSALSA 2opfKphXWSnIJs0u13Y1ZnFNniD8Ip0CCj6qI92a4Uqs3JZoSvpkNexV26zIatoZ MKMz5vn9YumNIM60bOI7sxkIRw4J2ISnHNdg6lNDx12tsjhg67tXtDbKr+nBQIEg AaH53Yqb60yMLL7EtZ/15lVCRnQ1mKFl4XsSk11AAJivXUYfTFbIDPkl5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPVpYA8HergQaT+Xk2pzvXTFuvIMB8GA1UdIwQY MBaAFBcb/dQvqUhPVuGJumg9UYjFJAg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2Yt YjRkOTY0Nzc2Yzg1LzEvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mZTRlZDMtMDM2Yi00ZjJhLWE5Y2YtYjRkOTY0Nzc2Yzg1 LzEvRnh2OTFDLXBTRTlXNFltNmFEMVJpTVVrQ0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtjUiRE0 yoUCouDhNSLMXUIvnrRDtQLSYGwUTSIqZESyqWod2JBEevcLpEIwgRoDuhyjcrjS KpeqvRO5Bkq5OuR+HBVEXg7wqU/DrOUFQ+qhMWwHm3EhvcAKjcRn4uu6rf7j4ORQ OoOdAiS5rFf5shlpxp4PvQYCPZes6X7FK7IaZ6hF78VbkZFAY0pPrLxHOdnBCEeN 3gu/7jCZHNOZ08lrVz2k9jKYuz+SGCMMKIfGpY5dK//RJoLrGZ9WRYq8pA+0rWOl EuDjlz88xweUa/Y7MArpx+B5+mmAh8Ph3eC005lxOZb97uSdTqSxXKq8lVLX+P4Y 2ewETyU/bK/KPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:12 2025 by rpki-client