This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft File: FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json) Hash identifier: xobz93ivo0gQ7/XwPUyK6je0Gk4LvC0cLW1+XN5+F3Y= Subject key identifier: 64:36:78:7C:6C:D7:AE:28:43:E3:B2:49:60:52:85:31:B9:2E:4C:F5 Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68 Certificate issuer: /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68 Certificate serial: 019AF19B5235D83D83C8323EA9AAA31A81FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: 2EWc2iDTYYYIRKN+Sn0eFQ6oZYgAgf0KMCO3JrKQ1e4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:52:35:d8:3d:83:c8:32:3e:a9:aa:a3:1a:81:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68 Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=6436787c6cd7ae2843e3b24960528531b92e4cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:58:58:45:eb:69:10:d4:be:42:35:5b:6d:4f: 3a:2c:36:83:5b:85:44:fa:60:21:ca:06:a8:2b:da: 6f:4b:35:34:89:33:c0:f4:38:07:19:9e:ab:90:42: 9e:29:73:7a:2d:9e:51:e5:ce:6c:3f:07:cd:10:fc: c0:95:ec:e7:f3:87:c6:12:1c:ef:a2:8e:08:5a:11: 36:77:5a:cc:63:94:49:08:2f:23:2d:9a:79:9d:8e: 0a:34:aa:2b:61:92:c7:56:15:2c:0e:c3:43:aa:9c: 01:0b:d4:6d:da:1c:fb:48:a9:a8:1c:a5:1b:da:eb: e9:a2:28:6b:8d:6a:2e:6d:1c:6a:84:14:9d:7e:f6: 81:ab:33:7f:e6:89:f6:8f:fa:4d:0f:94:99:d8:36: f6:bf:40:6c:53:24:fc:a9:05:21:a8:f0:f9:91:9e: d2:5b:7a:cd:6f:4a:98:6c:4f:e3:e2:9f:54:3f:6d: 1f:fb:56:a1:30:cc:b5:c1:53:56:78:8a:fb:91:d7: 21:7a:74:9b:60:89:f2:13:ec:94:33:80:b8:91:c2: f8:c6:98:72:26:39:63:f7:24:35:1e:7c:61:d6:1a: bc:7d:bd:8e:0f:0d:56:3b:7a:b3:4a:5f:1b:8c:10: 79:2c:38:01:75:93:df:6e:18:ad:d0:d0:e8:f2:8f: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:36:78:7C:6C:D7:AE:28:43:E3:B2:49:60:52:85:31:B9:2E:4C:F5 X509v3 Authority Key Identifier: keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:23:05:54:30:b1:8e:0d:f9:f9:5c:71:43:3e:3b:f5:fc:d6: 82:09:b1:0c:52:db:b5:82:87:65:48:a7:54:e4:b6:30:ba:86: 06:ee:3e:2f:6d:53:8d:b4:d9:03:ab:94:29:cf:66:a3:11:11: 05:f1:05:a1:bf:e9:9b:e8:c2:ea:6b:b6:f5:dd:cc:a6:88:92: fa:70:d2:3f:21:43:7e:9f:17:e2:03:cb:ab:5e:48:2b:3a:b0: 7c:5b:19:17:74:47:93:cc:a7:91:4a:40:08:4d:2a:b3:28:95: 7c:69:8c:72:94:ea:2c:fd:d3:7b:08:b8:bb:6c:0e:69:f2:f2: 61:e0:e8:2b:4e:37:df:91:f5:25:c6:1c:1f:0a:b5:1e:45:c2: 65:e1:56:d2:35:b0:1f:c4:fd:7e:f3:f0:b8:1f:60:44:5f:fd: 0c:a4:cd:ef:bc:9c:e2:de:a4:03:d2:36:95:28:3a:83:18:fe: ed:b1:80:24:92:04:22:e3:6c:c4:be:e3:09:c2:af:94:32:dd: 15:d5:16:bf:d0:0d:65:11:a1:3f:f4:e3:f2:d7:4c:22:8a:6f: 8e:f1:5a:13:38:8a:74:f0:ed:43:19:57:16:01:c5:e9:4d:d2: 95:b1:7e:cb:ac:26:68:26:ca:93:62:e1:5b:cb:a3:84:7d:87: 9d:6a:05:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1I12D2DyDI+qaqjGoH8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTVlMmZlZjRkMzEyNDVkYzY3MDE4YmVmYzMzNzRkYzBm MWVjNjgwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD Eyg2NDM2Nzg3YzZjZDdhZTI4NDNlM2IyNDk2MDUyODUzMWI5MmU0Y2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VhYRetpENS+QjVbbU86LDaDW4VE +mAhygaoK9pvSzU0iTPA9DgHGZ6rkEKeKXN6LZ5R5c5sPwfNEPzAlezn84fGEhzv oo4IWhE2d1rMY5RJCC8jLZp5nY4KNKorYZLHVhUsDsNDqpwBC9Rt2hz7SKmoHKUb 2uvpoihrjWoubRxqhBSdfvaBqzN/5on2j/pND5SZ2Db2v0BsUyT8qQUhqPD5kZ7S W3rNb0qYbE/j4p9UP20f+1ahMMy1wVNWeIr7kdchenSbYInyE+yUM4C4kcL4xphy Jjlj9yQ1Hnxh1hq8fb2ODw1WO3qzSl8bjBB5LDgBdZPfbhit0NDo8o8PLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQ2eHxs164oQ+OySWBShTG5Lkz1MB8GA1UdIwQY MBaAFBUV4v700xJF3GcBi+/DN03A8exoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iMGM5MzYtOTgzZC00MzkwLTg5NmEt N2QxM2RkMjgzZTgwLzEvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iMGM5MzYtOTgzZC00MzkwLTg5NmEtN2QxM2RkMjgzZTgw LzEvRlJYaV92VFRFa1hjWndHTDc4TTNUY0R4N0dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiMFVDCx jg35+VxxQz479fzWggmxDFLbtYKHZUinVOS2MLqGBu4+L21TjbTZA6uUKc9moxER BfEFob/pm+jC6mu29d3MpoiS+nDSPyFDfp8X4gPLq15IKzqwfFsZF3RHk8ynkUpA CE0qsyiVfGmMcpTqLP3Tewi4u2wOafLyYeDoK04335H1JcYcHwq1HkXCZeFW0jWw H8T9fvPwuB9gRF/9DKTN77yc4t6kA9I2lSg6gxj+7bGAJJIEIuNsxL7jCcKvlDLd FdUWv9ANZRGhP/Tj8tdMIopvjvFaEziKdPDtQxlXFgHF6U3SlbF+y6wmaCbKk2Lh W8ujhH2HnWoFUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:34 2025 by rpki-client