This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft File: FxGAccwfrZwvkqEikhrUeLE0ew4.mft (raw, json) Hash identifier: nvXxxL0UXrvUlETnIuSfenkh/9I0WgClE/WupPkAwAk= Subject key identifier: 98:C5:42:D1:A8:E6:D5:45:2F:8C:77:73:BC:2B:EE:6F:CC:1B:2E:22 Authority key identifier: 17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E Certificate issuer: /CN=17118071cc1fad9c2f92a122921ad478b1347b0e Certificate serial: 019AF12E5B174728A66E530C9014D930BD21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft Manifest number: 07FF Signing time: Sat 06 Dec 2025 01:02:18 +0000 Manifest this update: Sat 06 Dec 2025 01:02:18 +0000 Manifest next update: Sun 07 Dec 2025 01:02:18 +0000 Files and hashes: 1: FxGAccwfrZwvkqEikhrUeLE0ew4.crl (hash: jB6BTHIlBSbHEQPX3kTfBRh89mztqiKOR1TmEIHs4hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5b:17:47:28:a6:6e:53:0c:90:14:d9:30:bd:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17118071cc1fad9c2f92a122921ad478b1347b0e Validity Not Before: Dec 6 01:02:18 2025 GMT Not After : Dec 7 01:02:18 2025 GMT Subject: CN=98c542d1a8e6d5452f8c7773bc2bee6fcc1b2e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:40:82:b8:81:78:a3:47:c1:22:c8:74:ee: 60:94:49:cd:d5:5a:fc:02:ab:f6:5e:bf:83:aa:bc: 9a:cd:25:72:47:1a:bd:e7:26:0d:cf:44:70:f3:18: a9:73:94:00:71:15:86:85:4a:4b:76:57:2e:88:e6: e0:06:c3:5f:a3:f2:6e:ce:c7:b4:64:b0:19:1c:00: e6:20:f7:dd:28:31:47:9f:bd:be:f1:3c:a5:da:4f: 94:2a:3f:78:d8:13:17:97:b6:19:77:2f:36:84:df: f3:aa:cb:81:93:ea:15:5d:ea:6b:55:c8:3b:c9:22: 79:8d:55:1a:6e:ff:4d:59:60:63:a3:53:16:7d:25: 96:b3:46:b8:90:05:f9:af:06:35:25:69:a1:f7:5b: 5f:c0:74:a8:f5:91:8f:76:3f:f9:e1:3f:e0:11:8e: 71:cd:a9:72:1b:8a:61:00:c3:77:81:99:33:c6:9e: 42:f7:02:2b:b1:21:a4:8c:44:ed:62:8d:d3:47:5f: fb:6e:c9:9b:38:c0:76:69:da:d6:c7:0a:6d:f1:1f: 4f:c6:19:81:35:dd:9c:f6:93:ec:08:39:e2:cf:7b: 47:f6:c0:48:0d:a5:9b:9d:15:1c:7f:3d:1b:f1:73: b6:5d:1b:70:4a:f2:91:63:3e:7a:07:ae:39:bb:92: 41:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C5:42:D1:A8:E6:D5:45:2F:8C:77:73:BC:2B:EE:6F:CC:1B:2E:22 X509v3 Authority Key Identifier: keyid:17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:28:21:f2:20:5f:59:3d:28:e4:66:0f:cd:11:d0:d3:c9:ea: e1:fa:ff:5b:e6:41:a4:9e:50:d6:a6:52:fb:d8:0a:f7:0b:94: 83:9f:11:21:2c:b1:5b:3d:ad:97:d3:04:80:c8:1f:a8:4f:09: 35:c5:e4:43:67:75:c2:12:17:85:a1:e3:a8:ef:cd:00:30:7e: 91:f0:ff:f5:29:1a:5d:0b:de:3f:9e:b2:aa:f4:46:77:70:23: d7:82:0f:44:9d:d3:6b:8e:e2:f8:3b:53:9d:a5:ab:6d:db:dc: fa:cf:a4:f2:a0:01:b3:14:fc:0f:e4:23:5c:6b:14:33:cf:bd: 6d:44:08:8b:36:cc:c8:3b:a1:f6:e7:5c:9d:c8:aa:03:13:7b: f0:4e:f5:8c:3a:7d:bf:b6:73:46:42:28:07:b8:39:7f:8f:75: 2f:9c:d5:1b:f4:f1:ba:c1:6d:08:82:36:1c:91:16:f4:80:64: a1:9d:60:7f:ea:d3:3e:64:ea:c3:7f:b1:7f:a8:0a:b3:c1:4e: cd:78:9c:bb:76:2f:98:96:3f:6f:50:e9:b1:bd:c2:0a:53:7b: 4a:ff:2d:16:db:32:4a:45:fb:70:bf:08:5d:f3:cf:f7:01:3f: d8:1e:95:2a:43:89:71:08:63:2b:d4:17:ff:27:cb:57:7e:32: de:e2:10:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlsXRyimblMMkBTZML0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTE4MDcxY2MxZmFkOWMyZjkyYTEyMjkyMWFkNDc4YjEz NDdiMGUwHhcNMjUxMjA2MDEwMjE4WhcNMjUxMjA3MDEwMjE4WjAzMTEwLwYDVQQD Eyg5OGM1NDJkMWE4ZTZkNTQ1MmY4Yzc3NzNiYzJiZWU2ZmNjMWIyZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjJAgriBeKNHwSLIdO5glEnN1Vr8 Aqv2Xr+DqryazSVyRxq95yYNz0Rw8xipc5QAcRWGhUpLdlcuiObgBsNfo/Juzse0 ZLAZHADmIPfdKDFHn72+8Tyl2k+UKj942BMXl7YZdy82hN/zqsuBk+oVXeprVcg7 ySJ5jVUabv9NWWBjo1MWfSWWs0a4kAX5rwY1JWmh91tfwHSo9ZGPdj/54T/gEY5x zalyG4phAMN3gZkzxp5C9wIrsSGkjETtYo3TR1/7bsmbOMB2adrWxwpt8R9PxhmB Nd2c9pPsCDniz3tH9sBIDaWbnRUcfz0b8XO2XRtwSvKRYz56B645u5JBxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjFQtGo5tVFL4x3c7wr7m/MGy4iMB8GA1UdIwQY MBaAFBcRgHHMH62cL5KhIpIa1HixNHsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZDM4YmYtNjM0ZS00NjRiLWI0NjYt ZTkwZjE2ZmM2ZmM0LzEvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81ZDM4YmYtNjM0ZS00NjRiLWI0NjYtZTkwZjE2ZmM2ZmM0 LzEvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASygh8iBf WT0o5GYPzRHQ08nq4fr/W+ZBpJ5Q1qZS+9gK9wuUg58RISyxWz2tl9MEgMgfqE8J NcXkQ2d1whIXhaHjqO/NADB+kfD/9SkaXQveP56yqvRGd3Aj14IPRJ3Ta47i+DtT naWrbdvc+s+k8qABsxT8D+QjXGsUM8+9bUQIizbMyDuh9udcnciqAxN78E71jDp9 v7ZzRkIoB7g5f491L5zVG/TxusFtCII2HJEW9IBkoZ1gf+rTPmTqw3+xf6gKs8FO zXicu3YvmJY/b1Dpsb3CClN7Sv8tFtsySkX7cL8IXfPP9wE/2B6VKkOJcQhjK9QX /yfLV34y3uIQIw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:03 2025 by rpki-client