This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft File: x-nHqlNLEwC_ck__DwwbBRnVBbs.mft (raw, json) Hash identifier: 5t/bgQocHC0hHmF3QsHT9GMF/zPVa7Gg4XtycQ0GH6A= Subject key identifier: F0:DC:22:43:91:6B:4D:4E:FC:E8:A1:7C:B6:80:25:94:01:EF:B8:72 Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Certificate serial: 019AE6DFB1CC23E57B2DC45E42C4DF761453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft Manifest number: 1028 Signing time: Thu 04 Dec 2025 01:00:10 +0000 Manifest this update: Thu 04 Dec 2025 01:00:10 +0000 Manifest next update: Fri 05 Dec 2025 01:00:10 +0000 Files and hashes: 1: R1q5L0zSprSAMUcFtGlF7mc7J1s.roa (hash: UB22RcCCLLp3yH1mo89+o+fdr51fmFuQRSq5JlKphYY=) 2: WaUyoH7ArWppJQRKLhGMYkgHut0.roa (hash: 8DW7q1K5wRRXnMeS2PwcrC66JmhaaTvLKjvouwdrBiw=) 3: vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa (hash: NafLcW9ler7jv8ZnfOLoMEHPRe+4IL3+O4WsYS0XH1Y=) 4: x-nHqlNLEwC_ck__DwwbBRnVBbs.crl (hash: dGoh0TV29ap31czNcQ1Tgc1ZDAl0n7zEl6vcD1nC+IE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:df:b1:cc:23:e5:7b:2d:c4:5e:42:c4:df:76:14:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Validity Not Before: Dec 4 01:00:10 2025 GMT Not After : Dec 5 01:00:10 2025 GMT Subject: CN=f0dc2243916b4d4efce8a17cb680259401efb872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:cd:fc:68:eb:8e:85:13:d7:de:b9:9a:0d: ac:94:aa:37:68:1b:6a:bf:cc:16:66:65:ff:ca:27: 24:51:b7:fc:20:57:eb:5e:c6:80:6c:05:dd:1f:56: 41:94:13:23:f7:27:dd:e0:b3:77:31:d4:39:bb:95: 6c:f6:59:92:ed:9b:bb:d4:cb:a6:fd:bc:5b:42:2b: 9a:2c:b8:6e:f5:c0:e0:40:37:49:1b:28:53:28:7d: 63:24:09:95:11:bd:f3:b5:f8:e6:2c:d6:84:72:59: e2:bf:00:da:da:5c:44:3b:ff:76:f4:bc:fb:b0:90: 54:df:2e:44:f0:f7:36:fc:2b:ad:66:22:92:84:ab: 65:34:a1:65:c3:f6:f8:44:eb:fc:b0:af:dc:ad:fc: 57:21:cd:9c:81:08:e1:cc:b4:82:ac:df:27:63:bc: 93:51:78:dc:56:3a:f1:bd:5b:f4:39:b2:80:39:d3: fb:c7:81:d3:50:47:17:37:9a:a3:8b:5e:21:d9:ad: 6d:8a:ad:c6:f6:d5:71:aa:0c:79:25:dd:37:3d:8b: aa:d8:a4:38:0f:be:dd:be:86:e3:af:bd:63:0c:59: 9d:99:66:d2:73:77:e5:0b:00:35:f0:17:e9:3c:33: 39:51:8c:fe:d4:48:8d:e5:1f:bc:d6:4b:e8:1d:db: da:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:22:43:91:6B:4D:4E:FC:E8:A1:7C:B6:80:25:94:01:EF:B8:72 X509v3 Authority Key Identifier: keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:da:6c:67:23:e8:35:0f:05:8b:8f:0b:53:32:c9:b1:d0:da: 8a:e6:a1:36:cb:23:8f:20:96:b2:00:72:d7:b2:96:5c:e5:f9: 57:a4:ca:c9:cd:74:b7:30:e6:83:e9:27:da:cc:8a:ee:11:02: f3:3a:d1:5d:20:a6:68:50:66:88:f0:de:d0:19:cf:54:02:cf: f6:25:c3:ee:ff:c0:a6:46:3d:4f:6e:8e:f6:f0:13:21:51:6d: 2e:a1:4a:8a:cf:fa:14:26:df:24:fb:cd:f1:a3:23:bb:f2:4c: a8:25:4a:f3:09:c0:d0:9e:5d:a2:84:3a:dc:14:1b:ef:d0:46: 51:13:5a:26:3c:14:87:39:a5:2e:e0:7c:ca:b5:71:92:0a:d7: bb:71:11:ef:63:b0:97:e2:70:08:5c:12:e1:f8:89:6b:d4:d9: 71:4e:32:b0:ba:5d:26:06:cb:29:e3:c3:51:2d:15:50:24:bc: 2a:d5:5c:34:e6:10:55:a1:d1:7a:e6:de:85:4c:d9:63:b9:96: 67:8c:26:f8:f0:8d:74:8e:0f:ff:d3:e8:4a:56:00:9b:a9:cd: c7:27:64:9b:f0:87:b3:f2:b1:4d:dd:f9:b2:10:4f:f9:dd:8e: 51:77:3d:c8:ff:72:05:63:0d:c7:4f:a3:8f:1d:20:78:e3:f4: 2c:0c:05:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrm37HMI+V7LcReQsTfdhRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk NTA1YmIwHhcNMjUxMjA0MDEwMDEwWhcNMjUxMjA1MDEwMDEwWjAzMTEwLwYDVQQD EyhmMGRjMjI0MzkxNmI0ZDRlZmNlOGExN2NiNjgwMjU5NDAxZWZiODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/LN/GjrjoUT1965mg2slKo3aBtq v8wWZmX/yickUbf8IFfrXsaAbAXdH1ZBlBMj9yfd4LN3MdQ5u5Vs9lmS7Zu71Mum /bxbQiuaLLhu9cDgQDdJGyhTKH1jJAmVEb3ztfjmLNaEclnivwDa2lxEO/929Lz7 sJBU3y5E8Pc2/CutZiKShKtlNKFlw/b4ROv8sK/crfxXIc2cgQjhzLSCrN8nY7yT UXjcVjrxvVv0ObKAOdP7x4HTUEcXN5qji14h2a1tiq3G9tVxqgx5Jd03PYuq2KQ4 D77dvobjr71jDFmdmWbSc3flCwA18BfpPDM5UYz+1EiN5R+81kvoHdvaGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDcIkORa01O/OihfLaAJZQB77hyMB8GA1UdIwQY MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt Y2U1MDA4MjdmZjdmLzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9psZyPo NQ8Fi48LUzLJsdDaiuahNssjjyCWsgBy17KWXOX5V6TKyc10tzDmg+kn2syK7hEC 8zrRXSCmaFBmiPDe0BnPVALP9iXD7v/ApkY9T26O9vATIVFtLqFKis/6FCbfJPvN 8aMju/JMqCVK8wnA0J5dooQ63BQb79BGURNaJjwUhzmlLuB8yrVxkgrXu3ER72Ow l+JwCFwS4fiJa9TZcU4ysLpdJgbLKePDUS0VUCS8KtVcNOYQVaHReubehUzZY7mW Z4wm+PCNdI4P/9PoSlYAm6nNxydkm/CHs/KxTd35shBP+d2OUXc9yP9yBWMNx0+j jx0geOP0LAwFwA== -----END CERTIFICATE-----Generated at Thu Dec 4 08:22:04 2025 by rpki-client