This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json) Hash identifier: /njXjOoDUJ+27TGTkzR4HEuUKM0K8gIKHfdt1u6rmZA= Subject key identifier: 64:B4:6C:95:62:C2:A4:74:6C:58:78:77:81:BC:38:97:55:AD:18:39 Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9 Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9 Certificate serial: 019AF1D1BE86EC7550F4D701186E97F0A0F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft Manifest number: 0A30 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=) 2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: Z5Ehj1hLeRnBdi4jvUFkkO21PIu0PRlpubisJRpFTFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:be:86:ec:75:50:f4:d7:01:18:6e:97:f0:a0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9 Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=64b46c9562c2a4746c58787781bc389755ad1839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:89:94:d3:d4:d5:68:76:ba:27:c4:8d:1f: a4:93:44:53:e4:2c:a2:11:44:1f:0c:9c:30:33:90: 1a:14:f0:51:b7:aa:00:b1:59:be:0a:3a:bf:33:bc: 27:ac:b0:61:aa:d4:8a:09:91:e8:d9:90:0d:f0:1a: 6e:6f:95:49:9e:89:fb:ea:c0:a8:12:e0:d7:4e:2c: 9d:80:9c:12:5b:2d:74:52:f9:c8:80:51:ba:11:58: 63:24:4c:79:5c:7e:51:a3:da:21:d0:81:da:02:54: bd:83:23:ec:b4:62:6c:85:50:f2:e9:cc:a6:86:17: 06:b5:05:f6:55:0b:e2:7d:ac:34:17:b2:3a:c8:63: 22:e4:70:b4:c4:38:ad:8c:10:83:5a:d7:36:80:07: b2:3d:4f:d8:d8:08:03:74:4d:3e:e1:1f:6d:f1:9b: ce:70:43:18:81:8c:82:bb:3f:0a:a0:ac:1c:de:1a: 46:f9:20:d5:e5:eb:15:56:f1:47:a2:72:e3:d8:dd: f9:c2:05:ff:9c:fd:32:37:76:c5:97:ce:8c:b4:30: 92:29:61:30:d0:c1:53:60:98:37:4a:ba:09:af:60: 51:11:4f:89:14:47:d9:e2:39:a7:f2:0d:3a:af:a4: d9:57:44:2b:fa:d6:31:66:bb:1a:ab:a5:3c:88:52: 0a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B4:6C:95:62:C2:A4:74:6C:58:78:77:81:BC:38:97:55:AD:18:39 X509v3 Authority Key Identifier: keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:74:50:a8:df:f5:b9:81:81:45:45:11:01:39:f4:b3:1b:51: c0:8c:77:d2:db:26:b3:48:95:aa:44:48:9c:7d:9a:a2:75:47: 1b:0b:23:b5:d7:95:57:99:a5:5e:39:b3:dc:34:a5:0a:93:9e: ce:4e:e8:e5:a6:5e:54:e2:f3:d8:ef:5b:78:cb:b2:5c:f2:f8: da:51:76:dd:ae:00:6f:34:85:17:2f:ba:44:b2:c9:85:f3:88: 05:02:22:79:1e:86:0b:bc:1a:9d:75:ad:13:55:dd:2f:03:22: 8d:51:f6:49:45:31:35:16:f7:a0:2c:37:4f:56:b2:8d:d0:39: fb:81:28:77:e8:89:99:6f:6a:da:5b:00:39:86:dd:20:d2:02: 2b:ab:4b:a6:20:12:a3:fd:5a:f3:75:ea:67:29:a4:7a:cb:e2: 82:3e:07:58:8f:24:be:d4:64:76:4e:31:4b:7a:f3:51:03:1a: b2:29:6a:cb:e0:0d:b8:3d:f2:6b:cf:e5:a6:51:80:88:67:dc: 77:5c:3a:b2:99:ef:b3:f6:b6:1d:3e:98:55:7c:c3:37:82:66: ee:8a:49:76:d7:f8:cd:62:ca:ca:d0:2b:5e:e6:0a:f2:ef:9e: 05:1a:23:79:a0:df:c3:23:6d:07:95:73:7c:f7:ca:a5:2c:27: 53:6d:8f:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b6G7HVQ9NcBGG6X8KDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1N2FhMWM3OGY2Y2NhYmM0N2I1NTEyMWEzNWZmMzBkOTk4 MjdlZTkwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD Eyg2NGI0NmM5NTYyYzJhNDc0NmM1ODc4Nzc4MWJjMzg5NzU1YWQxODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEOJlNPU1Wh2uifEjR+kk0RT5Cyi EUQfDJwwM5AaFPBRt6oAsVm+Cjq/M7wnrLBhqtSKCZHo2ZAN8Bpub5VJnon76sCo EuDXTiydgJwSWy10UvnIgFG6EVhjJEx5XH5Ro9oh0IHaAlS9gyPstGJshVDy6cym hhcGtQX2VQvifaw0F7I6yGMi5HC0xDitjBCDWtc2gAeyPU/Y2AgDdE0+4R9t8ZvO cEMYgYyCuz8KoKwc3hpG+SDV5esVVvFHonLj2N35wgX/nP0yN3bFl86MtDCSKWEw 0MFTYJg3SroJr2BREU+JFEfZ4jmn8g06r6TZV0Qr+tYxZrsaq6U8iFIKFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS0bJViwqR0bFh4d4G8OJdVrRg5MB8GA1UdIwQY MBaAFEV6ocePbMq8R7VRIaNf8w2Zgn7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQt Yzc0MGUyZmUzMGQzLzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQtYzc0MGUyZmUzMGQz LzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3RQqN/1 uYGBRUURATn0sxtRwIx30tsms0iVqkRInH2aonVHGwsjtdeVV5mlXjmz3DSlCpOe zk7o5aZeVOLz2O9beMuyXPL42lF23a4AbzSFFy+6RLLJhfOIBQIieR6GC7wanXWt E1XdLwMijVH2SUUxNRb3oCw3T1ayjdA5+4Eod+iJmW9q2lsAOYbdINICK6tLpiAS o/1a83XqZymkesvigj4HWI8kvtRkdk4xS3rzUQMasilqy+ANuD3ya8/lplGAiGfc d1w6spnvs/a2HT6YVXzDN4Jm7opJdtf4zWLKytArXuYK8u+eBRojeaDfwyNtB5Vz fPfKpSwnU22PjA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:05 2025 by rpki-client