This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json) Hash identifier: /rKUt3ocxDyIFXLdcilNTXaZsQblzCZksbHm4Dwznd8= Subject key identifier: C1:24:14:B8:7A:78:63:79:89:21:95:41:44:FE:A1:CA:98:3E:9A:BC Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a Certificate serial: 019AF0517DD815AFB825B314C5EC5CEE6038 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft Manifest number: 1769 Signing time: Fri 05 Dec 2025 21:01:03 +0000 Manifest this update: Fri 05 Dec 2025 21:01:03 +0000 Manifest next update: Sat 06 Dec 2025 21:01:03 +0000 Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: uuV07nR9PWh+4e0Kq3jQbnsXiLUCenmfPtuVZgX46Cc=) 2: vtQbm6_VRhmLRi0RHGDc9fplBTM.roa (hash: eADEScAIa4bIWKJyJycVlqpQxZJCdFWOZOPAomMNKiU=) 3: x3_1xiv-NQfFznfpCLWxiJi7a90.roa (hash: Cqgk6ziv4FZVRmKg6qsSirIsfpT7hD739QyYsLmilF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:7d:d8:15:af:b8:25:b3:14:c5:ec:5c:ee:60:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a Validity Not Before: Dec 5 21:01:03 2025 GMT Not After : Dec 6 21:01:03 2025 GMT Subject: CN=c12414b87a7863798921954144fea1ca983e9abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:18:ee:ab:0b:cd:e6:37:72:e9:5f:0e:a9: e6:71:70:72:3c:83:2a:af:7a:18:52:74:d3:40:94: eb:09:67:d7:cf:b4:59:47:c2:02:2c:69:08:47:47: 3d:07:12:55:c3:7a:9b:6b:c2:b1:32:98:13:a2:94: f3:98:aa:5c:23:92:23:ff:dc:16:ff:7d:a6:15:9e: ee:1d:91:90:36:b6:1f:2b:b7:23:4c:1c:92:b2:29: 2a:11:4a:58:4d:fa:aa:50:3e:e9:6f:07:01:9a:1f: 10:e6:34:46:29:3f:8b:0d:34:42:16:cc:aa:ef:ed: 75:a3:0d:65:13:ff:84:93:66:0b:62:af:93:f3:a6: 30:c6:a8:eb:01:63:e1:bb:de:09:a4:13:23:53:8d: 93:74:8e:7a:7b:b7:ab:ca:8f:bb:e8:9d:5f:a9:5a: 33:0c:94:ea:88:2d:b2:67:1c:b2:f4:fe:62:fb:e8: 5e:b8:f5:5b:5f:0a:0a:0e:c1:e2:29:3a:a6:ea:a0: e8:7a:7e:1a:2b:f2:ff:3f:30:ba:89:82:59:ae:45: c1:a4:08:1d:dd:77:bf:dd:b9:64:91:6c:fc:60:f3: 9f:15:5f:37:ed:d6:96:5e:09:c4:fa:79:fa:71:76: b9:f6:62:c4:1f:c7:71:43:08:7d:1c:e8:b2:cd:ed: c4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:14:B8:7A:78:63:79:89:21:95:41:44:FE:A1:CA:98:3E:9A:BC X509v3 Authority Key Identifier: keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:bf:62:63:3d:92:f0:27:e6:b7:77:0c:f5:5b:20:08:37:23: be:fb:10:82:0a:ce:25:d9:26:ef:4b:e0:89:84:80:9e:f3:3f: b3:e8:1a:41:d7:17:c9:a8:74:d9:08:b7:35:da:e0:a4:9f:6d: c1:0e:bf:e0:8f:9a:b8:89:e9:2e:0b:9e:d3:50:09:63:8f:35: a4:3b:df:1f:24:53:31:37:b8:aa:f1:ab:ff:cc:68:e0:a6:19: 08:5f:df:31:aa:e8:66:91:e6:6b:b3:ab:68:c5:e8:be:70:06: 21:cd:a5:be:a3:4b:45:60:d2:0a:2d:5e:48:0e:0b:06:a3:31: 14:3d:0e:98:1e:46:fc:66:d4:48:f1:ef:18:a5:70:66:c4:f7: b6:60:9e:86:b1:68:3d:bd:d4:43:96:1f:dc:b7:3c:25:be:10: e1:66:fb:3b:81:02:56:f8:0e:34:b3:3c:c5:46:4d:86:ff:a7: 9a:b4:10:ea:8e:09:9a:7d:7a:b3:82:a5:46:70:5a:70:65:04: 33:ef:2a:10:bc:09:fb:7a:83:59:47:55:d6:dd:85:06:0a:e2: 36:ab:8d:3a:9f:1b:06:69:a9:17:69:ca:3d:70:af:18:36:8b: 8c:01:80:2e:06:d4:1b:88:27:03:e0:1b:f9:50:f0:c9:17:e9: a3:f6:71:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUX3YFa+4JbMUxexc7mA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmQ3MWQ4ODQ1ZDJmZTI5NmE0NmQ3OTE3NmY1OTBkOGRi NGYxNmEwHhcNMjUxMjA1MjEwMTAzWhcNMjUxMjA2MjEwMTAzWjAzMTEwLwYDVQQD EyhjMTI0MTRiODdhNzg2Mzc5ODkyMTk1NDE0NGZlYTFjYTk4M2U5YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8QY7qsLzeY3culfDqnmcXByPIMq r3oYUnTTQJTrCWfXz7RZR8ICLGkIR0c9BxJVw3qba8KxMpgTopTzmKpcI5Ij/9wW /32mFZ7uHZGQNrYfK7cjTBySsikqEUpYTfqqUD7pbwcBmh8Q5jRGKT+LDTRCFsyq 7+11ow1lE/+Ek2YLYq+T86YwxqjrAWPhu94JpBMjU42TdI56e7eryo+76J1fqVoz DJTqiC2yZxyy9P5i++heuPVbXwoKDsHiKTqm6qDoen4aK/L/PzC6iYJZrkXBpAgd 3Xe/3blkkWz8YPOfFV837daWXgnE+nn6cXa59mLEH8dxQwh9HOiyze3EFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEkFLh6eGN5iSGVQUT+ocqYPpq8MB8GA1UdIwQY MBaAFNdtcdiEXS/ilqRteRdvWQ2NtPFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTIt ZGJkOTFiMTExODQ0LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTItZGJkOTFiMTExODQ0 LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYL9iYz2S 8Cfmt3cM9VsgCDcjvvsQggrOJdkm70vgiYSAnvM/s+gaQdcXyah02Qi3NdrgpJ9t wQ6/4I+auInpLgue01AJY481pDvfHyRTMTe4qvGr/8xo4KYZCF/fMaroZpHma7Or aMXovnAGIc2lvqNLRWDSCi1eSA4LBqMxFD0OmB5G/GbUSPHvGKVwZsT3tmCehrFo Pb3UQ5Yf3Lc8Jb4Q4Wb7O4ECVvgONLM8xUZNhv+nmrQQ6o4Jmn16s4KlRnBacGUE M+8qELwJ+3qDWUdV1t2FBgriNquNOp8bBmmpF2nKPXCvGDaLjAGALgbUG4gnA+Ab +VDwyRfpo/ZxEg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:23 2025 by rpki-client