This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json) Hash identifier: 72rdsPHBWdQ/8J9lWNiX3t4t03ckzSCH85CY4wnfz0A= Subject key identifier: 9C:BC:C6:B7:EF:CD:8C:10:31:07:5E:DE:A7:28:15:33:89:87:3B:35 Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494 Certificate serial: 019B378E671DF9820C7A985C266109FF6CF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft Manifest number: 12C5 Signing time: Fri 19 Dec 2025 17:00:37 +0000 Manifest this update: Fri 19 Dec 2025 17:00:37 +0000 Manifest next update: Sat 20 Dec 2025 17:00:37 +0000 Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=) 2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=) 3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: /bdqcHf3xBiGXFxnXWAin7IXqiu6oALPLfw9u8VbJ0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:67:1d:f9:82:0c:7a:98:5c:26:61:09:ff:6c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494 Validity Not Before: Dec 19 17:00:37 2025 GMT Not After : Dec 20 17:00:37 2025 GMT Subject: CN=9cbcc6b7efcd8c1031075edea728153389873b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:00:22:4c:eb:72:d4:d8:13:68:49:b6:65:65: ae:68:a0:a1:e6:69:71:1c:32:56:22:6b:2e:0d:b1: 41:db:9f:32:18:0b:aa:d2:e4:d7:f3:8d:ca:05:ba: f7:54:05:46:1d:bc:5f:f4:27:de:6f:51:02:d2:de: 8a:14:e2:8d:42:e8:bd:05:9f:e4:64:d7:b6:07:54: 17:01:4f:55:2b:a4:58:b0:ea:e4:68:e3:62:f9:a1: e4:d2:81:59:b3:f5:1b:6e:95:ce:4a:0e:4d:be:39: 97:e3:a9:1e:41:2e:0f:4b:e5:10:34:80:ab:7e:04: 05:77:6d:2a:19:f5:90:83:e4:7b:8f:c6:eb:1e:36: 7c:57:de:bf:a7:65:d1:7d:67:92:fb:f6:4c:99:1c: bd:e2:b9:cd:71:44:99:38:9f:2b:3e:37:79:2d:45: 29:32:4d:82:2f:e3:0f:37:43:3e:b1:d4:10:99:c2: 09:f8:69:9c:cf:80:06:b8:09:ad:ba:3d:77:cf:e7: 65:4a:f5:f8:6a:bf:93:d0:1f:ca:d0:d1:35:c2:ba: a2:57:d7:93:d1:70:7e:09:71:bf:17:24:5c:6b:5a: 04:d0:08:42:ee:ba:82:45:b2:fa:24:84:1f:44:b3: 21:8c:63:d2:d3:85:39:8c:01:cf:da:58:06:95:31: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BC:C6:B7:EF:CD:8C:10:31:07:5E:DE:A7:28:15:33:89:87:3B:35 X509v3 Authority Key Identifier: keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:64:4f:57:4c:4a:3d:b0:bd:31:3b:48:eb:cb:11:fc:ce:80: e7:f4:08:68:e9:db:cb:8c:c8:ac:a3:50:d6:3c:76:eb:b6:99: 1a:0d:e3:34:d8:af:91:b4:8a:25:21:4d:85:19:2b:f0:48:71: 7d:5e:88:4e:81:be:3d:43:f2:07:b0:62:3e:66:20:de:da:13: a9:be:8d:a1:a3:5c:0e:21:86:80:c0:12:38:7a:ae:04:2e:9d: 41:ab:c1:f6:05:0b:ff:e7:cd:fd:44:fe:2e:71:de:fb:6f:b1: 9f:aa:e6:ef:75:72:56:c0:8a:67:65:5d:3f:ab:d2:70:19:67: 5f:15:92:a7:52:ce:12:54:e1:2d:16:72:20:8e:e8:09:3c:ce: b1:55:f5:4b:48:f0:b3:d6:80:a6:51:98:0a:4d:22:e8:44:16: f2:2f:c1:12:2f:e4:2e:41:37:0b:59:9d:0d:ea:aa:b9:17:80: f0:d4:01:cb:86:83:62:a5:28:38:c7:4c:66:08:30:4e:d9:10: df:e7:60:95:4c:b2:0a:78:a8:17:b5:19:3f:4f:81:c8:86:dc: 72:96:32:6a:9a:12:69:49:57:5a:53:2d:8d:a2:e7:e5:48:2a: c5:22:52:73:b0:e5:76:fd:44:ba:d7:3d:4e:b0:45:6d:b6:a9: 64:33:79:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jmcd+YIMephcJmEJ/2z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz NTg0OTQwHhcNMjUxMjE5MTcwMDM3WhcNMjUxMjIwMTcwMDM3WjAzMTEwLwYDVQQD Eyg5Y2JjYzZiN2VmY2Q4YzEwMzEwNzVlZGVhNzI4MTUzMzg5ODczYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAAiTOty1NgTaEm2ZWWuaKCh5mlx HDJWImsuDbFB258yGAuq0uTX843KBbr3VAVGHbxf9Cfeb1EC0t6KFOKNQui9BZ/k ZNe2B1QXAU9VK6RYsOrkaONi+aHk0oFZs/UbbpXOSg5NvjmX46keQS4PS+UQNICr fgQFd20qGfWQg+R7j8brHjZ8V96/p2XRfWeS+/ZMmRy94rnNcUSZOJ8rPjd5LUUp Mk2CL+MPN0M+sdQQmcIJ+Gmcz4AGuAmtuj13z+dlSvX4ar+T0B/K0NE1wrqiV9eT 0XB+CXG/FyRca1oE0AhC7rqCRbL6JIQfRLMhjGPS04U5jAHP2lgGlTFkKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJy8xrfvzYwQMQde3qcoFTOJhzs1MB8GA1UdIwQY MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3 LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2RPV0xK PbC9MTtI68sR/M6A5/QIaOnby4zIrKNQ1jx267aZGg3jNNivkbSKJSFNhRkr8Ehx fV6IToG+PUPyB7BiPmYg3toTqb6NoaNcDiGGgMASOHquBC6dQavB9gUL/+fN/UT+ LnHe+2+xn6rm73VyVsCKZ2VdP6vScBlnXxWSp1LOElThLRZyII7oCTzOsVX1S0jw s9aAplGYCk0i6EQW8i/BEi/kLkE3C1mdDeqquReA8NQBy4aDYqUoOMdMZggwTtkQ 3+dglUyyCnioF7UZP0+ByIbccpYyapoSaUlXWlMtjaLn5UgqxSJSc7Dldv1Eutc9 TrBFbbapZDN5MA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:55:40 2025 by rpki-client