This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json) Hash identifier: 8/eaJUnlorba3Y21mQbK1akapIS+Ym34icVGPdEPckM= Subject key identifier: 9C:E9:2B:22:B6:A2:61:F2:BE:62:53:17:68:97:4C:40:EE:95:3B:69 Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07 Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07 Certificate serial: 019B101497745F617091B32D401A6B25857A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 01:02:23 +0000 Manifest this update: Fri 12 Dec 2025 01:02:23 +0000 Manifest next update: Sat 13 Dec 2025 01:02:23 +0000 Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: sCK00mgu5mHLeIEZQl0O35akyGvpRya4HaXBZww+4XA=) 2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:97:74:5f:61:70:91:b3:2d:40:1a:6b:25:85:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47119a205683167925b9f04174312637b1600c07 Validity Not Before: Dec 12 01:02:23 2025 GMT Not After : Dec 13 01:02:23 2025 GMT Subject: CN=9ce92b22b6a261f2be62531768974c40ee953b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:a9:6f:fa:1f:1e:9d:23:6c:3c:02:52:2a: 0c:38:e6:35:38:8a:d5:5d:9b:f5:c2:25:05:5f:aa: 22:a6:d3:28:53:52:6a:f5:fa:f2:9f:90:d9:24:63: 7e:03:14:01:79:0c:e3:ff:2c:3b:b3:f0:6d:23:0d: 11:16:d9:62:de:89:d0:87:00:8f:e7:5c:c4:f1:94: 4e:27:08:f0:0c:17:0a:12:bc:2d:f6:34:b1:93:f4: 8c:8f:9a:16:3e:2e:7a:e6:24:84:3b:b6:2a:0d:ea: b1:f0:2e:be:91:42:c4:52:b4:91:25:f2:db:b6:c4: 97:34:8a:90:e5:19:6d:92:90:64:3a:b7:c0:9d:2b: ef:21:0a:fa:d3:7d:45:b1:77:17:1f:57:0a:f0:e1: 9b:3b:e4:8a:9b:09:36:cf:12:6b:c4:55:8c:9a:10: f5:05:43:0d:c2:8e:2b:88:a3:af:e0:48:eb:d1:0f: 69:a0:e1:2d:87:d9:24:b2:19:05:52:21:8c:c4:8a: bb:82:04:0c:a5:36:71:8d:c3:b8:cf:41:5e:b8:44: 86:af:be:14:94:ef:33:9e:03:d1:d8:af:64:70:f3: ba:bb:d3:b2:33:2b:90:3e:c4:d0:18:35:b9:b7:81: 39:d2:15:4c:d8:d1:89:36:7a:0e:04:0f:dd:09:7b: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E9:2B:22:B6:A2:61:F2:BE:62:53:17:68:97:4C:40:EE:95:3B:69 X509v3 Authority Key Identifier: keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:14:c6:1f:f7:40:00:06:6e:b6:59:a5:08:40:53:e9:0d:c5: 86:e3:3b:d7:de:49:bc:b9:ac:82:ea:21:d5:a0:16:cb:3d:5b: df:40:27:63:21:fb:22:ab:57:8b:e3:65:c1:32:62:3e:03:60: d2:f1:bd:3d:cb:b5:76:d4:73:dc:ab:d2:5a:e1:e6:41:e2:c3: a9:ec:08:c6:b7:98:96:cf:7a:b7:5c:96:54:6b:98:f9:93:18: ef:7a:d1:48:30:1a:90:30:f1:70:2f:42:8b:30:cb:c5:17:ce: 82:6d:91:5d:b5:73:ee:5c:29:5e:da:1a:25:64:69:a8:53:23: 61:5a:19:78:72:e4:38:72:32:90:49:bd:bd:c1:69:5e:fb:19: 67:c6:e7:c3:89:2a:e4:80:f6:2b:41:9e:5e:ea:ea:23:39:94: 2e:26:55:f4:07:44:f6:53:e9:3a:f2:d6:90:96:1f:0f:e3:e9: bf:2b:e8:3e:7c:3a:14:3b:ec:c0:d3:e1:27:a9:de:a5:dc:49: 08:5a:f1:4e:d8:ab:42:d7:8f:3f:42:96:47:bc:e2:0b:d1:cc: 17:f1:7a:e4:61:ce:b1:85:77:21:5a:86:b7:34:51:e2:18:75: c9:9d:52:44:77:55:5d:80:7a:2a:86:9d:3e:fa:5a:d3:b4:76: 66:47:e2:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFJd0X2FwkbMtQBprJYV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTE5YTIwNTY4MzE2NzkyNWI5ZjA0MTc0MzEyNjM3YjE2 MDBjMDcwHhcNMjUxMjEyMDEwMjIzWhcNMjUxMjEzMDEwMjIzWjAzMTEwLwYDVQQD Eyg5Y2U5MmIyMmI2YTI2MWYyYmU2MjUzMTc2ODk3NGM0MGVlOTUzYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF2pb/ofHp0jbDwCUioMOOY1OIrV XZv1wiUFX6oiptMoU1Jq9fryn5DZJGN+AxQBeQzj/yw7s/BtIw0RFtli3onQhwCP 51zE8ZROJwjwDBcKErwt9jSxk/SMj5oWPi565iSEO7YqDeqx8C6+kULEUrSRJfLb tsSXNIqQ5RltkpBkOrfAnSvvIQr6031FsXcXH1cK8OGbO+SKmwk2zxJrxFWMmhD1 BUMNwo4riKOv4Ejr0Q9poOEth9kkshkFUiGMxIq7ggQMpTZxjcO4z0FeuESGr74U lO8zngPR2K9kcPO6u9OyMyuQPsTQGDW5t4E50hVM2NGJNnoOBA/dCXunTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzpKyK2omHyvmJTF2iXTEDulTtpMB8GA1UdIwQY MBaAFEcRmiBWgxZ5JbnwQXQxJjexYAwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQt MmEwZTQ1ODYyYzAzLzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQtMmEwZTQ1ODYyYzAz LzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBTGH/dA AAZutlmlCEBT6Q3FhuM7195JvLmsguoh1aAWyz1b30AnYyH7IqtXi+NlwTJiPgNg 0vG9Pcu1dtRz3KvSWuHmQeLDqewIxreYls96t1yWVGuY+ZMY73rRSDAakDDxcC9C izDLxRfOgm2RXbVz7lwpXtoaJWRpqFMjYVoZeHLkOHIykEm9vcFpXvsZZ8bnw4kq 5ID2K0GeXurqIzmULiZV9AdE9lPpOvLWkJYfD+PpvyvoPnw6FDvswNPhJ6nepdxJ CFrxTtirQtePP0KWR7ziC9HMF/F65GHOsYV3IVqGtzRR4hh1yZ1SRHdVXYB6Koad Pvpa07R2ZkfiIg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:12:26 2025 by rpki-client