This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json) Hash identifier: V4wHWOysHYd0Kxcs7cEnHYN7463tFP7P9zgGikkIYmg= Subject key identifier: 75:EC:2F:57:20:01:50:51:A9:36:75:B7:2F:80:6B:30:56:75:7E:E4 Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7 Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7 Certificate serial: 019B2F30A33CF22AADEB746C6614CA140A92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 02:01:15 +0000 Manifest this update: Thu 18 Dec 2025 02:01:15 +0000 Manifest next update: Fri 19 Dec 2025 02:01:15 +0000 Files and hashes: 1: ERmIvRGk-00ya9qPgHlmyIlXqNM.roa (hash: 7Oj9dL8nIHY1zRXrWVKqgUCFNfjEYqWZkAH6EiPqwQs=) 2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: LbHjvbQdi99zNqMsDMTNfTheh8KdP8GJF9tQgJ/6ROA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:a3:3c:f2:2a:ad:eb:74:6c:66:14:ca:14:0a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7 Validity Not Before: Dec 18 02:01:15 2025 GMT Not After : Dec 19 02:01:15 2025 GMT Subject: CN=75ec2f5720015051a93675b72f806b3056757ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7f:7e:da:47:2b:ad:b4:a8:12:19:61:c8:81: 82:4b:0b:1b:ef:66:a4:81:60:9b:4e:1d:40:d8:ce: 66:8a:a0:73:eb:c1:f9:7d:2e:85:8e:a8:19:6b:d7: bc:9e:0c:f1:60:66:6c:67:be:d7:75:34:c9:37:8d: 6e:80:98:9a:83:ba:c1:67:60:91:d2:5a:58:e1:a3: 81:db:e0:09:50:5e:b7:d1:7a:99:65:91:16:49:b5: 25:b3:58:21:54:71:2e:7e:4f:af:cf:db:42:54:49: 5e:dc:55:c4:e5:e0:66:10:a2:fd:ab:7d:6c:78:43: e2:68:93:24:e4:6b:2d:80:4b:9b:17:15:50:5c:77: 38:92:8b:16:ff:42:a5:56:36:5d:b5:45:e1:3c:28: 5a:ef:bb:4c:df:7a:91:e8:94:ac:a0:8f:01:0a:52: 40:38:78:50:cd:e5:96:fa:db:7c:95:fe:b3:1e:60: 8e:0d:d8:87:42:b7:1d:ea:37:7f:ec:f5:e9:d6:4c: cd:9f:2c:38:04:d9:65:f7:2b:f9:55:79:34:d9:bb: 62:d7:90:7a:d1:ec:54:a5:15:ee:6c:7c:c8:e2:0f: 85:2b:54:92:a6:d2:8e:1d:e2:34:08:bb:7a:fa:cd: 6c:8d:23:0e:98:0f:a2:ba:5d:fd:9f:0f:4b:e4:9e: fc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EC:2F:57:20:01:50:51:A9:36:75:B7:2F:80:6B:30:56:75:7E:E4 X509v3 Authority Key Identifier: keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3b:a2:1c:dd:d0:e2:98:e9:f0:77:1a:e7:54:b2:2f:56:9a: bc:9d:73:ab:a3:b9:c2:4c:0d:37:77:ad:e3:4c:f0:79:cb:8b: 98:ae:41:30:c1:1e:4e:a2:bb:52:13:4d:e9:04:4d:85:15:3c: 11:e1:57:c2:5c:86:35:ac:13:ce:7a:14:55:5b:7a:ff:1c:be: 28:e8:2d:4f:10:4e:6d:d4:e8:47:35:b9:16:73:eb:8d:1b:0c: b6:c0:16:06:b9:9f:00:f0:60:3a:05:8b:f5:aa:53:a8:90:43: 32:cf:bc:d5:26:fb:dd:74:df:7f:c3:79:f0:a7:21:aa:e4:e4: 86:ab:d4:df:7c:7f:25:b3:f1:11:0e:76:87:e5:1f:21:80:88: a7:76:1e:2e:88:dc:0a:36:2c:70:e5:79:0c:b2:b8:d8:5b:9f: 8d:ea:62:3e:39:57:97:6a:e6:c9:8f:36:46:01:a1:8b:bf:d5: 85:bd:30:68:3c:52:23:30:4e:c6:62:0d:3d:d6:3e:9a:2a:93: fd:94:3b:3c:25:67:0c:e1:75:33:80:79:19:eb:3f:68:18:9f: 77:5d:98:30:08:7e:1f:67:80:33:17:3e:40:c9:33:4e:73:b7: 8e:3a:74:b6:08:08:b0:08:b0:bf:57:52:bb:70:ed:52:e2:8d: 16:14:75:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMKM88iqt63RsZhTKFAqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YzAzMjkzNWU5NjMzZGY4YjE5OTI1ZGYwYmQyNWI4MWM2 ODYzYjcwHhcNMjUxMjE4MDIwMTE1WhcNMjUxMjE5MDIwMTE1WjAzMTEwLwYDVQQD Eyg3NWVjMmY1NzIwMDE1MDUxYTkzNjc1YjcyZjgwNmIzMDU2NzU3ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H9+2kcrrbSoEhlhyIGCSwsb72ak gWCbTh1A2M5miqBz68H5fS6FjqgZa9e8ngzxYGZsZ77XdTTJN41ugJiag7rBZ2CR 0lpY4aOB2+AJUF630XqZZZEWSbUls1ghVHEufk+vz9tCVEle3FXE5eBmEKL9q31s eEPiaJMk5GstgEubFxVQXHc4kosW/0KlVjZdtUXhPCha77tM33qR6JSsoI8BClJA OHhQzeWW+tt8lf6zHmCODdiHQrcd6jd/7PXp1kzNnyw4BNll9yv5VXk02bti15B6 0exUpRXubHzI4g+FK1SSptKOHeI0CLt6+s1sjSMOmA+iul39nw9L5J78qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXsL1cgAVBRqTZ1ty+AazBWdX7kMB8GA1UdIwQY MBaAFMTAMpNeljPfixmSXfC9JbgcaGO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjIt OWVhOWNhMTc0MmRiLzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjItOWVhOWNhMTc0MmRi LzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTuiHN3Q 4pjp8Hca51SyL1aavJ1zq6O5wkwNN3et40zwecuLmK5BMMEeTqK7UhNN6QRNhRU8 EeFXwlyGNawTznoUVVt6/xy+KOgtTxBObdToRzW5FnPrjRsMtsAWBrmfAPBgOgWL 9apTqJBDMs+81Sb73XTff8N58KchquTkhqvU33x/JbPxEQ52h+UfIYCIp3YeLojc CjYscOV5DLK42FufjepiPjlXl2rmyY82RgGhi7/Vhb0waDxSIzBOxmINPdY+miqT /ZQ7PCVnDOF1M4B5Ges/aBifd12YMAh+H2eAMxc+QMkzTnO3jjp0tggIsAiwv1dS u3DtUuKNFhR1qA== -----END CERTIFICATE-----Generated at Thu Dec 18 04:19:27 2025 by rpki-client