This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json) Hash identifier: DgxTapMmaF8SvndmDlRIL1SVnlBWu4bgNz/I4f3TK3I= Subject key identifier: D8:6B:6B:05:7E:5D:70:91:92:39:2D:89:D4:73:18:BE:5E:38:59:84 Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15 Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315 Certificate serial: 019AF276779DAF0D538DED1A985208F8867E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft Manifest number: 11D1 Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: 8yPwxEWYmCzgS9n/XIXe6iWEA+4cXF9xBiTachv5MuI=) 2: iSrIgRlu5YD7Koa8bEOEIApsG1I.roa (hash: 1rQNsMYOVuSbFnE+oDLQ6neckAWKt+MSYxXbU0fBqpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:77:9d:af:0d:53:8d:ed:1a:98:52:08:f8:86:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f188adab5b552081ecac821c9b090394873b315 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=d86b6b057e5d709192392d89d47318be5e385984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:6a:7a:5b:16:76:14:84:b5:72:a0:fb:25: c4:02:a4:0e:12:f5:c8:5f:b3:8b:08:e4:fb:bc:02: e8:e7:2e:8a:4a:2f:a3:81:7b:1d:fb:52:24:dc:9b: c0:f1:65:f0:3f:66:3f:47:58:3e:35:45:37:c8:57: f3:6e:cd:87:76:fe:0e:f1:2e:c8:67:66:e7:f9:49: ed:fa:a4:bb:eb:6d:53:de:b1:fe:6a:41:96:e9:a9: 53:b5:4f:8d:27:62:48:e6:7e:20:c7:31:ad:b3:b6: 74:49:17:fc:26:88:1e:1c:21:c9:e0:a9:c6:7f:dc: 8c:4d:a0:40:f9:a7:68:51:83:78:09:b5:5f:8a:2d: 0b:6a:5b:9c:5a:23:9c:3f:f8:21:86:e0:56:a3:b4: 70:c1:f4:57:75:c0:83:ad:96:26:83:f9:3a:c6:fb: 59:e5:38:88:e0:c9:a5:51:78:09:36:d8:bf:b7:bb: b0:02:cc:c2:8d:01:78:4e:16:20:2b:e9:b1:5b:e9: d4:4d:0a:02:e8:74:34:89:fd:80:e1:1c:28:b8:24: 51:e9:90:ef:5b:c0:e0:94:4a:72:75:af:5a:51:9c: 86:ab:38:90:89:69:06:bd:15:f5:b5:59:a2:14:c2: 78:47:1c:0e:19:3f:45:06:e1:04:2c:17:21:60:bb: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:6B:05:7E:5D:70:91:92:39:2D:89:D4:73:18:BE:5E:38:59:84 X509v3 Authority Key Identifier: keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e2:d7:61:4d:bd:69:5b:e2:d0:45:f4:2b:d4:15:a0:e9:17: 0f:56:7d:a2:ac:e6:76:f9:48:c8:c4:39:fe:43:cd:4c:2e:e4: 8d:54:0e:38:ac:ac:b6:69:ff:c1:df:ac:f1:00:ff:5c:42:55: 7c:c4:66:42:62:5a:8c:4b:45:24:d9:e4:d5:54:e4:ad:76:0e: 6a:0b:58:8d:a9:f1:62:ba:7c:43:43:2a:94:8d:7a:67:dd:f2: a7:98:c1:f6:b8:d7:68:6c:0f:85:8b:82:3d:86:de:5d:73:18: db:0f:5b:7d:41:81:5b:c3:2c:ef:0e:58:85:82:e2:aa:fb:ea: d2:77:98:64:b7:2a:13:5d:64:5c:09:c9:61:ee:8c:58:92:5c: 42:49:19:71:82:3b:0a:6e:bb:da:29:5c:ab:a7:58:d7:22:4b: 8f:64:3c:5c:43:17:15:72:55:fb:3d:74:e5:3f:f0:66:9d:83: e1:47:9f:5c:6a:f7:67:e1:ec:7e:f8:40:92:56:46:94:31:fd: 0c:9f:6a:4b:b6:ee:d9:36:8d:0c:f8:c0:b0:95:f3:7e:c7:56: 3e:58:6a:d1:f9:38:ef:98:ab:4b:97:d3:bc:0f:a8:ec:03:3e: 88:c5:ec:f4:ec:98:69:f2:e1:3a:70:8c:1f:3e:62:3b:ea:ad: 8c:f9:bc:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnedrw1Tje0amFII+IZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTg4YWRhYjViNTUyMDgxZWNhYzgyMWM5YjA5MDM5NDg3 M2IzMTUwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD EyhkODZiNmIwNTdlNWQ3MDkxOTIzOTJkODlkNDczMThiZTVlMzg1OTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ1qelsWdhSEtXKg+yXEAqQOEvXI X7OLCOT7vALo5y6KSi+jgXsd+1Ik3JvA8WXwP2Y/R1g+NUU3yFfzbs2Hdv4O8S7I Z2bn+Unt+qS7621T3rH+akGW6alTtU+NJ2JI5n4gxzGts7Z0SRf8JogeHCHJ4KnG f9yMTaBA+adoUYN4CbVfii0LalucWiOcP/ghhuBWo7RwwfRXdcCDrZYmg/k6xvtZ 5TiI4MmlUXgJNti/t7uwAszCjQF4ThYgK+mxW+nUTQoC6HQ0if2A4RwouCRR6ZDv W8DglEpyda9aUZyGqziQiWkGvRX1tVmiFMJ4RxwOGT9FBuEELBchYLuwqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhrawV+XXCRkjktidRzGL5eOFmEMB8GA1UdIwQY MBaAFH8Yitq1tVIIHsrIIcmwkDlIc7MVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhpSzJyVzFVZ2dleXNnaHliQ1FPVWh6c3hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hNjU1MjItZjdjNS00ODdiLWI3Yjgt MmU0NjE0MTQxYWE0LzEvZnhpSzJyVzFVZ2dleXNnaHliQ1FPVWh6c3hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9hNjU1MjItZjdjNS00ODdiLWI3YjgtMmU0NjE0MTQxYWE0 LzEvZnhpSzJyVzFVZ2dleXNnaHliQ1FPVWh6c3hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeLXYU29 aVvi0EX0K9QVoOkXD1Z9oqzmdvlIyMQ5/kPNTC7kjVQOOKystmn/wd+s8QD/XEJV fMRmQmJajEtFJNnk1VTkrXYOagtYjanxYrp8Q0MqlI16Z93yp5jB9rjXaGwPhYuC PYbeXXMY2w9bfUGBW8Ms7w5YhYLiqvvq0neYZLcqE11kXAnJYe6MWJJcQkkZcYI7 Cm672ilcq6dY1yJLj2Q8XEMXFXJV+z105T/wZp2D4UefXGr3Z+HsfvhAklZGlDH9 DJ9qS7bu2TaNDPjAsJXzfsdWPlhq0fk475irS5fTvA+o7AM+iMXs9OyYafLhOnCM Hz5iO+qtjPm8IQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:27 2025 by rpki-client