This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json) Hash identifier: LsP4+rjN+UQJPvCfgOkb+IvYjCqOgu3t4jc4E/vFJpA= Subject key identifier: F6:0E:86:ED:2E:EE:7C:11:9D:BB:9A:B7:62:31:E3:66:32:73:D5:14 Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44 Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244 Certificate serial: 019AF91D9B949C43EB2672E7ABC5F03BC768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft Manifest number: 0691 Signing time: Sun 07 Dec 2025 14:00:58 +0000 Manifest this update: Sun 07 Dec 2025 14:00:58 +0000 Manifest next update: Mon 08 Dec 2025 14:00:58 +0000 Files and hashes: 1: N5euriRPkrPM5tpe3YMpJKwtnXs.roa (hash: Aif5H8pBLwxI+pfqg48v8EjEzgULti0iCYfChkXvfLI=) 2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: ljMV5WvPDojqaPxd9Gz/9d1A0oOJ28WgEmKCbpGkyG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:1d:9b:94:9c:43:eb:26:72:e7:ab:c5:f0:3b:c7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244 Validity Not Before: Dec 7 14:00:58 2025 GMT Not After : Dec 8 14:00:58 2025 GMT Subject: CN=f60e86ed2eee7c119dbb9ab76231e3663273d514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:a3:28:1b:c1:d1:b8:19:c8:38:a6:c5:24: 3e:84:fb:38:d1:53:fd:d9:3f:08:41:9b:da:44:b2: 3d:0c:5e:8d:78:d1:01:7e:17:94:90:ab:a3:bd:89: 23:5f:21:7a:52:c3:e9:06:94:bd:11:78:bc:f2:3e: 1f:c8:79:4b:4f:65:08:d6:d0:7c:12:3f:ad:f9:95: 8f:55:58:2b:34:da:5b:21:1d:40:38:80:8d:28:26: 64:51:d0:6e:35:1d:24:19:ca:5a:7d:03:a7:d7:df: 87:29:aa:33:4d:ff:8b:36:2d:13:77:a7:11:32:9a: 91:e2:77:a4:64:cc:9a:a3:48:e4:e2:11:5a:2b:08: 0a:c0:64:2c:34:26:73:e9:db:5b:d6:3c:29:ee:39: 09:df:20:c5:4c:42:b6:2d:c1:aa:d1:cb:3d:88:25: 93:e5:7d:fc:10:42:2d:72:5e:66:b8:f6:9c:a7:c9: 93:30:2f:de:78:11:7b:b0:96:5d:66:3d:63:dc:b3: 0a:95:f3:a6:4c:6c:fc:9e:43:39:21:bf:5a:bd:ed: ca:9c:fd:98:6c:f7:5e:ce:75:20:3d:52:43:3e:c0: 56:a1:c0:d3:f6:45:45:d3:56:0d:69:e2:49:d0:db: 99:64:6e:df:e8:93:0e:80:a4:e2:86:b4:2e:45:4f: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0E:86:ED:2E:EE:7C:11:9D:BB:9A:B7:62:31:E3:66:32:73:D5:14 X509v3 Authority Key Identifier: keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8c:20:88:e4:cb:5b:09:1f:9f:93:5f:d0:2c:9d:cc:57:cf: a9:d7:6e:a7:82:ca:fe:1d:9b:f3:1a:e1:07:9d:a1:cd:8e:77: 44:f5:b0:53:c9:86:59:29:06:3e:08:8e:e5:3e:a7:38:35:89: 5d:e1:09:a1:dc:18:8b:97:06:e9:84:d2:5e:74:e1:f6:32:fe: bc:ed:c4:36:81:da:6e:a9:35:54:53:b4:e8:85:82:46:d1:cd: 5d:8e:75:ae:a8:d5:3d:b6:09:66:95:ac:33:60:4d:28:38:4c: 52:65:dd:07:76:91:50:57:ed:90:00:fe:81:b3:b6:fb:e8:3c: c8:85:d4:b1:ed:1f:af:24:a9:1e:5c:a4:68:1f:4c:6d:4f:7a: 2c:98:33:d0:0a:1f:6a:c4:da:19:68:c1:b4:6f:0d:0a:0d:fd: 35:19:ad:7f:7a:d8:b2:cd:54:c7:c1:d4:b3:f6:03:6c:b2:06: 25:84:43:7c:6f:3b:be:64:62:a5:c9:7d:2d:cd:97:d3:a8:0c: 69:a3:c8:ce:76:2e:f5:c6:68:64:56:3b:66:d0:7a:94:21:dd: 0d:e3:f7:63:c0:6a:1f:ea:93:70:38:1d:67:80:5c:e4:03:ff: 6d:c2:21:45:d6:aa:a0:80:48:6f:c3:cf:cd:14:52:60:1e:ce: 32:27:29:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5HZuUnEPrJnLnq8XwO8doMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5N2E2NDc3ZGQ5NzBjOTRiMmExN2I1MjUwMjk4MmQ0ZmM3 NWIyNDQwHhcNMjUxMjA3MTQwMDU4WhcNMjUxMjA4MTQwMDU4WjAzMTEwLwYDVQQD EyhmNjBlODZlZDJlZWU3YzExOWRiYjlhYjc2MjMxZTM2NjMyNzNkNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGmjKBvB0bgZyDimxSQ+hPs40VP9 2T8IQZvaRLI9DF6NeNEBfheUkKujvYkjXyF6UsPpBpS9EXi88j4fyHlLT2UI1tB8 Ej+t+ZWPVVgrNNpbIR1AOICNKCZkUdBuNR0kGcpafQOn19+HKaozTf+LNi0Td6cR MpqR4nekZMyao0jk4hFaKwgKwGQsNCZz6dtb1jwp7jkJ3yDFTEK2LcGq0cs9iCWT 5X38EEItcl5muPacp8mTMC/eeBF7sJZdZj1j3LMKlfOmTGz8nkM5Ib9ave3KnP2Y bPdeznUgPVJDPsBWocDT9kVF01YNaeJJ0NuZZG7f6JMOgKTihrQuRU8ccwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYOhu0u7nwRnbuat2Ix42Yyc9UUMB8GA1UdIwQY MBaAFJl6ZHfdlwyUsqF7UlApgtT8dbJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMt Mjg1NzQ1NjQ3ZjVmLzEvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMtMjg1NzQ1NjQ3ZjVm LzEvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZowgiOTL Wwkfn5Nf0CydzFfPqddup4LK/h2b8xrhB52hzY53RPWwU8mGWSkGPgiO5T6nODWJ XeEJodwYi5cG6YTSXnTh9jL+vO3ENoHabqk1VFO06IWCRtHNXY51rqjVPbYJZpWs M2BNKDhMUmXdB3aRUFftkAD+gbO2++g8yIXUse0frySpHlykaB9MbU96LJgz0Aof asTaGWjBtG8NCg39NRmtf3rYss1Ux8HUs/YDbLIGJYRDfG87vmRipcl9Lc2X06gM aaPIznYu9cZoZFY7ZtB6lCHdDeP3Y8BqH+qTcDgdZ4Bc5AP/bcIhRdaqoIBIb8PP zRRSYB7OMicpnQ== -----END CERTIFICATE-----Generated at Sun Dec 7 23:01:26 2025 by rpki-client