This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json) Hash identifier: tLHst8RaiGLwDvJfGxBhIq0rc9PK4Sc63frnMMSCNKU= Subject key identifier: C5:88:FF:79:B6:7E:AC:FB:18:99:51:35:AF:78:9F:08:9A:20:58:00 Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c Certificate serial: 019B1049ED06F2949039B9DF65CF5E0018C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft Manifest number: 1483 Signing time: Fri 12 Dec 2025 02:00:38 +0000 Manifest this update: Fri 12 Dec 2025 02:00:38 +0000 Manifest next update: Sat 13 Dec 2025 02:00:38 +0000 Files and hashes: 1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=) 2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=) 3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=) 4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=) 5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=) 6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=) 7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: ur9c/yI4zFKfFJHPwTPyKPi+ldIslfoQzdXuUGoSGCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:ed:06:f2:94:90:39:b9:df:65:cf:5e:00:18:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Validity Not Before: Dec 12 02:00:38 2025 GMT Not After : Dec 13 02:00:38 2025 GMT Subject: CN=c588ff79b67eacfb18995135af789f089a205800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:bc:0d:b0:a0:87:a3:52:00:31:ba:b6:1d: 4e:6d:f8:a4:40:59:b7:cc:84:6b:41:09:c5:ad:30: de:be:c5:a6:a1:21:09:be:be:96:92:c4:03:06:47: 19:5d:de:a6:f6:97:38:83:8a:e9:16:51:69:a7:39: 88:80:97:31:26:31:12:57:ec:51:8e:13:f9:40:11: d1:d7:76:da:17:3c:16:75:1e:ed:0b:06:6e:8d:b8: 4f:ac:5a:26:59:e5:8a:46:7b:89:7c:c1:83:81:0a: e1:d6:2c:b1:2c:7e:5d:74:18:29:20:fb:2e:4c:e8: f4:f8:f1:3a:8b:39:07:b6:c7:7a:99:ae:1d:1c:4b: 7c:db:b3:2e:b4:52:4f:51:47:e9:8e:1a:7b:9d:2d: ed:47:ff:01:23:83:e8:55:db:b5:15:4d:38:62:4c: 31:f4:45:0c:11:3c:76:b0:be:69:10:4f:04:81:21: a4:dc:da:b2:27:50:7c:4a:51:27:44:ef:81:e3:5a: 5e:06:d9:a7:e7:fc:c3:8f:42:f0:98:51:ee:73:6f: fe:3f:21:c3:2b:76:f2:c8:a8:e1:29:25:46:3c:2c: 1f:c4:1a:0f:26:ba:05:9b:2f:12:06:90:c1:a1:c2: 69:52:6d:90:7a:d2:ef:d9:e8:fb:9c:32:26:30:2c: d2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:88:FF:79:B6:7E:AC:FB:18:99:51:35:AF:78:9F:08:9A:20:58:00 X509v3 Authority Key Identifier: keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b4:69:9f:ee:85:a6:7d:68:98:32:55:1e:73:6c:72:7d:52: e0:20:c1:83:57:71:e4:1d:6e:8e:87:90:68:be:a8:69:e0:4e: 9c:c2:a3:7d:37:42:92:53:89:d1:c6:a8:e8:8a:25:51:30:d3: 89:55:28:0d:42:96:7d:29:95:3c:7f:42:28:32:f1:ad:2e:c9: 07:89:43:27:51:dc:be:be:62:fc:c2:d0:1b:77:11:8b:1f:c3: 0c:1c:4e:26:df:77:11:22:c6:d1:e5:aa:84:a1:88:9e:58:b7: 24:a2:3e:34:8e:27:83:aa:84:b7:34:60:1f:12:0d:16:e2:01: 9b:86:a9:54:39:11:5e:53:b9:bc:11:2e:e8:86:66:68:6e:dd: 38:ae:a5:08:6f:a3:21:d4:23:f7:9e:f3:b7:b0:86:e2:33:36: 29:8a:bb:ae:8c:3c:ca:b6:bd:fb:be:ae:41:85:1a:4d:78:23: b7:68:b0:fb:60:5e:43:81:7d:68:68:e2:36:d4:be:f6:ec:90: 77:d8:df:8c:64:e1:15:a2:e2:ec:d5:27:d4:a0:41:1a:e1:c3: b0:f1:f0:be:b8:d1:22:f0:97:36:44:00:c9:8e:9b:74:51:48: 1e:15:3f:84:b5:a4:1c:4c:6f:ce:06:f4:3e:8e:02:b2:6f:84: 9e:34:07:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSe0G8pSQObnfZc9eABjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4 MmEyM2MwHhcNMjUxMjEyMDIwMDM4WhcNMjUxMjEzMDIwMDM4WjAzMTEwLwYDVQQD EyhjNTg4ZmY3OWI2N2VhY2ZiMTg5OTUxMzVhZjc4OWYwODlhMjA1ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriu8DbCgh6NSADG6th1ObfikQFm3 zIRrQQnFrTDevsWmoSEJvr6WksQDBkcZXd6m9pc4g4rpFlFppzmIgJcxJjESV+xR jhP5QBHR13baFzwWdR7tCwZujbhPrFomWeWKRnuJfMGDgQrh1iyxLH5ddBgpIPsu TOj0+PE6izkHtsd6ma4dHEt827MutFJPUUfpjhp7nS3tR/8BI4PoVdu1FU04Ykwx 9EUMETx2sL5pEE8EgSGk3NqyJ1B8SlEnRO+B41peBtmn5/zDj0LwmFHuc2/+PyHD K3byyKjhKSVGPCwfxBoPJroFmy8SBpDBocJpUm2QetLv2ej7nDImMCzSLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWI/3m2fqz7GJlRNa94nwiaIFgAMB8GA1UdIwQY MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt MjM4NDA1ZjJjZGU5LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5 LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrRpn+6F pn1omDJVHnNscn1S4CDBg1dx5B1ujoeQaL6oaeBOnMKjfTdCklOJ0cao6IolUTDT iVUoDUKWfSmVPH9CKDLxrS7JB4lDJ1Hcvr5i/MLQG3cRix/DDBxOJt93ESLG0eWq hKGInli3JKI+NI4ng6qEtzRgHxINFuIBm4apVDkRXlO5vBEu6IZmaG7dOK6lCG+j IdQj957zt7CG4jM2KYq7row8yra9+76uQYUaTXgjt2iw+2BeQ4F9aGjiNtS+9uyQ d9jfjGThFaLi7NUn1KBBGuHDsPHwvrjRIvCXNkQAyY6bdFFIHhU/hLWkHExvzgb0 Po4Csm+EnjQHvg== -----END CERTIFICATE-----Generated at Fri Dec 12 07:42:25 2025 by rpki-client