This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json) Hash identifier: 7Eh+5JVY5HNTnHSbAxPaQuoESwqMaKaZpYNE1rl8y4E= Subject key identifier: 70:FD:5B:25:CB:B1:50:2E:99:69:7A:8C:80:4C:53:CE:68:08:F0:66 Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4 Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4 Certificate serial: 019AF50A497DE77CF91E9FB72CE21DFB62B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft Manifest number: 0FCE Signing time: Sat 06 Dec 2025 19:01:23 +0000 Manifest this update: Sat 06 Dec 2025 19:01:23 +0000 Manifest next update: Sun 07 Dec 2025 19:01:23 +0000 Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=) 2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: 7Z9tdAboY3h4QGnygHvH7sdGjNlQwxpdt1xETBuhnoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:49:7d:e7:7c:f9:1e:9f:b7:2c:e2:1d:fb:62:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4 Validity Not Before: Dec 6 19:01:23 2025 GMT Not After : Dec 7 19:01:23 2025 GMT Subject: CN=70fd5b25cbb1502e99697a8c804c53ce6808f066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:a0:d7:e8:a1:2c:c7:44:84:d6:4b:aa:26: 97:81:2b:c5:14:52:22:08:fe:1b:c6:97:19:a0:e3: 53:0c:41:af:77:ef:61:ed:c8:ae:5c:02:3e:10:aa: d8:f6:2f:c1:e3:8a:92:3c:a9:9d:8e:db:8d:85:3a: bf:e5:5a:cc:29:23:f1:45:59:35:38:11:67:75:a8: 28:73:d9:2d:86:d5:d9:3c:d9:69:88:e2:91:34:9d: 10:0a:49:ff:69:80:7a:0f:66:36:94:82:e8:a3:63: 1c:ed:b6:a4:34:2f:05:bc:94:76:62:e4:06:51:72: f4:fd:36:08:ac:a9:5b:c7:f4:37:5b:96:e7:2d:1b: 73:04:76:69:a6:e0:d8:ac:7f:6f:3c:f2:b9:06:bf: 20:d1:72:eb:8c:2f:71:51:09:72:07:50:3a:e0:00: 15:db:09:35:20:b2:7d:f6:d0:88:39:e0:f2:3c:31: 13:25:e2:34:94:18:7d:6e:0c:09:5a:14:d1:43:1f: 6f:77:72:0a:5c:40:4a:d9:ad:79:c7:52:5a:85:76: ee:9e:f0:18:fa:32:06:35:f0:8c:e0:c1:dc:6e:56: ff:7d:08:8c:a8:51:26:ab:66:f7:9f:58:20:14:f6: b9:b7:e4:78:ae:24:ac:0a:b3:e2:6f:80:ee:b9:b5: 2e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:5B:25:CB:B1:50:2E:99:69:7A:8C:80:4C:53:CE:68:08:F0:66 X509v3 Authority Key Identifier: keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8d:33:30:a9:f6:7b:ed:e7:c6:7e:15:d3:a5:3a:b4:f1:82: 96:99:1c:99:f1:52:b1:8d:6e:aa:a1:a3:44:cb:bc:1a:dc:37: ce:f7:af:bc:4e:6b:c2:07:ff:45:45:8f:59:71:70:ea:76:81: 5e:7c:42:87:c0:af:d7:8b:22:ed:63:6b:8e:b4:0d:43:95:ea: 5f:5f:ca:76:c0:70:9b:0d:75:55:6a:b7:37:1f:03:69:2e:17: dc:b1:61:ea:9f:65:d6:52:4b:c5:3c:ba:e5:0f:ff:46:eb:04: a4:31:b0:db:01:5f:d1:d7:ec:b9:c3:df:aa:c6:92:da:0f:5c: be:fa:57:24:7c:b7:42:3a:52:ee:43:01:7d:79:46:2e:58:96: a1:75:8f:a6:18:dd:8d:50:57:49:79:e8:bf:50:12:25:29:25: f9:60:40:ef:61:c2:f5:ae:9b:c1:16:02:72:e6:9f:90:12:e8: 56:7c:bc:f5:ad:bd:85:09:34:9e:47:4f:5c:e7:0c:59:74:6f: bb:22:c0:03:9e:35:63:71:54:dd:8a:b4:52:a2:28:3d:13:4a: 24:9b:51:9a:53:f3:98:4d:ad:c5:b2:28:0b:97:0f:0e:1b:02: 85:c6:04:68:2e:59:d9:d6:a8:da:fd:dd:2d:08:bb:37:80:35: de:68:ca:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ckl953z5Hp+3LOId+2K0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGNhMDg1NTE3OGEwY2RkNzE5MTRiY2YyMjNhYTMxYWY2 MzY5YTQwHhcNMjUxMjA2MTkwMTIzWhcNMjUxMjA3MTkwMTIzWjAzMTEwLwYDVQQD Eyg3MGZkNWIyNWNiYjE1MDJlOTk2OTdhOGM4MDRjNTNjZTY4MDhmMDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqag1+ihLMdEhNZLqiaXgSvFFFIi CP4bxpcZoONTDEGvd+9h7ciuXAI+EKrY9i/B44qSPKmdjtuNhTq/5VrMKSPxRVk1 OBFndagoc9kthtXZPNlpiOKRNJ0QCkn/aYB6D2Y2lILoo2Mc7bakNC8FvJR2YuQG UXL0/TYIrKlbx/Q3W5bnLRtzBHZppuDYrH9vPPK5Br8g0XLrjC9xUQlyB1A64AAV 2wk1ILJ99tCIOeDyPDETJeI0lBh9bgwJWhTRQx9vd3IKXEBK2a15x1JahXbunvAY +jIGNfCM4MHcblb/fQiMqFEmq2b3n1ggFPa5t+R4riSsCrPib4DuubUuywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHD9WyXLsVAumWl6jIBMU85oCPBmMB8GA1UdIwQY MBaAFMdMoIVReKDN1xkUvPIjqjGvY2mkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB5Z2hWRjRvTTNYR1JTODhpT3FNYTlqYWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mMjIwYTAtZGY4MS00MmZiLWI3MTQt ZGVkZDM1MjkzMjMwLzEveDB5Z2hWRjRvTTNYR1JTODhpT3FNYTlqYWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9mMjIwYTAtZGY4MS00MmZiLWI3MTQtZGVkZDM1MjkzMjMw LzEveDB5Z2hWRjRvTTNYR1JTODhpT3FNYTlqYWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgo0zMKn2 e+3nxn4V06U6tPGClpkcmfFSsY1uqqGjRMu8Gtw3zvevvE5rwgf/RUWPWXFw6naB XnxCh8Cv14si7WNrjrQNQ5XqX1/KdsBwmw11VWq3Nx8DaS4X3LFh6p9l1lJLxTy6 5Q//RusEpDGw2wFf0dfsucPfqsaS2g9cvvpXJHy3QjpS7kMBfXlGLliWoXWPphjd jVBXSXnov1ASJSkl+WBA72HC9a6bwRYCcuafkBLoVny89a29hQk0nkdPXOcMWXRv uyLAA541Y3FU3Yq0UqIoPRNKJJtRmlPzmE2txbIoC5cPDhsChcYEaC5Z2dao2v3d LQi7N4A13mjKow== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:51 2025 by rpki-client