This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json) Hash identifier: Dp3DktMuzEuSSc4sdUPBkc8hCU9iw3lQnxFP01uV1f4= Subject key identifier: 45:91:18:55:4C:0B:2E:3F:FE:11:43:F0:BD:BC:9D:F7:8B:54:13:C1 Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Certificate serial: 019B2552CE0F8ADFEE188D06AE0728AB1B77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft Manifest number: 1782 Signing time: Tue 16 Dec 2025 04:02:22 +0000 Manifest this update: Tue 16 Dec 2025 04:02:22 +0000 Manifest next update: Wed 17 Dec 2025 04:02:22 +0000 Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=) 2: 9N3RXGB1Oy8UN0Y7dyN-L02RNQg.roa (hash: LpNakPd/aYXI1JhkoX1IQRJscRwTM6lULLDhw2GOIT0=) 3: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=) 4: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=) 5: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: gAqDtVXAEu/KZ35rda9L/6s/DVN973kY0wUV+zv3POw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:ce:0f:8a:df:ee:18:8d:06:ae:07:28:ab:1b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Validity Not Before: Dec 16 04:02:22 2025 GMT Not After : Dec 17 04:02:22 2025 GMT Subject: CN=459118554c0b2e3ffe1143f0bdbc9df78b5413c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:01:4b:dc:bf:6c:d1:43:03:7f:aa:75:c2: 14:55:15:15:ce:c8:39:b7:27:0f:c0:2d:ee:89:b8: 4f:79:88:e1:c6:32:a5:25:66:01:5d:68:b8:ad:b9: 98:f0:0e:c4:34:cc:c8:5d:c9:6c:0a:bd:aa:dc:81: ba:c2:2e:0f:ae:72:2d:a5:db:24:34:eb:d4:18:22: ba:8a:44:1b:18:a7:59:56:be:c2:ff:29:15:e2:6a: 3a:32:5e:2a:2f:0c:d0:4e:95:47:e6:cb:05:91:c4: fa:d0:99:fa:5e:81:fe:c0:78:6a:e6:cc:e6:55:98: e8:93:52:20:0b:3f:70:73:8b:fc:82:ff:88:14:99: c6:3e:0b:be:78:dd:f1:81:1d:b9:4a:38:60:28:72: d5:3d:fd:2c:a1:36:e2:ae:2b:fd:d9:a8:cb:40:4b: 00:af:e0:1d:91:18:19:ca:9f:cd:cb:ff:be:43:d9: de:76:b1:aa:93:2f:c8:9d:57:d0:1b:89:96:82:66: fa:56:81:88:4c:b9:8c:60:0d:fc:3e:9f:5a:4e:47: d5:4e:23:f9:bc:cc:ac:ff:ad:de:e6:6e:93:cf:ac: 43:e3:5d:e6:fc:ae:39:4f:2f:eb:64:dd:48:1f:d6: 9a:5a:57:fd:b8:cd:d6:88:13:2d:5c:da:f1:78:ec: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:91:18:55:4C:0B:2E:3F:FE:11:43:F0:BD:BC:9D:F7:8B:54:13:C1 X509v3 Authority Key Identifier: keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d3:89:ea:ea:73:ad:b5:d3:6d:ec:eb:1e:77:85:39:92:22: 93:8b:35:3e:ca:72:5b:25:8b:70:ec:9b:6d:26:f9:8c:40:27: 13:09:4b:03:33:cf:4c:45:38:43:5e:83:b9:57:a1:61:c6:1a: 8c:49:b4:fa:58:11:04:6f:c6:58:f8:26:5d:3d:00:e2:35:23: ba:25:41:c9:63:65:9e:74:57:42:70:d0:c3:ea:21:3d:75:1e: de:3f:5d:7c:42:c8:4b:64:08:40:30:8c:82:b0:87:56:a3:9d: 1c:ad:f8:57:c4:3d:39:42:5e:e4:b8:99:37:8f:e2:eb:3f:d8: 44:fd:9f:96:ff:76:95:36:27:33:f5:ee:a4:f7:c9:42:9b:62: b9:e5:03:34:4c:2f:20:2e:80:7a:34:78:23:9d:f6:a4:af:5f: 9f:49:3c:fb:ef:11:c9:9e:f1:4e:1c:24:bb:8b:4d:2e:30:31: ab:dd:98:fd:13:5b:bd:a4:1c:b4:6f:d7:5a:fc:3a:43:9c:ab: 2b:0b:12:f7:04:d7:9c:52:85:7e:04:e0:88:7e:ea:d9:14:17: 5b:69:e7:42:69:8d:58:53:24:c4:aa:4c:0f:e7:de:8c:b9:cc: 7f:a8:f3:f8:d7:3a:19:1b:ea:e0:68:6b:e9:01:8f:22:94:10: 60:76:a8:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUs4Pit/uGI0Grgcoqxt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWM0ZjRhMTZjYzUxYmQ1MTYyMTAxMTUzOWNlYjU3NGFj MTVkMDIwHhcNMjUxMjE2MDQwMjIyWhcNMjUxMjE3MDQwMjIyWjAzMTEwLwYDVQQD Eyg0NTkxMTg1NTRjMGIyZTNmZmUxMTQzZjBiZGJjOWRmNzhiNTQxM2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr98BS9y/bNFDA3+qdcIUVRUVzsg5 tycPwC3uibhPeYjhxjKlJWYBXWi4rbmY8A7ENMzIXclsCr2q3IG6wi4PrnItpdsk NOvUGCK6ikQbGKdZVr7C/ykV4mo6Ml4qLwzQTpVH5ssFkcT60Jn6XoH+wHhq5szm VZjok1IgCz9wc4v8gv+IFJnGPgu+eN3xgR25SjhgKHLVPf0soTbiriv92ajLQEsA r+AdkRgZyp/Ny/++Q9nedrGqky/InVfQG4mWgmb6VoGITLmMYA38Pp9aTkfVTiP5 vMys/63e5m6Tz6xD413m/K45Ty/rZN1IH9aaWlf9uM3WiBMtXNrxeOxRBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWRGFVMCy4//hFD8L28nfeLVBPBMB8GA1UdIwQY MBaAFK/sT0oWzFG9UWIQEVOc61dKwV0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0Nzgt MjdlZmMxM2FmZjFlLzEvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0NzgtMjdlZmMxM2FmZjFl LzEvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNOJ6upz rbXTbezrHneFOZIik4s1PspyWyWLcOybbSb5jEAnEwlLAzPPTEU4Q16DuVehYcYa jEm0+lgRBG/GWPgmXT0A4jUjuiVByWNlnnRXQnDQw+ohPXUe3j9dfELIS2QIQDCM grCHVqOdHK34V8Q9OUJe5LiZN4/i6z/YRP2flv92lTYnM/XupPfJQptiueUDNEwv IC6AejR4I532pK9fn0k8++8RyZ7xThwku4tNLjAxq92Y/RNbvaQctG/XWvw6Q5yr KwsS9wTXnFKFfgTgiH7q2RQXW2nnQmmNWFMkxKpMD+fejLnMf6jz+Nc6GRvq4Ghr 6QGPIpQQYHaoLw== -----END CERTIFICATE-----Generated at Tue Dec 16 11:47:08 2025 by rpki-client