This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json) Hash identifier: ofmnxU6fZsBBhvv5duBdhjQ6Kb2LMLOf8tQl2QvYh9w= Subject key identifier: 74:64:F8:3A:0B:9B:71:84:67:5F:CE:F4:3B:C2:B2:94:FE:A6:4C:5B Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Certificate serial: 019AF49C1E3806DCA97C41A42184FD0A4083 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft Manifest number: 1450 Signing time: Sat 06 Dec 2025 17:01:03 +0000 Manifest this update: Sat 06 Dec 2025 17:01:03 +0000 Manifest next update: Sun 07 Dec 2025 17:01:03 +0000 Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=) 2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: lxqCW5a/fUMtuYM8iV9OUSpTcKz3ZAXmGjTeHrrDgU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1e:38:06:dc:a9:7c:41:a4:21:84:fd:0a:40:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e Validity Not Before: Dec 6 17:01:03 2025 GMT Not After : Dec 7 17:01:03 2025 GMT Subject: CN=7464f83a0b9b7184675fcef43bc2b294fea64c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c8:c7:ef:9d:55:be:84:d7:f9:54:39:d8:7b: 7c:26:58:91:1e:9d:23:4b:24:5e:2d:1f:66:37:28: 81:14:df:a7:7f:a3:28:8a:c8:c8:c6:1d:0f:d2:53: a9:48:b2:5d:f5:0f:02:eb:09:a4:d1:1e:70:3c:6c: b5:54:c3:40:df:9f:5b:ad:26:f7:0f:e8:f1:82:b5: af:f6:af:0d:59:2e:fc:72:7e:76:0d:68:da:15:f9: a4:5f:95:15:98:c0:9b:03:b7:a9:a7:eb:9c:62:75: 72:be:f5:2f:ea:4f:5a:f3:ae:e3:ee:2b:53:6f:50: b3:2f:05:52:95:34:ab:91:31:de:d0:b5:93:4f:ba: c4:90:89:d7:4b:18:54:91:bc:9a:73:9f:8d:ab:92: e9:83:fd:4c:a5:a1:c6:6a:27:f4:c6:9a:7a:96:a0: f3:11:5b:6c:af:95:75:12:55:66:b6:cb:50:da:b1: cc:1e:58:69:f0:9b:b0:99:28:05:78:a6:f5:24:00: ab:2b:f2:0d:8c:49:55:ef:66:08:48:b0:29:83:a7: ef:5c:9f:42:59:8a:8b:2d:44:f4:81:87:af:90:92: df:73:2b:c3:ba:31:35:e3:6d:5a:a4:d0:fc:94:95: 83:14:84:67:ab:3f:9e:06:2b:f4:08:c4:63:ef:32: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:64:F8:3A:0B:9B:71:84:67:5F:CE:F4:3B:C2:B2:94:FE:A6:4C:5B X509v3 Authority Key Identifier: keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c5:cb:3d:de:3f:a6:77:f4:d7:58:1d:9d:61:01:64:c3:90: 66:1f:ef:74:19:66:5c:77:43:b2:63:64:2c:25:8d:f7:fb:23: 0a:bd:d1:4e:1e:1c:99:11:4b:94:db:87:03:ad:b0:91:61:62: 40:1f:9c:62:61:31:8b:02:6a:b7:65:81:e5:8b:02:23:2b:50: ba:1d:28:9c:71:45:b0:17:f3:cd:21:b7:02:b3:c9:e2:ce:f9: 9a:bd:49:83:64:7f:94:ed:e9:a9:2e:40:bd:92:1f:ea:c2:17: 04:b2:db:ee:9b:e5:15:de:d2:e8:ae:67:c2:b4:9d:6d:06:fd: d6:55:ee:61:4b:45:02:e7:9f:5a:2b:58:fb:93:dd:c4:da:e9: 4b:d8:a7:3a:46:8a:17:0d:8d:76:cd:17:33:0f:65:f7:b8:01: c3:c3:70:a8:18:19:70:e5:eb:89:fd:b9:ee:b8:8e:92:73:72: 06:16:02:93:e4:51:09:62:95:40:63:3b:f6:82:04:65:e3:ac: d1:f7:5d:b6:c2:ca:e0:ae:00:4d:72:24:98:0b:d7:b8:f6:9a: c9:13:06:da:15:77:b3:2a:5b:51:f7:03:64:e1:6e:fa:f0:3f: af:e1:70:43:36:2a:ca:a5:63:eb:b4:ae:fc:bb:3f:09:81:57: cc:0a:fe:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nB44BtypfEGkIYT9CkCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTNmMWVkMWI0OWM1YmE3Y2MxZjE5MmE0MDI0NzY1YTI1 MzY2NGUwHhcNMjUxMjA2MTcwMTAzWhcNMjUxMjA3MTcwMTAzWjAzMTEwLwYDVQQD Eyg3NDY0ZjgzYTBiOWI3MTg0Njc1ZmNlZjQzYmMyYjI5NGZlYTY0YzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8jH751VvoTX+VQ52Ht8JliRHp0j SyReLR9mNyiBFN+nf6MoisjIxh0P0lOpSLJd9Q8C6wmk0R5wPGy1VMNA359brSb3 D+jxgrWv9q8NWS78cn52DWjaFfmkX5UVmMCbA7epp+ucYnVyvvUv6k9a867j7itT b1CzLwVSlTSrkTHe0LWTT7rEkInXSxhUkbyac5+Nq5Lpg/1MpaHGaif0xpp6lqDz EVtsr5V1ElVmtstQ2rHMHlhp8JuwmSgFeKb1JACrK/INjElV72YISLApg6fvXJ9C WYqLLUT0gYevkJLfcyvDujE1421apND8lJWDFIRnqz+eBiv0CMRj7zIPwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRk+DoLm3GEZ1/O9DvCspT+pkxbMB8GA1UdIwQY MBaAFK/j8e0bScW6fMHxkqQCR2WiU2ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEt MjY4OGQzNDZmNmFiLzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEtMjY4OGQzNDZmNmFi LzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcXLPd4/ pnf011gdnWEBZMOQZh/vdBlmXHdDsmNkLCWN9/sjCr3RTh4cmRFLlNuHA62wkWFi QB+cYmExiwJqt2WB5YsCIytQuh0onHFFsBfzzSG3ArPJ4s75mr1Jg2R/lO3pqS5A vZIf6sIXBLLb7pvlFd7S6K5nwrSdbQb91lXuYUtFAuefWitY+5PdxNrpS9inOkaK Fw2Nds0XMw9l97gBw8NwqBgZcOXrif257riOknNyBhYCk+RRCWKVQGM79oIEZeOs 0fddtsLK4K4ATXIkmAvXuPaayRMG2hV3sypbUfcDZOFu+vA/r+FwQzYqyqVj67Su /Ls/CYFXzAr+9A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:25:13 2025 by rpki-client