This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json) Hash identifier: u2MN7NWAUE4+rsk7+lR+o53CXxU36EWnnoD02LvlCzI= Subject key identifier: D4:B9:32:5E:88:9A:88:8C:CB:36:58:80:F7:16:1C:DD:A9:0C:0A:34 Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2 Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2 Certificate serial: 019AF5411C1765C580CE93CF0D22E4E3EF09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft Manifest number: 11EE Signing time: Sat 06 Dec 2025 20:01:16 +0000 Manifest this update: Sat 06 Dec 2025 20:01:16 +0000 Manifest next update: Sun 07 Dec 2025 20:01:16 +0000 Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=) 2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: sWZJFIQwUrhbocHUUJ4pm7GeV1NWBv5iYj5+z20CqXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:1c:17:65:c5:80:ce:93:cf:0d:22:e4:e3:ef:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2 Validity Not Before: Dec 6 20:01:16 2025 GMT Not After : Dec 7 20:01:16 2025 GMT Subject: CN=d4b9325e889a888ccb365880f7161cdda90c0a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:64:02:5c:cd:16:79:d1:aa:41:b0:f5:1f:79: 19:77:79:69:c1:a7:3a:73:8b:85:a6:5f:f9:fd:25: 63:de:de:e5:b8:41:73:7e:e5:fa:74:cc:f1:08:41: 6a:f0:c2:a3:da:ba:b1:f5:d1:6c:39:57:44:18:5f: 34:b7:73:9c:56:05:f1:51:6e:69:1c:1f:46:e0:d3: 1b:36:8d:73:0b:0c:25:c3:ed:42:14:42:12:cc:1a: a8:8b:55:dc:72:44:29:ca:dd:3f:7d:0f:fe:bb:47: e4:94:a2:74:e0:5c:6c:0d:f9:ec:a0:15:e9:17:16: ad:f8:29:de:bb:3f:2a:70:61:0b:13:c5:3f:b5:bd: 23:75:9b:37:dc:e8:29:d7:65:31:1b:e4:b2:06:07: e0:5a:66:6c:98:e8:70:7d:70:cb:b3:7f:72:d4:fb: ed:48:cc:bd:6c:e6:ec:45:ff:03:7f:81:ab:58:c8: ac:94:b5:dc:70:1f:58:71:2f:15:74:82:21:58:17: 60:69:2d:87:51:8a:08:ec:a1:0e:90:18:66:8d:02: 27:be:49:0d:bd:a3:4f:26:82:07:8e:14:a1:d4:bb: c7:48:c6:60:f4:84:e6:a6:97:51:74:96:4d:1d:e7: ae:ed:e3:e7:52:81:c7:de:e5:21:85:cb:90:ee:cb: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:32:5E:88:9A:88:8C:CB:36:58:80:F7:16:1C:DD:A9:0C:0A:34 X509v3 Authority Key Identifier: keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b5:07:2d:85:a2:1d:74:d6:a6:01:8d:ef:92:24:01:42:fa: f0:1d:83:ef:dc:9a:30:e5:ac:f2:0e:3a:70:b1:5a:73:42:b1: fc:cd:60:48:58:87:d9:5c:5a:1c:73:d8:58:70:e6:f5:12:c8: 98:cd:eb:5b:18:fc:66:1c:21:45:aa:0e:16:c0:99:4f:71:28: e2:6a:08:ab:d2:81:1f:70:34:26:e8:2f:96:92:13:6a:6f:40: 67:07:d7:b2:35:89:e6:79:01:d4:b9:5d:09:52:d8:31:23:10: 8d:ae:33:c0:a9:f3:07:84:3f:8c:54:9e:37:27:37:8f:6e:4d: e5:9d:7f:20:de:c9:34:a7:46:1d:4b:66:bb:af:ee:32:ff:aa: 0b:00:ca:1e:e2:3c:0d:c0:58:12:4f:67:44:fe:87:ad:e8:d1: ed:ae:93:c8:c8:c6:cf:07:7a:aa:48:e5:59:dc:1b:09:13:95: 9d:06:12:f9:05:29:d4:61:06:54:27:72:8f:ec:21:40:ca:51: 34:1b:82:f8:91:22:68:07:e7:39:d1:93:04:fc:d2:0d:ee:ae: 53:19:b7:70:b7:64:00:b2:27:d0:e7:19:ad:fa:d7:dc:71:67: 53:12:43:e7:de:4c:b8:73:25:76:c3:b5:fc:04:61:35:2f:fc: cd:00:52:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QRwXZcWAzpPPDSLk4+8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1N2I2MDhmY2NmMzIzMGU0NDVjOTgzZjllMzZiNTBlMTFm NzJjZjIwHhcNMjUxMjA2MjAwMTE2WhcNMjUxMjA3MjAwMTE2WjAzMTEwLwYDVQQD EyhkNGI5MzI1ZTg4OWE4ODhjY2IzNjU4ODBmNzE2MWNkZGE5MGMwYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WQCXM0WedGqQbD1H3kZd3lpwac6 c4uFpl/5/SVj3t7luEFzfuX6dMzxCEFq8MKj2rqx9dFsOVdEGF80t3OcVgXxUW5p HB9G4NMbNo1zCwwlw+1CFEISzBqoi1XcckQpyt0/fQ/+u0fklKJ04FxsDfnsoBXp Fxat+Cneuz8qcGELE8U/tb0jdZs33Ogp12UxG+SyBgfgWmZsmOhwfXDLs39y1Pvt SMy9bObsRf8Df4GrWMislLXccB9YcS8VdIIhWBdgaS2HUYoI7KEOkBhmjQInvkkN vaNPJoIHjhSh1LvHSMZg9ITmppdRdJZNHeeu7ePnUoHH3uUhhcuQ7stw5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS5Ml6ImoiMyzZYgPcWHN2pDAo0MB8GA1UdIwQY MBaAFKV7YI/M8yMORFyYP542tQ4R9yzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82MjE2MjktZWQzZC00OWFmLWJmMzkt ODVhMzdjZjFiMmVhLzEvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC82MjE2MjktZWQzZC00OWFmLWJmMzktODVhMzdjZjFiMmVh LzEvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7UHLYWi HXTWpgGN75IkAUL68B2D79yaMOWs8g46cLFac0Kx/M1gSFiH2VxaHHPYWHDm9RLI mM3rWxj8ZhwhRaoOFsCZT3Eo4moIq9KBH3A0JugvlpITam9AZwfXsjWJ5nkB1Lld CVLYMSMQja4zwKnzB4Q/jFSeNyc3j25N5Z1/IN7JNKdGHUtmu6/uMv+qCwDKHuI8 DcBYEk9nRP6HrejR7a6TyMjGzwd6qkjlWdwbCROVnQYS+QUp1GEGVCdyj+whQMpR NBuC+JEiaAfnOdGTBPzSDe6uUxm3cLdkALIn0OcZrfrX3HFnUxJD595MuHMldsO1 /ARhNS/8zQBSbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:25 2025 by rpki-client