This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft File: rXz7zh1tOmok8lZSBl0xV1go7bU.mft (raw, json) Hash identifier: jOnGK/OcyUSeTwbZsLt3nrLahaXUPVNyraHT/5qIwKc= Subject key identifier: A6:65:B1:B6:BF:B2:6A:A0:29:B7:CE:E1:F4:1D:1A:D3:19:7E:41:CE Authority key identifier: AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5 Certificate issuer: /CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5 Certificate serial: 019B34C467B597276984D5AEFD9631E458E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft Manifest number: 0E95 Signing time: Fri 19 Dec 2025 04:00:45 +0000 Manifest this update: Fri 19 Dec 2025 04:00:45 +0000 Manifest next update: Sat 20 Dec 2025 04:00:45 +0000 Files and hashes: 1: Im3NuoFQdX7egdBojqG76hMiXq0.roa (hash: MBZCzXbY6/6xAtTJ9sYOEhNyw2Jnz8TgfEJHylhcfdM=) 2: rXz7zh1tOmok8lZSBl0xV1go7bU.crl (hash: rXrgWmxw6CeY6Cc8DgyemBq5N5VER23ceG0s8xj74EE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:67:b5:97:27:69:84:d5:ae:fd:96:31:e4:58:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5 Validity Not Before: Dec 19 04:00:45 2025 GMT Not After : Dec 20 04:00:45 2025 GMT Subject: CN=a665b1b6bfb26aa029b7cee1f41d1ad3197e41ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:bd:60:07:6d:aa:b3:31:55:a7:26:a9:ab: be:cc:6b:2d:69:3b:8e:78:af:58:be:f0:cf:66:ed: 09:8d:ee:49:48:01:68:69:61:43:5e:50:44:39:91: de:21:a8:42:3c:ae:8a:4d:f6:04:98:5f:c5:4b:b4: 3a:58:06:e8:64:48:34:7a:17:c9:d7:38:2c:2b:67: 76:15:96:4f:98:45:60:3b:b9:fe:97:a5:a3:e1:1d: f6:2b:40:4f:41:0c:f0:b9:68:c3:21:32:c6:0c:33: 02:2d:0a:4e:fe:44:3f:bb:ed:b8:85:7e:bb:42:e3: cc:9d:bf:6f:2a:f7:3c:10:fb:77:ae:00:3b:c8:62: 66:4f:85:a4:40:44:aa:c3:80:37:fa:50:58:10:82: 7d:6f:3b:91:96:c8:30:e1:19:a3:c6:a5:4a:34:59: 56:34:53:24:4b:2a:e5:c0:58:9d:36:03:ee:2a:85: 9d:e3:6e:a4:29:cc:bb:45:39:09:8e:44:18:aa:0d: 0e:24:77:c8:82:95:da:f3:b5:80:3d:3f:a9:07:ba: 66:9e:85:8a:f9:8c:f7:69:c4:8a:a0:b6:f9:c7:97: 52:06:82:99:2b:20:a9:84:92:05:28:bf:d9:5d:81: b1:33:39:56:c4:16:3c:bd:ed:cf:73:dc:cf:12:8f: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:65:B1:B6:BF:B2:6A:A0:29:B7:CE:E1:F4:1D:1A:D3:19:7E:41:CE X509v3 Authority Key Identifier: keyid:AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:3b:df:94:49:68:6b:dc:d8:24:41:4d:a3:55:bc:59:2c: 97:57:ed:83:e2:78:70:22:5f:03:6e:f2:c8:82:94:36:bd:b2: 7d:58:f5:9d:df:04:39:62:87:c7:6c:01:6b:47:1d:13:87:25: dc:81:87:26:6c:0f:a1:e9:58:26:b7:50:8b:ea:c1:e1:f7:db: f2:18:32:dc:93:0b:9d:9f:a9:9b:dc:c6:ed:35:e9:a2:18:d7: 83:fa:e1:bc:3f:5a:21:fc:8c:fa:6e:6f:bc:95:7a:94:ce:b9: 0c:e8:fb:50:34:6a:33:08:24:fa:30:c6:96:23:d6:db:b3:2f: fc:e3:31:49:72:d8:81:51:fb:c0:3f:ee:ba:bf:3b:d4:b7:d9: 11:23:49:5a:9e:f3:c8:7a:d0:92:b8:52:d4:ca:32:6f:be:9a: 51:ef:7b:9d:a6:e9:67:ef:ad:85:b6:63:40:d2:67:17:8a:3f: 5d:7a:dc:ef:15:3a:e5:4d:b2:fd:ea:7a:21:a3:82:ca:2b:9b: bd:f7:23:e4:f6:c6:b4:a1:07:a2:4c:af:e0:08:99:dd:1a:a3: 74:48:09:44:c5:14:e6:63:bc:f1:d3:66:1b:44:72:41:12:17: 7d:d7:30:75:b2:28:f9:9c:c4:d3:97:91:59:fb:d9:eb:ee:d9: 5d:e4:42:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xGe1lydphNWu/ZYx5FjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkN2NmYmNlMWQ2ZDNhNmEyNGYyNTY1MjA2NWQzMTU3NTgy OGVkYjUwHhcNMjUxMjE5MDQwMDQ1WhcNMjUxMjIwMDQwMDQ1WjAzMTEwLwYDVQQD EyhhNjY1YjFiNmJmYjI2YWEwMjliN2NlZTFmNDFkMWFkMzE5N2U0MWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquq9YAdtqrMxVacmqau+zGstaTuO eK9YvvDPZu0Jje5JSAFoaWFDXlBEOZHeIahCPK6KTfYEmF/FS7Q6WAboZEg0ehfJ 1zgsK2d2FZZPmEVgO7n+l6Wj4R32K0BPQQzwuWjDITLGDDMCLQpO/kQ/u+24hX67 QuPMnb9vKvc8EPt3rgA7yGJmT4WkQESqw4A3+lBYEIJ9bzuRlsgw4RmjxqVKNFlW NFMkSyrlwFidNgPuKoWd426kKcy7RTkJjkQYqg0OJHfIgpXa87WAPT+pB7pmnoWK +Yz3acSKoLb5x5dSBoKZKyCphJIFKL/ZXYGxMzlWxBY8ve3Pc9zPEo9rgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZlsba/smqgKbfO4fQdGtMZfkHOMB8GA1UdIwQY MBaAFK18+84dbTpqJPJWUgZdMVdYKO21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclh6N3poMXRPbW9rOGxaU0JsMHhWMWdvN2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xMTQzNDAtMmM3MC00MWZjLWFiZTct MmZhN2M5YjExMWIxLzEvclh6N3poMXRPbW9rOGxaU0JsMHhWMWdvN2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xMTQzNDAtMmM3MC00MWZjLWFiZTctMmZhN2M5YjExMWIx LzEvclh6N3poMXRPbW9rOGxaU0JsMHhWMWdvN2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxo735RJ aGvc2CRBTaNVvFksl1ftg+J4cCJfA27yyIKUNr2yfVj1nd8EOWKHx2wBa0cdE4cl 3IGHJmwPoelYJrdQi+rB4ffb8hgy3JMLnZ+pm9zG7TXpohjXg/rhvD9aIfyM+m5v vJV6lM65DOj7UDRqMwgk+jDGliPW27Mv/OMxSXLYgVH7wD/uur871LfZESNJWp7z yHrQkrhS1Moyb76aUe97nabpZ++thbZjQNJnF4o/XXrc7xU65U2y/ep6IaOCyiub vfcj5PbGtKEHokyv4AiZ3RqjdEgJRMUU5mO88dNmG0RyQRIXfdcwdbIo+ZzE05eR WfvZ6+7ZXeRCtA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:01:47 2025 by rpki-client