This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json) Hash identifier: aHIpWF47RPH+RkhwkpiZIyzXyVXoRq75W1IruHUdmkE= Subject key identifier: AE:F4:56:4B:B5:EB:CA:4E:31:64:1B:43:D1:11:37:4F:91:BA:DA:27 Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09 Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209 Certificate serial: 019B5B658D3DEE17D81FD619C0202DC05333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 16:02:20 +0000 Manifest this update: Fri 26 Dec 2025 16:02:20 +0000 Manifest next update: Sat 27 Dec 2025 16:02:20 +0000 Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=) 2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: BtxaVAulSKKJQlBAMsBZNkvnwg7+l5AEGzKwnIJquNg=) 3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:8d:3d:ee:17:d8:1f:d6:19:c0:20:2d:c0:53:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209 Validity Not Before: Dec 26 16:02:20 2025 GMT Not After : Dec 27 16:02:20 2025 GMT Subject: CN=aef4564bb5ebca4e31641b43d111374f91bada27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:2c:0e:d9:a4:a6:e3:05:8b:a2:31:3a:f2: f7:73:8b:05:05:30:dd:db:9a:fd:9e:7c:ff:c8:89: f5:be:7c:3d:c5:a2:28:73:c7:3e:dd:58:12:af:72: a0:5b:00:e9:bd:a0:5d:f3:2d:f1:0d:db:e8:22:31: d6:8c:98:30:97:c3:60:1c:10:6d:36:9f:5c:40:fe: 6f:ee:ab:72:c2:63:bd:e4:d3:7a:bf:e4:7c:6c:94: 34:4c:13:82:99:8a:06:6e:24:82:dc:2f:b8:8c:99: 79:95:f2:23:03:39:b4:7f:aa:5a:c7:4a:85:ca:df: c9:2d:64:f6:84:05:03:5a:72:40:5e:1f:d2:c4:88: a5:b9:51:5f:a4:84:fd:41:a0:01:31:ab:2d:76:e1: 68:f8:43:63:21:68:5f:b4:3c:e5:18:5e:48:64:a5: 2a:2e:0a:b7:a5:26:db:35:97:1a:3c:13:22:80:75: e9:83:12:08:e6:d0:e6:31:9d:6e:2e:1e:06:8d:9d: 46:95:d4:3a:44:5d:b8:58:d5:52:21:dd:18:75:63: 71:13:24:51:1b:f5:e5:a8:58:e7:8e:f0:ab:de:b7: 3e:33:bd:d5:5c:2a:de:ec:42:75:e0:f4:ac:ff:ed: 6e:b3:2f:9e:cf:4a:36:ac:85:f2:d1:4e:3b:eb:c7: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F4:56:4B:B5:EB:CA:4E:31:64:1B:43:D1:11:37:4F:91:BA:DA:27 X509v3 Authority Key Identifier: keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4c:20:64:38:0e:1b:7b:4a:8e:a9:22:f1:f8:16:db:4c:b4: 36:47:f8:da:48:95:c3:5b:85:1a:83:0d:c0:ff:03:5c:b2:b4: 9d:ee:da:ca:30:d8:5a:ab:97:63:09:10:20:e0:e6:34:a2:04: 67:5b:f4:69:47:f8:15:1f:da:4d:55:d8:35:a7:0b:ae:75:d3: b9:66:0e:b2:90:5a:8a:a7:4f:b8:43:b5:15:74:6d:46:87:7e: ef:86:49:b3:d3:56:a8:ad:4f:64:04:c9:64:aa:d9:a3:57:19: 8a:63:52:ec:ba:90:6e:34:a2:3f:a3:fa:1d:a8:5b:a1:38:f2: a8:93:92:c8:09:b3:01:01:1c:85:ba:c0:c2:52:10:67:b5:4a: 3d:aa:ef:b9:fd:2e:36:03:e4:da:97:39:b8:4f:fa:73:8b:c6: 28:f8:3f:be:be:84:e0:97:b1:58:5b:43:61:4a:c2:9d:0b:fa: 65:7d:69:d8:97:58:5d:7c:56:26:49:28:b8:a5:53:22:53:cb: 32:83:dc:9a:1f:e9:1b:e2:c4:bd:03:d3:85:7d:2f:26:9e:fd: 6e:b2:73:02:f6:dd:c2:a3:9c:dd:be:b2:6a:ae:4d:1c:69:51: 21:a9:06:28:53:04:bc:89:fe:85:d6:c9:a5:f8:24:94:05:ce: 23:0c:d2:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZY097hfYH9YZwCAtwFMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1N2Y5ZmRlYTM1MGE3NjZiYjk4YzYwNGQzYjljMjc5MTY3 MzIyMDkwHhcNMjUxMjI2MTYwMjIwWhcNMjUxMjI3MTYwMjIwWjAzMTEwLwYDVQQD EyhhZWY0NTY0YmI1ZWJjYTRlMzE2NDFiNDNkMTExMzc0ZjkxYmFkYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4EsDtmkpuMFi6IxOvL3c4sFBTDd 25r9nnz/yIn1vnw9xaIoc8c+3VgSr3KgWwDpvaBd8y3xDdvoIjHWjJgwl8NgHBBt Np9cQP5v7qtywmO95NN6v+R8bJQ0TBOCmYoGbiSC3C+4jJl5lfIjAzm0f6pax0qF yt/JLWT2hAUDWnJAXh/SxIiluVFfpIT9QaABMastduFo+ENjIWhftDzlGF5IZKUq Lgq3pSbbNZcaPBMigHXpgxII5tDmMZ1uLh4GjZ1GldQ6RF24WNVSId0YdWNxEyRR G/XlqFjnjvCr3rc+M73VXCre7EJ14PSs/+1usy+ez0o2rIXy0U4768dHoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK70Vku168pOMWQbQ9ERN0+RutonMB8GA1UdIwQY MBaAFHV/n96jUKdmu5jGBNO5wnkWcyIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYt YzI1YWJhNmI1NWFmLzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYtYzI1YWJhNmI1NWFm LzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEwgZDgO G3tKjqki8fgW20y0Nkf42kiVw1uFGoMNwP8DXLK0ne7ayjDYWquXYwkQIODmNKIE Z1v0aUf4FR/aTVXYNacLrnXTuWYOspBaiqdPuEO1FXRtRod+74ZJs9NWqK1PZATJ ZKrZo1cZimNS7LqQbjSiP6P6HahboTjyqJOSyAmzAQEchbrAwlIQZ7VKParvuf0u NgPk2pc5uE/6c4vGKPg/vr6E4JexWFtDYUrCnQv6ZX1p2JdYXXxWJkkouKVTIlPL MoPcmh/pG+LEvQPThX0vJp79brJzAvbdwqOc3b6yaq5NHGlRIakGKFMEvIn+hdbJ pfgklAXOIwzScA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:33 2025 by rpki-client