This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json) Hash identifier: MECC7pQ9ylP1oXz9rHcNoV/ZEYPkhPZOsGcPUqNd6yM= Subject key identifier: BA:63:7D:EE:BC:6C:6F:4F:BB:7A:05:5D:71:56:E6:EC:E6:2B:53:FB Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c Certificate serial: 019B3CB4F40DEF609485FCF472C8AD86B570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft Manifest number: 149A Signing time: Sat 20 Dec 2025 17:00:50 +0000 Manifest this update: Sat 20 Dec 2025 17:00:50 +0000 Manifest next update: Sun 21 Dec 2025 17:00:50 +0000 Files and hashes: 1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=) 2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=) 3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=) 4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=) 5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=) 6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=) 7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: 2Zb4pQf4hu/kRvEHNf8XVPAlHZNM8/ayniM4ZHkewAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f4:0d:ef:60:94:85:fc:f4:72:c8:ad:86:b5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Validity Not Before: Dec 20 17:00:50 2025 GMT Not After : Dec 21 17:00:50 2025 GMT Subject: CN=ba637deebc6c6f4fbb7a055d7156e6ece62b53fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8c:74:91:41:96:b8:d9:93:0f:b7:fb:ba:e6: 4c:f8:08:a0:ed:00:60:ac:39:c2:a5:3c:7d:1c:ef: 53:8c:c1:d4:5c:c0:f7:c9:79:85:28:6a:f6:45:b3: e2:a5:66:94:20:5e:1d:2d:67:2d:de:c9:26:88:e1: c2:c8:a1:01:9a:7d:b8:81:25:fb:b9:22:8b:67:07: c0:50:4f:3e:52:db:f0:f5:78:24:44:74:7d:8d:e2: ca:1c:99:e0:78:4a:3d:df:bf:b8:48:d2:d1:ae:c5: f1:fe:f7:7b:78:62:15:a2:49:df:c7:74:f1:7f:2f: ff:5f:6a:d9:00:e3:a3:f2:fc:37:35:e9:39:a2:e9: 40:b7:42:8f:9b:c0:19:a6:d4:c3:3c:b1:d7:a5:8e: 65:be:60:c6:d7:71:f3:c8:4d:08:ed:73:bf:1c:6f: 26:54:73:89:06:b6:98:ba:76:d6:3d:ae:b3:b0:f4: 3d:dc:ee:40:db:e6:9c:e8:5e:81:ae:8f:c0:69:e1: 25:fa:aa:91:9b:02:25:8f:76:5f:73:ec:87:62:3d: 5a:c6:6b:e2:99:01:ef:ae:69:a0:e0:bd:05:8e:79: 88:fb:cf:e3:80:b9:81:30:f9:86:b4:b6:ea:76:6f: 5e:44:b7:b9:fa:e8:4e:02:8e:30:cb:14:dc:64:b9: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:63:7D:EE:BC:6C:6F:4F:BB:7A:05:5D:71:56:E6:EC:E6:2B:53:FB X509v3 Authority Key Identifier: keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3f:1c:92:b1:99:7b:15:60:31:f4:1e:51:ed:a1:6e:2a:42: d0:60:b7:fc:d6:1c:85:74:8b:f1:c2:4e:61:17:b0:40:db:80: e7:0c:f4:76:1b:3e:3a:37:d2:c6:a1:92:d7:6d:bc:b5:57:61: 79:de:dc:ef:37:25:f9:55:54:99:5c:ab:d6:79:15:53:82:8c: 96:fd:3a:6c:ad:14:9d:c2:f9:ab:9c:46:87:7e:2f:f9:38:53: ee:e7:1c:2e:66:a8:b6:b1:e1:ee:c2:95:f5:ce:26:db:a5:67: 22:21:43:b8:f2:de:bf:68:64:c6:8b:e1:7d:bf:ea:57:13:fe: 3c:26:89:ed:13:42:fe:f9:16:eb:c1:f7:63:ce:3c:40:2c:c1: cc:8b:bc:34:77:07:63:91:1f:3c:41:3a:75:dd:52:61:d1:4c: c2:0f:b5:59:6d:9c:22:23:37:b9:33:d9:ef:e0:2d:af:c8:6c: 1d:51:e6:de:e6:ad:ef:76:5c:3e:b7:18:2f:8f:65:71:1e:a5: 3b:1c:5a:a8:72:3a:a1:18:a0:02:30:37:aa:83:ce:cd:79:b0: 40:6e:3e:94:e7:49:02:f7:24:1b:4a:e8:db:ed:21:94:86:96: d1:f0:ba:9c:39:c2:73:c6:9c:91:f2:27:39:b9:8d:e9:fb:75: a5:51:d2:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPQN72CUhfz0csithrVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4 MmEyM2MwHhcNMjUxMjIwMTcwMDUwWhcNMjUxMjIxMTcwMDUwWjAzMTEwLwYDVQQD EyhiYTYzN2RlZWJjNmM2ZjRmYmI3YTA1NWQ3MTU2ZTZlY2U2MmI1M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34x0kUGWuNmTD7f7uuZM+Aig7QBg rDnCpTx9HO9TjMHUXMD3yXmFKGr2RbPipWaUIF4dLWct3skmiOHCyKEBmn24gSX7 uSKLZwfAUE8+Utvw9XgkRHR9jeLKHJngeEo937+4SNLRrsXx/vd7eGIVoknfx3Tx fy//X2rZAOOj8vw3Nek5oulAt0KPm8AZptTDPLHXpY5lvmDG13HzyE0I7XO/HG8m VHOJBraYunbWPa6zsPQ93O5A2+ac6F6Bro/AaeEl+qqRmwIlj3Zfc+yHYj1axmvi mQHvrmmg4L0FjnmI+8/jgLmBMPmGtLbqdm9eRLe5+uhOAo4wyxTcZLmSqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpjfe68bG9Pu3oFXXFW5uzmK1P7MB8GA1UdIwQY MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt MjM4NDA1ZjJjZGU5LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5 LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPD8ckrGZ exVgMfQeUe2hbipC0GC3/NYchXSL8cJOYRewQNuA5wz0dhs+OjfSxqGS1228tVdh ed7c7zcl+VVUmVyr1nkVU4KMlv06bK0UncL5q5xGh34v+ThT7uccLmaotrHh7sKV 9c4m26VnIiFDuPLev2hkxovhfb/qVxP+PCaJ7RNC/vkW68H3Y848QCzBzIu8NHcH Y5EfPEE6dd1SYdFMwg+1WW2cIiM3uTPZ7+Atr8hsHVHm3uat73ZcPrcYL49lcR6l OxxaqHI6oRigAjA3qoPOzXmwQG4+lOdJAvckG0ro2+0hlIaW0fC6nDnCc8ackfIn ObmN6ft1pVHSLg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:35:25 2025 by rpki-client