This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json) Hash identifier: gs0vLF184HlXv7E9QQyYRUVHuMx7WbzZvLFV4eKi0xU= Subject key identifier: C1:2F:F0:92:44:44:5A:2B:DA:EB:4F:9C:D3:3E:AC:03:4F:02:BA:DD Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee Certificate serial: 019AF68A1B80CEB8B6565CF952D72242D22E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft Manifest number: 0922 Signing time: Sun 07 Dec 2025 02:00:37 +0000 Manifest this update: Sun 07 Dec 2025 02:00:37 +0000 Manifest next update: Mon 08 Dec 2025 02:00:37 +0000 Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: Cf0z+l2R9c/3vlmab1VLR6GbS3b7nyYdGj9ZCw/nEDs=) 2: kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa (hash: g89MP8+0dMYS7AxnUtFPb35wq3oTVlO8M0aQrm02TxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:1b:80:ce:b8:b6:56:5c:f9:52:d7:22:42:d2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee Validity Not Before: Dec 7 02:00:37 2025 GMT Not After : Dec 8 02:00:37 2025 GMT Subject: CN=c12ff09244445a2bdaeb4f9cd33eac034f02badd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:7f:14:b5:5d:82:56:38:b9:86:6f:bc:d0: 90:75:d4:98:5c:a8:ea:83:3c:08:86:cc:48:a1:5f: 73:ff:0c:f8:f8:6d:06:0a:8d:9c:2f:70:0c:34:99: a4:6e:3d:4f:0c:50:8b:e7:d7:d0:c2:04:68:67:2c: da:61:c3:48:1d:81:7b:35:20:a9:4b:b2:c7:88:6c: 5b:db:70:92:b5:2f:75:fd:c0:c3:17:57:74:a0:c0: 18:a3:6f:ed:7c:d3:be:db:91:39:07:0f:3e:6d:71: f9:a2:27:36:82:4d:4c:a0:c3:13:01:95:19:a3:c7: 83:8d:af:a7:d1:87:0b:76:ac:29:95:d4:43:52:36: da:b2:33:71:43:04:8c:1c:58:77:6d:32:b1:87:44: 9e:0c:c2:59:2c:91:53:27:5d:37:15:d1:b2:85:99: b3:54:34:7e:df:0d:ce:60:fb:bc:73:08:89:0b:15: 62:ae:5e:40:87:b4:2b:69:ff:d6:88:dd:0b:ac:70: 8c:18:06:d0:84:7c:df:dd:45:50:4f:b3:67:85:05: 0b:c2:8a:3d:ac:af:ed:f7:c3:93:cc:09:47:56:5f: 66:de:04:9a:9e:7d:f8:8a:3e:b7:8f:20:21:7f:de: e3:9f:8e:96:f0:1c:a2:18:0e:fd:f1:75:e3:fa:fc: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2F:F0:92:44:44:5A:2B:DA:EB:4F:9C:D3:3E:AC:03:4F:02:BA:DD X509v3 Authority Key Identifier: keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ba:30:ac:96:28:f2:92:2a:d2:f9:75:f2:d2:07:05:b3:5f: 67:0e:81:26:c0:77:44:f2:51:d5:58:15:d8:85:f5:17:b1:9e: 5f:61:73:65:d8:d8:99:8f:a9:04:76:d7:64:d8:70:dc:c0:4d: e7:15:c2:00:e8:32:a1:09:a5:0d:a0:29:6c:7c:ef:47:26:a4: 69:ce:8d:58:01:46:d3:dc:43:62:66:53:06:83:c4:21:1b:82: ea:49:b6:37:83:31:72:e5:1d:a9:4c:cf:f6:8f:50:5c:91:45: 3a:5f:e6:54:eb:b5:94:51:7e:d7:17:03:61:18:cc:18:7d:68: e3:c0:e8:e6:94:fc:40:db:23:7e:b6:1a:53:e4:f2:87:4c:fd: 54:ee:5b:00:cf:b4:80:54:b7:52:c2:dc:c5:d3:99:09:e4:97: 81:b3:ce:13:e0:19:6e:41:82:4e:b9:23:4e:5d:b0:f8:fe:68: e1:71:ce:41:c5:cc:9c:ea:43:e3:c7:6a:e2:80:d3:35:01:72: bc:31:71:37:29:bf:71:23:47:6b:9d:d4:8d:00:0f:ba:36:3d: ef:0d:46:16:0f:4d:f0:82:b2:21:04:37:20:08:f7:0c:71:b8: 9a:6b:60:a5:6d:3d:76:80:f4:d1:9e:24:ef:6e:d5:5a:0c:f4: 08:74:54:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ihuAzri2Vlz5UtciQtIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NzFlNjY4NDMwNmI3NDgxNTZjMmFlM2Y0MjBiYjM2NmIy ZWZjZWUwHhcNMjUxMjA3MDIwMDM3WhcNMjUxMjA4MDIwMDM3WjAzMTEwLwYDVQQD EyhjMTJmZjA5MjQ0NDQ1YTJiZGFlYjRmOWNkMzNlYWMwMzRmMDJiYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD9/FLVdglY4uYZvvNCQddSYXKjq gzwIhsxIoV9z/wz4+G0GCo2cL3AMNJmkbj1PDFCL59fQwgRoZyzaYcNIHYF7NSCp S7LHiGxb23CStS91/cDDF1d0oMAYo2/tfNO+25E5Bw8+bXH5oic2gk1MoMMTAZUZ o8eDja+n0YcLdqwpldRDUjbasjNxQwSMHFh3bTKxh0SeDMJZLJFTJ103FdGyhZmz VDR+3w3OYPu8cwiJCxVirl5Ah7Qraf/WiN0LrHCMGAbQhHzf3UVQT7NnhQULwoo9 rK/t98OTzAlHVl9m3gSann34ij63jyAhf97jn46W8ByiGA798XXj+vxi9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEv8JJERFor2utPnNM+rANPArrdMB8GA1UdIwQY MBaAFBVx5mhDBrdIFWwq4/QguzZrLvzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYt NzM4YzBiZjhlYTk4LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYtNzM4YzBiZjhlYTk4 LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrowrJYo 8pIq0vl18tIHBbNfZw6BJsB3RPJR1VgV2IX1F7GeX2FzZdjYmY+pBHbXZNhw3MBN 5xXCAOgyoQmlDaApbHzvRyakac6NWAFG09xDYmZTBoPEIRuC6km2N4MxcuUdqUzP 9o9QXJFFOl/mVOu1lFF+1xcDYRjMGH1o48Do5pT8QNsjfrYaU+Tyh0z9VO5bAM+0 gFS3UsLcxdOZCeSXgbPOE+AZbkGCTrkjTl2w+P5o4XHOQcXMnOpD48dq4oDTNQFy vDFxNym/cSNHa53UjQAPujY97w1GFg9N8IKyIQQ3IAj3DHG4mmtgpW09doD00Z4k 727VWgz0CHRUHQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:39 2025 by rpki-client