This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json) Hash identifier: 6pumjb3izT5VZs/88BZgp0ru+BT14PuwSKL68w+VD98= Subject key identifier: AE:8B:A0:84:61:12:03:0B:42:07:AB:26:AF:75:9F:2A:7A:31:66:19 Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93 Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293 Certificate serial: 019AF19ACBB8BA55CF026F085E02C7D85A23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft Manifest number: 12E4 Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=) 2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: wsjQ2vAsodG2kGPGBZzLGeGH43x3RCrX/k+dArHxL98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cb:b8:ba:55:cf:02:6f:08:5e:02:c7:d8:5a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=ae8ba0846112030b4207ab26af759f2a7a316619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:d4:34:90:f3:67:88:b9:0f:e1:fd:a7:2b: 6f:b2:ac:2a:2c:f3:b6:a1:31:99:45:ef:04:a4:96: 72:ca:8b:46:c4:e2:41:a4:49:99:38:59:6f:89:f0: 6f:49:da:bd:25:bf:8f:c5:ea:b2:07:ba:64:ca:27: 64:36:3a:4c:9b:47:38:a9:b4:05:91:63:2d:9d:a5: f0:c8:d0:92:6f:2f:b5:46:e4:97:7d:9d:15:6f:3c: d6:ee:1a:55:1d:0c:8d:0c:f9:0a:f4:f6:07:27:70: 4b:1a:97:1f:b1:35:ba:21:a1:92:1d:df:c4:74:69: 94:a3:cf:1b:98:49:bd:c4:3f:5d:61:1d:d1:71:ae: 00:ed:5f:fa:19:df:51:a7:e2:b7:01:55:ed:a9:e7: 1e:52:49:7e:58:ba:68:e7:a2:09:6c:3d:51:b3:12: e9:d9:ad:21:4b:93:70:89:f7:47:86:e4:e0:28:9b: 67:55:35:e9:aa:8e:9e:97:5d:f4:1b:19:cb:1e:b5: c8:a6:96:10:b3:13:eb:e8:0c:1e:d8:30:2b:c3:a2: 0d:cc:00:f0:cd:04:c5:e2:b9:74:50:77:fb:5a:87: a4:31:86:e7:fc:4a:6c:88:5d:ca:70:0e:06:19:29: 50:01:69:03:3f:63:8b:ea:a2:c4:2e:c4:23:fc:d7: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:A0:84:61:12:03:0B:42:07:AB:26:AF:75:9F:2A:7A:31:66:19 X509v3 Authority Key Identifier: keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:22:6b:d1:06:22:ca:a9:a4:65:f1:5c:16:5a:aa:32:a8:db: d9:3e:49:bb:31:88:1b:b7:1f:45:04:88:10:54:2b:3c:40:4f: a4:72:29:6d:55:da:95:36:42:db:2d:0d:8c:9a:79:5b:fc:80: 7b:97:82:3b:e0:17:8e:65:7d:7e:3f:03:a5:2b:07:49:a8:76: 49:b3:3d:c2:e1:30:83:3e:c6:21:25:47:8c:3c:ac:7f:c1:45: 3b:f5:9d:07:28:bc:4d:2a:55:86:5e:ba:3f:f1:92:d1:dc:6a: 7f:30:9a:4f:ae:4a:3c:24:63:36:1a:12:04:e7:c4:7a:f4:0f: f9:ed:54:5b:99:be:25:d1:81:75:b8:01:fa:a6:19:8c:b9:87: a9:c0:5c:a4:f9:9c:93:e9:95:cb:b7:5a:da:af:ac:c6:05:b8: 5a:47:ba:39:84:8a:81:88:80:78:f8:81:2a:6a:0c:73:d7:3a: cc:ed:7c:82:b8:9b:64:46:e1:75:82:11:2a:e6:c9:96:60:07: a7:f1:ba:06:83:a0:61:13:de:30:e6:d7:85:53:68:17:ff:fe: 40:52:78:27:4b:8e:fa:dd:8d:17:52:ed:1b:98:b9:e5:bc:67: 88:24:d2:f0:a6:8e:a1:a4:30:1a:8b:f2:95:ef:35:44:16:b3: 14:d6:e4:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsu4ulXPAm8IXgLH2FojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZmM1YzY1YzkzYTc0MDQwODZiMTdhNTRlN2UwZGE5NjBh OWIyOTMwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD EyhhZThiYTA4NDYxMTIwMzBiNDIwN2FiMjZhZjc1OWYyYTdhMzE2NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQzUNJDzZ4i5D+H9pytvsqwqLPO2 oTGZRe8EpJZyyotGxOJBpEmZOFlvifBvSdq9Jb+PxeqyB7pkyidkNjpMm0c4qbQF kWMtnaXwyNCSby+1RuSXfZ0VbzzW7hpVHQyNDPkK9PYHJ3BLGpcfsTW6IaGSHd/E dGmUo88bmEm9xD9dYR3Rca4A7V/6Gd9Rp+K3AVXtqeceUkl+WLpo56IJbD1RsxLp 2a0hS5NwifdHhuTgKJtnVTXpqo6el130GxnLHrXIppYQsxPr6Awe2DArw6INzADw zQTF4rl0UHf7WoekMYbn/EpsiF3KcA4GGSlQAWkDP2OL6qLELsQj/NdchwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6LoIRhEgMLQgerJq91nyp6MWYZMB8GA1UdIwQY MBaAFKf8XGXJOnQECGsXpU5+DalgqbKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjkt ZjBhZDM3NWE4MDg2LzEvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjktZjBhZDM3NWE4MDg2 LzEvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCJr0QYi yqmkZfFcFlqqMqjb2T5JuzGIG7cfRQSIEFQrPEBPpHIpbVXalTZC2y0NjJp5W/yA e5eCO+AXjmV9fj8DpSsHSah2SbM9wuEwgz7GISVHjDysf8FFO/WdByi8TSpVhl66 P/GS0dxqfzCaT65KPCRjNhoSBOfEevQP+e1UW5m+JdGBdbgB+qYZjLmHqcBcpPmc k+mVy7da2q+sxgW4Wke6OYSKgYiAePiBKmoMc9c6zO18gribZEbhdYIRKubJlmAH p/G6BoOgYRPeMObXhVNoF//+QFJ4J0uO+t2NF1LtG5i55bxniCTS8KaOoaQwGovy le81RBazFNbkBw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:40 2025 by rpki-client