This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json) Hash identifier: xrGEAM6fzLLA0W4ImlvwMSPV1IKwU8kIjJcZ4YErD7E= Subject key identifier: BA:1C:B5:74:5D:C7:7C:96:AE:13:0F:B2:05:3D:B6:52:93:1E:F4:79 Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Certificate serial: 019AF61C460D53CC2B2C90AA8146383158A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft Manifest number: 12A2 Signing time: Sun 07 Dec 2025 00:00:39 +0000 Manifest this update: Sun 07 Dec 2025 00:00:39 +0000 Manifest next update: Mon 08 Dec 2025 00:00:39 +0000 Files and hashes: 1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=) 2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: AW3CWa7ISNOdgU41HwTZ2DY0CPYlKOVW1Wd1tQ2CyAQ=) 3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=) 4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:46:0d:53:cc:2b:2c:90:aa:81:46:38:31:58:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Validity Not Before: Dec 7 00:00:39 2025 GMT Not After : Dec 8 00:00:39 2025 GMT Subject: CN=ba1cb5745dc77c96ae130fb2053db652931ef479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:e2:2b:dc:ab:58:4a:b1:1d:34:2c:41:ae: a7:f7:13:b1:f9:56:98:b1:54:5c:e8:b8:5f:81:4d: 53:21:4e:9a:5d:6e:2e:dc:81:f6:7a:9a:7e:fd:f9: 50:f4:3d:db:e6:65:5e:e8:94:68:8c:b0:ab:48:7c: ca:b9:08:3c:2b:6a:61:cb:d9:16:1f:c8:cc:1c:9b: 8b:f3:94:a6:79:9e:b8:bb:bc:33:5f:1d:ca:03:1e: 32:6c:0a:e2:d0:f2:4c:9d:3c:b8:9b:f9:fe:23:3c: af:fe:5d:83:3f:34:ac:46:96:a5:16:c0:db:99:cf: 88:f3:5d:7e:c8:a8:b0:f7:17:65:88:b1:3f:e7:4c: 6a:97:f3:2c:1a:9a:b0:d7:01:4a:41:32:5d:8f:ae: 9a:bc:38:46:09:11:31:d6:8c:53:21:0f:b8:99:8e: 09:fc:53:6f:91:fb:f3:ef:c3:db:3e:2a:c2:cb:79: 77:35:8e:04:0a:56:df:dc:07:0c:a6:93:62:c6:44: eb:df:e2:84:3f:e2:16:dc:f7:43:ae:8e:2b:13:e8: 6a:91:70:03:15:6e:14:a9:28:b1:61:9b:24:ec:c0: 97:51:4b:9a:49:a2:93:63:39:e4:03:d7:c2:f0:3a: 14:20:5f:64:34:8f:6a:29:da:57:89:16:fd:6a:96: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:B5:74:5D:C7:7C:96:AE:13:0F:B2:05:3D:B6:52:93:1E:F4:79 X509v3 Authority Key Identifier: keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1d:ee:bd:23:e1:8e:87:03:00:9c:9b:67:cc:fd:12:8d:e0: ab:0b:21:8d:e1:86:9a:e3:83:25:4f:a1:73:3f:6e:3a:29:bb: 3b:15:18:c8:2a:6b:82:1d:53:b3:93:14:45:23:b9:07:2d:a3: b0:7f:f4:0e:83:63:db:f9:fb:04:e8:57:5a:b4:d8:9d:0a:8d: c3:1f:5d:d1:25:b1:2b:c9:77:74:06:e4:fc:05:4e:41:dd:ad: 5a:da:17:97:35:1b:46:30:cc:4d:a5:56:66:57:46:e3:f4:ec: dc:c8:37:01:a6:c4:ef:3d:e6:e0:67:77:36:da:e0:c7:90:7e: fe:73:b4:b3:8b:ff:17:f9:d3:40:c3:63:e3:57:12:00:d4:7f: 64:18:af:1e:1d:8b:b2:d7:d6:1b:29:f3:ff:02:db:de:23:90: 8b:7f:5a:9f:4f:d1:ad:40:18:6e:ed:94:81:1d:33:bf:b7:e7: b9:f1:b6:e6:dd:c5:1d:22:74:46:f3:ed:cb:65:27:64:f7:b9: 70:24:2d:23:3a:1f:cb:b1:07:02:a7:cc:7d:71:04:b6:c2:d4: 9a:56:5c:bc:6d:f8:1f:ec:f6:a2:d0:18:34:14:7d:39:84:41: 48:e8:8a:a2:04:1a:69:eb:98:a6:e6:a7:9d:90:69:09:04:30: 5e:5d:93:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HEYNU8wrLJCqgUY4MVihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWVkM2Q3YmE1MTFjYTYwMDJkODQ1YjNjMGFhODExMWEz NTU5Y2YwHhcNMjUxMjA3MDAwMDM5WhcNMjUxMjA4MDAwMDM5WjAzMTEwLwYDVQQD EyhiYTFjYjU3NDVkYzc3Yzk2YWUxMzBmYjIwNTNkYjY1MjkzMWVmNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVLiK9yrWEqxHTQsQa6n9xOx+VaY sVRc6LhfgU1TIU6aXW4u3IH2epp+/flQ9D3b5mVe6JRojLCrSHzKuQg8K2phy9kW H8jMHJuL85SmeZ64u7wzXx3KAx4ybAri0PJMnTy4m/n+Izyv/l2DPzSsRpalFsDb mc+I811+yKiw9xdliLE/50xql/MsGpqw1wFKQTJdj66avDhGCREx1oxTIQ+4mY4J /FNvkfvz78PbPirCy3l3NY4EClbf3AcMppNixkTr3+KEP+IW3PdDro4rE+hqkXAD FW4UqSixYZsk7MCXUUuaSaKTYznkA9fC8DoUIF9kNI9qKdpXiRb9apaIWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoctXRdx3yWrhMPsgU9tlKTHvR5MB8GA1UdIwQY MBaAFDMe09e6URymAC2EWzwKqBEaNVnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQt YmFmMjRkZDU4MzlmLzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQtYmFmMjRkZDU4Mzlm LzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALh3uvSPh jocDAJybZ8z9Eo3gqwshjeGGmuODJU+hcz9uOim7OxUYyCprgh1Ts5MURSO5By2j sH/0DoNj2/n7BOhXWrTYnQqNwx9d0SWxK8l3dAbk/AVOQd2tWtoXlzUbRjDMTaVW ZldG4/Ts3Mg3AabE7z3m4Gd3Ntrgx5B+/nO0s4v/F/nTQMNj41cSANR/ZBivHh2L stfWGynz/wLb3iOQi39an0/RrUAYbu2UgR0zv7fnufG25t3FHSJ0RvPty2UnZPe5 cCQtIzofy7EHAqfMfXEEtsLUmlZcvG34H+z2otAYNBR9OYRBSOiKogQaaeuYpuan nZBpCQQwXl2TZg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:10 2025 by rpki-client