This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft File: mXyCWBNDX7ARVDjuP2B2N869jo4.mft (raw, json) Hash identifier: 3WxoWRrAz3NIOD+YkzX5NZ/xEQOBNKyofmnEVMeveOg= Subject key identifier: 04:0E:53:D9:24:AF:D1:66:02:94:42:50:68:29:CA:1E:64:54:47:52 Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E Certificate issuer: /CN=997c825813435fb0115438ee3f607637cebd8e8e Certificate serial: 019B3D236ACC62A6569B833EFF7BCF90D825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft Manifest number: 68 Signing time: Sat 20 Dec 2025 19:01:29 +0000 Manifest this update: Sat 20 Dec 2025 19:01:29 +0000 Manifest next update: Sun 21 Dec 2025 19:01:29 +0000 Files and hashes: 1: PqvM7y_EnO197blIAFWJlGm7zPg.roa (hash: j3Px2lMJPmqVRk9ekcnvnW8pxUt/aHjy6HcH1LT7SIs=) 2: mXyCWBNDX7ARVDjuP2B2N869jo4.crl (hash: /eu1OpZnjGJG4eYxyvW7x0fqdoLBK7rWjYdY8jG7lvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:6a:cc:62:a6:56:9b:83:3e:ff:7b:cf:90:d8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e Validity Not Before: Dec 20 19:01:29 2025 GMT Not After : Dec 21 19:01:29 2025 GMT Subject: CN=040e53d924afd166029442506829ca1e64544752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:1e:82:c9:bb:36:25:4c:73:f8:bc:96:8e: e0:24:af:6e:88:77:e0:89:2e:81:7f:d9:10:cd:70: a7:ad:63:f5:4d:a1:c5:36:36:7c:65:94:20:34:53: 41:a3:79:10:44:37:f0:ac:be:6f:eb:9c:52:5c:d6: 24:6f:ed:66:cb:aa:83:0d:26:c0:f8:4a:69:ff:40: d5:a5:0a:06:f4:f4:44:93:7b:9a:e0:ac:19:88:b0: 1f:06:06:8a:c2:cb:8a:7a:7a:6e:c9:da:14:78:9e: 79:1a:5a:f0:37:a2:4f:f8:95:82:2c:2d:86:5c:c9: 94:ca:8a:9b:63:57:0f:59:7a:cb:4d:ec:e6:35:4d: 65:20:ed:27:0e:64:ff:5a:dd:e0:bd:cd:82:e0:32: 68:9b:07:29:07:52:4c:db:90:51:41:d7:d9:66:fb: 56:3d:3e:b6:4e:c2:30:46:61:3b:f0:cb:f4:df:41: 9e:6c:b4:11:77:5f:8c:74:f7:27:0c:98:0e:b9:39: d9:32:bf:9d:48:29:7d:6f:c3:44:49:31:73:83:60: 92:95:54:1b:e6:b4:39:95:58:a6:dc:c8:2f:23:68: e0:37:47:d7:99:f6:60:4a:8b:48:d1:f6:6b:f6:d2: 3d:04:29:b4:8e:2b:a4:88:c6:5a:ff:09:26:be:1f: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0E:53:D9:24:AF:D1:66:02:94:42:50:68:29:CA:1E:64:54:47:52 X509v3 Authority Key Identifier: keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b7:27:05:08:f5:bd:f5:8e:c5:df:b9:41:81:c5:66:71:04: 59:72:fd:eb:08:d8:d0:06:87:08:68:d9:14:f3:4e:51:7e:1d: 5d:b2:b5:f5:87:a5:64:36:a4:04:06:02:58:7e:c1:8c:3b:c8: bf:1c:8c:fe:9c:ef:1a:14:5f:fb:53:11:8a:04:27:22:11:cd: e4:b7:58:df:89:d1:c9:5a:6c:c5:af:7a:fc:30:28:f9:ee:c4: ac:39:c6:32:89:ae:04:ff:9a:51:ba:ae:47:ea:fe:74:ad:18: 61:a4:d6:c3:4c:20:af:26:30:8f:38:b3:5c:34:ca:9b:26:65: 3e:60:e7:db:1e:7b:5e:a6:40:66:f0:d0:5b:e6:c4:2e:06:9b: 26:4a:1a:8b:b1:cd:ef:63:13:75:ca:d3:7e:26:a4:5a:7b:1b: 3a:e3:db:47:90:2c:dc:74:16:92:65:b0:5d:a4:aa:bc:7a:60: 13:f0:87:e4:42:63:8c:b4:76:ef:3f:35:1b:ec:87:62:82:d7: ad:81:cb:e0:05:e3:bc:f4:39:f1:d9:de:15:f6:0c:20:4e:cd: 58:25:51:24:3e:d7:64:16:a3:49:82:60:77:aa:6e:57:7a:bd: f6:78:4f:d9:74:08:dc:e9:ae:67:e7:29:8b:1a:09:fd:ff:fb: 13:06:8c:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2rMYqZWm4M+/3vPkNglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5N2M4MjU4MTM0MzVmYjAxMTU0MzhlZTNmNjA3NjM3Y2Vi ZDhlOGUwHhcNMjUxMjIwMTkwMTI5WhcNMjUxMjIxMTkwMTI5WjAzMTEwLwYDVQQD EygwNDBlNTNkOTI0YWZkMTY2MDI5NDQyNTA2ODI5Y2ExZTY0NTQ0NzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42Eegsm7NiVMc/i8lo7gJK9uiHfg iS6Bf9kQzXCnrWP1TaHFNjZ8ZZQgNFNBo3kQRDfwrL5v65xSXNYkb+1my6qDDSbA +Epp/0DVpQoG9PREk3ua4KwZiLAfBgaKwsuKenpuydoUeJ55GlrwN6JP+JWCLC2G XMmUyoqbY1cPWXrLTezmNU1lIO0nDmT/Wt3gvc2C4DJomwcpB1JM25BRQdfZZvtW PT62TsIwRmE78Mv030GebLQRd1+MdPcnDJgOuTnZMr+dSCl9b8NESTFzg2CSlVQb 5rQ5lVim3MgvI2jgN0fXmfZgSotI0fZr9tI9BCm0jiukiMZa/wkmvh88HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQOU9kkr9FmApRCUGgpyh5kVEdSMB8GA1UdIwQY MBaAFJl8glgTQ1+wEVQ47j9gdjfOvY6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzIt MjhmNzFhYmJhMDNhLzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzItMjhmNzFhYmJhMDNh LzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrcnBQj1 vfWOxd+5QYHFZnEEWXL96wjY0AaHCGjZFPNOUX4dXbK19YelZDakBAYCWH7BjDvI vxyM/pzvGhRf+1MRigQnIhHN5LdY34nRyVpsxa96/DAo+e7ErDnGMomuBP+aUbqu R+r+dK0YYaTWw0wgryYwjzizXDTKmyZlPmDn2x57XqZAZvDQW+bELgabJkoai7HN 72MTdcrTfiakWnsbOuPbR5As3HQWkmWwXaSqvHpgE/CH5EJjjLR27z81G+yHYoLX rYHL4AXjvPQ58dneFfYMIE7NWCVRJD7XZBajSYJgd6puV3q99nhP2XQI3OmuZ+cp ixoJ/f/7EwaMCA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:33:01 2025 by rpki-client