This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json) Hash identifier: 5ybz6COSJ+o8sx2w/OOiwlBqoHoqmji/YfiUpWSl6GQ= Subject key identifier: 1C:D5:29:03:B2:2B:25:6A:73:7A:BC:87:63:1E:4F:F4:0C:41:B5:06 Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf Certificate serial: 019AF7D3E3CE709D7B1A1CE67D411E686467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft Manifest number: 153A Signing time: Sun 07 Dec 2025 08:00:50 +0000 Manifest this update: Sun 07 Dec 2025 08:00:50 +0000 Manifest next update: Mon 08 Dec 2025 08:00:50 +0000 Files and hashes: 1: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (hash: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=) 2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: KwDW7mZwTqZrCQ/EXGxTplevrmxJCVy6wq0oCRta8BM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d3:e3:ce:70:9d:7b:1a:1c:e6:7d:41:1e:68:64:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf Validity Not Before: Dec 7 08:00:50 2025 GMT Not After : Dec 8 08:00:50 2025 GMT Subject: CN=1cd52903b22b256a737abc87631e4ff40c41b506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:26:ee:94:45:93:ad:2e:c9:3b:d3:26:98: fa:06:59:a5:db:5e:2c:b1:03:8f:2a:6d:41:d8:46: 80:ff:86:d0:4f:77:5f:54:90:60:fa:9e:a8:df:66: 21:1c:7c:89:4a:ff:51:02:b4:34:91:31:aa:8e:7a: b8:2b:b9:43:48:8a:77:89:b4:ea:f7:88:82:db:0a: a5:1b:3f:27:53:4c:9c:0d:73:2e:ab:5b:ec:2c:c5: 68:63:80:05:df:64:eb:a5:e5:3a:75:ef:a8:43:fd: 73:c6:7e:9e:c3:21:78:89:1c:6e:58:9f:b1:8f:ed: 69:cb:14:ab:cd:15:69:29:01:2d:e3:d1:d1:db:fa: aa:48:78:c1:02:d9:ee:4d:16:7c:5a:90:6d:80:c4: b1:b8:b7:33:18:a4:d5:07:83:6d:2a:fd:8f:69:99: b2:8f:a0:45:a2:fe:a0:bf:eb:29:87:27:de:58:f7: 93:22:55:46:89:8d:ba:a6:d4:d1:41:4f:66:78:cf: 32:9e:a3:18:1b:f3:f1:31:f3:f7:98:38:2f:6a:41: 3a:34:e5:45:58:4d:e9:2d:d8:97:6d:c8:a0:04:54: 0d:37:18:43:76:3d:36:30:28:1f:92:fb:e1:36:9b: e2:0f:2d:a1:77:7a:2a:90:77:cf:33:10:8b:28:74: 2a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D5:29:03:B2:2B:25:6A:73:7A:BC:87:63:1E:4F:F4:0C:41:B5:06 X509v3 Authority Key Identifier: keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:9a:dc:58:96:32:28:ee:6d:5c:a8:3e:54:f4:2a:d1:c8:5b: 5e:e2:8c:12:90:ab:29:8c:77:18:d4:e3:da:81:a4:86:e1:e6: 89:80:03:ec:c1:64:50:1e:97:09:d2:53:99:07:a6:8f:4b:67: 00:29:80:8c:8a:14:f6:45:dd:4e:12:ab:13:06:28:af:bb:4c: 4b:c4:a9:8c:ca:9b:fb:a6:d7:27:cb:a7:2f:04:b4:64:9d:c2: 3a:78:e3:fa:84:58:4f:fa:50:bf:4e:35:e7:47:ea:6a:82:8b: 4e:17:53:f2:64:7a:71:15:e4:01:3e:a9:c9:61:80:dd:5f:96: 8b:86:92:f4:ff:55:f9:93:82:d1:43:92:21:41:ef:9f:92:b6: aa:e0:17:3f:fc:4f:43:98:9e:83:f6:67:eb:4b:4a:86:03:b7: a1:b1:85:5f:21:f1:02:a6:68:c8:86:f2:e6:a3:6d:f4:c7:bb: 62:81:f3:d8:fb:79:98:ed:a8:97:75:0d:55:9d:66:4b:0f:6d: 52:57:ce:1c:f7:54:fe:29:fd:b9:59:41:bc:46:3d:a3:96:5c: 74:a7:46:34:8c:25:a1:92:e0:a2:5e:d9:b8:51:d3:df:5f:1f: 88:d8:2b:30:17:e2:5d:3f:cc:ba:93:40:92:89:7c:6a:16:8b: dd:06:dc:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr30+POcJ17GhzmfUEeaGRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMWQwZTMyOThiZWQzYTdmMzlmYjNiMjQ0ZWQ5MThiZjZj NGQ3YmYwHhcNMjUxMjA3MDgwMDUwWhcNMjUxMjA4MDgwMDUwWjAzMTEwLwYDVQQD EygxY2Q1MjkwM2IyMmIyNTZhNzM3YWJjODc2MzFlNGZmNDBjNDFiNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Qm7pRFk60uyTvTJpj6Blml214s sQOPKm1B2EaA/4bQT3dfVJBg+p6o32YhHHyJSv9RArQ0kTGqjnq4K7lDSIp3ibTq 94iC2wqlGz8nU0ycDXMuq1vsLMVoY4AF32TrpeU6de+oQ/1zxn6ewyF4iRxuWJ+x j+1pyxSrzRVpKQEt49HR2/qqSHjBAtnuTRZ8WpBtgMSxuLczGKTVB4NtKv2PaZmy j6BFov6gv+sphyfeWPeTIlVGiY26ptTRQU9meM8ynqMYG/PxMfP3mDgvakE6NOVF WE3pLdiXbcigBFQNNxhDdj02MCgfkvvhNpviDy2hd3oqkHfPMxCLKHQqFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzVKQOyKyVqc3q8h2MeT/QMQbUGMB8GA1UdIwQY MBaAFH8dDjKYvtOn85+zskTtkYv2xNe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMt MjFhZjNkZWU4ZWU5LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMtMjFhZjNkZWU4ZWU5 LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJrcWJYy KO5tXKg+VPQq0chbXuKMEpCrKYx3GNTj2oGkhuHmiYAD7MFkUB6XCdJTmQemj0tn ACmAjIoU9kXdThKrEwYor7tMS8SpjMqb+6bXJ8unLwS0ZJ3COnjj+oRYT/pQv041 50fqaoKLThdT8mR6cRXkAT6pyWGA3V+Wi4aS9P9V+ZOC0UOSIUHvn5K2quAXP/xP Q5ieg/Zn60tKhgO3obGFXyHxAqZoyIby5qNt9Me7YoHz2Pt5mO2ol3UNVZ1mSw9t UlfOHPdU/in9uVlBvEY9o5ZcdKdGNIwloZLgol7ZuFHT318fiNgrMBfiXT/MupNA kol8ahaL3QbcwQ== -----END CERTIFICATE-----Generated at Sun Dec 7 10:49:31 2025 by rpki-client