This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json) Hash identifier: 1sRngZ1ngPIX442TEE6uAfoxMj0WapAGRBBdgjAiHW4= Subject key identifier: DA:76:6F:DD:08:08:2C:6D:24:0F:A1:AB:01:BB:D0:78:82:BC:F8:D8 Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb Certificate serial: 019B5A51B1461FB7AFAF10FADD93F62460C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft Manifest number: 02CA Signing time: Fri 26 Dec 2025 11:01:01 +0000 Manifest this update: Fri 26 Dec 2025 11:01:01 +0000 Manifest next update: Sat 27 Dec 2025 11:01:01 +0000 Files and hashes: 1: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (hash: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=) 2: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: 6jUyBQLjrMimQJrcj0RuykViTnB3CvELO/AGkdL67bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:b1:46:1f:b7:af:af:10:fa:dd:93:f6:24:60:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb Validity Not Before: Dec 26 11:01:01 2025 GMT Not After : Dec 27 11:01:01 2025 GMT Subject: CN=da766fdd08082c6d240fa1ab01bbd07882bcf8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:52:e3:a3:80:73:2c:ab:8d:b8:32:d8:55: f8:39:42:bc:16:9c:66:df:05:25:be:fb:b6:0e:50: 4d:5e:9d:2e:4e:92:48:9c:77:28:95:ef:4c:eb:12: 5e:59:87:f0:46:55:70:94:30:a9:b3:59:39:54:64: e7:38:be:52:c9:54:c9:d5:68:5c:54:d4:b8:4e:4d: 85:91:99:9d:4d:14:fe:46:10:c2:04:b2:bf:34:c7: 0d:60:21:2d:3a:e4:f4:45:2b:56:f6:9c:83:a3:32: 21:bc:0e:96:2f:46:2d:a1:cc:4a:56:8a:fb:f2:ff: 60:2d:98:7f:1e:8f:76:43:60:99:5d:10:e4:38:ff: 08:79:2b:5c:34:f7:8b:73:7d:4c:6d:cd:bf:61:31: 99:16:95:70:7c:29:0f:22:d7:65:6f:a3:23:c2:d0: 0b:1a:59:a8:e9:28:26:13:b8:bd:d5:92:97:1c:ad: 21:03:9a:62:67:16:6b:7d:6e:43:c0:0b:d9:c8:ee: e2:05:49:88:28:d5:a8:0e:7e:5c:a1:e3:07:95:8e: 52:f2:66:2e:27:b4:54:2e:2a:e7:ed:28:bf:fe:89: b7:4f:a8:82:d8:45:19:47:f5:c0:28:26:21:40:77: 82:5a:5d:e8:75:af:c0:6b:3a:61:2b:45:45:38:4b: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:76:6F:DD:08:08:2C:6D:24:0F:A1:AB:01:BB:D0:78:82:BC:F8:D8 X509v3 Authority Key Identifier: keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:33:00:70:05:4f:61:8a:fb:0e:b6:b9:a9:24:e8:5d:18:18: 82:c2:f7:7d:2c:24:39:81:7c:63:84:b0:32:29:ea:e9:b3:f6: da:66:f6:0c:1f:31:29:53:2d:55:7e:05:14:12:b0:4f:92:aa: b2:f6:d5:6e:fa:cb:a5:34:b7:97:ef:21:df:3c:a1:c1:14:30: 82:d8:6e:b9:e3:47:06:d4:5a:f8:2b:30:21:89:73:38:90:32: 79:02:39:92:b5:94:84:d8:e6:db:4b:78:b6:75:bc:d7:f9:c6: 92:ad:69:bd:aa:b7:76:0c:6a:cd:53:36:90:ed:f0:2c:75:35: c3:40:31:d9:a1:35:ca:10:1d:4f:32:b0:f3:11:29:c5:5f:0b: eb:01:3b:81:ec:3d:98:06:bf:01:77:58:f5:3b:57:07:4a:99: 07:de:9e:ab:4c:06:38:d7:61:1d:33:89:19:35:02:73:1a:98: 3c:fb:9a:68:1c:6f:99:29:92:26:5d:dd:3d:7b:fe:77:aa:44: 67:f3:43:73:61:22:af:7d:c9:70:42:c6:63:63:10:10:54:bb: b6:e7:73:fd:37:08:73:20:81:34:cf:8e:e8:e8:52:e5:41:aa: 13:10:cf:11:c4:f6:50:87:6d:6a:6e:e1:00:6c:45:d5:61:60: 6b:1d:a5:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUbFGH7evrxD63ZP2JGDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTQzZGQ2Njc2OWRiMTgzYjhiZDc5YjkwZmM4M2Q5NWQ2 ZTQ4ZmIwHhcNMjUxMjI2MTEwMTAxWhcNMjUxMjI3MTEwMTAxWjAzMTEwLwYDVQQD EyhkYTc2NmZkZDA4MDgyYzZkMjQwZmExYWIwMWJiZDA3ODgyYmNmOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8ZS46OAcyyrjbgy2FX4OUK8Fpxm 3wUlvvu2DlBNXp0uTpJInHcole9M6xJeWYfwRlVwlDCps1k5VGTnOL5SyVTJ1Whc VNS4Tk2FkZmdTRT+RhDCBLK/NMcNYCEtOuT0RStW9pyDozIhvA6WL0YtocxKVor7 8v9gLZh/Ho92Q2CZXRDkOP8IeStcNPeLc31Mbc2/YTGZFpVwfCkPItdlb6MjwtAL Glmo6SgmE7i91ZKXHK0hA5piZxZrfW5DwAvZyO7iBUmIKNWoDn5coeMHlY5S8mYu J7RULirn7Si//om3T6iC2EUZR/XAKCYhQHeCWl3oda/AazphK0VFOEs8iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp2b90ICCxtJA+hqwG70HiCvPjYMB8GA1UdIwQY MBaAFEcUPdZnadsYO4vXm5D8g9ldbkj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2It MzQ2MDI2MjQ1NWIyLzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2ItMzQ2MDI2MjQ1NWIy LzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjMAcAVP YYr7Dra5qSToXRgYgsL3fSwkOYF8Y4SwMinq6bP22mb2DB8xKVMtVX4FFBKwT5Kq svbVbvrLpTS3l+8h3zyhwRQwgthuueNHBtRa+CswIYlzOJAyeQI5krWUhNjm20t4 tnW81/nGkq1pvaq3dgxqzVM2kO3wLHU1w0Ax2aE1yhAdTzKw8xEpxV8L6wE7gew9 mAa/AXdY9TtXB0qZB96eq0wGONdhHTOJGTUCcxqYPPuaaBxvmSmSJl3dPXv+d6pE Z/NDc2Eir33JcELGY2MQEFS7tudz/TcIcyCBNM+O6OhS5UGqExDPEcT2UIdtam7h AGxF1WFgax2lwA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:42 2025 by rpki-client