This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft File: x-nHqlNLEwC_ck__DwwbBRnVBbs.mft (raw, json) Hash identifier: BPhj/naBRS/TcQNdgTOC3j+H+BxeCGR7Q5lGN3q5G4E= Subject key identifier: BA:51:77:DB:B9:DD:05:74:1C:D6:CD:9C:72:89:35:77:82:89:FD:EA Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Certificate serial: 019B1B050D3C7BA2002CD0C7D4D580BC17CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft Manifest number: 1043 Signing time: Sun 14 Dec 2025 04:01:14 +0000 Manifest this update: Sun 14 Dec 2025 04:01:14 +0000 Manifest next update: Mon 15 Dec 2025 04:01:14 +0000 Files and hashes: 1: R1q5L0zSprSAMUcFtGlF7mc7J1s.roa (hash: UB22RcCCLLp3yH1mo89+o+fdr51fmFuQRSq5JlKphYY=) 2: WaUyoH7ArWppJQRKLhGMYkgHut0.roa (hash: 8DW7q1K5wRRXnMeS2PwcrC66JmhaaTvLKjvouwdrBiw=) 3: vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa (hash: NafLcW9ler7jv8ZnfOLoMEHPRe+4IL3+O4WsYS0XH1Y=) 4: x-nHqlNLEwC_ck__DwwbBRnVBbs.crl (hash: L6A3ZtSIqit40JjIYCLJZI9FMeDTYwI9Vs8DxItGLhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:0d:3c:7b:a2:00:2c:d0:c7:d4:d5:80:bc:17:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Validity Not Before: Dec 14 04:01:14 2025 GMT Not After : Dec 15 04:01:14 2025 GMT Subject: CN=ba5177dbb9dd05741cd6cd9c728935778289fdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:3c:1c:f5:69:7f:63:b5:6b:57:65:67:65: 94:7a:99:15:6a:7f:c1:a0:5b:7c:ab:64:7f:1f:d7: 7e:ec:c5:b4:0b:19:82:d9:4e:4b:7e:34:d3:7c:04: 9a:eb:dc:d4:c8:fa:68:07:9d:3d:3e:40:78:73:09: 5a:3a:5a:6f:da:70:cb:a1:17:64:cd:03:f1:bc:fd: 39:01:e9:71:c7:47:46:cc:19:1f:84:e5:4d:9b:65: b4:35:31:97:46:a9:20:cc:3e:f6:19:14:9d:a7:b7: 8a:87:ef:5a:a8:cb:86:63:99:df:fd:31:bb:c5:62: 83:e0:9f:1d:fc:77:19:c0:fd:dc:c3:f1:b4:d1:d4: d4:51:23:57:6b:3c:a5:c2:cc:5b:26:19:50:ab:5a: 31:86:85:a7:14:e1:8f:9d:f8:1c:18:6e:4c:cb:9f: 36:9c:de:7f:48:06:ab:95:d8:a0:b1:bf:2c:8e:4b: f7:9f:82:5e:0a:fa:a1:17:05:87:32:94:b2:80:ad: 64:71:6c:18:56:7e:98:96:98:37:75:8a:31:da:4b: 67:87:8e:6f:aa:95:26:78:5a:3f:45:88:01:51:ef: 50:71:3e:58:fd:03:ac:83:56:20:01:db:21:51:3c: 54:4c:1a:4f:33:df:7a:27:20:ac:31:1e:da:7f:67: 98:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:77:DB:B9:DD:05:74:1C:D6:CD:9C:72:89:35:77:82:89:FD:EA X509v3 Authority Key Identifier: keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e1:ec:61:95:63:cb:b5:68:30:d8:c5:da:f2:fc:e1:30:b6: 5f:12:1c:8a:83:9a:2b:c8:3b:79:3a:5e:a6:76:93:b8:17:0b: 00:5d:f8:f6:75:50:d7:40:07:70:3c:18:d0:c0:39:8b:95:9f: 4e:fd:5d:96:66:4e:60:79:f2:6d:bd:57:7f:15:76:1b:3b:7e: d7:48:63:6e:b7:10:19:9b:16:47:45:2d:21:48:c6:25:ca:c2: 49:fb:21:f0:7b:b9:34:04:82:7d:58:ab:64:a5:08:87:e5:9c: 75:f8:d4:f4:e3:a2:18:8c:0b:a5:9d:b5:44:03:84:95:ee:d9: 36:0f:77:63:15:ca:21:57:0c:5c:2a:e8:68:fb:2b:e9:84:3d: ea:d1:5c:4d:bb:3e:41:da:8b:7f:b9:a0:72:6a:8d:96:b5:f9: 13:92:cd:54:65:0d:3d:b1:b0:96:a5:95:66:35:c0:44:b5:6f: 93:0a:1b:f4:17:ec:0a:69:6e:aa:f0:e8:00:f1:67:d8:2e:ff: e3:b4:ae:bb:02:2f:60:48:de:dd:9a:3d:f1:76:f0:8b:1f:9c: 39:0e:b6:3d:cb:e0:90:fc:3e:c9:c3:25:0c:08:f4:bb:f6:fe: 31:ed:c6:76:13:b4:62:b0:69:9d:fb:54:e2:6e:26:f8:5d:7b: 97:f9:ae:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBQ08e6IALNDH1NWAvBfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk NTA1YmIwHhcNMjUxMjE0MDQwMTE0WhcNMjUxMjE1MDQwMTE0WjAzMTEwLwYDVQQD EyhiYTUxNzdkYmI5ZGQwNTc0MWNkNmNkOWM3Mjg5MzU3NzgyODlmZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc48HPVpf2O1a1dlZ2WUepkVan/B oFt8q2R/H9d+7MW0CxmC2U5LfjTTfASa69zUyPpoB509PkB4cwlaOlpv2nDLoRdk zQPxvP05Aelxx0dGzBkfhOVNm2W0NTGXRqkgzD72GRSdp7eKh+9aqMuGY5nf/TG7 xWKD4J8d/HcZwP3cw/G00dTUUSNXazylwsxbJhlQq1oxhoWnFOGPnfgcGG5My582 nN5/SAarldigsb8sjkv3n4JeCvqhFwWHMpSygK1kcWwYVn6Ylpg3dYox2ktnh45v qpUmeFo/RYgBUe9QcT5Y/QOsg1YgAdshUTxUTBpPM996JyCsMR7af2eYOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpRd9u53QV0HNbNnHKJNXeCif3qMB8GA1UdIwQY MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt Y2U1MDA4MjdmZjdmLzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuHsYZVj y7VoMNjF2vL84TC2XxIcioOaK8g7eTpepnaTuBcLAF349nVQ10AHcDwY0MA5i5Wf Tv1dlmZOYHnybb1XfxV2Gzt+10hjbrcQGZsWR0UtIUjGJcrCSfsh8Hu5NASCfVir ZKUIh+WcdfjU9OOiGIwLpZ21RAOEle7ZNg93YxXKIVcMXCroaPsr6YQ96tFcTbs+ QdqLf7mgcmqNlrX5E5LNVGUNPbGwlqWVZjXARLVvkwob9BfsCmluqvDoAPFn2C7/ 47SuuwIvYEje3Zo98Xbwix+cOQ62PcvgkPw+ycMlDAj0u/b+Me3GdhO0YrBpnftU 4m4m+F17l/muFg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:00 2025 by rpki-client