This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json) Hash identifier: EtTcTf/OkpG5H6B1HNDIBwK6z4OLTtk59Fogs+e4Ewk= Subject key identifier: E0:0F:5C:59:CA:AD:C4:3F:FB:D3:EF:F4:A5:61:5F:68:F1:0D:1B:1A Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b Certificate serial: 019AF31C6D05FC7269BB02E02BF96EFE7690 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft Manifest number: 0E74 Signing time: Sat 06 Dec 2025 10:01:57 +0000 Manifest this update: Sat 06 Dec 2025 10:01:57 +0000 Manifest next update: Sun 07 Dec 2025 10:01:57 +0000 Files and hashes: 1: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (hash: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=) 2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: /a9q4NgoCgT919dYF2VHovtsv6akYSoRn7BwizHhB2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6d:05:fc:72:69:bb:02:e0:2b:f9:6e:fe:76:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b Validity Not Before: Dec 6 10:01:57 2025 GMT Not After : Dec 7 10:01:57 2025 GMT Subject: CN=e00f5c59caadc43ffbd3eff4a5615f68f10d1b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:9c:d5:97:88:29:60:55:d7:fc:fa:5b:e3: df:be:e3:63:9f:c3:8b:2d:f6:91:b6:1c:cf:36:98: c3:75:61:5c:5d:50:68:2e:cf:14:ff:32:36:f9:8f: 59:5d:1a:5d:4f:df:e5:20:c1:37:7c:5c:5c:31:83: 78:b3:b7:cd:e5:a8:43:20:3a:63:3f:96:28:f2:a8: fa:07:9a:65:c7:11:40:d2:ba:33:01:0a:b0:1b:ce: 6e:d7:95:35:6b:c3:cb:b2:8d:42:cf:90:d3:66:43: 9e:31:b1:cf:44:7b:63:de:22:17:c0:ff:00:19:2d: 78:e8:29:d6:53:43:4b:3e:0d:c2:e9:d5:e8:6b:a0: d7:d2:14:15:94:a0:6b:78:87:fe:ad:10:d1:d3:8a: ca:be:95:f2:3a:15:25:f0:23:d8:2e:a5:c2:08:56: 11:a0:1d:41:6b:04:f4:2c:77:b6:59:d2:5a:0d:9f: 2c:6b:51:fa:79:67:44:fa:26:73:a1:e0:7a:26:8c: 06:0f:09:f3:66:e0:2a:94:7e:ff:ec:fd:9f:34:5d: 0a:8c:43:32:83:23:2a:5f:07:97:2a:4c:e6:5e:39: db:9a:07:6e:6e:29:12:2f:41:bc:a2:51:31:eb:83: d5:9f:b2:f2:b4:b4:48:cf:a9:4c:55:45:16:4a:3d: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0F:5C:59:CA:AD:C4:3F:FB:D3:EF:F4:A5:61:5F:68:F1:0D:1B:1A X509v3 Authority Key Identifier: keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:91:b7:a2:cf:b6:e1:d4:e7:47:b9:49:32:4a:1b:f1:b4:a2: 6f:f7:50:5d:b8:aa:f6:3b:55:60:5f:82:5d:cc:89:c5:b8:4d: f2:87:5c:87:72:b5:bb:9a:a8:55:05:78:94:a7:c0:28:4b:e4: 2d:23:07:af:84:b9:ba:e0:3e:ba:97:79:44:cc:86:0b:3b:bd: 0b:79:cc:3a:ec:48:03:80:47:2a:40:bc:94:90:58:e9:cd:e0: 4a:0d:1c:8f:3f:3a:16:01:73:b0:55:6a:ab:0b:4f:10:21:13: 09:f2:bc:f4:4b:1e:66:a3:9c:f1:44:97:02:09:8b:3c:45:fc: d5:d1:6d:10:10:c9:83:c2:e1:95:92:b1:ca:9f:a4:98:14:33: 78:8f:85:17:7d:48:8d:ff:3a:04:df:31:80:fb:00:25:a2:0e: 07:6e:de:81:ee:ca:ef:9c:9a:a7:d6:12:25:10:34:77:69:52: 30:79:d2:f9:6d:55:ab:97:51:fe:66:b3:b5:6f:5e:71:68:54: 89:37:51:b4:0d:05:8d:60:28:7e:fb:e0:54:52:5c:6a:f7:4c: 0f:f7:5a:bd:a1:da:57:bf:90:98:07:6d:d9:22:26:20:db:dc: 06:f2:56:10:b4:34:76:53:07:24:21:e0:9b:71:2b:77:07:a3: 4c:ce:a5:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHG0F/HJpuwLgK/lu/naQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTZhNDQzNzRmZWE1ZWM5OWYxMGZiOGQ2YzdkOGVmZTJh MzM0OGIwHhcNMjUxMjA2MTAwMTU3WhcNMjUxMjA3MTAwMTU3WjAzMTEwLwYDVQQD EyhlMDBmNWM1OWNhYWRjNDNmZmJkM2VmZjRhNTYxNWY2OGYxMGQxYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iqc1ZeIKWBV1/z6W+PfvuNjn8OL LfaRthzPNpjDdWFcXVBoLs8U/zI2+Y9ZXRpdT9/lIME3fFxcMYN4s7fN5ahDIDpj P5Yo8qj6B5plxxFA0rozAQqwG85u15U1a8PLso1Cz5DTZkOeMbHPRHtj3iIXwP8A GS146CnWU0NLPg3C6dXoa6DX0hQVlKBreIf+rRDR04rKvpXyOhUl8CPYLqXCCFYR oB1BawT0LHe2WdJaDZ8sa1H6eWdE+iZzoeB6JowGDwnzZuAqlH7/7P2fNF0KjEMy gyMqXweXKkzmXjnbmgdubikSL0G8olEx64PVn7LytLRIz6lMVUUWSj0jhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAPXFnKrcQ/+9Pv9KVhX2jxDRsaMB8GA1UdIwQY MBaAFEcWpEN0/qXsmfEPuNbH2O/iozSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQt NWQ0MDEwOTAwZTg2LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQtNWQ0MDEwOTAwZTg2 LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJG3os+2 4dTnR7lJMkob8bSib/dQXbiq9jtVYF+CXcyJxbhN8odch3K1u5qoVQV4lKfAKEvk LSMHr4S5uuA+upd5RMyGCzu9C3nMOuxIA4BHKkC8lJBY6c3gSg0cjz86FgFzsFVq qwtPECETCfK89EseZqOc8USXAgmLPEX81dFtEBDJg8LhlZKxyp+kmBQzeI+FF31I jf86BN8xgPsAJaIOB27ege7K75yap9YSJRA0d2lSMHnS+W1Vq5dR/maztW9ecWhU iTdRtA0FjWAofvvgVFJcavdMD/davaHaV7+QmAdt2SImINvcBvJWELQ0dlMHJCHg m3ErdwejTM6lpw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:48 2025 by rpki-client