This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json) Hash identifier: JISrlaWS+W8yvOWoSMrEzjXikHSvn8rnYQiXO5c1I0c= Subject key identifier: 44:3B:F0:FE:BF:C7:8D:92:BD:86:78:02:53:2B:21:4F:16:C3:3C:71 Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a Certificate serial: 019AF12EE2E08D85E9A56875DB8A711C0D85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=) 2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: GVaxFE3bdh1j9Km02iVp6HfV+oI79n8RSzQ9z6NgJb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e2:e0:8d:85:e9:a5:68:75:db:8a:71:1c:0d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=443bf0febfc78d92bd867802532b214f16c33c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ff:4e:06:12:9d:3f:a6:2d:a6:d0:19:ab:a0: a6:4c:87:2d:ae:43:3a:64:52:ea:28:ba:b1:33:f1: e7:30:b9:a6:27:a9:10:84:d6:90:a9:98:a6:54:ba: 72:0e:ec:1b:da:5f:00:f8:90:0d:72:1b:82:ae:ad: f2:eb:c6:93:40:2a:a3:17:44:21:8f:d6:ff:21:80: 57:a6:23:7e:e2:4c:d3:fc:51:88:c8:18:b5:de:99: d4:62:46:56:8e:9a:55:97:71:4b:4b:1a:b3:af:7c: ea:68:a0:fc:ec:bf:33:47:e0:42:13:79:55:cb:66: 55:7e:a4:ca:5d:78:e8:d2:9b:c2:bd:43:ca:8b:8c: 41:56:b2:df:75:a4:eb:33:6a:00:05:e8:7b:67:e7: 00:2c:19:bd:bd:6d:3a:b5:af:f6:56:58:4a:bc:30: 0d:3d:5b:35:80:e0:91:58:a6:52:48:b5:80:8b:8a: 20:07:97:8c:ea:fc:87:60:c6:c6:fe:11:91:d7:40: 6f:10:1d:d8:16:4b:39:7e:5e:bf:36:5d:2a:5e:ec: be:c0:e5:3e:1a:d6:97:ea:5b:61:2f:80:a4:42:9b: c3:5e:53:a2:e8:07:cc:44:1a:0f:a0:c0:cd:d1:ca: c4:29:ea:47:b7:50:7a:26:23:e2:b9:f8:55:a9:f5: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3B:F0:FE:BF:C7:8D:92:BD:86:78:02:53:2B:21:4F:16:C3:3C:71 X509v3 Authority Key Identifier: keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c5:d0:89:b1:fb:b6:2d:cb:cc:e0:ba:e7:f7:a3:6f:9f:55: 17:c4:16:1a:23:53:cf:38:3c:dc:f9:b9:97:90:65:bd:ef:3b: 39:3b:7e:34:02:d0:3c:b6:b6:a4:6c:a3:af:18:38:3c:4c:d4: 1e:1e:7c:ec:7d:a4:e5:7c:a4:2c:89:e1:52:52:cc:95:31:fa: 76:ca:35:84:13:4e:79:6e:3e:78:dc:56:40:9c:a7:6b:e5:2c: d1:99:fa:20:88:75:ea:54:1e:ba:1c:5e:bd:a4:18:f5:b6:b2: 17:fe:f1:75:0b:5c:e2:1b:1c:33:68:b8:51:fb:7f:08:f5:c7: 72:a5:f0:6d:aa:ad:22:97:83:3c:0c:ed:dc:6e:25:0c:a5:dc: 3c:31:ff:4e:dc:eb:c6:cf:37:6e:b0:5d:a3:e9:77:54:a4:cf: c9:36:2d:34:23:9e:85:81:83:db:88:bf:93:23:85:d6:13:1c: ab:f7:6b:c0:28:83:95:f7:50:7f:f5:4c:23:1b:76:26:74:b9: 55:3f:86:59:18:35:f9:4b:c7:e6:1c:20:a9:f8:1f:d2:c2:15: 1e:bd:cb:de:6a:7f:4d:3b:12:99:e0:f3:d8:14:c7:2c:31:76: 12:73:b3:23:cb:b6:d5:a4:1e:8b:68:88:2f:a6:2c:ff:bc:3b: 9b:4d:9f:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuLgjYXppWh124pxHA2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3 OTg5MmEwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD Eyg0NDNiZjBmZWJmYzc4ZDkyYmQ4Njc4MDI1MzJiMjE0ZjE2YzMzYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v9OBhKdP6YtptAZq6CmTIctrkM6 ZFLqKLqxM/HnMLmmJ6kQhNaQqZimVLpyDuwb2l8A+JANchuCrq3y68aTQCqjF0Qh j9b/IYBXpiN+4kzT/FGIyBi13pnUYkZWjppVl3FLSxqzr3zqaKD87L8zR+BCE3lV y2ZVfqTKXXjo0pvCvUPKi4xBVrLfdaTrM2oABeh7Z+cALBm9vW06ta/2VlhKvDAN PVs1gOCRWKZSSLWAi4ogB5eM6vyHYMbG/hGR10BvEB3YFks5fl6/Nl0qXuy+wOU+ GtaX6lthL4CkQpvDXlOi6AfMRBoPoMDN0crEKepHt1B6JiPiufhVqfUmcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ78P6/x42SvYZ4AlMrIU8WwzxxMB8GA1UdIwQY MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8XQibH7 ti3LzOC65/ejb59VF8QWGiNTzzg83Pm5l5Blve87OTt+NALQPLa2pGyjrxg4PEzU Hh587H2k5XykLInhUlLMlTH6dso1hBNOeW4+eNxWQJyna+Us0Zn6IIh16lQeuhxe vaQY9bayF/7xdQtc4hscM2i4Uft/CPXHcqXwbaqtIpeDPAzt3G4lDKXcPDH/Ttzr xs83brBdo+l3VKTPyTYtNCOehYGD24i/kyOF1hMcq/drwCiDlfdQf/VMIxt2JnS5 VT+GWRg1+UvH5hwgqfgf0sIVHr3L3mp/TTsSmeDz2BTHLDF2EnOzI8u21aQei2iI L6Ys/7w7m02faA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:09 2025 by rpki-client