This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json) Hash identifier: NgL+qMKTmHL88PlgFoKvZBPWoV8IdmLigb7epvPE4/c= Subject key identifier: 4A:F6:2B:1C:46:42:2E:E2:60:11:EC:00:32:F1:47:C9:AA:F1:73:46 Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba Certificate serial: 019B5976047D36E0885997443FF6EFCC18EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft Manifest number: 159A Signing time: Fri 26 Dec 2025 07:01:05 +0000 Manifest this update: Fri 26 Dec 2025 07:01:05 +0000 Manifest next update: Sat 27 Dec 2025 07:01:05 +0000 Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=) 2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: dsS/Aza3XvgKjqyn3jGXFBVKmf9P2FJ2dYLnvc+5bfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:04:7d:36:e0:88:59:97:44:3f:f6:ef:cc:18:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba Validity Not Before: Dec 26 07:01:05 2025 GMT Not After : Dec 27 07:01:05 2025 GMT Subject: CN=4af62b1c46422ee26011ec0032f147c9aaf17346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:c2:e5:05:40:0c:3d:47:0b:bb:ab:2c:4e: 6d:66:7b:91:ac:24:bc:a4:71:13:e9:c0:9c:47:7a: a8:08:2e:be:9a:d2:76:56:1f:5a:5b:10:e1:48:02: 57:1d:06:75:f7:20:39:9c:a2:c0:cd:90:c6:a6:a9: 50:b1:48:e2:21:ae:4d:b0:f2:11:98:35:d1:dc:b3: d8:54:b4:cb:53:62:3c:d7:9d:48:73:8f:0c:13:36: 29:6b:34:78:0d:36:ed:1b:c5:21:2b:3b:75:14:0f: 16:42:74:ed:8e:30:d8:59:9a:41:c5:40:3d:fe:ea: 23:60:c8:f7:07:c1:76:1e:24:2f:72:05:4d:bc:06: 0f:eb:39:27:b2:72:ee:68:28:4e:c2:95:c3:25:ea: 1c:b5:4b:64:92:22:b3:03:06:06:b9:11:3f:63:80: eb:ca:17:35:4a:18:b0:5d:da:8c:14:78:83:22:d9: 53:02:db:69:25:20:46:26:99:d4:8e:1f:be:6a:ce: 0f:e8:f4:00:83:9f:03:57:e0:42:e1:e3:79:dd:98: 5e:dc:1a:b5:ff:56:61:1c:98:27:3c:25:ca:e5:5b: 66:54:67:93:2e:06:c6:c3:06:93:9a:ab:94:1b:d1: ed:ec:65:6b:76:18:22:bb:a8:c5:77:3c:ba:c6:98: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F6:2B:1C:46:42:2E:E2:60:11:EC:00:32:F1:47:C9:AA:F1:73:46 X509v3 Authority Key Identifier: keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:57:f7:de:47:d7:ad:b8:da:03:fb:9f:e3:d6:1a:c6:4f:14: 22:8c:a0:66:40:ba:18:35:bb:88:a4:db:ac:ae:de:13:5d:45: 9f:cc:bf:da:a8:ac:9a:b6:7a:a2:59:a6:3c:76:85:98:e7:fa: b2:2e:74:38:2d:65:a9:37:74:33:7a:cb:b0:bc:af:b7:42:ef: 41:24:6a:7c:a8:06:d8:38:15:da:8e:4b:23:a0:f3:4f:29:7e: 25:b3:a8:02:77:ca:72:b9:ae:ac:d6:0d:5f:5a:d9:ad:cd:fc: d6:f3:d7:b2:ee:8d:77:58:a4:ab:de:87:d8:00:07:e2:87:bb: e2:11:64:7e:7e:a1:b6:c5:0f:78:6e:b1:22:da:82:01:49:9f: 6c:2e:f8:31:49:2d:be:32:76:90:74:fb:74:34:14:5b:cc:b4: 5b:2a:7b:54:ae:3a:90:73:be:29:84:4a:a9:ea:9f:31:8e:df: 65:5a:ed:f5:8a:9c:c3:d9:58:ad:4f:61:04:ac:6a:0a:2f:a2: b5:2e:c3:c1:b9:3a:af:0e:10:ac:d4:b5:e2:5c:28:d6:9c:36: 2a:91:fa:89:38:32:3e:86:07:c2:91:c3:50:04:03:bd:83:47: a5:c2:22:99:e2:15:08:25:c0:a2:11:9c:ba:b1:15:6c:98:a6: ab:ad:ff:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdgR9NuCIWZdEP/bvzBjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZDkxNDYyYzRkYzFkZjZhOGEzYTk3YTFhZWU1N2EwY2Mx NGVmYmEwHhcNMjUxMjI2MDcwMTA1WhcNMjUxMjI3MDcwMTA1WjAzMTEwLwYDVQQD Eyg0YWY2MmIxYzQ2NDIyZWUyNjAxMWVjMDAzMmYxNDdjOWFhZjE3MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm/C5QVADD1HC7urLE5tZnuRrCS8 pHET6cCcR3qoCC6+mtJ2Vh9aWxDhSAJXHQZ19yA5nKLAzZDGpqlQsUjiIa5NsPIR mDXR3LPYVLTLU2I8151Ic48MEzYpazR4DTbtG8UhKzt1FA8WQnTtjjDYWZpBxUA9 /uojYMj3B8F2HiQvcgVNvAYP6zknsnLuaChOwpXDJeoctUtkkiKzAwYGuRE/Y4Dr yhc1ShiwXdqMFHiDItlTAttpJSBGJpnUjh++as4P6PQAg58DV+BC4eN53Zhe3Bq1 /1ZhHJgnPCXK5VtmVGeTLgbGwwaTmquUG9Ht7GVrdhgiu6jFdzy6xpjJqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr2KxxGQi7iYBHsADLxR8mq8XNGMB8GA1UdIwQY MBaAFMfZFGLE3B32qKOpehruV6DMFO+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzIt MzQ5N2Y3ZTJkZTYyLzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMThhMjMtMjg3Ni00NmEyLWFmNzItMzQ5N2Y3ZTJkZTYy LzEveDlrVVlzVGNIZmFvbzZsNkd1NVhvTXdVNzdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlf33kfX rbjaA/uf49Yaxk8UIoygZkC6GDW7iKTbrK7eE11Fn8y/2qismrZ6olmmPHaFmOf6 si50OC1lqTd0M3rLsLyvt0LvQSRqfKgG2DgV2o5LI6DzTyl+JbOoAnfKcrmurNYN X1rZrc381vPXsu6Nd1ikq96H2AAH4oe74hFkfn6htsUPeG6xItqCAUmfbC74MUkt vjJ2kHT7dDQUW8y0Wyp7VK46kHO+KYRKqeqfMY7fZVrt9Yqcw9lYrU9hBKxqCi+i tS7Dwbk6rw4QrNS14lwo1pw2KpH6iTgyPoYHwpHDUAQDvYNHpcIimeIVCCXAohGc urEVbJimq63/7A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:27 2025 by rpki-client