This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json) Hash identifier: h6tp/D3T1tHsVDXQvQ6CDSeRe89OdJbyC1mEpmcxiIY= Subject key identifier: 77:28:69:EE:61:15:C3:E5:FA:B6:4F:67:A3:DF:F7:AC:8A:44:0C:18 Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494 Certificate serial: 019B3D598BE32151A82C03BCBD0D3D7D347E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft Manifest number: 12C8 Signing time: Sat 20 Dec 2025 20:00:37 +0000 Manifest this update: Sat 20 Dec 2025 20:00:37 +0000 Manifest next update: Sun 21 Dec 2025 20:00:37 +0000 Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=) 2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=) 3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: YYFlWt9WojoGfSK+EhU2mtzysqU7wVpumnYuXhOpd+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:8b:e3:21:51:a8:2c:03:bc:bd:0d:3d:7d:34:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494 Validity Not Before: Dec 20 20:00:37 2025 GMT Not After : Dec 21 20:00:37 2025 GMT Subject: CN=772869ee6115c3e5fab64f67a3dff7ac8a440c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:a5:d0:3c:bf:0d:e3:eb:ee:42:b8:4b:1d: 6a:0f:77:80:b8:db:9e:c4:1a:62:cf:cd:c5:4d:20: a2:1a:f8:be:ad:9d:5c:17:db:9b:c1:fa:c8:b6:f9: 79:a8:62:1b:67:7b:52:ea:d6:f0:e6:78:17:38:84: 39:46:4f:25:b0:fd:de:91:c2:2a:e6:25:e5:69:cd: 9a:00:3b:1a:4c:aa:36:36:9c:20:8b:e5:93:77:64: 99:92:13:a3:60:3d:8e:78:73:6b:29:e7:49:8f:1c: 1f:ca:ff:84:da:46:04:63:f9:63:26:ab:cb:78:e3: 9d:e5:70:5d:35:3e:74:3e:03:87:d1:dc:11:7d:64: c3:90:9c:f6:63:47:00:33:52:f4:2c:7b:4e:24:60: 2f:d7:a0:93:d7:3f:9a:24:40:7b:d0:2b:9e:ee:4c: ce:39:1d:aa:b5:f5:86:3e:d7:37:d9:86:9c:d9:b2: 43:38:5b:68:3f:25:31:b0:44:2b:64:d2:3c:d1:56: ed:5d:3f:45:49:a7:4e:c0:13:68:cf:10:47:6e:ff: 3a:5c:b7:8e:15:f3:6a:ca:61:63:9c:ae:ba:7f:b5: f2:d3:ba:0a:4e:89:bf:74:cb:68:48:df:a6:6d:7a: bc:2b:4c:8f:ff:39:d1:53:7e:9c:8b:50:ce:31:ff: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:28:69:EE:61:15:C3:E5:FA:B6:4F:67:A3:DF:F7:AC:8A:44:0C:18 X509v3 Authority Key Identifier: keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:14:b1:02:99:53:11:2a:01:38:23:b7:86:fd:9e:e1:f6:b1: 0b:c8:13:6f:4e:15:f4:ad:40:79:77:a6:8d:fb:d6:ab:e4:e2: 94:31:96:f1:78:06:f7:57:1e:b9:c3:e6:b7:4f:b0:07:d6:b2: a4:bb:e5:45:0b:35:a6:85:86:f6:0c:82:fa:e5:26:49:4d:1b: 18:95:33:0e:2c:03:77:6c:9c:80:4b:d4:2b:69:3e:92:fb:21: 11:b3:39:6a:2b:ba:8d:ee:73:2c:45:f3:06:27:da:2f:6e:05: ef:71:1f:32:4f:7a:2a:2a:41:75:c1:89:10:ef:1c:cd:dd:67: 22:ec:2f:fc:ce:33:b4:fe:7e:4c:4a:4f:05:a6:7a:69:72:a4: cb:ec:fe:84:e7:dc:46:cf:60:ba:21:f3:a5:24:40:80:de:33: a8:60:cb:89:48:49:65:44:6c:63:63:9c:7f:c3:a7:54:07:48: 23:df:f3:b2:11:ae:23:2c:88:61:1d:26:24:c7:8f:28:41:d2: a2:2d:06:6d:db:54:7e:cc:04:1c:61:f7:1e:b6:2d:2f:2c:49: be:94:ca:9f:0b:13:6b:e6:d9:f0:da:e3:dc:41:10:c6:f1:e9: 81:0b:b9:8a:1c:0d:56:cc:61:75:b0:e6:f4:ad:8b:8f:56:8b: d7:65:c6:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WYvjIVGoLAO8vQ09fTR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz NTg0OTQwHhcNMjUxMjIwMjAwMDM3WhcNMjUxMjIxMjAwMDM3WjAzMTEwLwYDVQQD Eyg3NzI4NjllZTYxMTVjM2U1ZmFiNjRmNjdhM2RmZjdhYzhhNDQwYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lil0Dy/DePr7kK4Sx1qD3eAuNue xBpiz83FTSCiGvi+rZ1cF9ubwfrItvl5qGIbZ3tS6tbw5ngXOIQ5Rk8lsP3ekcIq 5iXlac2aADsaTKo2Npwgi+WTd2SZkhOjYD2OeHNrKedJjxwfyv+E2kYEY/ljJqvL eOOd5XBdNT50PgOH0dwRfWTDkJz2Y0cAM1L0LHtOJGAv16CT1z+aJEB70Cue7kzO OR2qtfWGPtc32Yac2bJDOFtoPyUxsEQrZNI80VbtXT9FSadOwBNozxBHbv86XLeO FfNqymFjnK66f7Xy07oKTom/dMtoSN+mbXq8K0yP/znRU36ci1DOMf/dIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcoae5hFcPl+rZPZ6Pf96yKRAwYMB8GA1UdIwQY MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3 LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBSxAplT ESoBOCO3hv2e4faxC8gTb04V9K1AeXemjfvWq+TilDGW8XgG91ceucPmt0+wB9ay pLvlRQs1poWG9gyC+uUmSU0bGJUzDiwDd2ycgEvUK2k+kvshEbM5aiu6je5zLEXz BifaL24F73EfMk96KipBdcGJEO8czd1nIuwv/M4ztP5+TEpPBaZ6aXKky+z+hOfc Rs9guiHzpSRAgN4zqGDLiUhJZURsY2Ocf8OnVAdII9/zshGuIyyIYR0mJMePKEHS oi0GbdtUfswEHGH3HrYtLyxJvpTKnwsTa+bZ8Nrj3EEQxvHpgQu5ihwNVsxhdbDm 9K2Lj1aL12XGAg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:04:39 2025 by rpki-client