This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json) Hash identifier: yjbnHgUCGf0f1NUka3p6gwwFL3eF5ChcQBs4ipmHALE= Subject key identifier: 92:5E:56:B2:90:BB:AC:63:9F:4F:34:83:F4:B4:B6:68:F9:91:06:4F Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494 Certificate serial: 019AF2094AEF16A469FB5DFA1AB1C7988DEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft Manifest number: 12A1 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=) 2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=) 3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: nBlNnGPStSmny/d8QsFxv52827HzQQir26GvMcrZxQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4a:ef:16:a4:69:fb:5d:fa:1a:b1:c7:98:8d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494 Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=925e56b290bbac639f4f3483f4b4b668f991064f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:2f:81:04:c4:de:ad:2d:81:9d:31:90:3a: be:38:40:8e:1d:0b:c8:96:43:11:53:00:1e:c9:53: 7e:d3:17:f3:25:f2:b9:99:5c:4b:82:61:8e:08:51: f1:4f:40:35:cc:fb:66:02:cb:54:f1:23:9d:4f:dd: 24:40:e0:b2:b2:ba:62:00:66:9f:38:f7:ca:55:94: ed:d1:44:a3:2e:24:a3:f4:10:97:e3:7a:e5:56:3f: d3:03:37:e6:3e:04:46:02:73:b3:5d:65:e2:5e:66: c7:3d:1d:e6:24:32:2f:73:5a:61:ec:8a:03:2d:01: b4:f8:2f:ab:d1:40:7f:59:f4:57:97:c9:a7:10:9d: ec:67:27:c7:e3:9c:12:67:e2:33:1e:be:24:85:98: 5b:b3:35:6d:e2:a5:62:59:1f:98:c0:94:7a:62:7f: 78:dc:8a:6d:c3:f2:b1:91:91:24:a9:13:f9:70:a3: 2e:f1:3b:f6:2a:e4:d8:37:d6:ac:fd:aa:91:ee:d7: 71:92:50:3d:75:01:0c:21:0d:e3:0b:93:f7:46:18: f2:e9:0e:2d:88:e2:63:00:fd:39:b9:47:8f:f7:76: 01:b3:91:77:39:67:4d:a3:d0:ed:c6:f4:53:cd:b8: bb:38:39:23:48:9e:24:f9:f4:51:84:ed:e0:64:21: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5E:56:B2:90:BB:AC:63:9F:4F:34:83:F4:B4:B6:68:F9:91:06:4F X509v3 Authority Key Identifier: keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:01:8e:98:9a:4b:62:68:76:19:03:68:8d:40:42:a8:68:8d: 94:1f:38:2a:47:c9:1a:a2:9c:02:2b:42:30:83:06:2d:54:25: 19:a3:36:5e:ce:0d:df:7c:44:1e:8e:19:61:b8:99:23:e7:af: 5d:9e:c1:91:26:44:cc:84:53:04:f9:69:f2:cc:3f:5b:9a:85: 9e:2f:05:70:13:8f:3f:6e:50:89:00:51:58:ce:81:ac:92:9e: f3:e9:05:9a:ed:3a:ed:2b:ce:22:db:bc:28:78:4a:ed:cc:75: c6:d2:95:44:a9:29:0d:4a:77:e6:a5:21:be:69:ee:21:8e:6d: 84:54:33:69:8b:df:7e:88:e7:4c:0e:5b:a7:55:ba:a9:c2:6f: ea:20:ae:cd:58:58:87:4d:47:05:94:c1:49:df:75:06:ff:38: f8:c1:d0:85:4b:71:99:a1:6e:e1:ca:ff:5d:94:89:c9:e2:14: 3a:3f:5e:ac:12:0a:83:90:39:a0:28:80:43:a2:fd:2a:30:c0: e0:8a:22:71:ae:a6:a5:16:43:66:46:cd:f1:5e:25:a4:0c:6b: fb:50:60:88:9d:d7:e8:71:a6:62:5f:1d:3a:66:07:5a:85:48: 55:d4:ff:b9:18:6d:a9:ef:c7:86:17:f1:21:7f:f2:44:9b:31: 3d:3a:b7:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUrvFqRp+136GrHHmI3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz NTg0OTQwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD Eyg5MjVlNTZiMjkwYmJhYzYzOWY0ZjM0ODNmNGI0YjY2OGY5OTEwNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl38vgQTE3q0tgZ0xkDq+OECOHQvI lkMRUwAeyVN+0xfzJfK5mVxLgmGOCFHxT0A1zPtmAstU8SOdT90kQOCysrpiAGaf OPfKVZTt0USjLiSj9BCX43rlVj/TAzfmPgRGAnOzXWXiXmbHPR3mJDIvc1ph7IoD LQG0+C+r0UB/WfRXl8mnEJ3sZyfH45wSZ+IzHr4khZhbszVt4qViWR+YwJR6Yn94 3Iptw/KxkZEkqRP5cKMu8Tv2KuTYN9as/aqR7tdxklA9dQEMIQ3jC5P3Rhjy6Q4t iOJjAP05uUeP93YBs5F3OWdNo9DtxvRTzbi7ODkjSJ4k+fRRhO3gZCFtJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJeVrKQu6xjn080g/S0tmj5kQZPMB8GA1UdIwQY MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3 LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwGOmJpL Ymh2GQNojUBCqGiNlB84KkfJGqKcAitCMIMGLVQlGaM2Xs4N33xEHo4ZYbiZI+ev XZ7BkSZEzIRTBPlp8sw/W5qFni8FcBOPP25QiQBRWM6BrJKe8+kFmu067SvOItu8 KHhK7cx1xtKVRKkpDUp35qUhvmnuIY5thFQzaYvffojnTA5bp1W6qcJv6iCuzVhY h01HBZTBSd91Bv84+MHQhUtxmaFu4cr/XZSJyeIUOj9erBIKg5A5oCiAQ6L9KjDA 4Ioica6mpRZDZkbN8V4lpAxr+1BgiJ3X6HGmYl8dOmYHWoVIVdT/uRhtqe/Hhhfx IX/yRJsxPTq30w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:48 2025 by rpki-client