This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft File: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft (raw, json) Hash identifier: /zodKIrGZPSuxQtAEPRVoDJinNlgpDAgHbYn5ztR32o= Subject key identifier: DE:67:D4:C0:8F:F5:65:B6:FC:42:14:C2:2C:9E:31:C8:2C:2F:42:2C Authority key identifier: 45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F Certificate issuer: /CN=45767054d193a3b8d6c2c009f59cf643e149e39f Certificate serial: 019B2B53D8E303EBF0C87E06498C78B3D918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft Manifest number: 117A Signing time: Wed 17 Dec 2025 08:01:13 +0000 Manifest this update: Wed 17 Dec 2025 08:01:13 +0000 Manifest next update: Thu 18 Dec 2025 08:01:13 +0000 Files and hashes: 1: RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl (hash: O/sNlBq8eFFvicDJ2zeE8k7JYXbMI5O7u5800W4+Vs0=) 2: kpeNUrCjwD-bH5D8QQPXuEqA70c.roa (hash: /GB93CH2vpBaaqYNdlIMujujZ/LFvmv11CaA0a79OcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:d8:e3:03:eb:f0:c8:7e:06:49:8c:78:b3:d9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45767054d193a3b8d6c2c009f59cf643e149e39f Validity Not Before: Dec 17 08:01:13 2025 GMT Not After : Dec 18 08:01:13 2025 GMT Subject: CN=de67d4c08ff565b6fc4214c22c9e31c82c2f422c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9c:4d:b2:b2:5f:bd:68:00:3c:cb:54:75:5f: c9:e3:26:c7:d3:b0:a7:69:6a:72:aa:c1:60:88:c9: d4:99:c3:62:06:60:6a:71:ad:e2:f9:b8:23:54:b0: 49:95:6e:61:0a:2b:62:66:2a:38:2c:24:de:5d:69: 23:b3:b3:80:50:48:d0:db:77:2d:32:ff:9f:1b:5f: 84:20:db:75:d4:07:d5:22:18:a3:2f:18:34:c5:9f: c3:32:fd:85:92:cd:3e:3a:3e:1d:81:a4:14:da:43: 98:26:32:be:ed:df:1f:18:12:f0:4f:3a:90:2c:d0: 96:82:f2:10:38:33:cb:63:b9:45:70:3f:47:44:97: e8:d7:d8:f6:c5:83:44:a5:4c:a5:d9:66:c9:37:f8: 10:1a:60:7a:6c:a1:ac:c0:31:59:81:90:cb:1d:9c: 91:8a:4c:98:a5:c3:9d:d5:b5:6b:74:bf:a9:fa:5d: d1:0a:fd:55:bf:c9:53:98:41:a1:f9:5e:6a:dc:43: 92:58:fd:75:c7:27:03:e8:70:5c:ab:d2:bc:d4:0b: a9:80:b4:58:36:a0:1a:89:e9:eb:89:24:df:bc:c0: 3a:90:1c:cd:57:b3:5b:22:21:30:bd:56:13:24:bf: f7:11:ac:b1:55:f2:f9:da:e6:fb:3b:7b:ab:41:17: 85:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:67:D4:C0:8F:F5:65:B6:FC:42:14:C2:2C:9E:31:C8:2C:2F:42:2C X509v3 Authority Key Identifier: keyid:45:76:70:54:D1:93:A3:B8:D6:C2:C0:09:F5:9C:F6:43:E1:49:E3:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28a3a9-fd43-489c-bcc8-b80a23ac7893/1/RXZwVNGTo7jWwsAJ9Zz2Q-FJ458.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:48:69:36:53:23:36:25:97:cf:cb:ba:d8:fe:9a:73:b8:d0: e0:09:8d:9d:8c:b4:6b:f5:fa:c5:ee:7e:86:19:39:8e:ff:d6: 4b:36:68:71:16:26:d4:dd:1b:49:df:5f:69:55:5a:88:57:cb: 41:8b:4d:0b:20:71:3d:7b:92:ab:41:9f:0f:c6:2d:e5:24:d6: 4c:fa:ba:58:9a:e3:df:e2:00:4c:08:40:e0:05:56:12:23:9b: 5c:60:17:a4:b6:10:0f:01:33:90:ef:85:55:b0:fd:07:0d:ec: e5:36:ef:d3:10:84:d4:cf:87:18:df:8b:fd:68:c3:62:86:a4: 5b:ed:ce:c3:b7:d3:00:7f:f9:a8:d8:c8:78:22:30:4a:61:f8: 17:b6:4d:e9:5b:b1:8f:08:9f:61:e8:e9:61:df:53:6e:9d:fa: 7e:4b:86:55:2b:92:9d:25:57:3a:0d:8d:0a:17:ea:f5:4b:c6: b3:ff:5d:06:9d:b3:2d:52:71:79:61:f6:5e:6b:4a:2f:6e:bd: 92:87:1e:e6:cd:97:ad:07:52:31:37:f0:01:64:4b:26:40:3c: 5b:e1:69:7a:fa:18:41:01:c9:cd:ab:af:84:ba:7a:6d:d7:55: fe:0d:e8:a8:b3:b9:66:78:32:ff:e0:e4:e8:7d:b2:9f:79:4c: a6:bc:e2:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU9jjA+vwyH4GSYx4s9kYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NzY3MDU0ZDE5M2EzYjhkNmMyYzAwOWY1OWNmNjQzZTE0 OWUzOWYwHhcNMjUxMjE3MDgwMTEzWhcNMjUxMjE4MDgwMTEzWjAzMTEwLwYDVQQD EyhkZTY3ZDRjMDhmZjU2NWI2ZmM0MjE0YzIyYzllMzFjODJjMmY0MjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JxNsrJfvWgAPMtUdV/J4ybH07Cn aWpyqsFgiMnUmcNiBmBqca3i+bgjVLBJlW5hCitiZio4LCTeXWkjs7OAUEjQ23ct Mv+fG1+EINt11AfVIhijLxg0xZ/DMv2Fks0+Oj4dgaQU2kOYJjK+7d8fGBLwTzqQ LNCWgvIQODPLY7lFcD9HRJfo19j2xYNEpUyl2WbJN/gQGmB6bKGswDFZgZDLHZyR ikyYpcOd1bVrdL+p+l3RCv1Vv8lTmEGh+V5q3EOSWP11xycD6HBcq9K81AupgLRY NqAaienriSTfvMA6kBzNV7NbIiEwvVYTJL/3EayxVfL52ub7O3urQReFUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5n1MCP9WW2/EIUwiyeMcgsL0IsMB8GA1UdIwQY MBaAFEV2cFTRk6O41sLACfWc9kPhSeOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgt YjgwYTIzYWM3ODkzLzEvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yOGEzYTktZmQ0My00ODljLWJjYzgtYjgwYTIzYWM3ODkz LzEvUlhad1ZOR1RvN2pXd3NBSjlaejJRLUZKNDU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkhpNlMj NiWXz8u62P6ac7jQ4AmNnYy0a/X6xe5+hhk5jv/WSzZocRYm1N0bSd9faVVaiFfL QYtNCyBxPXuSq0GfD8Yt5STWTPq6WJrj3+IATAhA4AVWEiObXGAXpLYQDwEzkO+F VbD9Bw3s5Tbv0xCE1M+HGN+L/WjDYoakW+3Ow7fTAH/5qNjIeCIwSmH4F7ZN6Vux jwifYejpYd9Tbp36fkuGVSuSnSVXOg2NChfq9UvGs/9dBp2zLVJxeWH2XmtKL269 koce5s2XrQdSMTfwAWRLJkA8W+FpevoYQQHJzauvhLp6bddV/g3oqLO5Zngy/+Dk 6H2yn3lMprzioA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:08:59 2025 by rpki-client