This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json) Hash identifier: WTBZoAc6oLWu37aHivSIlL46c7ueS3LBiqDGynqmyzM= Subject key identifier: F5:D8:4F:7C:F8:45:06:FD:A5:46:B7:10:A3:07:B0:62:99:EE:7A:08 Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494 Certificate serial: 019B3F48ACFF20F51FC7320DF05620473E86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft Manifest number: 12C9 Signing time: Sun 21 Dec 2025 05:01:26 +0000 Manifest this update: Sun 21 Dec 2025 05:01:26 +0000 Manifest next update: Mon 22 Dec 2025 05:01:26 +0000 Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=) 2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=) 3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: q85YO5RgrNH4EcRcaSepj3cvmaQWvfj8I9AqMPcvbJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:ac:ff:20:f5:1f:c7:32:0d:f0:56:20:47:3e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494 Validity Not Before: Dec 21 05:01:26 2025 GMT Not After : Dec 22 05:01:26 2025 GMT Subject: CN=f5d84f7cf84506fda546b710a307b06299ee7a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:89:95:21:e4:3e:26:6a:d8:c8:54:8d:68: 3f:13:5f:4c:5c:0e:56:64:b9:d3:d1:13:be:00:c1: 4c:69:e6:1c:39:f7:9b:7c:e7:49:23:ba:5c:ae:da: 8a:e3:af:fc:a5:c5:a6:78:d2:90:9a:37:e6:22:4e: 23:ab:fc:6b:98:b9:57:5f:bf:b0:c9:9a:4f:0f:17: f0:01:cc:9b:cc:c5:45:ea:f6:42:8f:af:35:b6:63: e0:b5:d3:29:0e:6d:cc:9d:0a:5e:54:dc:cd:94:69: 0d:ca:81:2f:60:6f:e2:af:ad:d5:76:e6:03:1c:69: 23:a8:d0:72:35:24:93:dd:cb:4f:ec:f4:7d:28:b6: c8:4e:af:91:ae:29:a9:81:d9:1e:19:91:a7:e7:32: 45:f6:79:83:f5:90:bd:c2:0c:84:d3:78:e5:30:25: 8b:e8:ae:31:72:b2:23:93:0a:e1:39:75:6f:e9:b5: ab:51:fc:4a:2a:e4:5d:85:9a:12:53:c5:fa:8b:13: 6d:0c:87:30:e9:47:2f:68:fc:b2:3d:e6:0c:a7:39: f8:de:2b:83:eb:37:ab:86:f4:46:4d:fd:9b:d5:42: dc:ae:f2:89:e0:7c:ec:05:2c:ae:5e:dc:03:f1:e3: cd:a9:3f:09:41:52:82:e2:38:c8:6a:e2:83:c0:8f: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D8:4F:7C:F8:45:06:FD:A5:46:B7:10:A3:07:B0:62:99:EE:7A:08 X509v3 Authority Key Identifier: keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d5:1a:26:4b:3d:98:8b:e2:71:ea:4f:28:be:63:f3:07:99: 8e:5a:b3:08:90:bc:2b:19:5b:a3:20:54:f9:07:17:3e:a5:90: 38:fd:4b:28:5b:38:1a:2a:17:98:41:16:b9:80:a8:56:d8:8a: de:3c:c0:88:bc:9b:99:03:e5:1f:e0:6a:31:0e:fd:32:d2:b9: 11:95:a6:26:ae:f4:ae:ee:32:43:69:72:3c:41:d3:0b:4b:b3: 88:d5:1b:65:25:21:37:ac:18:6c:c2:1c:1a:85:b1:34:4b:96: 03:96:21:f6:1d:b7:32:85:15:58:4d:5b:db:1e:5c:bf:77:02: e2:92:ab:91:bc:e4:2f:34:c0:ad:5b:5c:de:e4:ce:8e:e6:b9: 91:7f:ef:42:a6:9f:2a:7e:1c:58:1f:83:94:fa:bc:98:24:4a: fb:7c:e7:64:7a:3f:10:08:c2:7e:6e:22:03:5a:26:e5:df:2f: 10:6d:89:d3:b7:70:72:2f:b1:57:da:2e:d5:78:32:cd:19:58: 0e:bf:12:8e:ef:82:47:f5:07:be:4e:f3:91:36:99:23:75:76: da:1e:78:c9:ec:c8:7c:ae:ea:c1:15:2b:5b:48:72:ba:cb:df: 9b:01:5b:b3:03:89:a9:84:e8:16:7b:0b:1e:a1:9e:a7:9c:cf: 21:89:73:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SKz/IPUfxzIN8FYgRz6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz NTg0OTQwHhcNMjUxMjIxMDUwMTI2WhcNMjUxMjIyMDUwMTI2WjAzMTEwLwYDVQQD EyhmNWQ4NGY3Y2Y4NDUwNmZkYTU0NmI3MTBhMzA3YjA2Mjk5ZWU3YTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOCJlSHkPiZq2MhUjWg/E19MXA5W ZLnT0RO+AMFMaeYcOfebfOdJI7pcrtqK46/8pcWmeNKQmjfmIk4jq/xrmLlXX7+w yZpPDxfwAcybzMVF6vZCj681tmPgtdMpDm3MnQpeVNzNlGkNyoEvYG/ir63VduYD HGkjqNByNSST3ctP7PR9KLbITq+RrimpgdkeGZGn5zJF9nmD9ZC9wgyE03jlMCWL 6K4xcrIjkwrhOXVv6bWrUfxKKuRdhZoSU8X6ixNtDIcw6UcvaPyyPeYMpzn43iuD 6zerhvRGTf2b1ULcrvKJ4HzsBSyuXtwD8ePNqT8JQVKC4jjIauKDwI8x2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXYT3z4RQb9pUa3EKMHsGKZ7noIMB8GA1UdIwQY MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3 LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtUaJks9 mIvicepPKL5j8weZjlqzCJC8KxlboyBU+QcXPqWQOP1LKFs4GioXmEEWuYCoVtiK 3jzAiLybmQPlH+BqMQ79MtK5EZWmJq70ru4yQ2lyPEHTC0uziNUbZSUhN6wYbMIc GoWxNEuWA5Yh9h23MoUVWE1b2x5cv3cC4pKrkbzkLzTArVtc3uTOjua5kX/vQqaf Kn4cWB+DlPq8mCRK+3znZHo/EAjCfm4iA1om5d8vEG2J07dwci+xV9ou1XgyzRlY Dr8Sju+CR/UHvk7zkTaZI3V22h54yezIfK7qwRUrW0hyusvfmwFbswOJqYToFnsL HqGep5zPIYlz9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:25 2025 by rpki-client