This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json) Hash identifier: NqWmDG6eC80fDouBn5PHc7ugg3GNhvQPt1f1A0ijZ9U= Subject key identifier: FC:3E:8C:5A:4E:26:AB:92:89:02:15:66:AB:C0:CE:84:3F:CC:A8:7A Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3 Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3 Certificate serial: 019AF42DD441AD163D86A7BF89DA2D560D78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft Manifest number: 1359 Signing time: Sat 06 Dec 2025 15:00:35 +0000 Manifest this update: Sat 06 Dec 2025 15:00:35 +0000 Manifest next update: Sun 07 Dec 2025 15:00:35 +0000 Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=) 2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: QF+U21Na13b3H8px+TEvS+s9DzA7ytVjZWn1WWdOVLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d4:41:ad:16:3d:86:a7:bf:89:da:2d:56:0d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3 Validity Not Before: Dec 6 15:00:35 2025 GMT Not After : Dec 7 15:00:35 2025 GMT Subject: CN=fc3e8c5a4e26ab9289021566abc0ce843fcca87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:0d:5d:4f:f3:ba:58:9a:eb:c5:3d:c7:c3: 36:68:77:ee:98:34:a0:fe:df:ca:9d:7f:72:c9:df: f8:b9:e4:f9:6b:26:e7:56:f2:0c:e4:13:0c:8f:a7: 02:69:33:cf:e6:7c:3d:6f:b5:4c:a2:8f:a3:34:3c: d7:00:8e:3e:8c:4d:d6:5b:3b:aa:7f:bd:1b:6d:61: 30:4e:8b:26:64:80:f7:99:74:90:51:b5:f3:e0:19: a5:b9:c5:95:ab:cc:15:e1:c7:10:a3:8c:a5:94:e2: 78:90:04:e4:ef:2d:2a:46:5f:0e:b9:c5:8d:b0:fb: 82:56:be:22:41:3f:26:16:3a:c4:bc:bc:0a:c7:1e: 32:58:fb:d3:f9:f5:3b:85:ec:9f:d4:28:1b:29:db: 50:0c:c3:14:34:90:c0:2e:b0:61:ae:06:37:1e:26: ba:97:91:bf:cc:ba:74:a2:73:46:cf:eb:10:16:69: 36:e5:06:7c:5a:c3:ef:52:1b:0a:eb:da:d4:c7:24: c1:d3:65:78:b3:61:af:cc:57:a6:44:5f:86:2d:59: fe:3e:2d:56:2e:23:34:53:b8:af:17:f0:54:97:ca: 18:16:f3:dd:4f:75:d3:87:24:e1:1c:d9:f9:ca:61: f1:55:78:c2:0a:ed:ce:23:3b:23:07:1d:14:b1:71: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:8C:5A:4E:26:AB:92:89:02:15:66:AB:C0:CE:84:3F:CC:A8:7A X509v3 Authority Key Identifier: keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:94:fe:86:41:e7:0a:9d:e4:48:48:5f:5c:8f:54:3f:c8:df: de:f1:f9:a9:e0:88:71:7b:ed:0b:4c:4b:be:5c:cd:e0:b4:70: 5d:85:6b:71:7d:04:f2:38:bb:72:31:ba:3d:ab:2d:d9:2d:c0: f7:53:8e:99:24:85:db:58:85:fb:6b:98:58:8b:28:b9:13:e9: 08:22:ea:69:2f:aa:b9:13:c5:a5:f0:0f:02:3e:62:98:e4:00: 24:57:cf:1b:ee:ef:d9:c7:6f:0d:5b:a5:69:ff:f6:0f:6b:e3: 4c:e5:99:48:46:71:e1:2f:50:c8:ea:24:db:12:e8:63:cd:a0: 7e:40:7b:a8:7b:6d:6a:30:38:4a:79:70:ef:7e:da:44:ff:6b: c5:a9:d2:1a:2a:51:59:55:db:4f:7d:f9:78:e4:84:fc:7b:f8: e8:79:a6:6f:d5:f6:a5:66:81:7a:e6:1a:38:bf:44:d5:2f:85: 43:2c:e5:b4:28:da:b5:ed:69:06:98:15:39:98:91:3e:26:cd: 01:61:a6:c4:19:37:eb:6d:78:75:7d:a9:72:fd:ba:f9:b0:13: 7d:de:63:e2:24:db:7f:e0:2d:e9:8a:70:f5:b5:19:8e:34:66: 5e:d2:f1:89:37:1f:40:bb:81:d6:45:18:f7:85:42:51:af:61: 25:4d:54:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LdRBrRY9hqe/idotVg14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkN2Q4ZGU4Y2EwNjFlYTE2NGU2NzFjMzRlYjMzNzdmNTcz NmJiYzMwHhcNMjUxMjA2MTUwMDM1WhcNMjUxMjA3MTUwMDM1WjAzMTEwLwYDVQQD EyhmYzNlOGM1YTRlMjZhYjkyODkwMjE1NjZhYmMwY2U4NDNmY2NhODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JcNXU/zulia68U9x8M2aHfumDSg /t/KnX9yyd/4ueT5aybnVvIM5BMMj6cCaTPP5nw9b7VMoo+jNDzXAI4+jE3WWzuq f70bbWEwTosmZID3mXSQUbXz4BmlucWVq8wV4ccQo4yllOJ4kATk7y0qRl8OucWN sPuCVr4iQT8mFjrEvLwKxx4yWPvT+fU7heyf1CgbKdtQDMMUNJDALrBhrgY3Hia6 l5G/zLp0onNGz+sQFmk25QZ8WsPvUhsK69rUxyTB02V4s2GvzFemRF+GLVn+Pi1W LiM0U7ivF/BUl8oYFvPdT3XThyThHNn5ymHxVXjCCu3OIzsjBx0UsXHBrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPw+jFpOJquSiQIVZqvAzoQ/zKh6MB8GA1UdIwQY MBaAFK19jejKBh6hZOZxw06zN39XNrvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAt NDk3ODVmY2RkOWM0LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAtNDk3ODVmY2RkOWM0 LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5T+hkHn Cp3kSEhfXI9UP8jf3vH5qeCIcXvtC0xLvlzN4LRwXYVrcX0E8ji7cjG6Past2S3A 91OOmSSF21iF+2uYWIsouRPpCCLqaS+quRPFpfAPAj5imOQAJFfPG+7v2cdvDVul af/2D2vjTOWZSEZx4S9QyOok2xLoY82gfkB7qHttajA4Snlw737aRP9rxanSGipR WVXbT335eOSE/Hv46Hmmb9X2pWaBeuYaOL9E1S+FQyzltCjate1pBpgVOZiRPibN AWGmxBk36214dX2pcv26+bATfd5j4iTbf+At6Ypw9bUZjjRmXtLxiTcfQLuB1kUY 94VCUa9hJU1UrA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:40:42 2025 by rpki-client