This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json) Hash identifier: KHooWom3z7X4pwH5r459ZRlmHtpfp8wTMeh8xVRaZIA= Subject key identifier: 6A:5B:83:F2:B4:0E:DC:33:C2:51:CF:20:B4:96:F3:F7:87:7E:E8:D5 Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28 Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28 Certificate serial: 019AF1D25F8B9D2F326F971BC5E8DB42BBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft Manifest number: 0B22 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: LUZuaBg79dIsS49OjD0lOYRx6WI.roa (hash: v0D4l90748oOxXUPlzJQ4Ifkz4PFxH9/jO6hptgWgns=) 2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: d8c3tutEUMT3pFvTNfJRQfZ9xftb9nMdkhjIKIQqFCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5f:8b:9d:2f:32:6f:97:1b:c5:e8:db:42:bb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28 Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=6a5b83f2b40edc33c251cf20b496f3f7877ee8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:8f:f8:c1:f5:8d:a2:58:38:c7:80:9f:db: ee:2e:c1:4c:3e:d1:17:ed:f6:19:3b:13:ea:03:3e: 4c:21:17:ca:ad:63:be:08:cd:de:08:59:25:e3:d8: 79:2c:14:c6:3b:22:fb:3d:5b:04:8e:4a:37:b3:42: 6b:58:6a:ac:36:5e:64:2b:02:e1:81:79:96:a1:8d: 0d:6b:6f:17:d9:f9:e1:d3:3c:64:28:30:2d:56:34: 87:a3:34:f2:61:32:b2:f8:03:da:e1:9b:ee:ce:3b: 1d:50:af:30:df:0b:bb:3e:f0:bd:f8:c3:a5:1b:37: ec:39:f5:2d:93:08:d9:85:73:e6:46:9a:d3:ab:ac: 4e:0f:53:46:fb:40:65:48:05:af:2d:bf:ec:0f:56: 9b:58:e0:fb:47:34:71:db:67:fd:e2:85:4c:8a:82: f9:b0:14:42:ef:18:76:e7:65:0e:d3:55:01:c1:7f: 53:fa:b3:a7:9d:40:b6:4a:e3:57:2f:5d:db:b1:a3: 1c:3d:84:e3:5d:60:3e:f2:bd:da:85:5e:c8:95:47: a9:f9:41:23:87:29:26:69:df:a3:63:7c:99:c2:9c: ff:5d:ff:a6:ef:98:b1:3e:15:02:76:ab:4a:b0:6b: 51:52:09:81:d9:20:97:ac:bd:4d:94:20:45:9d:d2: 1f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5B:83:F2:B4:0E:DC:33:C2:51:CF:20:B4:96:F3:F7:87:7E:E8:D5 X509v3 Authority Key Identifier: keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:92:68:88:a1:92:e5:96:20:d6:a6:16:6a:48:95:e3:4e:d1: e1:72:27:ae:be:97:51:74:1a:f3:15:73:84:03:00:b0:69:a5: f3:76:c3:f4:38:b1:33:93:17:83:40:c8:52:08:ac:b9:ee:ec: a8:fb:0d:05:6c:69:9b:8a:47:48:82:05:9f:6a:b4:25:3a:d7: 62:f9:4f:ca:78:de:dc:d9:68:7a:90:a4:8e:f1:30:2a:6a:6b: 6b:04:7a:9f:47:b4:51:b3:08:9c:74:64:a9:51:53:b2:76:01: b9:a0:ce:a6:00:4b:b4:26:22:9a:e4:f4:33:d0:9d:cf:8f:b5: 61:70:4f:e0:aa:27:b2:45:70:3c:67:06:96:c6:29:0d:1c:b8: f1:8e:0b:cc:3d:7b:26:55:e8:21:a7:8e:3d:05:3b:6f:ce:ec: 24:64:6d:8d:0b:81:6d:89:fc:4f:c2:b6:e0:91:db:40:50:40: b0:0f:b2:4e:ee:26:8b:25:26:8c:53:a0:9d:7f:f7:32:c9:ad: f1:c2:81:44:07:a3:1b:30:42:eb:f8:29:cd:7f:5f:14:c0:7c: 6e:0a:d8:4c:c1:8a:21:a3:4f:69:b2:c3:1f:05:43:4e:0e:e8: ec:e7:8e:4a:32:5d:3a:f2:ca:90:ad:2d:ea:d4:d9:d3:fa:13: 10:e1:50:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l+LnS8yb5cbxejbQrvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMWVlZTIyYzUwMTUzNjMxMThhNzFkMjZhOTQ2M2RjOTM3 NGJhMjgwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD Eyg2YTViODNmMmI0MGVkYzMzYzI1MWNmMjBiNDk2ZjNmNzg3N2VlOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28aP+MH1jaJYOMeAn9vuLsFMPtEX 7fYZOxPqAz5MIRfKrWO+CM3eCFkl49h5LBTGOyL7PVsEjko3s0JrWGqsNl5kKwLh gXmWoY0Na28X2fnh0zxkKDAtVjSHozTyYTKy+APa4ZvuzjsdUK8w3wu7PvC9+MOl GzfsOfUtkwjZhXPmRprTq6xOD1NG+0BlSAWvLb/sD1abWOD7RzRx22f94oVMioL5 sBRC7xh252UO01UBwX9T+rOnnUC2SuNXL13bsaMcPYTjXWA+8r3ahV7IlUep+UEj hykmad+jY3yZwpz/Xf+m75ixPhUCdqtKsGtRUgmB2SCXrL1NlCBFndIfwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpbg/K0DtwzwlHPILSW8/eHfujVMB8GA1UdIwQY MBaAFK8e7iLFAVNjEYpx0mqUY9yTdLooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUt YjIxNzhlZjJmODJmLzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUtYjIxNzhlZjJmODJm LzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJJoiKGS 5ZYg1qYWakiV407R4XInrr6XUXQa8xVzhAMAsGml83bD9DixM5MXg0DIUgisue7s qPsNBWxpm4pHSIIFn2q0JTrXYvlPynje3NloepCkjvEwKmprawR6n0e0UbMInHRk qVFTsnYBuaDOpgBLtCYimuT0M9Cdz4+1YXBP4KonskVwPGcGlsYpDRy48Y4LzD17 JlXoIaeOPQU7b87sJGRtjQuBbYn8T8K24JHbQFBAsA+yTu4miyUmjFOgnX/3Msmt 8cKBRAejGzBC6/gpzX9fFMB8bgrYTMGKIaNPabLDHwVDTg7o7OeOSjJdOvLKkK0t 6tTZ0/oTEOFQ7w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:12 2025 by rpki-client