This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json) Hash identifier: /qAtr2Fv9PvhCLRVapzOamEP6U8Qw1zgEokUeEbCtEE= Subject key identifier: AA:D0:D0:98:CC:DF:8C:79:AF:E7:62:5C:80:32:A5:79:6C:09:DC:D8 Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b Certificate serial: 019AF050FEB73A9A55E2637EF5BBAF8374D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft Manifest number: 1671 Signing time: Fri 05 Dec 2025 21:00:31 +0000 Manifest this update: Fri 05 Dec 2025 21:00:31 +0000 Manifest next update: Sat 06 Dec 2025 21:00:31 +0000 Files and hashes: 1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: 3Y2hPfCOJuZ2rx5q/RUS+sTx4CKWmAipcsd1APrBZ/I=) 2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:50:fe:b7:3a:9a:55:e2:63:7e:f5:bb:af:83:74:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b Validity Not Before: Dec 5 21:00:31 2025 GMT Not After : Dec 6 21:00:31 2025 GMT Subject: CN=aad0d098ccdf8c79afe7625c8032a5796c09dcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:ca:2d:df:7c:5b:6e:01:43:d7:28:a4:60: 02:6e:f3:7a:be:71:16:02:d7:f4:d8:62:84:c5:25: 49:c1:b2:ac:17:18:33:d0:83:0e:09:b0:0a:28:93: e5:a3:79:f1:4d:ab:3e:d2:c9:d7:c3:31:fb:64:58: d5:17:23:2a:aa:ad:e0:b3:43:a9:23:ef:c8:d7:bb: 09:41:a9:c0:9c:aa:9d:2d:7d:5e:4b:dc:30:63:0b: 12:90:3b:02:6e:60:63:e0:00:c1:77:4c:9d:c8:36: f7:d4:b5:d7:e9:89:44:c7:9b:02:86:d2:44:d2:ab: d2:df:4b:6d:10:75:8b:72:b8:cd:c0:84:3f:cb:be: 4d:05:b4:e5:a3:91:e9:b5:23:8e:a3:96:2f:05:a3: 25:6c:c5:a5:7b:60:4f:31:99:b5:4d:ec:63:fc:a6: a3:71:00:24:14:f5:87:ea:e3:2c:12:31:1c:6c:a8: 62:7f:5f:b1:89:26:b7:ca:b8:e1:19:be:75:7d:3c: 38:32:86:eb:16:ff:01:47:4d:27:57:64:17:13:71: bd:60:07:93:75:92:f4:34:3a:75:9b:ac:b0:ce:fa: 9f:80:8e:0b:93:1f:98:5b:f9:38:58:2d:30:80:a6: 1e:c7:f5:4a:d1:01:7d:d3:db:0d:29:a3:28:07:dd: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D0:D0:98:CC:DF:8C:79:AF:E7:62:5C:80:32:A5:79:6C:09:DC:D8 X509v3 Authority Key Identifier: keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:57:b9:e2:41:0e:91:a3:84:ca:6a:36:1c:18:23:67:82:b0: 05:f4:1e:c1:db:02:80:8d:20:58:d2:d7:cb:a7:06:28:f8:1b: 8f:9f:6b:c1:84:50:6f:3c:48:1f:7f:62:db:a0:5f:d6:29:ca: a8:16:63:d4:08:d5:7e:d7:4d:34:3d:67:ca:37:f3:c4:36:1a: 93:4a:69:15:0b:6c:8b:6b:84:a8:da:a9:7b:ee:fd:26:e8:45: 16:6c:ea:66:b1:56:86:3d:86:00:4e:39:2c:9d:6a:f8:a5:0a: af:b6:cb:60:44:68:91:fe:2d:39:84:ec:25:74:91:30:83:45: 2a:cf:d8:84:ce:c2:5c:29:11:8e:f5:12:f4:c0:62:f3:4d:3e: 76:06:dd:17:96:5d:c8:58:12:5c:23:10:b9:40:e4:4c:ab:7c: 2f:94:1d:dd:9a:1a:f2:06:47:ba:d1:48:f6:f8:d1:d8:be:26: 5a:98:f5:b6:5c:4d:8a:59:13:d5:97:5c:69:26:35:f0:96:88: ef:01:54:19:8c:cc:88:6e:c2:f0:f9:14:65:05:b0:c9:ed:b0: 6c:29:f1:5a:79:23:76:82:65:5b:fd:97:88:b0:0f:d5:6a:0b: f2:3f:b4:e2:cc:be:77:e3:6b:15:48:93:b2:40:d3:b5:81:08: 74:5c:17:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUP63OppV4mN+9buvg3TXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NzFmMTU3YzNhNWJkNWNmZjVkMWE0N2Q0MTk2NDhhMjdl MzVhOWIwHhcNMjUxMjA1MjEwMDMxWhcNMjUxMjA2MjEwMDMxWjAzMTEwLwYDVQQD EyhhYWQwZDA5OGNjZGY4Yzc5YWZlNzYyNWM4MDMyYTU3OTZjMDlkY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnknKLd98W24BQ9copGACbvN6vnEW Atf02GKExSVJwbKsFxgz0IMOCbAKKJPlo3nxTas+0snXwzH7ZFjVFyMqqq3gs0Op I+/I17sJQanAnKqdLX1eS9wwYwsSkDsCbmBj4ADBd0ydyDb31LXX6YlEx5sChtJE 0qvS30ttEHWLcrjNwIQ/y75NBbTlo5HptSOOo5YvBaMlbMWle2BPMZm1Texj/Kaj cQAkFPWH6uMsEjEcbKhif1+xiSa3yrjhGb51fTw4MobrFv8BR00nV2QXE3G9YAeT dZL0NDp1m6ywzvqfgI4Lkx+YW/k4WC0wgKYex/VK0QF909sNKaMoB92E/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrQ0JjM34x5r+diXIAypXlsCdzYMB8GA1UdIwQY MBaAFBVx8VfDpb1c/10aR9QZZIon41qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80NjI0ZDItNDg0Yi00YmIyLWFhZDIt MDJkZGNkNmJkYTkyLzEvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80NjI0ZDItNDg0Yi00YmIyLWFhZDItMDJkZGNkNmJkYTky LzEvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVe54kEO kaOEymo2HBgjZ4KwBfQewdsCgI0gWNLXy6cGKPgbj59rwYRQbzxIH39i26Bf1inK qBZj1AjVftdNND1nyjfzxDYak0ppFQtsi2uEqNqpe+79JuhFFmzqZrFWhj2GAE45 LJ1q+KUKr7bLYERokf4tOYTsJXSRMINFKs/YhM7CXCkRjvUS9MBi800+dgbdF5Zd yFgSXCMQuUDkTKt8L5Qd3Zoa8gZHutFI9vjR2L4mWpj1tlxNilkT1ZdcaSY18JaI 7wFUGYzMiG7C8PkUZQWwye2wbCnxWnkjdoJlW/2XiLAP1WoL8j+04sy+d+NrFUiT skDTtYEIdFwXaA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:01 2025 by rpki-client