This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json) Hash identifier: mVug+G06hkHE7hEOS5WrxWgDUtSrXi2WSzZX7g92lO0= Subject key identifier: AA:08:2C:ED:D0:30:FB:BD:D0:86:DA:65:4E:1A:D0:4E:B0:2B:E2:FF Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a Certificate serial: 019AF577961198CE82E0B6511E43B7CE0F3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft Manifest number: 10A2 Signing time: Sat 06 Dec 2025 21:00:46 +0000 Manifest this update: Sat 06 Dec 2025 21:00:46 +0000 Manifest next update: Sun 07 Dec 2025 21:00:46 +0000 Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=) 2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: yI0+o4+FmoAYUimGRwEEZDmvgEuEoLs99LtD/IbD67c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:96:11:98:ce:82:e0:b6:51:1e:43:b7:ce:0f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a Validity Not Before: Dec 6 21:00:46 2025 GMT Not After : Dec 7 21:00:46 2025 GMT Subject: CN=aa082cedd030fbbdd086da654e1ad04eb02be2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:af:35:28:ac:98:b4:a8:ac:48:45:84:b2:24: f9:c2:fb:63:ba:10:a7:48:c6:26:8c:74:63:42:a8: 5a:02:a0:88:49:26:0f:dc:92:f7:93:8a:1a:11:15: 5d:08:b8:60:89:77:98:1b:16:69:65:6d:c9:f8:f7: e0:08:67:5e:c2:9c:08:c2:da:42:2e:24:5b:90:13: f9:ae:ec:5c:97:ab:09:be:ac:77:24:ea:84:32:bb: 86:9e:20:08:6f:8c:49:35:4f:c8:15:24:00:ee:4d: 69:79:f4:b3:f7:3e:83:3b:7d:e3:0e:79:83:24:33: 81:42:17:de:69:14:5c:8d:dd:5f:a9:a5:c7:83:18: cf:3d:a6:6d:8e:cc:5b:5f:46:fc:8d:d6:9a:e3:22: de:0d:64:1b:9e:d4:17:cf:ef:33:13:b2:67:8b:d5: 1b:14:fb:36:59:46:f2:e8:57:3b:b2:78:f3:ef:9c: 04:61:ee:68:d3:8c:f3:28:3f:64:4e:eb:45:0d:e1: 82:6f:d3:2a:5f:81:15:a1:c7:13:68:2b:ed:86:a7: 28:01:9d:fe:0a:b4:b3:7e:5f:ff:3c:58:c2:d6:04: 1b:aa:fc:f0:37:8b:a6:da:27:74:80:e3:2c:c4:fe: ff:a8:9d:6b:05:aa:f2:1b:40:4a:09:e7:84:91:1e: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:08:2C:ED:D0:30:FB:BD:D0:86:DA:65:4E:1A:D0:4E:B0:2B:E2:FF X509v3 Authority Key Identifier: keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:11:e2:cb:59:80:2d:89:e3:28:62:18:9e:4a:ae:39:b3:44: 16:85:6d:0f:5d:16:39:eb:e8:7a:21:91:20:16:78:ed:ee:22: 4e:f0:10:94:0f:2c:e7:5f:63:f2:a1:91:90:03:84:5f:3a:64: ec:9c:93:34:7b:d0:20:3b:91:42:a9:57:9f:7f:5b:c8:84:c2: 5b:42:be:38:ac:b0:9c:44:61:dd:25:43:df:3c:d7:59:15:ba: ea:f2:69:bf:5e:6b:0c:78:73:d3:1d:8f:1d:68:02:34:70:39: 04:36:81:33:01:85:d7:29:89:28:b9:cd:e1:4d:f1:dc:1d:55: fc:e0:a7:d1:4e:cc:a5:4f:2a:47:5b:5f:ff:3d:24:34:e6:d7: 85:d4:91:72:03:29:d3:95:a8:59:df:4f:f2:52:00:99:95:1c: 35:fe:eb:d8:3d:3a:e0:c9:e5:a8:1e:96:29:7e:18:93:b6:d9: dd:d4:c2:32:fe:c1:54:66:91:75:c8:b9:0b:d7:c1:0f:42:ea: 05:42:f8:35:61:50:1d:cc:04:f1:ee:3a:59:a8:83:8f:4d:c6: 59:2e:05:5c:1a:ab:9c:b6:41:5c:81:bd:91:2e:66:ec:19:2c: 48:1c:a3:ed:a7:de:ca:63:c7:a8:1e:19:9b:40:e0:5a:fd:10: b1:27:f9:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5YRmM6C4LZRHkO3zg8/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTVkNTJiM2NhODc0NTQ1NzViNjViNzIwZWVmODFhMjYy YTVmM2EwHhcNMjUxMjA2MjEwMDQ2WhcNMjUxMjA3MjEwMDQ2WjAzMTEwLwYDVQQD EyhhYTA4MmNlZGQwMzBmYmJkZDA4NmRhNjU0ZTFhZDA0ZWIwMmJlMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka81KKyYtKisSEWEsiT5wvtjuhCn SMYmjHRjQqhaAqCISSYP3JL3k4oaERVdCLhgiXeYGxZpZW3J+PfgCGdewpwIwtpC LiRbkBP5ruxcl6sJvqx3JOqEMruGniAIb4xJNU/IFSQA7k1pefSz9z6DO33jDnmD JDOBQhfeaRRcjd1fqaXHgxjPPaZtjsxbX0b8jdaa4yLeDWQbntQXz+8zE7Jni9Ub FPs2WUby6Fc7snjz75wEYe5o04zzKD9kTutFDeGCb9MqX4EVoccTaCvthqcoAZ3+ CrSzfl//PFjC1gQbqvzwN4um2id0gOMsxP7/qJ1rBaryG0BKCeeEkR4HcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoILO3QMPu90IbaZU4a0E6wK+L/MB8GA1UdIwQY MBaAFK2l1Ss8qHRUV1tltyDu+BomKl86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMt ZDE4YWI0ZjdmNWRmLzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMtZDE4YWI0ZjdmNWRm LzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxHiy1mA LYnjKGIYnkquObNEFoVtD10WOevoeiGRIBZ47e4iTvAQlA8s519j8qGRkAOEXzpk 7JyTNHvQIDuRQqlXn39byITCW0K+OKywnERh3SVD3zzXWRW66vJpv15rDHhz0x2P HWgCNHA5BDaBMwGF1ymJKLnN4U3x3B1V/OCn0U7MpU8qR1tf/z0kNObXhdSRcgMp 05WoWd9P8lIAmZUcNf7r2D064MnlqB6WKX4Yk7bZ3dTCMv7BVGaRdci5C9fBD0Lq BUL4NWFQHcwE8e46WaiDj03GWS4FXBqrnLZBXIG9kS5m7BksSByj7afeymPHqB4Z m0DgWv0QsSf5/w== -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:49 2025 by rpki-client