This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json) Hash identifier: EDXPe6koB4YRQ9zWmOGzvezobgfChCx06hiNErlZC2g= Subject key identifier: C2:0A:6E:0D:F4:11:6F:3D:D0:7F:B6:7E:DA:1F:63:78:F2:BC:91:9F Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9 Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9 Certificate serial: 019B35694001187C01FEC969F8E928C4CFF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft Manifest number: 0A53 Signing time: Fri 19 Dec 2025 07:00:48 +0000 Manifest this update: Fri 19 Dec 2025 07:00:48 +0000 Manifest next update: Sat 20 Dec 2025 07:00:48 +0000 Files and hashes: 1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=) 2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: XthxywvIGOJa/YQxs8h2ILXm3IUcr6T1set8BZLdexk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:40:01:18:7c:01:fe:c9:69:f8:e9:28:c4:cf:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9 Validity Not Before: Dec 19 07:00:48 2025 GMT Not After : Dec 20 07:00:48 2025 GMT Subject: CN=c20a6e0df4116f3dd07fb67eda1f6378f2bc919f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:0e:fc:e5:20:98:7d:90:76:51:52:5c:7e: f2:41:b7:38:5b:81:81:5f:59:56:c2:c8:25:92:a7: 9d:00:0d:5f:86:c9:ae:ab:c0:ae:58:74:da:48:af: 4a:bd:47:06:85:9f:34:b1:dc:7f:3a:8b:72:bb:17: 14:d7:9a:5c:d1:e5:50:b8:f6:33:84:71:a1:49:5d: 5d:bf:55:a9:3c:a8:7a:cf:b0:a4:1a:b2:0b:a0:9c: 3b:c3:0b:07:85:42:03:d1:be:e0:86:3e:c2:b4:e1: 09:9b:ac:ca:9d:aa:0d:3f:ac:d4:a6:b0:fd:f5:da: d7:6f:bc:35:44:6c:9a:40:71:09:63:b6:88:64:0a: f8:79:be:2f:4f:5b:25:85:32:51:9f:b6:92:ea:d9: c0:cc:a0:2c:9a:6d:d0:6a:5d:59:97:92:c7:d7:bd: 36:cd:c5:f5:b0:2e:61:a3:4e:e0:cf:cd:9a:04:8a: 77:ce:a7:4f:28:96:3c:80:45:be:64:39:60:67:3b: 31:b6:7d:e8:d8:6b:64:c9:44:ed:12:05:3b:97:55: ca:ad:f2:17:a1:44:fd:3b:fd:0b:f5:d3:e8:da:8b: 16:24:56:6d:f3:91:be:99:61:4b:87:c5:e1:76:aa: 69:c6:07:04:ca:2a:b0:46:b3:7f:b6:64:b0:97:12: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0A:6E:0D:F4:11:6F:3D:D0:7F:B6:7E:DA:1F:63:78:F2:BC:91:9F X509v3 Authority Key Identifier: keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e8:92:1e:ff:c5:fb:8f:fa:fa:2b:fb:79:12:1d:12:05:ca: 3d:df:75:16:98:52:0b:0a:0b:e6:d8:10:94:46:1f:75:f2:01: e6:34:1c:b1:97:f4:cb:3b:ff:9f:6e:6c:14:38:0d:b4:6c:7c: ba:60:79:51:b3:51:8b:5a:7d:93:9f:fd:93:04:f5:c6:22:9f: d1:58:89:67:75:a2:df:40:c4:64:76:9e:53:db:3b:a8:32:79: 34:41:97:23:ad:95:52:3e:bb:77:f5:58:52:6a:20:01:dd:40: 78:a8:4d:ca:fa:52:ab:a9:94:9c:e5:20:fb:08:54:3e:61:ba: d4:d5:b4:8a:5d:77:d5:d7:ba:eb:42:68:5d:2b:39:13:0e:15: df:cd:9e:8a:47:09:97:6e:46:8c:82:48:a0:44:7e:83:6c:59: 64:22:f8:ab:05:f0:eb:6b:38:e8:c0:4d:37:38:55:ca:11:36: 2a:fa:62:fa:23:57:99:9d:6f:c8:53:fb:2a:01:73:15:fa:bb: 63:e5:36:bb:b3:49:4a:4a:42:6a:0e:a9:d5:4f:2a:9c:b8:7b: f0:ef:76:43:ad:6a:92:e0:9d:21:31:cd:75:cc:b1:1d:0e:12: b3:17:ff:1c:df:83:29:e3:36:c0:01:75:d6:2a:d9:a6:49:e2: 7d:88:ab:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aUABGHwB/slp+OkoxM/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1N2FhMWM3OGY2Y2NhYmM0N2I1NTEyMWEzNWZmMzBkOTk4 MjdlZTkwHhcNMjUxMjE5MDcwMDQ4WhcNMjUxMjIwMDcwMDQ4WjAzMTEwLwYDVQQD EyhjMjBhNmUwZGY0MTE2ZjNkZDA3ZmI2N2VkYTFmNjM3OGYyYmM5MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36QO/OUgmH2QdlFSXH7yQbc4W4GB X1lWwsglkqedAA1fhsmuq8CuWHTaSK9KvUcGhZ80sdx/OotyuxcU15pc0eVQuPYz hHGhSV1dv1WpPKh6z7CkGrILoJw7wwsHhUID0b7ghj7CtOEJm6zKnaoNP6zUprD9 9drXb7w1RGyaQHEJY7aIZAr4eb4vT1slhTJRn7aS6tnAzKAsmm3Qal1Zl5LH1702 zcX1sC5ho07gz82aBIp3zqdPKJY8gEW+ZDlgZzsxtn3o2GtkyUTtEgU7l1XKrfIX oUT9O/0L9dPo2osWJFZt85G+mWFLh8XhdqppxgcEyiqwRrN/tmSwlxLZVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIKbg30EW890H+2ftofY3jyvJGfMB8GA1UdIwQY MBaAFEV6ocePbMq8R7VRIaNf8w2Zgn7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQt Yzc0MGUyZmUzMGQzLzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQtYzc0MGUyZmUzMGQz LzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+iSHv/F +4/6+iv7eRIdEgXKPd91FphSCwoL5tgQlEYfdfIB5jQcsZf0yzv/n25sFDgNtGx8 umB5UbNRi1p9k5/9kwT1xiKf0ViJZ3Wi30DEZHaeU9s7qDJ5NEGXI62VUj67d/VY UmogAd1AeKhNyvpSq6mUnOUg+whUPmG61NW0il131de660JoXSs5Ew4V382eikcJ l25GjIJIoER+g2xZZCL4qwXw62s46MBNNzhVyhE2Kvpi+iNXmZ1vyFP7KgFzFfq7 Y+U2u7NJSkpCag6p1U8qnLh78O92Q61qkuCdITHNdcyxHQ4Ssxf/HN+DKeM2wAF1 1irZpknifYirFw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:36:26 2025 by rpki-client