This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json) Hash identifier: sgS3PoAjc1r7F9wi0DFxZiJb76S4IkVyyOxZ9UunrAs= Subject key identifier: 52:A1:1F:FD:CA:BB:9A:C0:B6:1B:5A:95:A9:6C:8F:59:63:48:17:96 Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72 Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672 Certificate serial: 019AFCC3CC17EBE47D64822C794CA949EC72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft Manifest number: 1767 Signing time: Mon 08 Dec 2025 07:01:21 +0000 Manifest this update: Mon 08 Dec 2025 07:01:21 +0000 Manifest next update: Tue 09 Dec 2025 07:01:21 +0000 Files and hashes: 1: GKayJjEpupDXezS7bWkDTRh1Jmw.roa (hash: eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=) 2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: tY0IxpyTvnyJ1dEeJ+MxJD7OePuqjZ7d01Z4DesH2qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:cc:17:eb:e4:7d:64:82:2c:79:4c:a9:49:ec:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672 Validity Not Before: Dec 8 07:01:21 2025 GMT Not After : Dec 9 07:01:21 2025 GMT Subject: CN=52a11ffdcabb9ac0b61b5a95a96c8f5963481796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:d8:9f:4a:65:90:0c:79:a5:af:bf:91:a0: bf:5d:0f:31:e6:ec:19:16:e4:97:ab:4a:41:f3:3d: 6e:84:58:aa:db:34:e3:b3:37:47:6e:c4:a4:ec:fe: d9:f8:2c:3e:a9:01:12:96:15:a6:79:de:86:3a:42: 2c:6b:75:45:64:8d:7f:41:0e:05:ef:dc:62:7b:e6: 98:67:0c:5c:59:4f:4f:70:e0:28:b6:cf:aa:2e:da: 99:cc:3b:f3:63:3f:68:d3:c8:f5:f1:b6:e1:a3:fd: 13:69:a9:17:8e:53:c5:6c:a3:2e:92:ab:f0:26:b4: 60:be:ea:a8:51:e5:d8:3e:62:f9:1d:de:69:7e:d9: b9:40:e7:15:63:7e:ac:cb:1a:0d:d5:01:db:4f:3c: cb:68:1f:cc:d5:ec:af:51:04:b5:0d:8f:bc:95:95: 03:c8:76:bd:c8:db:4e:63:10:a3:1f:7f:f0:8c:9d: 8e:3d:07:71:fd:40:33:2e:bc:47:14:66:d9:7d:69: 46:1d:f5:92:d7:a8:cc:bd:ef:40:13:08:2b:2c:a2: 2b:c2:43:d6:f3:e7:3a:b8:fc:2c:a2:72:a4:29:55: 9d:9a:03:f4:f2:87:b1:bd:81:05:d8:2b:0a:91:52: 2c:99:dc:d0:3b:bb:67:d5:95:a5:0a:77:32:dd:5b: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A1:1F:FD:CA:BB:9A:C0:B6:1B:5A:95:A9:6C:8F:59:63:48:17:96 X509v3 Authority Key Identifier: keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a1:09:5a:d4:b1:f2:2f:b6:d3:5a:6a:66:fd:36:cc:b9:de: 79:52:47:48:1e:90:d1:28:34:34:04:01:a5:8f:20:e5:5b:25: 6b:ee:83:91:78:36:75:09:13:73:f7:85:8c:8d:80:05:ee:cb: 62:22:59:25:19:cb:a6:42:f1:eb:d5:c6:08:40:f3:7c:36:b9: 94:a5:5d:dd:2d:0f:42:c6:d5:ad:ce:e5:91:4b:80:7b:d4:99: d2:b8:29:5a:1b:f6:c0:d0:7d:3f:8e:fc:4d:e0:13:cf:df:2c: 3e:b4:86:7a:21:99:7e:c9:44:10:f2:b2:2f:c3:6a:b9:3d:0f: 1e:2c:34:d1:94:b4:95:6e:42:b4:f7:c1:b6:de:cf:9b:b7:99: 65:04:21:ee:86:b3:f5:11:cc:7d:06:df:83:b0:58:3f:b7:06: 02:bb:11:9f:03:34:78:89:78:f9:bc:7e:70:6e:2c:2e:9a:53: c4:15:cf:9b:ac:bc:d8:7a:e9:c4:a7:10:13:05:51:82:f9:30: b5:96:7d:f0:ac:69:5c:06:1b:1f:61:6f:bc:2b:6f:f4:50:ae: 1e:b4:2a:d9:ae:7e:58:82:2c:b7:0e:7d:cf:6d:4d:45:aa:2e: 2b:fd:21:d2:a6:6d:10:ca:c6:43:9a:68:ea:fa:e8:5e:b9:a3: e5:08:13:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w8wX6+R9ZIIseUypSexyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzA4OWM0NWM1NTA4OGZlOTBlYjYxMDAyZjA3ZjBmOTU4 NjI2NzIwHhcNMjUxMjA4MDcwMTIxWhcNMjUxMjA5MDcwMTIxWjAzMTEwLwYDVQQD Eyg1MmExMWZmZGNhYmI5YWMwYjYxYjVhOTVhOTZjOGY1OTYzNDgxNzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun7Yn0plkAx5pa+/kaC/XQ8x5uwZ FuSXq0pB8z1uhFiq2zTjszdHbsSk7P7Z+Cw+qQESlhWmed6GOkIsa3VFZI1/QQ4F 79xie+aYZwxcWU9PcOAots+qLtqZzDvzYz9o08j18bbho/0TaakXjlPFbKMukqvw JrRgvuqoUeXYPmL5Hd5pftm5QOcVY36syxoN1QHbTzzLaB/M1eyvUQS1DY+8lZUD yHa9yNtOYxCjH3/wjJ2OPQdx/UAzLrxHFGbZfWlGHfWS16jMve9AEwgrLKIrwkPW 8+c6uPwsonKkKVWdmgP08oexvYEF2CsKkVIsmdzQO7tn1ZWlCncy3Vu6pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKhH/3Ku5rAthtalalsj1ljSBeWMB8GA1UdIwQY MBaAFKVwicRcVQiP6Q62EALwfw+VhiZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYt ZDkyZDY0YjlmODAxLzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYtZDkyZDY0YjlmODAx LzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6EJWtSx 8i+201pqZv02zLneeVJHSB6Q0Sg0NAQBpY8g5Vsla+6DkXg2dQkTc/eFjI2ABe7L YiJZJRnLpkLx69XGCEDzfDa5lKVd3S0PQsbVrc7lkUuAe9SZ0rgpWhv2wNB9P478 TeATz98sPrSGeiGZfslEEPKyL8NquT0PHiw00ZS0lW5CtPfBtt7Pm7eZZQQh7oaz 9RHMfQbfg7BYP7cGArsRnwM0eIl4+bx+cG4sLppTxBXPm6y82HrpxKcQEwVRgvkw tZZ98KxpXAYbH2FvvCtv9FCuHrQq2a5+WIIstw59z21NRaouK/0h0qZtEMrGQ5po 6vroXrmj5QgTwQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:32 2025 by rpki-client