This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json) Hash identifier: S4oiwCP/Cwl8gQHHtUWIZKP7y3FLhptZtWbUIqm2dIg= Subject key identifier: DE:CA:1F:9B:14:D7:8C:4D:AA:B0:05:E1:98:DA:02:D7:41:27:7A:05 Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b Certificate serial: 019B3F7F30B784EBCAE2AAF516D69D514F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft Manifest number: C7 Signing time: Sun 21 Dec 2025 06:00:58 +0000 Manifest this update: Sun 21 Dec 2025 06:00:58 +0000 Manifest next update: Mon 22 Dec 2025 06:00:58 +0000 Files and hashes: 1: 1RhZ680ZFwSWL0eW5jF3xOe9MxM.roa (hash: sgWoBKYoXGWVKYDBWWq0HZS7lSSlvVBQHXsa6478dkc=) 2: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: wVqorqREHdhvOA2GO+mqKY826Ad11TowEiJPrsr7vVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:30:b7:84:eb:ca:e2:aa:f5:16:d6:9d:51:4f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b Validity Not Before: Dec 21 06:00:58 2025 GMT Not After : Dec 22 06:00:58 2025 GMT Subject: CN=deca1f9b14d78c4daab005e198da02d741277a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:43:b9:c4:6b:36:5c:43:f1:f8:e5:f3:96: 14:1d:79:76:07:9c:6c:71:5b:58:f6:48:e7:41:0a: 6d:7e:94:74:c9:90:13:54:61:06:3f:42:11:3a:74: e1:28:77:5d:48:cc:4d:a6:85:a6:c7:e6:2d:3f:fc: 5f:ad:2e:95:ba:a8:1c:8e:21:18:13:b0:17:c1:fa: 3f:2f:6f:ed:77:75:b9:ab:c7:20:00:37:e8:55:32: 92:a0:a6:30:ed:ba:a5:66:a4:94:73:65:17:b3:c5: 6b:d4:ca:a6:bf:e8:5a:53:ee:a6:09:c2:09:97:22: f8:c0:5a:df:94:41:3d:ac:23:f5:68:d3:0b:9c:d5: dd:f9:05:42:7e:e6:74:2f:a0:13:17:b4:09:45:b0: ae:3a:41:d8:18:b6:35:83:13:d1:95:69:86:28:56: a9:ba:7e:f3:9d:90:ff:ec:a9:4c:4c:e0:73:cf:70: 31:ac:de:68:8f:4f:f6:ef:44:e1:20:0c:ec:84:86: a9:ff:27:32:89:7d:6e:23:f1:f4:5c:b6:d4:66:bc: eb:54:5b:c0:97:4a:ec:a6:b9:18:d1:a9:9a:4e:0e: 49:29:cf:ab:e0:76:99:b2:28:23:b8:c1:1e:59:83: 0f:ca:e5:44:d5:17:8d:b5:58:1a:84:3c:54:8b:c0: ad:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CA:1F:9B:14:D7:8C:4D:AA:B0:05:E1:98:DA:02:D7:41:27:7A:05 X509v3 Authority Key Identifier: keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d0:fc:21:54:1c:55:cc:2d:50:6a:6b:ae:56:95:96:c6:93: d8:5b:7d:8c:cb:8e:76:2f:5c:10:25:1e:66:cb:59:95:64:86: 2d:6a:f6:29:0b:97:90:98:ff:c8:36:4c:5c:b8:6e:8a:88:7a: 24:f5:7d:d6:25:42:a8:e6:8f:74:fb:a3:94:95:04:af:95:2a: 7d:5c:83:45:94:dd:b0:c4:e2:c6:ff:f6:34:df:03:3e:43:db: 72:78:3b:2c:c8:ab:d3:75:ee:eb:5e:62:07:f6:63:0e:b0:4e: bf:bf:56:9c:88:12:ba:1c:c4:08:0b:0e:8e:5e:5b:0d:66:96: 02:36:1b:37:51:53:11:c1:9a:05:64:f6:4e:8e:7e:8a:4b:d0: 4d:9f:ff:be:1e:40:9d:61:71:81:9a:8d:2c:50:b1:e3:9d:35: 70:b2:b2:14:7a:c1:d7:16:5c:74:09:91:b2:b8:08:6d:e4:6a: c4:11:4e:de:05:fe:32:1d:4b:a2:40:d3:00:d7:8c:cb:a8:a3: e9:f1:af:b9:c9:72:fd:5a:2c:f2:7f:43:ec:9c:73:dc:ba:57: 4b:ff:be:4f:8e:c3:3c:67:ac:0e:7d:6e:95:cc:2f:31:b5:b3: cc:50:9f:3b:87:7b:1a:08:11:29:34:0e:d7:92:95:3a:e6:39: 82:43:7d:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fzC3hOvK4qr1FtadUU+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTRiYmY1Mzc4N2FmNGU5MzVkMzBhNDhlODgyNWEyZGEx NGEwOGIwHhcNMjUxMjIxMDYwMDU4WhcNMjUxMjIyMDYwMDU4WjAzMTEwLwYDVQQD EyhkZWNhMWY5YjE0ZDc4YzRkYWFiMDA1ZTE5OGRhMDJkNzQxMjc3YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh65DucRrNlxD8fjl85YUHXl2B5xs cVtY9kjnQQptfpR0yZATVGEGP0IROnThKHddSMxNpoWmx+YtP/xfrS6VuqgcjiEY E7AXwfo/L2/td3W5q8cgADfoVTKSoKYw7bqlZqSUc2UXs8Vr1Mqmv+haU+6mCcIJ lyL4wFrflEE9rCP1aNMLnNXd+QVCfuZ0L6ATF7QJRbCuOkHYGLY1gxPRlWmGKFap un7znZD/7KlMTOBzz3AxrN5oj0/270ThIAzshIap/ycyiX1uI/H0XLbUZrzrVFvA l0rsprkY0amaTg5JKc+r4HaZsigjuMEeWYMPyuVE1ReNtVgahDxUi8CtEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7KH5sU14xNqrAF4ZjaAtdBJ3oFMB8GA1UdIwQY MBaAFEcUu/U3h69Ok10wpI6IJaLaFKCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMt ZTY5MGVkMjFmOTRmLzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMtZTY5MGVkMjFmOTRm LzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmND8IVQc VcwtUGprrlaVlsaT2Ft9jMuOdi9cECUeZstZlWSGLWr2KQuXkJj/yDZMXLhuioh6 JPV91iVCqOaPdPujlJUEr5UqfVyDRZTdsMTixv/2NN8DPkPbcng7LMir03Xu615i B/ZjDrBOv79WnIgSuhzECAsOjl5bDWaWAjYbN1FTEcGaBWT2To5+ikvQTZ//vh5A nWFxgZqNLFCx4501cLKyFHrB1xZcdAmRsrgIbeRqxBFO3gX+Mh1LokDTANeMy6ij 6fGvucly/Vos8n9D7Jxz3LpXS/++T47DPGesDn1ulcwvMbWzzFCfO4d7GggRKTQO 15KVOuY5gkN92A== -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:22 2025 by rpki-client