This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json) Hash identifier: ZU37jbyDQaQNDN5qgFVZiOP8/lTD9WpN+Qz7W/VccGQ= Subject key identifier: DD:2B:95:E8:5B:6D:F8:24:F3:81:51:01:A9:AB:C2:E7:80:CB:81:45 Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8 Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8 Certificate serial: 019AF42DE450C26B68AEE567E78EE0F3B63E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft Manifest number: 0190 Signing time: Sat 06 Dec 2025 15:00:39 +0000 Manifest this update: Sat 06 Dec 2025 15:00:39 +0000 Manifest next update: Sun 07 Dec 2025 15:00:39 +0000 Files and hashes: 1: HRoRP4XhhYpU785BEKhZ1q4e20g.roa (hash: G6jwo30XwlnomMCEKD4f2VAkjCPOzmiVIHus+OyycRI=) 2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: eEyNLTVwqhCvhI5AtxUfvd+UW2I04lgldc73PpE8Hj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:e4:50:c2:6b:68:ae:e5:67:e7:8e:e0:f3:b6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8 Validity Not Before: Dec 6 15:00:39 2025 GMT Not After : Dec 7 15:00:39 2025 GMT Subject: CN=dd2b95e85b6df824f3815101a9abc2e780cb8145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c0:77:01:ba:49:c5:dd:fc:9a:33:10:a6:37: 1a:e0:5a:8c:70:42:29:ef:2e:e1:56:0b:05:bc:60: 75:c9:f4:e7:85:6b:86:4c:f5:3c:ff:3c:a6:9f:ee: 5f:c4:65:3d:01:56:f6:ac:b6:74:5a:6c:51:6e:72: 77:e1:d0:94:3c:20:ee:14:70:59:ee:72:ae:b4:12: d2:e3:10:15:af:98:1c:0e:de:bc:07:92:06:64:01: 1a:03:0c:10:d8:60:48:e2:f0:8e:6e:6a:cf:db:7f: 68:bd:0a:5a:25:97:19:ac:7c:c5:36:1d:a6:79:bb: 8a:14:59:51:4e:02:6f:90:b1:eb:1c:81:21:60:f7: cb:53:41:95:e5:ff:1c:e5:85:6d:98:8d:71:04:b3: 4d:31:72:54:e0:8e:a5:dc:71:13:3b:e2:ed:c2:01: c0:83:44:9d:c5:6e:24:1c:fc:1d:d0:81:94:82:70: 0a:d1:71:5f:53:02:85:f7:56:7c:2b:d7:30:cd:29: a9:9d:8a:be:96:df:e6:32:d9:59:ab:62:1a:fd:cb: 30:cb:9d:e8:37:fc:b7:4f:79:5f:84:fe:ab:27:5c: 65:a4:1d:de:9c:db:11:04:6d:a8:81:e3:a8:d8:5c: 59:99:a7:1c:0f:84:38:d9:48:13:51:9a:ef:00:2b: 73:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2B:95:E8:5B:6D:F8:24:F3:81:51:01:A9:AB:C2:E7:80:CB:81:45 X509v3 Authority Key Identifier: keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ae:82:85:b3:1a:c2:bb:7a:a2:b5:37:ba:37:d3:5d:75:1d: 16:00:8b:79:58:47:e7:a8:35:94:bc:be:90:28:29:d3:e2:db: 2d:b0:35:07:04:ae:07:25:72:95:6f:81:3d:f4:6a:59:79:07: 0f:0e:c5:8b:c0:a6:1d:ac:f6:9d:41:9b:64:21:98:05:0d:f5: 56:0e:92:e0:8f:bb:14:ca:1d:75:1f:00:9d:38:05:03:ab:03: 2b:96:7a:97:bc:06:6b:0c:81:23:ba:07:d6:b7:e7:46:57:7a: 67:18:7c:8c:66:57:9c:34:14:9a:a9:5b:0b:0d:8f:94:87:3a: 5b:c2:20:05:19:9c:38:83:b3:7d:51:cf:a9:2d:b4:de:a6:74: bd:94:09:83:04:ba:1e:d9:71:db:94:5a:bc:e8:b3:e5:55:86: f0:b3:ce:b7:c2:98:91:34:37:61:4d:f1:e4:67:7b:a9:c7:3b: a0:9c:f6:0d:75:2b:8f:c5:7e:71:14:80:06:4a:6e:0f:5d:4f: dd:89:bc:a3:5d:75:a1:60:20:a6:14:f5:00:a1:de:44:4d:e0: fe:2e:7d:03:b4:20:af:80:6e:c2:35:aa:db:ad:4b:82:f2:fd: a3:a1:04:0d:cb:6d:ee:05:61:54:2e:dd:ea:0d:be:6d:0e:41: 01:56:7f:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LeRQwmtoruVn547g87Y+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMTdjY2NlNzRjMWFmYmE4M2I3YmE4NWQ5NzcxMmIyYmNj NGE1ZTgwHhcNMjUxMjA2MTUwMDM5WhcNMjUxMjA3MTUwMDM5WjAzMTEwLwYDVQQD EyhkZDJiOTVlODViNmRmODI0ZjM4MTUxMDFhOWFiYzJlNzgwY2I4MTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMB3AbpJxd38mjMQpjca4FqMcEIp 7y7hVgsFvGB1yfTnhWuGTPU8/zymn+5fxGU9AVb2rLZ0WmxRbnJ34dCUPCDuFHBZ 7nKutBLS4xAVr5gcDt68B5IGZAEaAwwQ2GBI4vCObmrP239ovQpaJZcZrHzFNh2m ebuKFFlRTgJvkLHrHIEhYPfLU0GV5f8c5YVtmI1xBLNNMXJU4I6l3HETO+LtwgHA g0SdxW4kHPwd0IGUgnAK0XFfUwKF91Z8K9cwzSmpnYq+lt/mMtlZq2Ia/cswy53o N/y3T3lfhP6rJ1xlpB3enNsRBG2ogeOo2FxZmaccD4Q42UgTUZrvACtzLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0rlehbbfgk84FRAamrwueAy4FFMB8GA1UdIwQY MBaAFK8XzM50wa+6g7e6hdl3ErK8xKXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEt YTU3NTdhYWFmZmZhLzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEtYTU3NTdhYWFmZmZh LzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX66ChbMa wrt6orU3ujfTXXUdFgCLeVhH56g1lLy+kCgp0+LbLbA1BwSuByVylW+BPfRqWXkH Dw7Fi8CmHaz2nUGbZCGYBQ31Vg6S4I+7FModdR8AnTgFA6sDK5Z6l7wGawyBI7oH 1rfnRld6Zxh8jGZXnDQUmqlbCw2PlIc6W8IgBRmcOIOzfVHPqS203qZ0vZQJgwS6 Htlx25RavOiz5VWG8LPOt8KYkTQ3YU3x5Gd7qcc7oJz2DXUrj8V+cRSABkpuD11P 3Ym8o111oWAgphT1AKHeRE3g/i59A7Qgr4BuwjWq261LgvL9o6EEDctt7gVhVC7d 6g2+bQ5BAVZ/2A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:34 2025 by rpki-client