This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json) Hash identifier: Nqc4F6YyalVGUFvSzgEJOqMsEE3v2CLVpyxmW1caGwk= Subject key identifier: 0E:DC:D6:C2:D0:F5:48:A8:55:3D:30:58:C6:E9:D3:3B:CE:92:AE:D5 Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07 Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07 Certificate serial: 019AF12EDD0C8AAAFC29E74D5DD66190B171 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: 3IHlH6KMtaN6frm7HpDCo6u0pbIBxJoWrfI15+ArlgM=) 2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:dd:0c:8a:aa:fc:29:e7:4d:5d:d6:61:90:b1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47119a205683167925b9f04174312637b1600c07 Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=0edcd6c2d0f548a8553d3058c6e9d33bce92aed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:a1:dd:64:25:85:0b:fe:37:ba:92:2a:5e: d5:ba:49:82:1e:fe:95:be:ac:f3:18:d5:c0:0d:7b: 64:c3:a1:29:93:c6:05:3e:dc:cf:e0:fc:78:9e:9f: fc:20:0a:1c:1f:4c:cc:71:b7:bf:1b:03:78:1b:1d: 58:1e:ac:eb:7a:b6:a4:32:6e:6a:e0:6e:85:ff:23: d8:8c:79:6f:0c:1b:ef:9a:00:ac:77:8f:19:86:40: 20:c1:7b:7d:e1:70:25:d7:9b:7c:aa:ca:45:79:f5: 54:fe:36:35:95:72:25:73:bf:a6:aa:80:f8:36:da: 7b:cb:89:60:4a:2d:b1:df:2f:2c:ce:84:f9:77:0e: 3f:0f:9b:e6:91:f5:fa:5e:c8:f5:74:98:49:05:de: cc:d6:09:c6:db:52:c0:3d:aa:c4:59:b3:3c:a5:a2: 44:f2:f6:09:ad:87:d8:5e:2b:70:e2:e1:c7:06:66: 6c:65:67:c4:4b:17:fb:45:d2:bc:b8:76:12:9f:13: 22:85:8d:49:4a:2a:76:77:91:8b:3c:0e:df:05:d6: 67:08:1b:61:d2:6c:26:5b:2d:bd:22:4a:53:d3:2c: de:05:16:1a:4b:85:57:a2:57:6c:1c:da:f2:4f:d6: 83:55:61:ba:ee:79:03:92:13:4c:00:e5:24:d1:01: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DC:D6:C2:D0:F5:48:A8:55:3D:30:58:C6:E9:D3:3B:CE:92:AE:D5 X509v3 Authority Key Identifier: keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:2e:d7:48:0d:cc:ef:b7:a7:fe:d1:20:ac:89:43:7c:f0:1e: 64:b9:44:a2:f0:4e:d3:16:84:67:af:b7:e4:77:d8:d4:88:46: 2f:31:03:df:f3:1e:1c:69:cc:5a:39:ff:0d:83:e5:21:5b:cc: d2:d4:13:30:f3:0d:3e:70:f9:cf:d7:86:3e:a7:1e:7c:87:06: df:88:c9:f4:b1:c5:8d:87:c3:af:30:5f:f1:99:3b:46:09:78: 3b:b7:a0:20:14:1e:2e:62:a9:f3:f7:6b:b0:fa:a7:7b:1b:95: a7:3b:a6:f0:ef:0a:e7:4e:c0:97:75:38:41:1c:4e:db:9a:96: 7e:eb:76:63:f2:d8:11:7d:c7:27:56:58:bb:8a:9b:97:b4:d8: e3:e6:1d:4b:86:49:fe:8e:20:5c:31:d6:30:87:a5:77:da:55: 50:69:a9:1b:ea:46:72:bd:84:8e:c2:32:ca:4f:fb:e2:00:7e: 57:93:06:fc:09:e6:5e:aa:fa:c7:78:42:34:57:31:9b:7f:a1: 00:44:70:ee:fa:5b:d3:75:3d:a6:95:88:50:a3:55:2a:43:c0: 9a:57:08:95:0f:64:2f:d9:75:e4:6b:e6:60:1f:68:95:81:37: 10:9c:79:ea:73:9b:bd:ee:b9:9a:b1:d9:50:a0:19:83:83:a1: c6:20:d5:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLt0Miqr8KedNXdZhkLFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTE5YTIwNTY4MzE2NzkyNWI5ZjA0MTc0MzEyNjM3YjE2 MDBjMDcwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD EygwZWRjZDZjMmQwZjU0OGE4NTUzZDMwNThjNmU5ZDMzYmNlOTJhZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lCh3WQlhQv+N7qSKl7VukmCHv6V vqzzGNXADXtkw6Epk8YFPtzP4Px4np/8IAocH0zMcbe/GwN4Gx1YHqzrerakMm5q 4G6F/yPYjHlvDBvvmgCsd48ZhkAgwXt94XAl15t8qspFefVU/jY1lXIlc7+mqoD4 Ntp7y4lgSi2x3y8szoT5dw4/D5vmkfX6Xsj1dJhJBd7M1gnG21LAParEWbM8paJE 8vYJrYfYXitw4uHHBmZsZWfESxf7RdK8uHYSnxMihY1JSip2d5GLPA7fBdZnCBth 0mwmWy29IkpT0yzeBRYaS4VXoldsHNryT9aDVWG67nkDkhNMAOUk0QHpfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7c1sLQ9UioVT0wWMbp0zvOkq7VMB8GA1UdIwQY MBaAFEcRmiBWgxZ5JbnwQXQxJjexYAwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQt MmEwZTQ1ODYyYzAzLzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQtMmEwZTQ1ODYyYzAz LzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwS7XSA3M 77en/tEgrIlDfPAeZLlEovBO0xaEZ6+35HfY1IhGLzED3/MeHGnMWjn/DYPlIVvM 0tQTMPMNPnD5z9eGPqcefIcG34jJ9LHFjYfDrzBf8Zk7Rgl4O7egIBQeLmKp8/dr sPqnexuVpzum8O8K507Al3U4QRxO25qWfut2Y/LYEX3HJ1ZYu4qbl7TY4+YdS4ZJ /o4gXDHWMIeld9pVUGmpG+pGcr2EjsIyyk/74gB+V5MG/AnmXqr6x3hCNFcxm3+h AERw7vpb03U9ppWIUKNVKkPAmlcIlQ9kL9l15GvmYB9olYE3EJx56nObve65mrHZ UKAZg4OhxiDVkA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:27 2025 by rpki-client