This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json) Hash identifier: itqx8LVsHdxmoMpGbZ2infPZy04TOLb4vUoaznbkQyk= Subject key identifier: 84:86:D7:BC:7E:89:B0:F1:63:00:01:C1:69:B1:8D:1C:82:0A:74:C7 Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34 Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34 Certificate serial: 019AF31C11A7FB012A8EE5D3294A6CC6BE91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft Manifest number: 09E2 Signing time: Sat 06 Dec 2025 10:01:34 +0000 Manifest this update: Sat 06 Dec 2025 10:01:34 +0000 Manifest next update: Sun 07 Dec 2025 10:01:34 +0000 Files and hashes: 1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=) 2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: nAJb5NfKK53CnonvXE6dSRldtyT52EzRaOAnkeKHDqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:11:a7:fb:01:2a:8e:e5:d3:29:4a:6c:c6:be:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34 Validity Not Before: Dec 6 10:01:34 2025 GMT Not After : Dec 7 10:01:34 2025 GMT Subject: CN=8486d7bc7e89b0f1630001c169b18d1c820a74c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:fd:ff:b8:a3:33:19:fe:c9:8c:c8:a2:2c: 60:17:91:b5:be:1b:77:21:a8:e5:5f:f5:78:5c:07: e9:0f:5f:c1:f2:12:59:a6:13:55:ea:d9:0d:a1:ff: f0:36:58:5e:5f:96:e9:ad:ce:90:c4:05:08:db:d0: fe:80:84:7f:ff:c8:f8:41:87:fb:04:6a:3f:3e:da: 71:af:57:e2:51:91:49:e1:1d:51:06:c4:32:3e:b0: 12:3b:b0:1b:c0:07:74:6a:5d:3f:b3:f1:94:18:13: c8:b6:0f:04:ec:d7:1d:24:f3:87:eb:bc:aa:d9:28: e6:56:2b:08:92:26:69:18:01:2f:9d:0c:9a:4e:7b: 28:85:21:fd:7e:4f:7d:9c:1f:05:88:1f:0a:1a:b5: 5e:29:42:1c:44:6b:02:d8:9f:26:0e:aa:cb:c5:6d: 02:46:ca:51:66:9c:d5:42:a0:73:60:6f:e2:f9:81: 6e:03:01:d9:a4:43:3a:af:11:f8:ff:17:ef:12:de: eb:e4:a1:6d:e2:f3:a5:6a:26:e2:95:e7:d6:fd:6d: f5:57:4e:4b:4c:20:19:b1:8b:b6:06:75:0d:93:ca: 0c:b3:70:86:70:ed:51:ee:43:a6:fc:5f:63:10:31: 06:13:eb:7a:84:71:25:05:a1:75:0a:93:95:ae:2d: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:D7:BC:7E:89:B0:F1:63:00:01:C1:69:B1:8D:1C:82:0A:74:C7 X509v3 Authority Key Identifier: keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7d:da:cc:c7:25:23:26:67:21:ec:25:89:73:b6:9b:47:a1: 80:f4:d7:0e:4c:86:55:ef:f2:da:28:7c:27:4b:14:b5:bd:d7: 90:b8:a5:37:92:c9:71:8d:9d:aa:cc:22:27:e6:a6:1d:77:4c: f3:40:90:56:b1:c5:21:d1:ca:49:9d:b5:46:7b:c5:09:0b:70: 78:bd:20:06:d7:6e:b9:54:9f:6c:bd:87:7f:a8:1a:4a:f2:d1: 41:ac:7d:fa:b4:f1:40:44:98:9e:5b:8e:77:cb:be:49:af:92: ca:b5:71:de:5e:ae:f4:0f:2e:ad:b2:98:40:56:54:1e:f1:fd: 92:a7:29:8c:b6:15:9b:bb:7f:72:17:86:1b:d9:c0:48:fa:92: f3:e6:2a:42:a8:0b:92:21:05:20:55:34:f6:98:db:5d:36:40: a3:fd:04:6a:da:ae:65:d9:0e:81:f5:a9:33:53:28:16:bf:41: c7:2c:dc:8f:ed:cd:f1:87:b5:fe:3b:44:64:0c:f0:2f:72:18: 15:65:f3:84:a3:2c:8a:dd:87:ec:1d:5e:e9:36:cc:f8:64:13: 7e:34:8b:48:b5:df:56:92:8a:5f:00:f3:af:77:c3:eb:7d:5e: 5b:67:fa:d5:69:70:80:61:3b:ad:2d:1f:9d:85:4d:08:e2:56: 74:f0:58:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBGn+wEqjuXTKUpsxr6RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTVkMzMzZGFkOWQ2MmQ1MzI4ZDEyNTc4YTMxZGVmNDJh ZjhmMzQwHhcNMjUxMjA2MTAwMTM0WhcNMjUxMjA3MTAwMTM0WjAzMTEwLwYDVQQD Eyg4NDg2ZDdiYzdlODliMGYxNjMwMDAxYzE2OWIxOGQxYzgyMGE3NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDX9/7ijMxn+yYzIoixgF5G1vht3 IajlX/V4XAfpD1/B8hJZphNV6tkNof/wNlheX5bprc6QxAUI29D+gIR//8j4QYf7 BGo/Ptpxr1fiUZFJ4R1RBsQyPrASO7AbwAd0al0/s/GUGBPItg8E7NcdJPOH67yq 2SjmVisIkiZpGAEvnQyaTnsohSH9fk99nB8FiB8KGrVeKUIcRGsC2J8mDqrLxW0C RspRZpzVQqBzYG/i+YFuAwHZpEM6rxH4/xfvEt7r5KFt4vOlaibilefW/W31V05L TCAZsYu2BnUNk8oMs3CGcO1R7kOm/F9jEDEGE+t6hHElBaF1CpOVri3jkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISG17x+ibDxYwABwWmxjRyCCnTHMB8GA1UdIwQY MBaAFEfl0zPa2dYtUyjRJXijHe9Cr480MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1YVE05cloxaTFUS05FbGVLTWQ3MEt2anpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kNjYxZDQtYzYyNC00YTBjLTkwNjkt MzUyY2ZjMzY5ZWYzLzEvUi1YVE05cloxaTFUS05FbGVLTWQ3MEt2anpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kNjYxZDQtYzYyNC00YTBjLTkwNjktMzUyY2ZjMzY5ZWYz LzEvUi1YVE05cloxaTFUS05FbGVLTWQ3MEt2anpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYH3azMcl IyZnIewliXO2m0ehgPTXDkyGVe/y2ih8J0sUtb3XkLilN5LJcY2dqswiJ+amHXdM 80CQVrHFIdHKSZ21RnvFCQtweL0gBtduuVSfbL2Hf6gaSvLRQax9+rTxQESYnluO d8u+Sa+SyrVx3l6u9A8urbKYQFZUHvH9kqcpjLYVm7t/cheGG9nASPqS8+YqQqgL kiEFIFU09pjbXTZAo/0EatquZdkOgfWpM1MoFr9Bxyzcj+3N8Ye1/jtEZAzwL3IY FWXzhKMsit2H7B1e6TbM+GQTfjSLSLXfVpKKXwDzr3fD631eW2f61WlwgGE7rS0f nYVNCOJWdPBYFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:30 2025 by rpki-client