This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json) Hash identifier: /FAPm6L8A0cuXDLEo4S17bVYT24SWMkUNGEUpIjifrU= Subject key identifier: 32:8F:A1:FF:7B:20:D7:A6:BA:E6:92:CD:36:1A:15:1F:DF:3A:15:BC Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7 Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7 Certificate serial: 019AFBB09758DE17FB9104A04E1CBB960C67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft Manifest number: 1765 Signing time: Mon 08 Dec 2025 02:00:45 +0000 Manifest this update: Mon 08 Dec 2025 02:00:45 +0000 Manifest next update: Tue 09 Dec 2025 02:00:45 +0000 Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=) 2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: 2RAMHZiRuOtTU3ch0FyxHHdpbFMcH5qWosFZHo6l8G0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b0:97:58:de:17:fb:91:04:a0:4e:1c:bb:96:0c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7 Validity Not Before: Dec 8 02:00:45 2025 GMT Not After : Dec 9 02:00:45 2025 GMT Subject: CN=328fa1ff7b20d7a6bae692cd361a151fdf3a15bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:ab:15:20:a7:d8:e2:e2:c9:30:ba:99:e0: 5e:a4:87:e7:05:80:7e:73:b0:36:bd:ab:04:6a:2a: 0e:64:f2:07:37:4d:e2:db:3c:a5:89:92:bb:d5:c1: 17:8b:e0:7c:a8:1a:6a:eb:37:e1:1e:db:a6:73:41: 8a:cd:46:18:11:9f:0a:8d:f9:e4:17:ac:7c:8e:87: a0:aa:f4:44:a6:4a:12:ad:90:2b:6d:89:85:d0:7a: 34:6a:2a:68:0b:52:d9:67:f8:38:90:6e:fc:42:90: e6:10:e5:f4:77:e6:47:47:62:32:c5:1d:76:43:8d: 60:a6:9e:0f:e0:26:11:7c:b8:b4:04:72:36:d8:54: 58:63:9a:ff:17:83:27:e4:c9:6f:56:ed:f5:04:65: 21:64:3b:37:2a:ba:ca:6f:fe:86:2e:78:07:d8:b9: 71:91:3c:57:7b:77:12:0c:01:62:90:af:e0:98:27: 02:1b:80:7e:cd:ea:81:d7:94:d4:d6:f0:7a:c3:c4: 27:aa:88:11:cf:a7:73:7e:b6:77:26:86:5d:29:d0: 3d:a4:7e:44:92:d1:55:c0:95:23:0c:ff:62:73:d2: ef:a7:c4:48:57:5f:b1:0a:33:a1:0e:f8:9a:ea:35: bc:f7:7e:ad:98:49:4f:12:17:ef:48:ff:68:2d:c3: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8F:A1:FF:7B:20:D7:A6:BA:E6:92:CD:36:1A:15:1F:DF:3A:15:BC X509v3 Authority Key Identifier: keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:22:42:5d:75:88:4a:f1:d7:b4:95:32:08:df:96:1a:ba:67: ce:23:b9:1e:d1:fa:8f:a3:1b:2a:b8:4a:3e:b5:4c:4f:a1:7c: e9:52:08:57:33:ee:56:f7:4c:36:6a:d5:6d:8c:ce:45:60:b9: c5:97:0c:dd:c1:c6:36:92:32:68:65:20:78:ac:7b:00:45:65: db:e7:85:52:ff:35:01:97:3e:67:86:2f:7d:3f:28:67:49:d3: 09:0c:cc:a9:47:76:18:d3:a9:46:91:0e:0f:39:d2:b9:ab:f6: 91:83:39:26:a0:4f:c2:72:ce:25:ac:f4:e3:21:2b:d9:29:bd: 52:30:64:08:4e:80:69:fe:88:b3:34:c5:fb:57:25:35:c9:2a: 86:fa:4d:7d:72:ab:b7:99:b5:36:8b:ae:15:11:4f:46:22:29: 1e:05:3e:ec:c5:21:72:d2:78:42:c6:3c:23:de:9e:80:7d:db: e0:9f:06:d1:77:8c:5c:99:71:f9:0a:50:18:1f:40:cf:15:d9: d0:4d:34:0f:d6:ca:e5:82:f5:7b:dd:83:23:5d:98:15:43:e6: 59:e1:97:3b:44:cb:75:2a:fe:a0:00:4a:9b:27:03:56:58:8c: 21:a2:7c:de:d6:c9:0b:d6:85:3c:a9:0f:64:16:d2:15:0f:cc: 29:87:f8:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sJdY3hf7kQSgThy7lgxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YzAzMjkzNWU5NjMzZGY4YjE5OTI1ZGYwYmQyNWI4MWM2 ODYzYjcwHhcNMjUxMjA4MDIwMDQ1WhcNMjUxMjA5MDIwMDQ1WjAzMTEwLwYDVQQD EygzMjhmYTFmZjdiMjBkN2E2YmFlNjkyY2QzNjFhMTUxZmRmM2ExNWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7WrFSCn2OLiyTC6meBepIfnBYB+ c7A2vasEaioOZPIHN03i2zyliZK71cEXi+B8qBpq6zfhHtumc0GKzUYYEZ8Kjfnk F6x8joegqvREpkoSrZArbYmF0Ho0aipoC1LZZ/g4kG78QpDmEOX0d+ZHR2IyxR12 Q41gpp4P4CYRfLi0BHI22FRYY5r/F4Mn5MlvVu31BGUhZDs3KrrKb/6GLngH2Llx kTxXe3cSDAFikK/gmCcCG4B+zeqB15TU1vB6w8QnqogRz6dzfrZ3JoZdKdA9pH5E ktFVwJUjDP9ic9Lvp8RIV1+xCjOhDvia6jW8936tmElPEhfvSP9oLcO+ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKPof97INemuuaSzTYaFR/fOhW8MB8GA1UdIwQY MBaAFMTAMpNeljPfixmSXfC9JbgcaGO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjIt OWVhOWNhMTc0MmRiLzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjItOWVhOWNhMTc0MmRi LzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSJCXXWI SvHXtJUyCN+WGrpnziO5HtH6j6MbKrhKPrVMT6F86VIIVzPuVvdMNmrVbYzORWC5 xZcM3cHGNpIyaGUgeKx7AEVl2+eFUv81AZc+Z4YvfT8oZ0nTCQzMqUd2GNOpRpEO DznSuav2kYM5JqBPwnLOJaz04yEr2Sm9UjBkCE6Aaf6IszTF+1clNckqhvpNfXKr t5m1NouuFRFPRiIpHgU+7MUhctJ4QsY8I96egH3b4J8G0XeMXJlx+QpQGB9AzxXZ 0E00D9bK5YL1e92DI12YFUPmWeGXO0TLdSr+oABKmycDVliMIaJ83tbJC9aFPKkP ZBbSFQ/MKYf4AA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:32 2025 by rpki-client