This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json) Hash identifier: jcEVura+0b7WW5TY5K7dEQARKvQQ+G8mimogft+sWi8= Subject key identifier: 43:18:DF:0D:38:62:1E:26:4E:6D:13:BA:7C:EA:03:2D:03:04:63:1E Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72 Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672 Certificate serial: 019B0E252C6E70AA180BBAB7C26C732E0AD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 16:01:15 +0000 Manifest this update: Thu 11 Dec 2025 16:01:15 +0000 Manifest next update: Fri 12 Dec 2025 16:01:15 +0000 Files and hashes: 1: GKayJjEpupDXezS7bWkDTRh1Jmw.roa (hash: eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=) 2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: BQ73q1cg8Nemt2ksKjM1lneoRnndCHFvrSGMXbHipQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:2c:6e:70:aa:18:0b:ba:b7:c2:6c:73:2e:0a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672 Validity Not Before: Dec 11 16:01:15 2025 GMT Not After : Dec 12 16:01:15 2025 GMT Subject: CN=4318df0d38621e264e6d13ba7cea032d0304631e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:cb:04:d0:52:98:37:1d:bf:94:b5:8c:52: ee:db:04:11:3e:30:4d:64:f0:1f:eb:b8:79:13:d4: af:df:dc:68:a9:24:dc:74:b2:0c:03:6b:f1:45:bd: 6a:ef:07:9f:f0:b5:af:e2:62:f2:42:90:1b:81:bf: 2e:b8:95:95:29:b9:48:81:57:3a:6c:ed:4a:f3:71: 2d:95:29:0e:7f:4f:40:c9:3b:fe:a8:4f:41:48:32: a1:33:99:c5:a0:0c:ce:82:d7:10:23:4a:df:4d:a9: 56:ba:e1:93:12:0b:d6:c2:ac:24:99:34:0b:43:4f: b1:c6:44:46:94:e3:04:14:ff:bd:1c:af:14:62:69: 5b:37:8d:a5:e4:8b:c8:a5:03:14:4e:ff:d9:c6:5c: 7e:14:b8:52:77:7d:bb:34:db:35:cd:5d:88:a3:23: da:12:77:a5:ff:7b:95:06:45:02:7c:63:2c:92:2c: 96:39:da:72:a7:b3:64:c4:91:ea:53:6f:79:56:1c: a4:73:bf:04:98:23:9e:2f:a7:bc:92:86:1a:47:ba: 9c:b1:9a:7f:16:23:71:c1:a6:c3:e2:f8:1f:a5:02: e7:bb:ff:a0:b5:3d:a7:f3:96:1d:cc:b4:2c:09:f2: b7:ee:49:c8:88:0f:53:06:77:36:55:67:a9:0e:af: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:18:DF:0D:38:62:1E:26:4E:6D:13:BA:7C:EA:03:2D:03:04:63:1E X509v3 Authority Key Identifier: keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:60:db:40:88:e4:92:76:18:3d:2d:50:e6:50:b9:d5:da:36: fc:f1:42:08:9b:7f:c3:7f:33:bd:c4:d0:88:e2:9b:aa:77:99: be:23:9c:7e:dd:9b:0f:7a:dd:13:18:b3:f9:06:83:5b:17:1e: 42:52:fe:ee:63:c5:7c:0e:be:a3:07:0b:0a:17:e2:c2:f3:e2: 2a:4c:32:f1:50:1e:b6:62:10:87:53:e1:ec:1a:e7:ff:12:7f: bf:76:e0:4f:54:4c:2d:ed:37:e1:c2:0e:97:62:36:60:f8:67: dd:f4:b4:15:63:f0:3e:9a:2c:60:8c:65:c2:26:0a:6f:f3:4b: 91:97:31:74:75:b7:98:98:ce:50:e8:63:62:78:4c:a0:9d:c2: ac:31:ad:54:f6:44:64:25:b0:09:74:5a:00:17:22:c0:e2:06: 07:0c:2d:a0:f5:3a:e3:e3:af:3d:7a:7c:89:e4:90:19:31:cb: 6f:fa:77:03:bf:75:4c:35:e2:ab:4a:70:20:17:bb:40:3a:84: 84:7f:25:d0:fe:c7:3f:a8:04:db:96:e9:6e:65:89:a2:59:ea: ca:0f:b4:d8:8c:96:7c:fb:ac:46:f0:f2:a8:c9:4b:7a:32:bd: 24:b8:10:1a:4e:16:97:0f:75:50:12:a7:5e:20:92:94:cb:c7: 78:8b:5b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJSxucKoYC7q3wmxzLgrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzA4OWM0NWM1NTA4OGZlOTBlYjYxMDAyZjA3ZjBmOTU4 NjI2NzIwHhcNMjUxMjExMTYwMTE1WhcNMjUxMjEyMTYwMTE1WjAzMTEwLwYDVQQD Eyg0MzE4ZGYwZDM4NjIxZTI2NGU2ZDEzYmE3Y2VhMDMyZDAzMDQ2MzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDLLBNBSmDcdv5S1jFLu2wQRPjBN ZPAf67h5E9Sv39xoqSTcdLIMA2vxRb1q7wef8LWv4mLyQpAbgb8uuJWVKblIgVc6 bO1K83EtlSkOf09AyTv+qE9BSDKhM5nFoAzOgtcQI0rfTalWuuGTEgvWwqwkmTQL Q0+xxkRGlOMEFP+9HK8UYmlbN42l5IvIpQMUTv/Zxlx+FLhSd327NNs1zV2IoyPa Enel/3uVBkUCfGMskiyWOdpyp7NkxJHqU295Vhykc78EmCOeL6e8koYaR7qcsZp/ FiNxwabD4vgfpQLnu/+gtT2n85YdzLQsCfK37knIiA9TBnc2VWepDq8uKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMY3w04Yh4mTm0TunzqAy0DBGMeMB8GA1UdIwQY MBaAFKVwicRcVQiP6Q62EALwfw+VhiZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYt ZDkyZDY0YjlmODAxLzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYtZDkyZDY0YjlmODAx LzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWDbQIjk knYYPS1Q5lC51do2/PFCCJt/w38zvcTQiOKbqneZviOcft2bD3rdExiz+QaDWxce QlL+7mPFfA6+owcLChfiwvPiKkwy8VAetmIQh1Ph7Brn/xJ/v3bgT1RMLe034cIO l2I2YPhn3fS0FWPwPposYIxlwiYKb/NLkZcxdHW3mJjOUOhjYnhMoJ3CrDGtVPZE ZCWwCXRaABciwOIGBwwtoPU64+OvPXp8ieSQGTHLb/p3A791TDXiq0pwIBe7QDqE hH8l0P7HP6gE25bpbmWJolnqyg+02IyWfPusRvDyqMlLejK9JLgQGk4Wlw91UBKn XiCSlMvHeItbQA== -----END CERTIFICATE-----Generated at Thu Dec 11 22:59:58 2025 by rpki-client