This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json) Hash identifier: ntj/zb6PEEgKTLvuOXcXGekbnF1986gBZMSxnfZMA3A= Subject key identifier: DF:F4:25:D0:8F:EB:57:10:28:64:1D:7E:E0:BE:EE:CC:D6:A6:0D:81 Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Certificate serial: 019AF4D2AF5C67C88FDC856D34F4AD0BC69A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft Manifest number: 046A Signing time: Sat 06 Dec 2025 18:00:39 +0000 Manifest this update: Sat 06 Dec 2025 18:00:39 +0000 Manifest next update: Sun 07 Dec 2025 18:00:39 +0000 Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: r5b5/ceB8aGBnynbcWAJEdi/Dh5a5Xe12T4psOF3AzQ=) 2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:af:5c:67:c8:8f:dc:85:6d:34:f4:ad:0b:c6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Validity Not Before: Dec 6 18:00:39 2025 GMT Not After : Dec 7 18:00:39 2025 GMT Subject: CN=dff425d08feb571028641d7ee0beeeccd6a60d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:2f:9a:b3:53:77:4d:07:b7:8c:04:17:0b: 06:e7:85:ec:34:d4:6d:9e:45:20:26:08:4c:5d:bb: 8d:ee:18:8d:2a:ff:7c:8b:78:39:76:8d:b1:57:d4: 02:77:30:4f:85:30:a1:05:10:a3:2d:5c:58:e1:a9: d1:a8:94:bb:a2:78:3f:0d:a1:b9:f7:df:3c:8f:d6: d4:f9:bd:04:31:d9:1b:a8:25:0a:26:7a:27:b2:da: 26:fe:a5:56:31:27:bb:28:4b:ec:3b:d8:6f:41:48: 89:60:11:66:61:6b:3f:6c:1c:79:41:fe:14:8a:0f: 8d:91:32:26:7d:c0:5b:c4:89:6d:6a:75:19:d3:4b: 24:9d:9d:cd:88:37:42:54:6f:65:e7:21:02:0a:aa: 56:b9:5c:6d:cd:8b:96:4e:26:bb:c1:c9:27:f4:28: f1:44:8f:84:1c:e2:99:40:dc:b0:db:54:de:9e:70: 59:01:b7:05:b9:54:f5:52:8c:03:2c:07:80:ab:a4: 5d:72:9f:80:c3:e4:24:1f:da:3c:dc:19:b6:3e:bc: c2:15:72:aa:b4:e6:9b:5b:43:4a:68:a0:85:05:b9: e2:92:60:e2:47:72:ec:9d:91:a5:d4:18:85:4a:93: 54:41:a1:d6:08:34:ae:9b:58:dc:82:ba:c4:59:86: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F4:25:D0:8F:EB:57:10:28:64:1D:7E:E0:BE:EE:CC:D6:A6:0D:81 X509v3 Authority Key Identifier: keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:68:dd:d3:6e:08:2b:e8:f4:24:a9:00:6f:ef:4e:8f:d0:6b: 17:11:21:04:ca:22:a2:11:eb:e7:24:fd:42:2c:1f:93:b4:29: cc:33:06:06:b4:97:8f:81:5b:c0:1d:ac:b6:27:a3:9d:bd:bb: 1c:f1:e1:6a:15:f3:fb:23:27:82:99:5d:5e:4a:75:0b:0c:ca: 65:fb:10:c6:9d:c9:34:12:76:0c:2d:b7:bd:dd:fe:dd:fe:f9: 5b:be:fa:05:b5:d7:68:2e:ac:c1:47:af:21:2d:46:e6:48:37: f0:5e:e9:2d:13:36:af:e1:61:7a:01:97:71:67:e9:02:84:13: 39:4f:62:5a:5a:1c:a0:ed:29:f7:b8:24:46:1e:04:83:f1:1c: 86:60:25:11:65:6e:aa:76:3b:ca:39:15:45:0e:24:b1:fb:e6: bc:ee:94:88:b2:04:60:32:fd:79:bd:2e:6e:a0:c8:71:80:c4: ed:8a:cf:22:0a:01:94:55:e1:2d:d7:51:fb:d6:30:c5:c0:3a: f3:d9:ec:4d:a3:47:8e:b3:df:d3:28:89:b4:a8:94:76:8e:0a: 18:0b:80:65:6a:ba:89:a1:7c:41:f6:84:7e:53:25:45:1a:27: 50:a2:c7:f0:81:7d:90:f7:70:33:e3:01:49:9a:9c:53:0e:cd: 91:4e:95:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00q9cZ8iP3IVtNPStC8aaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTVjN2NjN2I1NDI0ZGE1YTIxMTE2ZmVmNzJjZTVjZDU2 NGMwZjEwHhcNMjUxMjA2MTgwMDM5WhcNMjUxMjA3MTgwMDM5WjAzMTEwLwYDVQQD EyhkZmY0MjVkMDhmZWI1NzEwMjg2NDFkN2VlMGJlZWVjY2Q2YTYwZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy54vmrNTd00Ht4wEFwsG54XsNNRt nkUgJghMXbuN7hiNKv98i3g5do2xV9QCdzBPhTChBRCjLVxY4anRqJS7ong/DaG5 9988j9bU+b0EMdkbqCUKJnonstom/qVWMSe7KEvsO9hvQUiJYBFmYWs/bBx5Qf4U ig+NkTImfcBbxIltanUZ00sknZ3NiDdCVG9l5yECCqpWuVxtzYuWTia7wckn9Cjx RI+EHOKZQNyw21TennBZAbcFuVT1UowDLAeAq6Rdcp+Aw+QkH9o83Bm2PrzCFXKq tOabW0NKaKCFBbnikmDiR3LsnZGl1BiFSpNUQaHWCDSum1jcgrrEWYZ8eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/0JdCP61cQKGQdfuC+7szWpg2BMB8GA1UdIwQY MBaAFBcVx8x7VCTaWiERb+9yzlzVZMDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYt YzUzNmJmNzM5ODY5LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYtYzUzNmJmNzM5ODY5 LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2jd024I K+j0JKkAb+9Oj9BrFxEhBMoiohHr5yT9Qiwfk7QpzDMGBrSXj4FbwB2stiejnb27 HPHhahXz+yMngpldXkp1CwzKZfsQxp3JNBJ2DC23vd3+3f75W776BbXXaC6swUev IS1G5kg38F7pLRM2r+FhegGXcWfpAoQTOU9iWlocoO0p97gkRh4Eg/EchmAlEWVu qnY7yjkVRQ4ksfvmvO6UiLIEYDL9eb0ubqDIcYDE7YrPIgoBlFXhLddR+9YwxcA6 89nsTaNHjrPf0yiJtKiUdo4KGAuAZWq6iaF8QfaEflMlRRonUKLH8IF9kPdwM+MB SZqcUw7NkU6Vpg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:45 2025 by rpki-client