This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json) Hash identifier: BNegrxVkx4Iz5deUbEPCpoGXq6JaLl+HLsqK+HJoGbs= Subject key identifier: 14:F6:A8:22:D0:E1:2E:7B:ED:64:59:E6:69:61:15:B5:23:D3:5A:A4 Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d Certificate serial: 019AF16469D4248DD862CEAEB7B27BD50865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft Manifest number: 1216 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=) 2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: qy0wSRqYzkknBkUSb6Zp3KSzTnUclsi4vA2S1SFZZHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:69:d4:24:8d:d8:62:ce:ae:b7:b2:7b:d5:08:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=14f6a822d0e12e7bed6459e6696115b523d35aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9e:66:2a:da:2b:31:66:29:23:32:30:59:f4: d1:3f:f6:9e:94:93:e4:fb:66:8b:a7:84:41:95:50: 63:07:b4:18:29:16:92:83:80:f6:0c:f6:de:72:1c: d3:37:e6:19:9a:51:d6:31:00:90:b0:f2:02:e4:c6: 35:15:6e:77:fe:9e:c4:47:0a:f8:3e:4c:61:b1:45: cd:25:fb:c5:d0:f5:51:34:9b:dd:51:68:72:fc:4a: db:63:8d:d6:50:4a:cf:06:d7:8c:3d:31:87:0a:71: 5f:7a:47:f8:56:02:6b:c9:18:8a:a2:53:39:be:5e: 85:b4:dd:1f:cb:87:53:c9:29:e9:8c:3b:66:b4:f2: 85:9e:92:9a:13:4c:75:11:eb:9a:8d:f0:c3:48:2d: 21:4c:a9:aa:9d:53:9d:77:fb:6d:13:48:5d:38:94: 23:a5:06:28:68:b4:d5:66:d5:0f:cb:8c:37:8a:a1: dd:e0:2f:6f:be:bb:b6:7e:87:c8:4f:e8:f8:3c:c8: 08:fd:8a:49:d1:45:62:86:c4:86:8a:54:2b:91:41: 2e:21:db:2a:5c:ad:31:d7:2f:4e:6a:cb:a9:c3:fd: bb:5d:fe:e2:3f:2e:f6:ca:d2:31:16:b8:5f:35:09: 09:bf:f4:58:de:3e:f0:70:93:5d:4f:e2:35:9b:48: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F6:A8:22:D0:E1:2E:7B:ED:64:59:E6:69:61:15:B5:23:D3:5A:A4 X509v3 Authority Key Identifier: keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:bd:f0:c6:f2:cb:1c:df:49:ea:9d:25:10:74:20:49:ff:a2: 2b:0c:91:9a:f8:d9:05:8b:c5:30:65:10:89:37:45:dd:68:67: 24:99:15:e2:b1:c0:39:48:a0:49:da:f2:c7:92:88:ed:17:7b: 9b:16:e7:a5:f1:d6:0c:a1:c2:c5:37:89:fd:ac:50:58:95:f8: 76:4e:28:2c:d1:14:3c:a0:d0:c0:79:49:e9:f8:9e:2c:93:72: 8f:b8:c8:87:fb:07:c1:95:3d:b0:98:17:b0:e7:35:97:1e:a7: 27:c1:18:22:63:68:9b:48:0b:ee:0b:43:24:9e:58:84:40:e4: 19:44:40:94:35:e0:c3:26:01:c5:5a:aa:c8:02:a5:24:85:9c: e3:7b:03:e3:6c:73:00:00:56:9b:f3:77:34:21:e8:8e:52:d1: 7c:50:f2:7d:e7:9b:e0:65:54:b1:98:b5:c8:14:26:84:b0:3a: f1:49:ed:98:21:06:ba:57:0f:60:e7:88:4d:f4:62:a4:9b:3c: dd:18:75:60:0b:1a:24:cc:24:22:31:14:00:6a:24:f4:28:0a: 0c:7e:0a:e9:28:20:4d:f8:49:cb:1a:57:a3:fd:0d:16:a8:b5: 91:61:cb:38:c3:56:03:2d:9f:ad:fa:e7:2f:1d:15:96:af:b2: 9f:49:c7:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGnUJI3YYs6ut7J71QhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NzBkMjhmYzQ5YWEwYWU4MDhjMzgzZjU4N2YzZWE0Y2Zl YjA0OWQwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD EygxNGY2YTgyMmQwZTEyZTdiZWQ2NDU5ZTY2OTYxMTViNTIzZDM1YWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz55mKtorMWYpIzIwWfTRP/aelJPk +2aLp4RBlVBjB7QYKRaSg4D2DPbechzTN+YZmlHWMQCQsPIC5MY1FW53/p7ERwr4 PkxhsUXNJfvF0PVRNJvdUWhy/ErbY43WUErPBteMPTGHCnFfekf4VgJryRiKolM5 vl6FtN0fy4dTySnpjDtmtPKFnpKaE0x1EeuajfDDSC0hTKmqnVOdd/ttE0hdOJQj pQYoaLTVZtUPy4w3iqHd4C9vvru2fofIT+j4PMgI/YpJ0UVihsSGilQrkUEuIdsq XK0x1y9Oasupw/27Xf7iPy72ytIxFrhfNQkJv/RY3j7wcJNdT+I1m0g9jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT2qCLQ4S577WRZ5mlhFbUj01qkMB8GA1UdIwQY MBaAFEVw0o/EmqCugIw4P1h/PqTP6wSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjct ZWIwNzM3OTdhYzY2LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjctZWIwNzM3OTdhYzY2 LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb3wxvLL HN9J6p0lEHQgSf+iKwyRmvjZBYvFMGUQiTdF3WhnJJkV4rHAOUigSdryx5KI7Rd7 mxbnpfHWDKHCxTeJ/axQWJX4dk4oLNEUPKDQwHlJ6fieLJNyj7jIh/sHwZU9sJgX sOc1lx6nJ8EYImNom0gL7gtDJJ5YhEDkGURAlDXgwyYBxVqqyAKlJIWc43sD42xz AABWm/N3NCHojlLRfFDyfeeb4GVUsZi1yBQmhLA68UntmCEGulcPYOeITfRipJs8 3Rh1YAsaJMwkIjEUAGok9CgKDH4K6SggTfhJyxpXo/0NFqi1kWHLOMNWAy2frfrn Lx0Vlq+yn0nHrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:01 2025 by rpki-client