This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json) Hash identifier: A+lQo+kGgIh0GhYGKo+5jQpWBnydct9dESVcVDpZMxU= Subject key identifier: 75:06:8C:6D:34:5A:42:4B:D6:56:D4:09:25:F7:EA:3D:B4:8D:1D:16 Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c Certificate serial: 019B10B842CD374CF61994CCCE8DF7A6FF0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 04:01:09 +0000 Manifest this update: Fri 12 Dec 2025 04:01:09 +0000 Manifest next update: Sat 13 Dec 2025 04:01:09 +0000 Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=) 2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=) 3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: YRM0tZiaxUMJgCtTqm/pG5MYnH3Vx/7jwJCLXHmTWoc=) 4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:42:cd:37:4c:f6:19:94:cc:ce:8d:f7:a6:ff:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c Validity Not Before: Dec 12 04:01:09 2025 GMT Not After : Dec 13 04:01:09 2025 GMT Subject: CN=75068c6d345a424bd656d40925f7ea3db48d1d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:1e:a1:5d:bc:a1:bb:ca:5f:ad:8c:fc:19: 4a:16:77:d8:21:7b:76:c1:7e:f2:dd:90:34:70:5c: e8:f9:52:f3:1d:dc:36:87:27:59:f5:0d:af:12:53: 11:a8:31:6c:7c:c0:64:44:37:ef:df:28:d3:6d:11: e6:1e:9f:26:11:b7:99:b9:b0:6d:d6:16:59:14:4e: 4d:6f:9b:6c:90:da:be:7e:6c:b8:40:16:c9:c1:06: 41:29:ff:6a:1b:9b:92:da:4f:a9:53:01:51:95:8d: e3:a2:03:11:5c:44:85:f4:35:b7:8c:fe:85:54:48: a3:13:68:16:d5:68:8c:7f:cf:11:81:7a:79:fe:36: b3:13:98:a2:8b:3d:99:fb:b5:b6:6e:fb:74:ec:ba: f2:83:53:0f:90:0d:dd:36:08:3a:1f:f9:2e:dd:3d: 40:33:27:8f:63:41:de:e0:fa:a1:3f:09:e2:ba:85: 83:50:c7:d8:b1:32:03:32:39:30:5d:a6:5c:6b:7d: 6d:1c:69:fa:d9:c6:e4:43:4d:f5:8d:83:f7:cd:45: ad:23:e3:f3:62:9e:0b:2c:8c:86:88:34:34:89:7b: d3:18:5e:ca:f3:e8:a8:9b:fc:d7:35:fa:66:7e:03: 2f:ff:0e:e4:b4:54:d4:ac:7d:17:aa:f9:ea:7f:aa: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:06:8C:6D:34:5A:42:4B:D6:56:D4:09:25:F7:EA:3D:B4:8D:1D:16 X509v3 Authority Key Identifier: keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e3:d0:b6:5e:44:5e:30:66:97:95:db:ce:8b:a6:e9:d7:a8: d6:1f:65:10:69:c1:e4:07:84:ad:c8:a5:5d:51:2b:46:b8:ef: 23:25:5b:f3:be:c8:fa:1b:11:72:2f:d0:43:f2:94:1d:3c:cc: 13:f4:6b:38:87:c2:e7:e6:95:e8:8f:c5:7c:5b:75:8e:dc:0e: 82:b2:bd:d5:e0:fb:03:3d:65:ca:9f:38:10:9d:4c:e1:e2:3b: d0:c4:13:03:a9:e3:02:ca:be:a8:e0:ac:ee:38:d6:69:44:2b: f1:af:95:b2:25:c9:41:29:24:cb:90:11:d0:21:a8:ce:93:e1: e5:50:a4:b1:01:fe:a8:35:2e:62:64:19:23:6c:c0:30:00:cd: 59:6e:0b:8e:cf:54:e4:41:5c:92:e9:2b:9f:e8:6d:a7:92:ec: 77:cd:5b:de:9b:52:ac:82:10:64:06:3f:7a:5d:c0:4f:da:e4: 4d:f3:96:71:26:58:db:d1:55:6f:09:96:d9:8b:0d:3a:31:d9: 79:87:19:86:b9:5c:78:5f:dc:fd:5a:43:d5:dc:33:09:d1:a5: cf:18:51:89:be:f6:55:c7:2e:0c:3c:ff:db:85:64:5a:cb:b3: f2:a6:93:28:40:b8:19:4a:2b:96:01:b5:4a:88:5f:88:0e:46: f6:62:fc:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuELNN0z2GZTMzo33pv8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTk4MDEzMmQxOTNlMjcwZWQxZWZlMGFkMjg0OWZlOGFi MGQ3NmMwHhcNMjUxMjEyMDQwMTA5WhcNMjUxMjEzMDQwMTA5WjAzMTEwLwYDVQQD Eyg3NTA2OGM2ZDM0NWE0MjRiZDY1NmQ0MDkyNWY3ZWEzZGI0OGQxZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstYeoV28obvKX62M/BlKFnfYIXt2 wX7y3ZA0cFzo+VLzHdw2hydZ9Q2vElMRqDFsfMBkRDfv3yjTbRHmHp8mEbeZubBt 1hZZFE5Nb5tskNq+fmy4QBbJwQZBKf9qG5uS2k+pUwFRlY3jogMRXESF9DW3jP6F VEijE2gW1WiMf88RgXp5/jazE5iiiz2Z+7W2bvt07Lryg1MPkA3dNgg6H/ku3T1A MyePY0He4PqhPwniuoWDUMfYsTIDMjkwXaZca31tHGn62cbkQ031jYP3zUWtI+Pz Yp4LLIyGiDQ0iXvTGF7K8+iom/zXNfpmfgMv/w7ktFTUrH0Xqvnqf6rYmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUGjG00WkJL1lbUCSX36j20jR0WMB8GA1UdIwQY MBaAFF9ZgBMtGT4nDtHv4K0oSf6KsNdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYt MWUxZGU5MWE5ODdjLzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYtMWUxZGU5MWE5ODdj LzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlePQtl5E XjBml5Xbzoum6deo1h9lEGnB5AeErcilXVErRrjvIyVb877I+hsRci/QQ/KUHTzM E/RrOIfC5+aV6I/FfFt1jtwOgrK91eD7Az1lyp84EJ1M4eI70MQTA6njAsq+qOCs 7jjWaUQr8a+VsiXJQSkky5AR0CGozpPh5VCksQH+qDUuYmQZI2zAMADNWW4Ljs9U 5EFckukrn+htp5Lsd81b3ptSrIIQZAY/el3AT9rkTfOWcSZY29FVbwmW2YsNOjHZ eYcZhrlceF/c/VpD1dwzCdGlzxhRib72VccuDDz/24VkWsuz8qaTKEC4GUorlgG1 SohfiA5G9mL85g== -----END CERTIFICATE-----Generated at Fri Dec 12 09:08:34 2025 by rpki-client