This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json) Hash identifier: s9O78gaUVeZIeOtd3CJfF1OojSMDvhC4yaAw6Y8bac8= Subject key identifier: 1E:6E:8A:51:78:AA:81:23:91:85:46:A4:4E:35:76:5F:3F:1C:54:ED Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b Certificate serial: 019AF23FCF50FAD968857B6B40CDCEED3075 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft Manifest number: 9F Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: 1RhZ680ZFwSWL0eW5jF3xOe9MxM.roa (hash: sgWoBKYoXGWVKYDBWWq0HZS7lSSlvVBQHXsa6478dkc=) 2: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: LCtvXU98Mt+24GVZ84tb50I7h1U7W2J8Qrk34HM6XAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cf:50:fa:d9:68:85:7b:6b:40:cd:ce:ed:30:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=1e6e8a5178aa8123918546a44e35765f3f1c54ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:9d:c3:f1:9c:fa:43:c1:b0:65:13:e4:46: 90:83:c3:96:e6:53:0b:2f:4e:ad:ff:c0:e5:97:05: 0e:f2:be:17:fb:9c:b8:75:18:29:6d:54:2d:56:f1: ef:94:b5:f8:f7:93:7d:1d:5d:2f:35:ad:02:89:82: ff:2c:ab:83:0f:41:40:4e:ca:2e:1e:93:92:f0:c9: 75:b9:7e:04:31:80:0a:ae:37:5d:b2:87:83:4a:10: e2:f4:70:b0:38:6e:8c:47:6e:d4:ca:56:e8:4c:ef: 23:50:cd:f4:97:00:9a:90:87:c7:7d:ef:62:0c:55: fb:7c:70:64:65:eb:c9:85:ec:ea:65:4a:54:9b:01: eb:51:50:70:55:9c:af:f6:cc:ff:14:e8:1e:d5:70: 11:b5:b4:19:3b:0b:a9:08:39:ec:11:0e:bf:fd:c9: 28:1e:3b:de:de:a8:3e:d3:62:c4:d9:fc:cb:cf:09: e4:4e:c5:0a:0c:50:db:af:f7:bf:d8:bb:9c:80:7b: 7a:ed:1f:5c:7c:38:fe:0b:ff:65:7b:63:94:69:f6: a7:31:ad:a5:19:36:00:ff:91:20:06:10:f5:f6:a5: 29:a1:fb:25:48:28:96:a5:bf:9f:c0:86:12:ca:89: 65:c9:48:e1:b1:0f:cd:28:82:a3:3f:72:4e:23:a8: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6E:8A:51:78:AA:81:23:91:85:46:A4:4E:35:76:5F:3F:1C:54:ED X509v3 Authority Key Identifier: keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:43:4a:19:88:13:f9:59:ce:b1:67:48:8b:5c:c5:ba:f3:ec: 1d:20:69:fa:ba:a0:09:13:29:0c:f7:a1:ee:f8:3d:80:a6:a0: 33:ae:cf:03:9b:76:88:70:4e:b1:46:93:64:b6:a1:99:f1:2e: ea:0a:50:f4:2b:41:36:41:0a:22:20:5b:57:dd:c2:fe:cc:f6: 6a:2e:2a:6b:ea:65:86:16:01:9f:93:6c:93:98:77:46:ce:cb: 2d:f6:25:f2:c9:d7:9b:ca:0f:98:e1:65:fc:02:27:81:ba:fb: 2a:6a:96:08:6a:c1:e7:eb:65:2a:3f:b4:82:6d:42:40:58:d3: 27:27:9c:72:42:6b:3b:ae:b7:22:cd:0e:a0:0a:2a:43:22:76: 03:92:0f:b3:f5:99:da:0b:a8:81:56:69:af:f9:5a:22:71:b7: 7a:a5:d8:21:19:14:15:ea:ca:d7:82:a3:30:50:af:e5:ad:54: 47:be:85:4c:dd:b1:b2:41:6b:8e:64:4a:75:45:91:22:28:ec: 46:58:36:87:c4:8c:b4:55:2a:74:6c:b6:1e:8b:d8:43:1b:62: 00:17:7a:19:dc:f4:aa:00:37:dd:e4:e1:2f:a1:f8:c6:7c:be: ab:97:c1:87:47:95:15:d7:d3:d8:d8:44:2f:6c:c6:0f:3c:2b: f8:fd:49:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP89Q+tlohXtrQM3O7TB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTRiYmY1Mzc4N2FmNGU5MzVkMzBhNDhlODgyNWEyZGEx NGEwOGIwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD EygxZTZlOGE1MTc4YWE4MTIzOTE4NTQ2YTQ0ZTM1NzY1ZjNmMWM1NGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseCdw/Gc+kPBsGUT5EaQg8OW5lML L06t/8DllwUO8r4X+5y4dRgpbVQtVvHvlLX495N9HV0vNa0CiYL/LKuDD0FATsou HpOS8Ml1uX4EMYAKrjddsoeDShDi9HCwOG6MR27UylboTO8jUM30lwCakIfHfe9i DFX7fHBkZevJhezqZUpUmwHrUVBwVZyv9sz/FOge1XARtbQZOwupCDnsEQ6//cko Hjve3qg+02LE2fzLzwnkTsUKDFDbr/e/2LucgHt67R9cfDj+C/9le2OUafanMa2l GTYA/5EgBhD19qUpofslSCiWpb+fwIYSyollyUjhsQ/NKIKjP3JOI6imBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5uilF4qoEjkYVGpE41dl8/HFTtMB8GA1UdIwQY MBaAFEcUu/U3h69Ok10wpI6IJaLaFKCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMt ZTY5MGVkMjFmOTRmLzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMtZTY5MGVkMjFmOTRm LzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUNKGYgT +VnOsWdIi1zFuvPsHSBp+rqgCRMpDPeh7vg9gKagM67PA5t2iHBOsUaTZLahmfEu 6gpQ9CtBNkEKIiBbV93C/sz2ai4qa+plhhYBn5Nsk5h3Rs7LLfYl8snXm8oPmOFl /AIngbr7KmqWCGrB5+tlKj+0gm1CQFjTJyecckJrO663Is0OoAoqQyJ2A5IPs/WZ 2guogVZpr/laInG3eqXYIRkUFerK14KjMFCv5a1UR76FTN2xskFrjmRKdUWRIijs Rlg2h8SMtFUqdGy2HovYQxtiABd6Gdz0qgA33eThL6H4xny+q5fBh0eVFdfT2NhE L2zGDzwr+P1JdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:49 2025 by rpki-client