This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json) Hash identifier: 6EXlV1fntMFOfmoMvoOqlVBGQf7MruuGUjHq4UxXuqo= Subject key identifier: A2:97:71:E4:38:A6:65:51:76:74:55:5C:FD:DF:AE:DE:4A:AA:BE:B9 Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db Certificate serial: 019B348D504C304A18E8311AE79346A1F6CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft Manifest number: 0C12 Signing time: Fri 19 Dec 2025 03:00:34 +0000 Manifest this update: Fri 19 Dec 2025 03:00:34 +0000 Manifest next update: Sat 20 Dec 2025 03:00:34 +0000 Files and hashes: 1: DclAJrQBqx9OgqxAM6QAmtspGAk.roa (hash: YWCRzQwj8j6HFgrAo7ZVPrdD/VumId1KJ89Dfw8z8xQ=) 2: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: 6BpBb6+GY+0YmPZ/nC2iFTR0ZIUNPqGVHxKCExbqs1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:50:4c:30:4a:18:e8:31:1a:e7:93:46:a1:f6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db Validity Not Before: Dec 19 03:00:34 2025 GMT Not After : Dec 20 03:00:34 2025 GMT Subject: CN=a29771e438a665517674555cfddfaede4aaabeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:b8:83:f2:4e:6f:bf:39:06:c7:be:3a:28: c0:11:de:9b:96:b3:d8:8b:69:e7:9d:02:ea:a5:8f: 21:b6:3c:6b:7e:5d:10:d4:54:ce:14:9c:f4:e0:c4: ba:e2:1b:0c:7c:30:e7:31:34:1d:a9:64:77:e4:b1: 62:ef:6c:36:9c:11:97:b5:73:5a:01:b3:f9:5d:e9: 27:19:93:79:bb:13:79:1d:f1:6d:4e:e7:63:51:cb: ed:ef:38:19:c5:b4:c8:5b:62:3b:59:b5:63:a9:1b: a1:1d:b3:e4:d5:ba:f0:b4:6a:31:8e:95:39:15:51: 2c:c0:a4:6b:6b:7b:61:8b:d4:fb:32:80:62:82:cb: dc:22:4b:46:01:4d:5a:5d:40:a5:e5:cb:b9:a6:d8: 39:72:8d:a7:98:50:de:50:87:d8:8b:b9:75:43:40: 3f:3b:fe:28:88:73:74:e7:1c:fd:dd:3b:9e:cb:34: b8:72:5e:25:f9:fa:8c:d1:c2:64:a6:47:6c:a9:07: ab:d6:a4:cd:7c:1f:c9:41:f3:a8:2d:40:1b:25:60: f8:5d:ae:ab:8a:20:61:33:ed:a5:f6:92:41:18:cb: 78:c2:90:99:e6:d0:2f:5d:c0:50:c6:7d:db:bc:2e: 1a:05:81:53:e2:d4:c9:3f:2d:4f:60:96:fe:45:65: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:97:71:E4:38:A6:65:51:76:74:55:5C:FD:DF:AE:DE:4A:AA:BE:B9 X509v3 Authority Key Identifier: keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cf:af:85:af:7c:c9:20:06:ac:e5:a4:88:fc:af:f1:5e:9d: f3:77:cf:31:39:5b:c9:1a:5f:af:4e:5d:51:89:dc:ff:91:e8: 54:ea:d6:8a:58:3f:e0:60:a7:d0:2f:9a:b4:a5:ab:02:10:e1: cc:88:b5:b2:8b:fb:49:f1:be:61:62:90:4c:a4:f5:7e:eb:db: 11:14:5f:e5:93:d1:98:38:df:59:1f:53:43:bc:4d:1d:be:c6: 11:ac:0b:cb:28:ea:ef:a9:72:26:c0:fa:98:51:f3:60:76:86: 0a:0c:83:ce:04:46:f9:40:70:30:49:6b:1b:ae:06:10:ce:c2: dc:06:a4:f4:1c:58:c3:64:ac:93:b8:e2:02:e4:86:25:11:44: 04:eb:44:68:ed:1f:41:89:13:aa:e2:8a:7b:51:10:53:72:ad: 65:f5:4f:d8:df:b5:8b:b8:65:5f:75:b3:3c:aa:a7:bc:02:f3: af:6e:75:6d:4a:95:2d:0e:7e:98:1f:2b:c0:b1:ba:d1:52:c2: 14:2e:b4:75:50:9b:82:e1:bb:09:78:45:0b:6f:a7:0f:2d:93: 39:a9:a2:21:ae:14:17:c3:8a:98:6f:0c:15:73:e9:64:50:89: df:a0:75:28:e5:98:bb:14:46:ad:41:98:24:84:22:67:3c:34: ec:f8:11:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jVBMMEoY6DEa55NGofbOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1N2IzMjA4MzBhZDA2ZWE3MWE3MjZlOWI4YjNjNDczMjQx MjE5ZGIwHhcNMjUxMjE5MDMwMDM0WhcNMjUxMjIwMDMwMDM0WjAzMTEwLwYDVQQD EyhhMjk3NzFlNDM4YTY2NTUxNzY3NDU1NWNmZGRmYWVkZTRhYWFiZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd64g/JOb785Bse+OijAEd6blrPY i2nnnQLqpY8htjxrfl0Q1FTOFJz04MS64hsMfDDnMTQdqWR35LFi72w2nBGXtXNa AbP5XeknGZN5uxN5HfFtTudjUcvt7zgZxbTIW2I7WbVjqRuhHbPk1brwtGoxjpU5 FVEswKRra3thi9T7MoBigsvcIktGAU1aXUCl5cu5ptg5co2nmFDeUIfYi7l1Q0A/ O/4oiHN05xz93TueyzS4cl4l+fqM0cJkpkdsqQer1qTNfB/JQfOoLUAbJWD4Xa6r iiBhM+2l9pJBGMt4wpCZ5tAvXcBQxn3bvC4aBYFT4tTJPy1PYJb+RWUKrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKXceQ4pmVRdnRVXP3frt5Kqr65MB8GA1UdIwQY MBaAFBV7MggwrQbqcacm6bizxHMkEhnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMt YzY1MGM3NmQwOGNlLzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMtYzY1MGM3NmQwOGNl LzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgM+vha98 ySAGrOWkiPyv8V6d83fPMTlbyRpfr05dUYnc/5HoVOrWilg/4GCn0C+atKWrAhDh zIi1sov7SfG+YWKQTKT1fuvbERRf5ZPRmDjfWR9TQ7xNHb7GEawLyyjq76lyJsD6 mFHzYHaGCgyDzgRG+UBwMElrG64GEM7C3Aak9BxYw2Ssk7jiAuSGJRFEBOtEaO0f QYkTquKKe1EQU3KtZfVP2N+1i7hlX3WzPKqnvALzr251bUqVLQ5+mB8rwLG60VLC FC60dVCbguG7CXhFC2+nDy2TOamiIa4UF8OKmG8MFXPpZFCJ36B1KOWYuxRGrUGY JIQiZzw07PgRiw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:23 2025 by rpki-client