This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json) Hash identifier: XiqvSwTX1yGyiIB6TBYE1wcdtHKhWpr85USAjGj0ZZY= Subject key identifier: 7F:16:93:B2:26:92:DB:3F:21:9C:0C:3F:43:BB:B0:D0:73:28:E9:E6 Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb Certificate serial: 019B59E41D8B9CC7F6653F24BC0367B74B78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft Manifest number: 0603 Signing time: Fri 26 Dec 2025 09:01:20 +0000 Manifest this update: Fri 26 Dec 2025 09:01:20 +0000 Manifest next update: Sat 27 Dec 2025 09:01:20 +0000 Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=) 2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: IeW5erHtCsEk7/NMyrUtXlsMhi9G5IheoNLJVtY7YC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:1d:8b:9c:c7:f6:65:3f:24:bc:03:67:b7:4b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb Validity Not Before: Dec 26 09:01:20 2025 GMT Not After : Dec 27 09:01:20 2025 GMT Subject: CN=7f1693b22692db3f219c0c3f43bbb0d07328e9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:85:71:0a:d1:4c:41:9d:62:71:9f:49:a7: fa:58:13:fd:ad:d0:76:ab:98:69:c8:9d:dd:db:d9: 2f:7a:a5:dc:69:6b:a5:3c:b3:94:e7:f8:bc:a7:0c: 13:97:d5:58:d2:a3:65:64:6b:0e:dc:33:11:aa:55: e4:7a:f5:a8:b0:ab:9f:6f:a7:6b:ba:16:5c:d0:3f: 55:12:ce:23:48:db:c7:83:50:43:35:99:16:7d:5b: d0:6d:9a:6a:1e:fc:fe:98:55:19:3a:8f:e1:72:8c: f2:1a:f5:14:cc:65:81:6d:93:38:e1:e7:ab:39:37: 32:ea:00:30:97:f1:6d:c8:35:c0:0d:98:ce:68:4e: 84:74:cd:d8:10:fb:03:df:6f:6b:86:6c:ca:ad:4a: c4:bf:c8:cd:3d:88:92:0e:ee:e9:8f:9d:d5:f6:0a: bd:53:10:0b:65:97:c1:dd:c7:ac:a9:08:34:73:7f: 4b:09:e3:39:a9:0e:b7:bf:dd:75:b8:5a:1e:72:89: a2:cc:1d:a5:e3:93:66:10:72:38:bd:3b:46:bd:21: 73:95:0f:5d:6e:4b:8b:76:49:84:15:d2:9a:bc:b0: d9:15:94:57:0d:e7:64:21:98:b1:30:9f:a1:e7:23: fb:87:c6:34:50:2a:ce:69:f7:71:b1:b2:5a:af:e8: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:16:93:B2:26:92:DB:3F:21:9C:0C:3F:43:BB:B0:D0:73:28:E9:E6 X509v3 Authority Key Identifier: keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f6:5d:43:a1:8f:89:64:d6:c4:7f:78:2e:22:2a:85:46:2a: a4:09:26:24:3e:99:62:89:a4:d5:e0:cc:98:21:04:3d:d4:16: 8a:22:62:fe:4c:ee:b5:ff:0f:6e:01:65:0f:de:b9:71:ad:fa: a3:fd:02:40:76:33:6f:b4:47:4a:7b:88:84:10:79:ca:7a:a3: ba:b5:09:2c:9d:61:91:6a:e7:fd:b1:6b:d7:eb:90:06:c9:a9: ee:40:cc:ce:56:e8:94:dc:ce:f9:86:72:ea:fc:fa:53:0d:77: c3:51:d4:fc:29:3f:83:3c:76:76:bc:f3:ae:b6:60:b9:68:f0: 15:44:4a:82:63:60:93:f8:47:58:75:65:f5:a5:a7:47:33:bb: 48:8b:a9:63:3b:b7:35:30:38:9c:ae:7e:8a:9d:d9:7a:df:1c: a8:d7:cf:d3:9c:80:ad:e8:77:f1:f1:be:11:51:c1:94:55:4e: cc:c1:f4:80:b2:3a:b3:6f:e3:26:77:f2:bd:ec:dc:1a:3b:f1: b2:0b:7c:d9:95:cd:b6:da:db:18:89:57:55:63:8a:67:ca:58: 05:1e:aa:8a:ed:94:9f:0b:d1:44:34:05:08:39:d1:75:cb:9f: b3:43:6a:a1:d0:18:52:58:aa:cc:b7:9f:ba:c2:b5:98:61:75: b1:51:55:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5B2LnMf2ZT8kvANnt0t4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzVkNTNkYjgyMmQyNWRiODI3ZDAzNzdjYmViMDZkMmNh NDFhY2IwHhcNMjUxMjI2MDkwMTIwWhcNMjUxMjI3MDkwMTIwWjAzMTEwLwYDVQQD Eyg3ZjE2OTNiMjI2OTJkYjNmMjE5YzBjM2Y0M2JiYjBkMDczMjhlOWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4OFcQrRTEGdYnGfSaf6WBP9rdB2 q5hpyJ3d29kveqXcaWulPLOU5/i8pwwTl9VY0qNlZGsO3DMRqlXkevWosKufb6dr uhZc0D9VEs4jSNvHg1BDNZkWfVvQbZpqHvz+mFUZOo/hcozyGvUUzGWBbZM44eer OTcy6gAwl/FtyDXADZjOaE6EdM3YEPsD329rhmzKrUrEv8jNPYiSDu7pj53V9gq9 UxALZZfB3cesqQg0c39LCeM5qQ63v911uFoecomizB2l45NmEHI4vTtGvSFzlQ9d bkuLdkmEFdKavLDZFZRXDedkIZixMJ+h5yP7h8Y0UCrOafdxsbJar+gWUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8Wk7Imkts/IZwMP0O7sNBzKOnmMB8GA1UdIwQY MBaAFHV11T24ItJduCfQN3y+sG0spBrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTIt MDYxZWQ5MzcxNDc1LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTItMDYxZWQ5MzcxNDc1 LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfZdQ6GP iWTWxH94LiIqhUYqpAkmJD6ZYomk1eDMmCEEPdQWiiJi/kzutf8PbgFlD965ca36 o/0CQHYzb7RHSnuIhBB5ynqjurUJLJ1hkWrn/bFr1+uQBsmp7kDMzlbolNzO+YZy 6vz6Uw13w1HU/Ck/gzx2drzzrrZguWjwFURKgmNgk/hHWHVl9aWnRzO7SIupYzu3 NTA4nK5+ip3Zet8cqNfP05yAreh38fG+EVHBlFVOzMH0gLI6s2/jJnfyvezcGjvx sgt82ZXNttrbGIlXVWOKZ8pYBR6qiu2UnwvRRDQFCDnRdcufs0NqodAYUliqzLef usK1mGF1sVFVGg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:54 2025 by rpki-client