This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json) Hash identifier: dK9UysmIri0su7ZabnFXlhWkl8KE4cUSPJ1Fuwm5gKs= Subject key identifier: 44:DB:96:89:FE:2A:57:C7:D3:8F:33:E5:62:16:86:A4:CE:89:3B:6B Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8 Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8 Certificate serial: 019B5A520172E18B141F824844AD960F0B2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:01:22 +0000 Manifest this update: Fri 26 Dec 2025 11:01:22 +0000 Manifest next update: Sat 27 Dec 2025 11:01:22 +0000 Files and hashes: 1: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (hash: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=) 2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: 47SlArsPf16GaMrhq291TRWheBeEF7S1L5jkbkXuTjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:01:72:e1:8b:14:1f:82:48:44:ad:96:0f:0b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8 Validity Not Before: Dec 26 11:01:22 2025 GMT Not After : Dec 27 11:01:22 2025 GMT Subject: CN=44db9689fe2a57c7d38f33e5621686a4ce893b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:ee:b3:70:5b:b8:fc:10:8f:e4:63:3f:87: f2:ff:62:39:45:82:eb:de:97:0f:b2:4f:1c:3a:8b: eb:5a:9a:18:fe:e6:37:78:7a:26:64:0e:22:94:fc: e2:8a:61:f4:ca:52:18:43:9d:9d:f2:c5:c7:67:ba: 51:7d:be:9d:4b:96:d6:ac:aa:82:23:71:c4:0b:9d: 65:1b:0b:38:b2:ab:0f:a8:b9:4b:12:7c:41:3f:cf: 87:10:ad:ec:a2:ab:0c:bd:ab:63:2c:2e:5e:ef:4d: 28:23:db:df:fe:cf:e7:36:3f:9a:b4:39:8d:0b:3f: 8e:70:87:65:3d:aa:52:f1:6e:f4:60:77:c6:8b:09: 74:f4:29:54:b4:2e:18:9f:8e:b4:e6:37:42:e8:9f: ae:ae:34:b8:68:b7:cf:d2:ef:fc:6e:71:b2:4e:0b: fb:46:52:71:11:79:c5:7f:6f:e1:a5:66:7b:0a:96: 53:0d:d0:76:50:47:d2:19:db:be:d9:ad:34:8d:3c: 02:27:7d:e1:fa:f3:9f:08:43:1e:c6:6f:da:d9:bc: ab:b1:10:59:cf:bd:e9:ea:4f:24:9d:dc:f4:22:f0: 23:f0:31:d5:f5:cb:06:cb:7b:3f:4d:5a:00:98:9f: 9f:d7:54:3b:79:ab:6a:1b:cf:86:05:0b:ea:21:f4: 0b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DB:96:89:FE:2A:57:C7:D3:8F:33:E5:62:16:86:A4:CE:89:3B:6B X509v3 Authority Key Identifier: keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:97:37:22:cf:f2:bb:60:93:3a:30:5d:e1:6d:a3:d2:56:72: 4d:6b:68:ad:16:b1:84:47:9a:87:f5:07:75:8e:9f:bd:71:44: dc:af:ad:93:ee:e2:68:24:5c:2d:a3:bd:6d:62:6d:f1:32:83: 53:ad:16:28:0d:4a:f4:d9:c1:4a:70:fd:57:df:c6:55:61:82: e8:d4:1e:ce:b9:a5:44:5c:ff:09:13:22:b0:f1:1e:c6:ec:fd: 8c:20:b5:a9:6f:d8:74:1e:46:25:4d:b7:41:ae:76:50:a7:05: 4e:5f:4e:7f:cb:fa:b1:54:41:ce:ad:4e:12:5e:99:01:eb:41: 42:0c:49:ab:bf:8e:e5:d1:d5:95:4e:9d:bb:8e:fb:14:b8:87: ce:be:d3:47:ce:21:9d:28:d8:7e:76:8b:ba:1f:89:ce:7d:08: 73:eb:28:40:1e:2b:11:5d:a9:69:4a:0a:dc:cf:3d:04:cb:a7: 35:6f:d5:52:f4:ed:f0:c8:c8:01:e6:85:7e:90:56:8c:74:ba: 21:d4:2f:51:5e:e9:f3:8f:4a:30:0d:d0:9e:60:76:77:72:15: 91:fc:b9:55:3a:73:69:59:44:cd:8f:81:d1:f5:78:52:90:9a: 4e:a6:ac:fa:44:b3:4f:8c:bc:6c:c3:d7:a1:4e:3e:4b:83:90: 21:de:49:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgFy4YsUH4JIRK2WDwsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NDZhZGQ4ZGFmZTk5ZjZhN2Q3ODdkNDQ3OTU0NWE2NDZm NmRlZDgwHhcNMjUxMjI2MTEwMTIyWhcNMjUxMjI3MTEwMTIyWjAzMTEwLwYDVQQD Eyg0NGRiOTY4OWZlMmE1N2M3ZDM4ZjMzZTU2MjE2ODZhNGNlODkzYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynjus3BbuPwQj+RjP4fy/2I5RYLr 3pcPsk8cOovrWpoY/uY3eHomZA4ilPziimH0ylIYQ52d8sXHZ7pRfb6dS5bWrKqC I3HEC51lGws4sqsPqLlLEnxBP8+HEK3soqsMvatjLC5e700oI9vf/s/nNj+atDmN Cz+OcIdlPapS8W70YHfGiwl09ClUtC4Yn4605jdC6J+urjS4aLfP0u/8bnGyTgv7 RlJxEXnFf2/hpWZ7CpZTDdB2UEfSGdu+2a00jTwCJ33h+vOfCEMexm/a2byrsRBZ z73p6k8kndz0IvAj8DHV9csGy3s/TVoAmJ+f11Q7eatqG8+GBQvqIfQLswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETblon+KlfH048z5WIWhqTOiTtrMB8GA1UdIwQY MBaAFMdGrdja/pn2p9eH1EeVRaZG9t7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2It N2NiZmU3MzdhODI3LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2ItN2NiZmU3MzdhODI3 LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpc3Is/y u2CTOjBd4W2j0lZyTWtorRaxhEeah/UHdY6fvXFE3K+tk+7iaCRcLaO9bWJt8TKD U60WKA1K9NnBSnD9V9/GVWGC6NQezrmlRFz/CRMisPEexuz9jCC1qW/YdB5GJU23 Qa52UKcFTl9Of8v6sVRBzq1OEl6ZAetBQgxJq7+O5dHVlU6du477FLiHzr7TR84h nSjYfnaLuh+Jzn0Ic+soQB4rEV2paUoK3M89BMunNW/VUvTt8MjIAeaFfpBWjHS6 IdQvUV7p849KMA3QnmB2d3IVkfy5VTpzaVlEzY+B0fV4UpCaTqas+kSzT4y8bMPX oU4+S4OQId5J2g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:54 2025 by rpki-client