This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json) Hash identifier: P2dAFniFAQ53p6reLwH5wqtoV7ppFRS2ulYEizgBzJA= Subject key identifier: 29:8D:D4:71:BA:29:C5:36:B5:B2:33:AE:BD:D0:66:4E:A5:82:7D:EC Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32 Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032 Certificate serial: 019AF389E2D8CAE48862AC23C39D70DC760D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft Manifest number: 050B Signing time: Sat 06 Dec 2025 12:01:31 +0000 Manifest this update: Sat 06 Dec 2025 12:01:31 +0000 Manifest next update: Sun 07 Dec 2025 12:01:31 +0000 Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: X4mlAVM3VN7qcYtCJOIFXZgtBd/yavP+Bdtn3SUASm4=) 2: pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa (hash: pNc3IO7oSLkfW6eqPtj4TJMlIbS8z2hqWPYZAIIHzEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e2:d8:ca:e4:88:62:ac:23:c3:9d:70:dc:76:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032 Validity Not Before: Dec 6 12:01:31 2025 GMT Not After : Dec 7 12:01:31 2025 GMT Subject: CN=298dd471ba29c536b5b233aebdd0664ea5827dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:15:02:f0:82:9e:fe:ed:0d:e7:88:8c:0e: 65:b6:c5:cc:a9:2f:1a:5a:cb:a9:13:79:16:2a:df: 11:d2:8f:b5:1b:c0:71:2a:e1:a5:0a:86:1d:08:72: 2a:09:5e:a8:5b:c2:4f:71:34:3e:02:47:8f:c3:e7: 3a:55:b3:a8:be:96:a6:1d:28:f0:f4:06:9a:5f:b1: 85:5d:0a:ca:a8:6b:91:f9:54:4b:a5:e8:0e:1d:e2: 24:b7:3c:31:84:c8:b9:f1:8a:e2:2c:74:cd:f8:74: fb:76:08:16:44:90:be:8f:88:e7:93:93:32:48:fe: 68:0d:fc:96:a5:3c:8f:0e:f3:f0:20:27:3e:b1:e9: 2f:24:e6:be:d4:fa:e3:a4:1e:e0:e3:03:30:6b:2b: ca:dc:45:01:fb:8e:85:f9:3d:d2:8f:40:dd:8a:7e: 41:8b:47:4c:90:41:68:21:70:92:37:04:a3:79:fd: ea:55:6b:85:be:65:9d:b7:1e:d5:aa:d1:0c:18:87: 8c:d2:e9:db:8f:52:b1:e0:f5:74:1d:71:fb:db:fa: cb:97:18:7c:7d:a9:67:c4:98:bc:c0:06:cb:a5:00: 78:4c:60:af:25:c6:59:57:64:4a:8e:a9:a6:99:a4: 4f:8e:85:ca:3e:92:19:3f:02:d5:5e:ca:f6:84:e9: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8D:D4:71:BA:29:C5:36:B5:B2:33:AE:BD:D0:66:4E:A5:82:7D:EC X509v3 Authority Key Identifier: keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:cc:cf:f4:93:fa:d6:6f:d8:ff:53:bb:bd:6e:26:b2:01:8b: de:ee:ab:4a:be:7b:0e:50:2a:60:6f:9b:f7:9c:d4:3b:17:4c: 92:ac:24:e9:e2:a5:54:c1:df:47:db:82:6f:e6:1d:62:bc:47: 5e:2d:5f:2b:a9:74:e3:57:20:e8:56:d6:97:1e:a7:7e:f0:81: 79:26:e3:18:8c:33:45:71:2b:be:5f:41:24:22:be:2b:29:c7: c2:3a:7b:ee:09:1f:19:73:82:b1:67:f8:0c:fc:db:e3:dc:74: fb:e6:9b:eb:12:33:4d:7f:13:25:f6:42:32:1d:fd:cc:89:b1: af:96:e1:28:fe:e8:df:47:b4:20:b6:ea:23:3a:d6:53:a5:18: 33:98:fb:e6:db:76:fd:ce:4c:cb:84:b1:14:9b:9b:3b:e5:96: 3a:77:91:38:0c:48:82:63:d5:f0:17:a8:9d:e4:e9:df:49:10: 52:51:37:2e:b8:b8:08:f1:11:da:1f:ba:6f:a2:a8:ae:b6:8f: eb:06:db:24:25:52:13:51:59:df:1f:f8:95:c9:ab:37:fc:a8: 70:d1:49:7e:51:10:a5:58:6a:24:7c:c4:15:62:bf:13:17:e3: 90:62:1c:c6:26:bb:b7:94:c3:c9:58:d5:61:87:38:33:64:5e: 98:cb:39:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzieLYyuSIYqwjw51w3HYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NzY4OTFjZjJiMWQ4ZWM1NmMwM2JjN2E5NmRlOTU4YTBl MDAwMzIwHhcNMjUxMjA2MTIwMTMxWhcNMjUxMjA3MTIwMTMxWjAzMTEwLwYDVQQD EygyOThkZDQ3MWJhMjljNTM2YjViMjMzYWViZGQwNjY0ZWE1ODI3ZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeQVAvCCnv7tDeeIjA5ltsXMqS8a WsupE3kWKt8R0o+1G8BxKuGlCoYdCHIqCV6oW8JPcTQ+AkePw+c6VbOovpamHSjw 9AaaX7GFXQrKqGuR+VRLpegOHeIktzwxhMi58YriLHTN+HT7dggWRJC+j4jnk5My SP5oDfyWpTyPDvPwICc+sekvJOa+1PrjpB7g4wMwayvK3EUB+46F+T3Sj0Ddin5B i0dMkEFoIXCSNwSjef3qVWuFvmWdtx7VqtEMGIeM0unbj1Kx4PV0HXH72/rLlxh8 falnxJi8wAbLpQB4TGCvJcZZV2RKjqmmmaRPjoXKPpIZPwLVXsr2hOlJNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmN1HG6KcU2tbIzrr3QZk6lgn3sMB8GA1UdIwQY MBaAFBV2iRzysdjsVsA7x6lt6Vig4AAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhhSkhQS3gyT3hXd0R2SHFXM3BXS0RnQURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmY1ZmEtZjY5Yi00MTdjLWJjMGIt NWQ1YmI3ZmU1NzFhLzEvRlhhSkhQS3gyT3hXd0R2SHFXM3BXS0RnQURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xYmY1ZmEtZjY5Yi00MTdjLWJjMGItNWQ1YmI3ZmU1NzFh LzEvRlhhSkhQS3gyT3hXd0R2SHFXM3BXS0RnQURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8zP9JP6 1m/Y/1O7vW4msgGL3u6rSr57DlAqYG+b95zUOxdMkqwk6eKlVMHfR9uCb+YdYrxH Xi1fK6l041cg6FbWlx6nfvCBeSbjGIwzRXErvl9BJCK+KynHwjp77gkfGXOCsWf4 DPzb49x0++ab6xIzTX8TJfZCMh39zImxr5bhKP7o30e0ILbqIzrWU6UYM5j75tt2 /c5My4SxFJubO+WWOneROAxIgmPV8BeoneTp30kQUlE3Lri4CPER2h+6b6KorraP 6wbbJCVSE1FZ3x/4lcmrN/yocNFJflEQpVhqJHzEFWK/ExfjkGIcxia7t5TDyVjV YYc4M2RemMs5gA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:29 2025 by rpki-client