This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json) Hash identifier: OeX9tUXt5abmsuHFbOMQ4qpt7vkunTOMmWE+tIP5G44= Subject key identifier: A2:54:44:EA:74:F3:97:14:29:46:B4:F4:3C:40:25:12:69:F8:3E:99 Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Certificate serial: 019B0E5B98585DFC9A22158653BA436BB039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft Manifest number: D5 Signing time: Thu 11 Dec 2025 17:00:42 +0000 Manifest this update: Thu 11 Dec 2025 17:00:42 +0000 Manifest next update: Fri 12 Dec 2025 17:00:42 +0000 Files and hashes: 1: 96LYebW41F9cWbiRR3tXv_5JTlA.roa (hash: E9I1sWzxYkdu6eno5OeViMQO2tf/PXjG/rZzNUHedvQ=) 2: qXbxlLviK9DJSOPQYHU6ZWE-Sa4.roa (hash: QbsyxqNuQBIITsu3wvPWziWsrz31D70A9kksDR3tVno=) 3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: IZNhfIvxp3cuMOhuMQh4GNViQ4CsDxqc7rUbIFQGmhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:98:58:5d:fc:9a:22:15:86:53:ba:43:6b:b0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Validity Not Before: Dec 11 17:00:42 2025 GMT Not After : Dec 12 17:00:42 2025 GMT Subject: CN=a25444ea74f397142946b4f43c40251269f83e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c5:9f:5e:b5:d8:33:c8:45:0d:8b:b0:3a:17: 28:c5:2e:01:4d:02:a9:f0:64:cb:46:9e:de:ea:8a: 45:e5:d6:4a:b0:61:eb:fa:bb:75:ab:f8:ac:50:65: 4d:72:fd:06:91:e8:1f:51:9f:6b:5d:a1:03:87:d2: a3:33:32:56:e2:97:57:82:00:83:39:c5:25:ba:8f: c4:65:07:e7:76:ce:fb:78:ac:95:f7:f1:cc:88:86: 23:a3:00:06:42:10:9e:ce:33:da:d7:76:6e:8d:41: 36:cb:0e:9e:cc:b2:a1:e2:c8:bd:6e:5f:6a:2b:a5: 44:37:88:d3:b7:39:e6:b0:47:67:c4:64:4f:56:2c: fa:e1:20:11:25:3e:ee:03:a4:69:9d:35:22:6c:ec: 2f:a4:f7:69:f1:67:d5:68:9c:3a:e7:43:06:14:c7: 67:71:1e:30:a1:b2:7a:ee:8f:bd:cf:fe:2a:4e:f8: 71:32:5e:27:0a:36:e2:5b:40:dc:b9:32:b8:3d:ea: 64:c1:7b:b3:aa:8a:66:e8:46:c5:cf:5a:bc:c2:57: ed:b3:2c:db:c1:0f:e9:f1:dd:32:96:9d:1c:94:91: 33:ec:04:6d:1d:f3:72:e6:1b:94:a1:94:d3:86:45: 59:a5:5f:3f:1a:aa:95:ae:45:52:48:10:1d:a8:82: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:54:44:EA:74:F3:97:14:29:46:B4:F4:3C:40:25:12:69:F8:3E:99 X509v3 Authority Key Identifier: keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:14:b9:87:8a:52:c5:05:77:c1:51:a5:60:d3:7d:93:bd:f0: 1d:3d:f6:a3:1c:c2:9f:a7:7c:50:05:9f:e0:54:d7:63:d4:88: bf:7e:00:49:2b:7f:1f:35:c3:24:7a:6d:d3:6f:5c:79:89:10: 65:d8:ec:c8:9b:f7:42:4f:b1:c7:06:60:c6:eb:00:33:3c:64: fb:b8:b9:60:60:74:04:ae:52:e6:58:57:b7:30:21:32:ae:22: 6d:62:2e:13:a5:e1:f9:f6:92:ef:1d:b3:b1:55:a4:cb:56:32: 61:4c:c8:42:e0:cd:74:f4:43:33:c9:56:44:ef:a2:1a:66:e3: 2a:f4:4b:51:c9:a3:ef:03:d1:2c:d1:a3:6d:91:dc:94:76:e2: 5e:f0:f3:f8:e5:d8:26:7c:e1:21:44:60:5e:d3:f6:07:4b:2b: 62:18:32:91:5d:94:ce:e1:05:4f:6a:59:f3:26:56:b6:95:34: 51:85:9d:77:82:19:bb:79:bd:64:35:b2:3d:e0:8d:e4:77:ea: ad:a7:fa:a7:b9:ac:0f:a1:f7:74:6a:70:a7:30:67:ef:cd:7a: a4:28:9a:94:b4:9a:62:7d:2b:04:fe:6a:36:23:bc:82:a3:8b: 44:4d:57:dc:da:03:8b:d9:db:14:d4:e5:ff:f1:62:b7:6a:7d: f3:a9:d4:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW5hYXfyaIhWGU7pDa7A5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzY4ZjBhOGQxZWQxMTczZWNlZGM2ODljMTc3YjI0OWVl M2E2OGMwHhcNMjUxMjExMTcwMDQyWhcNMjUxMjEyMTcwMDQyWjAzMTEwLwYDVQQD EyhhMjU0NDRlYTc0ZjM5NzE0Mjk0NmI0ZjQzYzQwMjUxMjY5ZjgzZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sWfXrXYM8hFDYuwOhcoxS4BTQKp 8GTLRp7e6opF5dZKsGHr+rt1q/isUGVNcv0GkegfUZ9rXaEDh9KjMzJW4pdXggCD OcUluo/EZQfnds77eKyV9/HMiIYjowAGQhCezjPa13ZujUE2yw6ezLKh4si9bl9q K6VEN4jTtznmsEdnxGRPViz64SARJT7uA6RpnTUibOwvpPdp8WfVaJw650MGFMdn cR4wobJ67o+9z/4qTvhxMl4nCjbiW0DcuTK4PepkwXuzqopm6EbFz1q8wlftsyzb wQ/p8d0ylp0clJEz7ARtHfNy5huUoZTThkVZpV8/GqqVrkVSSBAdqIJ8xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJUROp085cUKUa09DxAJRJp+D6ZMB8GA1UdIwQY MBaAFLF2jwqNHtEXPs7caJwXeySe46aMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYt MjQyMDFjMjUyOThmLzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYtMjQyMDFjMjUyOThm LzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBS5h4pS xQV3wVGlYNN9k73wHT32oxzCn6d8UAWf4FTXY9SIv34ASSt/HzXDJHpt029ceYkQ ZdjsyJv3Qk+xxwZgxusAMzxk+7i5YGB0BK5S5lhXtzAhMq4ibWIuE6Xh+faS7x2z sVWky1YyYUzIQuDNdPRDM8lWRO+iGmbjKvRLUcmj7wPRLNGjbZHclHbiXvDz+OXY JnzhIURgXtP2B0srYhgykV2UzuEFT2pZ8yZWtpU0UYWdd4IZu3m9ZDWyPeCN5Hfq raf6p7msD6H3dGpwpzBn7816pCialLSaYn0rBP5qNiO8gqOLRE1X3NoDi9nbFNTl //Fit2p986nUMA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:26:14 2025 by rpki-client