This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json) Hash identifier: nPqBixm6G14HPP0WeUxm4/6+oUdGXl0yv5hXZeZB89Y= Subject key identifier: F2:89:1B:D3:04:CC:78:3D:88:8C:7F:E4:12:1C:9F:2A:54:D9:63:03 Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Certificate serial: 019AF31B940D09CECC0733FFADBA8E2F3A34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 10:01:02 +0000 Manifest this update: Sat 06 Dec 2025 10:01:02 +0000 Manifest next update: Sun 07 Dec 2025 10:01:02 +0000 Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=) 2: 9N3RXGB1Oy8UN0Y7dyN-L02RNQg.roa (hash: LpNakPd/aYXI1JhkoX1IQRJscRwTM6lULLDhw2GOIT0=) 3: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=) 4: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=) 5: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: 1rmCizgjNg77Pxdi5PfVWc+vS+HX+4jsMWMbGwh5jfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:94:0d:09:ce:cc:07:33:ff:ad:ba:8e:2f:3a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Validity Not Before: Dec 6 10:01:02 2025 GMT Not After : Dec 7 10:01:02 2025 GMT Subject: CN=f2891bd304cc783d888c7fe4121c9f2a54d96303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:ee:5f:43:54:ff:56:bd:e4:87:bb:07:ac: e8:f2:05:68:bb:ac:ea:a8:2d:b7:ac:4b:d6:b8:df: d9:08:10:16:81:2c:b3:cf:42:a4:4d:ce:29:6c:b2: 55:1a:e1:03:16:84:15:1c:75:a7:99:98:b5:20:07: 82:7e:27:27:dd:7b:09:61:00:78:f9:f1:51:24:da: cf:78:5c:03:df:e9:1f:72:0b:cc:e2:d2:8e:b0:27: ff:8c:91:dc:20:ce:18:72:ce:36:1a:7d:ae:5b:62: 07:36:6b:c4:ee:42:7c:bf:22:70:41:23:c1:56:ff: 53:94:73:f2:4d:c7:64:f7:93:7b:10:fe:db:f2:86: 0e:dd:2e:81:3d:0a:d0:01:26:c4:0a:b5:27:d5:c1: fd:09:d0:23:a9:68:16:da:21:d1:35:b1:3d:a9:d2: 4f:ba:cf:09:9d:e2:86:6e:9a:e6:17:45:9e:d2:17: d1:a2:12:f9:d5:4b:aa:42:3a:77:68:27:2f:1b:26: 14:1c:10:09:23:35:d3:93:2a:e5:05:ba:f7:7f:a3: c5:41:f9:88:7e:ad:94:40:c4:5f:5c:16:7f:2e:c6: ff:00:7c:ec:05:35:72:5d:07:c0:6c:d4:10:c6:8b: 04:de:cc:e3:0f:cf:81:c5:08:72:c1:c4:bf:8e:bf: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:89:1B:D3:04:CC:78:3D:88:8C:7F:E4:12:1C:9F:2A:54:D9:63:03 X509v3 Authority Key Identifier: keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a3:9b:7f:95:2f:10:be:33:4a:f7:51:f6:b4:04:43:81:c2: 96:d0:bc:4a:87:f7:ec:98:23:68:79:31:a2:16:e5:5b:64:d4: 4c:64:ac:67:a8:fb:55:27:79:f3:86:66:5b:d4:f3:a5:8d:bc: 10:42:e3:3d:02:e1:27:54:97:5e:be:aa:ba:12:9b:22:cc:f7: 4d:46:32:16:98:bb:7c:64:34:9b:50:ed:c7:da:0e:da:0a:37: 47:76:13:a7:63:a9:bc:aa:b4:be:64:2b:25:1b:78:60:a1:97: 05:74:54:49:d1:fd:f9:bd:4a:4f:b6:d4:8e:d5:23:e6:93:e1: e8:85:c2:b9:97:42:31:41:f6:ca:7c:4c:98:ac:9e:38:03:7f: 46:f3:a1:db:27:e0:85:07:33:f4:26:25:52:14:08:95:c5:a6: ce:38:b5:63:b1:aa:d9:ed:d3:c8:49:d8:30:1d:a1:86:ca:49: 25:22:3d:59:4e:9e:08:95:79:1e:22:16:91:22:5b:97:10:bb: dc:d2:06:b4:c6:e1:69:e8:5f:2e:25:e2:5b:92:bf:e5:b1:ce: 2c:7f:50:fd:f4:a1:b1:c8:e6:74:02:6c:78:3c:60:5b:e0:58: 7c:b0:9b:6f:62:88:46:ac:a3:e5:b1:5c:7a:6c:4f:ff:05:84: 60:53:87:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5QNCc7MBzP/rbqOLzo0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWM0ZjRhMTZjYzUxYmQ1MTYyMTAxMTUzOWNlYjU3NGFj MTVkMDIwHhcNMjUxMjA2MTAwMTAyWhcNMjUxMjA3MTAwMTAyWjAzMTEwLwYDVQQD EyhmMjg5MWJkMzA0Y2M3ODNkODg4YzdmZTQxMjFjOWYyYTU0ZDk2MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWzuX0NU/1a95Ie7B6zo8gVou6zq qC23rEvWuN/ZCBAWgSyzz0KkTc4pbLJVGuEDFoQVHHWnmZi1IAeCficn3XsJYQB4 +fFRJNrPeFwD3+kfcgvM4tKOsCf/jJHcIM4Ycs42Gn2uW2IHNmvE7kJ8vyJwQSPB Vv9TlHPyTcdk95N7EP7b8oYO3S6BPQrQASbECrUn1cH9CdAjqWgW2iHRNbE9qdJP us8JneKGbprmF0We0hfRohL51UuqQjp3aCcvGyYUHBAJIzXTkyrlBbr3f6PFQfmI fq2UQMRfXBZ/Lsb/AHzsBTVyXQfAbNQQxosE3szjD8+BxQhywcS/jr/8twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKJG9MEzHg9iIx/5BIcnypU2WMDMB8GA1UdIwQY MBaAFK/sT0oWzFG9UWIQEVOc61dKwV0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0Nzgt MjdlZmMxM2FmZjFlLzEvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0NzgtMjdlZmMxM2FmZjFl LzEvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaObf5Uv EL4zSvdR9rQEQ4HCltC8Sof37JgjaHkxohblW2TUTGSsZ6j7VSd584ZmW9TzpY28 EELjPQLhJ1SXXr6quhKbIsz3TUYyFpi7fGQ0m1Dtx9oO2go3R3YTp2OpvKq0vmQr JRt4YKGXBXRUSdH9+b1KT7bUjtUj5pPh6IXCuZdCMUH2ynxMmKyeOAN/RvOh2yfg hQcz9CYlUhQIlcWmzji1Y7Gq2e3TyEnYMB2hhspJJSI9WU6eCJV5HiIWkSJblxC7 3NIGtMbhaehfLiXiW5K/5bHOLH9Q/fShscjmdAJseDxgW+BYfLCbb2KIRqyj5bFc emxP/wWEYFOHlg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:28 2025 by rpki-client