This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json) Hash identifier: b1A/xuxRivsB/TYJTHeWyKYTtpmZRxruILqCElxPsrE= Subject key identifier: 58:AF:C4:65:9B:2C:C5:81:D4:BD:CE:80:3A:F7:E1:5D:C0:53:E6:B0 Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f Certificate serial: 019AF31BD2430C0C12075FC1F78C423CA276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft Manifest number: 101E Signing time: Sat 06 Dec 2025 10:01:18 +0000 Manifest this update: Sat 06 Dec 2025 10:01:18 +0000 Manifest next update: Sun 07 Dec 2025 10:01:18 +0000 Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: +r74Qnf/lITkBRn4UQshsUdmFqNwHDp1GpjX0MK4fQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d2:43:0c:0c:12:07:5f:c1:f7:8c:42:3c:a2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f Validity Not Before: Dec 6 10:01:18 2025 GMT Not After : Dec 7 10:01:18 2025 GMT Subject: CN=58afc4659b2cc581d4bdce803af7e15dc053e6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:75:f5:01:76:17:0c:84:41:47:ea:e0:7a: b5:bc:fd:61:ce:d8:84:fe:84:3d:15:82:c5:3b:8c: 5a:08:42:4f:e7:7b:dd:b8:56:07:56:e4:ad:e6:dc: 49:7f:26:61:a6:31:a2:1e:e7:d1:ab:ad:9d:ae:b1: bd:52:4d:c5:af:33:b6:31:4d:91:0e:03:7b:34:7a: cf:b4:c2:6e:1f:2e:db:5a:90:49:01:68:4d:c2:df: 8e:00:45:bf:16:8c:1f:2e:64:32:8e:7a:82:98:7a: f2:08:1f:96:bc:87:aa:62:22:6b:11:c6:58:5f:86: 09:6d:db:8a:0b:8d:1b:15:3b:78:82:f2:ac:5b:44: 9f:b5:47:3e:f7:32:02:71:22:8c:4d:8b:68:36:a3: 9c:c4:92:b5:2c:18:81:b4:5d:e0:8e:8f:8c:78:19: 3d:6c:2a:02:76:0a:0e:2e:3e:9d:21:9a:3f:ba:b9: c9:53:33:ca:a2:82:39:e1:d4:14:ff:6c:70:1f:37: 43:f7:4a:74:94:c1:d2:11:dd:dd:b2:0c:25:ae:27: 36:ea:0e:52:19:87:b2:f3:49:ed:52:7f:fe:69:f0: 71:c5:00:60:67:5c:13:5b:23:83:45:35:7d:0b:bf: 54:ef:1c:7e:42:0b:16:4f:d9:8d:79:76:8c:c8:8b: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AF:C4:65:9B:2C:C5:81:D4:BD:CE:80:3A:F7:E1:5D:C0:53:E6:B0 X509v3 Authority Key Identifier: keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6c:7b:30:23:5d:fa:2e:60:ef:1e:f9:4e:3f:4b:96:d7:d0: c8:df:21:9e:b9:42:bd:07:9a:18:ab:50:22:c0:69:82:a8:cf: 62:02:f3:c7:e3:10:a3:43:b3:7b:3c:d5:b0:4e:39:69:20:b5: 66:1e:58:0d:11:1b:10:90:d5:ee:81:65:24:c1:e0:24:84:a8: 36:c2:09:68:df:f0:c1:0e:a4:df:48:4f:73:48:59:c2:7d:08: ff:1c:e8:0a:9d:5c:2b:e9:61:a1:c5:5a:07:37:1c:99:c6:82: 89:98:eb:01:ba:4b:f4:28:79:25:23:26:2e:4e:7f:df:af:00: 09:7d:b6:57:0a:17:fe:4e:f5:68:80:13:ad:51:e4:c1:95:53: 61:ce:0e:cf:37:ea:3f:f3:c0:c0:04:fe:67:ae:78:b9:b5:61: 27:2c:95:8e:85:2c:05:11:56:cc:c9:3c:b9:c6:ca:f3:11:89: b3:c6:9d:cb:98:c7:23:36:53:a1:14:d0:d7:49:ec:5f:db:95: db:f2:2c:02:a7:31:4a:3f:2a:46:af:59:fa:68:c3:a2:06:54: 52:4f:5f:f6:0c:46:13:0e:79:3b:74:92:21:bb:a8:4b:5e:d4: 2c:a9:a7:68:fd:d7:6a:09:1f:47:a2:15:70:52:ff:26:28:3a: 1d:3b:fc:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9JDDAwSB1/B94xCPKJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMTRjZTgxMDNiNzg1ZjM1MDRiYzRiMzJmMWY0YzliNzBj ZTNmN2YwHhcNMjUxMjA2MTAwMTE4WhcNMjUxMjA3MTAwMTE4WjAzMTEwLwYDVQQD Eyg1OGFmYzQ2NTliMmNjNTgxZDRiZGNlODAzYWY3ZTE1ZGMwNTNlNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdl19QF2FwyEQUfq4Hq1vP1hztiE /oQ9FYLFO4xaCEJP53vduFYHVuSt5txJfyZhpjGiHufRq62drrG9Uk3FrzO2MU2R DgN7NHrPtMJuHy7bWpBJAWhNwt+OAEW/FowfLmQyjnqCmHryCB+WvIeqYiJrEcZY X4YJbduKC40bFTt4gvKsW0SftUc+9zICcSKMTYtoNqOcxJK1LBiBtF3gjo+MeBk9 bCoCdgoOLj6dIZo/urnJUzPKooI54dQU/2xwHzdD90p0lMHSEd3dsgwlric26g5S GYey80ntUn/+afBxxQBgZ1wTWyODRTV9C79U7xx+QgsWT9mNeXaMyIukdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFivxGWbLMWB1L3OgDr34V3AU+awMB8GA1UdIwQY MBaAFH8UzoEDt4XzUEvEsy8fTJtwzj9/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2It ZjYxNjBmYTFmYjAyLzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjlkYmUtZTA3NS00NDM4LWI1M2ItZjYxNjBmYTFmYjAy LzEvZnhUT2dRTzNoZk5RUzhTekx4OU1tM0RPUDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWx7MCNd +i5g7x75Tj9LltfQyN8hnrlCvQeaGKtQIsBpgqjPYgLzx+MQo0OzezzVsE45aSC1 Zh5YDREbEJDV7oFlJMHgJISoNsIJaN/wwQ6k30hPc0hZwn0I/xzoCp1cK+lhocVa BzccmcaCiZjrAbpL9Ch5JSMmLk5/368ACX22VwoX/k71aIATrVHkwZVTYc4Ozzfq P/PAwAT+Z654ubVhJyyVjoUsBRFWzMk8ucbK8xGJs8ady5jHIzZToRTQ10nsX9uV 2/IsAqcxSj8qRq9Z+mjDogZUUk9f9gxGEw55O3SSIbuoS17ULKmnaP3XagkfR6IV cFL/Jig6HTv8Eg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:06 2025 by rpki-client