This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json) Hash identifier: rp6xCsK5BYIKxp0/Jj7UOstlQSlpwiXDCJV6Rt81k2U= Subject key identifier: 9F:83:05:F2:B9:AC:FA:6B:E0:37:99:CD:E9:5C:8F:0A:53:E9:92:34 Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca Certificate serial: 019B3A21F74A60AD7F8DD00F04936B8A149B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 05:01:03 +0000 Manifest this update: Sat 20 Dec 2025 05:01:03 +0000 Manifest next update: Sun 21 Dec 2025 05:01:03 +0000 Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=) 2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: LGYqG7Sq8qaY5nOxDMHmvU3jE1NB++IhnF8+T787+SM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:f7:4a:60:ad:7f:8d:d0:0f:04:93:6b:8a:14:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca Validity Not Before: Dec 20 05:01:03 2025 GMT Not After : Dec 21 05:01:03 2025 GMT Subject: CN=9f8305f2b9acfa6be03799cde95c8f0a53e99234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:7f:14:51:00:fe:13:c4:e3:6d:63:f0:4f: fb:08:26:8d:4b:da:65:1c:5d:c6:1c:40:e4:4f:69: 01:d9:b7:36:6c:e1:49:b9:f7:26:38:7e:73:07:c8: 4c:2f:5d:26:ba:33:40:33:c2:8d:bc:fc:59:d3:d9: 91:2c:4f:b8:ba:8f:67:b8:d4:77:ed:f6:ea:eb:23: 0a:98:88:00:c2:e8:0b:f4:4b:9e:b3:87:6b:59:7f: 24:34:71:b0:c6:e7:2c:ce:25:0a:af:f2:1b:4f:b6: 3a:e9:18:a9:4c:4a:00:ff:4a:63:75:36:34:1a:b5: ac:02:bf:ce:3a:a2:ef:d4:3e:7c:52:20:2d:f5:56: 8c:00:df:f4:8d:5a:67:ed:a3:40:a6:a1:77:c6:13: 11:f3:23:a1:53:7e:68:51:ae:4c:51:25:6e:4e:93: bf:30:ac:8a:15:7a:d1:b7:01:a8:37:0f:7a:cc:80: 31:74:4c:34:0b:72:f0:ab:46:94:1d:07:19:a9:06: b8:ec:61:80:a6:87:e4:b2:9c:0f:04:0d:c9:2d:5c: ba:13:ab:b3:fe:89:b3:5d:12:18:4e:ca:5d:82:58: 88:30:5e:37:00:01:85:67:01:a6:0e:36:e3:b0:1d: b8:85:72:d7:93:20:51:93:0a:6c:19:bb:0d:85:04: 12:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:83:05:F2:B9:AC:FA:6B:E0:37:99:CD:E9:5C:8F:0A:53:E9:92:34 X509v3 Authority Key Identifier: keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:15:f8:52:f7:9b:58:10:dd:09:a4:5d:1f:8e:98:66:0f:eb: 0b:a3:90:5e:ce:1e:4a:cf:f2:01:9b:9f:32:ac:28:f3:d8:1f: 49:52:5e:06:4f:6f:df:36:99:95:ab:94:5c:75:8a:2b:50:68: 40:40:5d:02:f5:e5:18:9f:09:05:8d:d4:02:39:f2:4f:b5:a7: 12:27:34:a4:9e:19:55:05:94:db:a5:cf:af:07:7c:e3:eb:85: 99:79:19:ef:ba:a9:73:29:ac:07:42:a3:4d:3f:a1:dc:a9:d1: 7d:c1:72:07:93:01:c0:8e:28:c5:e7:ae:db:0f:28:f9:88:38: d5:4f:b8:35:ea:5f:5a:41:d4:c9:b5:e4:a6:ae:d7:3e:17:eb: f4:2f:d0:5a:d3:37:0d:64:21:f7:80:75:62:2a:90:7c:72:ba: 13:07:3b:54:30:a1:1a:cb:91:24:80:0c:5a:4c:14:e9:2a:6c: b8:c3:1e:17:95:94:3e:d9:d9:de:ca:4c:68:39:ab:d5:78:b4: 7d:7a:dc:1b:87:ab:a0:c8:f5:65:a4:69:d7:9b:d2:fa:b6:ff: 71:da:67:84:eb:4c:2c:2a:3b:66:30:a7:b5:91:1d:59:c3:b0: 2e:fc:26:27:43:d2:bc:f6:11:5a:bc:05:8b:65:c3:15:ba:e0: b7:ba:05:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IfdKYK1/jdAPBJNrihSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjVmMDgwMzFlMzVhZjk1NDVkM2FkM2QxMzhjYWQxMDM5 NmUyY2EwHhcNMjUxMjIwMDUwMTAzWhcNMjUxMjIxMDUwMTAzWjAzMTEwLwYDVQQD Eyg5ZjgzMDVmMmI5YWNmYTZiZTAzNzk5Y2RlOTVjOGYwYTUzZTk5MjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIZ/FFEA/hPE421j8E/7CCaNS9pl HF3GHEDkT2kB2bc2bOFJufcmOH5zB8hML10mujNAM8KNvPxZ09mRLE+4uo9nuNR3 7fbq6yMKmIgAwugL9Eues4drWX8kNHGwxucsziUKr/IbT7Y66RipTEoA/0pjdTY0 GrWsAr/OOqLv1D58UiAt9VaMAN/0jVpn7aNApqF3xhMR8yOhU35oUa5MUSVuTpO/ MKyKFXrRtwGoNw96zIAxdEw0C3Lwq0aUHQcZqQa47GGApofkspwPBA3JLVy6E6uz /omzXRIYTspdgliIMF43AAGFZwGmDjbjsB24hXLXkyBRkwpsGbsNhQQSrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+DBfK5rPpr4DeZzelcjwpT6ZI0MB8GA1UdIwQY MBaAFPz18IAx41r5VF0609E4ytEDluLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUt YmNiZmIxODk4ZWJhLzEvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iN2JkZjYtOWRmNC00ZDRmLThkOTUtYmNiZmIxODk4ZWJh LzEvX1BYd2dESGpXdmxVWFRyVDBUakswUU9XNHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhX4Uveb WBDdCaRdH46YZg/rC6OQXs4eSs/yAZufMqwo89gfSVJeBk9v3zaZlauUXHWKK1Bo QEBdAvXlGJ8JBY3UAjnyT7WnEic0pJ4ZVQWU26XPrwd84+uFmXkZ77qpcymsB0Kj TT+h3KnRfcFyB5MBwI4oxeeu2w8o+Yg41U+4NepfWkHUybXkpq7XPhfr9C/QWtM3 DWQh94B1YiqQfHK6Ewc7VDChGsuRJIAMWkwU6SpsuMMeF5WUPtnZ3spMaDmr1Xi0 fXrcG4eroMj1ZaRp15vS+rb/cdpnhOtMLCo7ZjCntZEdWcOwLvwmJ0PSvPYRWrwF i2XDFbrgt7oFiA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:50:43 2025 by rpki-client