This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json) Hash identifier: VyuCw1h4FOK1gLFPQc+KbbVRY1VCfsQDtsGYMOdr7oQ= Subject key identifier: 11:7B:17:9F:4C:8C:9C:76:B1:9D:54:C3:0D:48:67:19:33:6D:48:4D Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4 Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4 Certificate serial: 019B1BA9E01E3604732005D67943F713B3B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft Manifest number: 0FE2 Signing time: Sun 14 Dec 2025 07:01:16 +0000 Manifest this update: Sun 14 Dec 2025 07:01:16 +0000 Manifest next update: Mon 15 Dec 2025 07:01:16 +0000 Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=) 2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: 5nsMArSasg5zK/ma+FZ5KJJiuS0IZcg4Jz3TShCictQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:e0:1e:36:04:73:20:05:d6:79:43:f7:13:b3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4 Validity Not Before: Dec 14 07:01:16 2025 GMT Not After : Dec 15 07:01:16 2025 GMT Subject: CN=117b179f4c8c9c76b19d54c30d486719336d484d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:f7:23:2b:e2:6d:4a:f1:48:76:99:fb:98: 4d:c5:65:e4:6b:c7:f2:9f:d1:98:0c:a4:ba:30:d3: d7:ee:03:f9:85:50:a4:b9:d1:a0:f8:17:4b:e8:ce: 2f:5e:d7:97:63:94:ab:42:d9:6a:4c:87:44:64:1f: a8:07:11:e1:8a:75:a5:b7:90:3f:a1:ac:fc:a1:b9: ae:f5:57:4a:0a:a4:32:65:99:7a:eb:b5:27:1c:ef: 69:26:7a:f1:8e:bd:d1:20:ff:b1:59:2f:7b:19:9f: 27:a9:cb:cd:e9:32:8f:43:60:a5:29:a1:3b:3e:e3: 90:98:20:3c:e7:b8:7b:8a:96:3f:a7:c7:3d:56:51: 2a:41:55:d0:52:d4:80:23:18:6d:7c:3a:db:d4:3d: b6:04:d4:8a:67:8b:f3:32:e9:0a:6c:1c:85:7b:53: 9a:43:e9:a7:01:04:2c:b4:d6:e4:6e:c3:b0:3b:24: 5c:59:e8:fd:08:3f:89:36:a6:b1:43:60:8f:5f:e8: ed:1c:fd:b5:ea:b6:83:51:a8:2e:45:96:fd:86:24: 39:2e:13:90:21:0b:c9:dd:87:4f:ed:13:67:d6:21: db:50:d7:a7:8c:2c:6b:0b:20:44:92:cf:c0:9d:0b: 76:cc:36:df:61:56:f7:d1:c8:ed:b8:40:39:c8:7e: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7B:17:9F:4C:8C:9C:76:B1:9D:54:C3:0D:48:67:19:33:6D:48:4D X509v3 Authority Key Identifier: keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ae:4d:bc:9c:7b:81:3d:f3:30:00:40:70:26:4d:72:a5:55: 17:80:d3:9b:41:06:a3:51:6a:2e:b3:65:06:ed:1c:05:1c:79: e5:6f:8f:d7:71:9e:ec:f7:19:62:98:5d:0a:08:1c:8e:d5:98: 3c:f4:fe:95:81:45:08:65:0e:28:4c:49:be:e2:ac:51:2e:60: 92:85:7b:af:4d:fe:9c:6e:21:eb:77:18:18:71:e1:f7:b1:87: d3:81:ea:74:e0:fc:71:d0:45:37:08:4a:77:13:1b:ed:1c:a2: f6:86:cf:d1:50:66:62:2b:4c:06:51:20:39:b3:2e:33:af:1c: 5d:ff:8e:c0:e2:92:d1:af:09:79:37:9e:eb:f5:07:ce:88:d3: f8:62:3c:7b:96:36:d3:43:6c:5d:a7:db:49:05:a1:e7:ea:eb: 54:61:e9:b0:0f:08:5b:41:9f:12:97:6f:52:30:6b:84:63:49: cb:58:d2:b4:c3:87:32:7e:8a:52:71:5c:32:8a:d3:65:a5:be: 63:e2:fa:4e:89:7e:01:92:d7:13:f3:e3:c6:8b:13:eb:b0:60: 85:04:20:1d:95:ae:64:04:41:10:b2:b4:f8:15:90:97:ce:fc: 32:0d:19:4c:e0:85:18:e6:62:4d:1f:f6:00:16:18:b1:e3:98: 00:8b:c0:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqeAeNgRzIAXWeUP3E7O0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGNhMDg1NTE3OGEwY2RkNzE5MTRiY2YyMjNhYTMxYWY2 MzY5YTQwHhcNMjUxMjE0MDcwMTE2WhcNMjUxMjE1MDcwMTE2WjAzMTEwLwYDVQQD EygxMTdiMTc5ZjRjOGM5Yzc2YjE5ZDU0YzMwZDQ4NjcxOTMzNmQ0ODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAL3IyvibUrxSHaZ+5hNxWXka8fy n9GYDKS6MNPX7gP5hVCkudGg+BdL6M4vXteXY5SrQtlqTIdEZB+oBxHhinWlt5A/ oaz8obmu9VdKCqQyZZl667UnHO9pJnrxjr3RIP+xWS97GZ8nqcvN6TKPQ2ClKaE7 PuOQmCA857h7ipY/p8c9VlEqQVXQUtSAIxhtfDrb1D22BNSKZ4vzMukKbByFe1Oa Q+mnAQQstNbkbsOwOyRcWej9CD+JNqaxQ2CPX+jtHP216raDUaguRZb9hiQ5LhOQ IQvJ3YdP7RNn1iHbUNenjCxrCyBEks/AnQt2zDbfYVb30cjtuEA5yH6p1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF7F59MjJx2sZ1Uww1IZxkzbUhNMB8GA1UdIwQY MBaAFMdMoIVReKDN1xkUvPIjqjGvY2mkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB5Z2hWRjRvTTNYR1JTODhpT3FNYTlqYWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mMjIwYTAtZGY4MS00MmZiLWI3MTQt ZGVkZDM1MjkzMjMwLzEveDB5Z2hWRjRvTTNYR1JTODhpT3FNYTlqYWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9mMjIwYTAtZGY4MS00MmZiLWI3MTQtZGVkZDM1MjkzMjMw LzEveDB5Z2hWRjRvTTNYR1JTODhpT3FNYTlqYWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIa5NvJx7 gT3zMABAcCZNcqVVF4DTm0EGo1FqLrNlBu0cBRx55W+P13Ge7PcZYphdCggcjtWY PPT+lYFFCGUOKExJvuKsUS5gkoV7r03+nG4h63cYGHHh97GH04HqdOD8cdBFNwhK dxMb7Ryi9obP0VBmYitMBlEgObMuM68cXf+OwOKS0a8JeTee6/UHzojT+GI8e5Y2 00NsXafbSQWh5+rrVGHpsA8IW0GfEpdvUjBrhGNJy1jStMOHMn6KUnFcMorTZaW+ Y+L6Tol+AZLXE/PjxosT67BghQQgHZWuZARBELK0+BWQl878Mg0ZTOCFGOZiTR/2 ABYYseOYAIvAjQ== -----END CERTIFICATE-----Generated at Sun Dec 14 16:29:03 2025 by rpki-client