This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json) Hash identifier: LfHO+8+HM3gQbOV2iiLykvQ+uQIqsp9TQBg5UYgsL6I= Subject key identifier: 2F:C5:7A:C7:82:32:77:98:AB:6C:AD:66:52:57:AD:F7:8B:1D:B9:DF Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9 Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9 Certificate serial: 019B5C092434810E1E319245C9E5F16F19ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft Manifest number: 0A67 Signing time: Fri 26 Dec 2025 19:01:01 +0000 Manifest this update: Fri 26 Dec 2025 19:01:01 +0000 Manifest next update: Sat 27 Dec 2025 19:01:01 +0000 Files and hashes: 1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=) 2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: gCb3qvfoJwg8ywQFn5HRjLly6WxaGNZ80GHlA300LZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:24:34:81:0e:1e:31:92:45:c9:e5:f1:6f:19:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9 Validity Not Before: Dec 26 19:01:01 2025 GMT Not After : Dec 27 19:01:01 2025 GMT Subject: CN=2fc57ac782327798ab6cad665257adf78b1db9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:46:72:64:06:cc:44:02:42:5a:e8:27:56: 98:71:85:7b:5d:5a:45:78:cb:ad:49:16:78:80:b1: 0f:58:b3:7a:40:57:8f:01:20:80:10:6e:30:c5:2b: 30:6b:53:8e:3a:f7:7f:da:f0:2a:e2:90:7e:11:4c: df:fb:66:3d:df:3e:4e:89:93:b9:07:7b:0d:78:24: be:32:3a:84:fb:84:7c:20:d6:8c:36:a5:6b:84:f3: ba:7c:29:12:da:26:29:46:d6:96:c2:2a:07:ff:85: 47:c9:69:6a:89:fe:8d:62:b0:78:37:3e:97:15:5c: 24:06:a6:c6:09:a1:48:b5:75:5a:39:49:cb:dd:b2: 0d:be:3b:6b:71:70:0e:15:96:e1:9e:cd:0b:71:48: e1:5a:6d:4d:68:19:b2:15:61:15:f9:1b:e3:0b:2d: a2:84:ea:04:91:13:28:41:13:58:93:ed:2f:b5:79: c9:85:c4:32:da:bd:46:cc:fc:cf:e1:70:48:82:9a: 97:a1:2c:e4:df:27:8c:3c:d2:f4:d3:e3:eb:37:2b: a4:dd:f5:41:78:8b:d6:7e:36:6c:6c:a9:48:58:67: a9:f0:4f:66:39:22:80:f1:9b:ac:44:51:d6:24:9e: 5d:87:88:76:89:c2:dc:1a:88:14:f6:6d:0d:b2:66: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C5:7A:C7:82:32:77:98:AB:6C:AD:66:52:57:AD:F7:8B:1D:B9:DF X509v3 Authority Key Identifier: keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:53:44:00:0a:b2:04:53:f5:9e:95:f1:60:15:b6:a9:4a:26: c9:cb:f0:15:a9:18:f8:95:df:59:77:c8:6b:bc:1e:60:6b:78: e8:1f:9b:f3:8a:69:33:8f:04:33:d8:21:dc:29:e5:1d:c0:51: 1a:b4:91:7f:ab:9b:7c:ec:0f:88:8f:2d:33:46:08:28:6b:0b: 0b:03:70:4d:af:db:35:e8:26:3e:20:bf:51:74:cc:6c:59:05: 93:71:65:fd:b3:d7:cc:0d:c9:66:31:30:99:08:cb:d7:bb:d4: ec:26:21:a0:f1:36:5a:32:e7:2a:c0:e6:76:62:9e:dd:10:ca: d4:3d:56:5a:4d:be:7a:06:aa:e1:5d:dd:ff:53:fe:b6:14:5f: 0b:07:af:bd:e2:1b:23:d4:37:53:e5:7d:70:7a:9c:45:69:21: 23:ae:95:8a:9b:2f:51:c4:35:31:1f:80:90:12:5c:3e:6e:5b: 34:7e:b1:32:a1:b4:e6:c1:8f:6e:25:f5:b8:12:8f:04:e3:3d: 6a:9b:ad:49:7d:59:8c:0d:d5:2e:61:b2:ce:b7:92:51:a2:1d: dd:17:e6:22:4b:08:f7:31:0d:88:70:a8:da:a5:4c:3c:2e:65: a2:f6:b5:5a:4b:25:68:e1:9a:46:50:6d:46:51:ec:46:c3:4b: 1f:be:89:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCSQ0gQ4eMZJFyeXxbxntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1N2FhMWM3OGY2Y2NhYmM0N2I1NTEyMWEzNWZmMzBkOTk4 MjdlZTkwHhcNMjUxMjI2MTkwMTAxWhcNMjUxMjI3MTkwMTAxWjAzMTEwLwYDVQQD EygyZmM1N2FjNzgyMzI3Nzk4YWI2Y2FkNjY1MjU3YWRmNzhiMWRiOWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkttGcmQGzEQCQlroJ1aYcYV7XVpF eMutSRZ4gLEPWLN6QFePASCAEG4wxSswa1OOOvd/2vAq4pB+EUzf+2Y93z5OiZO5 B3sNeCS+MjqE+4R8INaMNqVrhPO6fCkS2iYpRtaWwioH/4VHyWlqif6NYrB4Nz6X FVwkBqbGCaFItXVaOUnL3bINvjtrcXAOFZbhns0LcUjhWm1NaBmyFWEV+RvjCy2i hOoEkRMoQRNYk+0vtXnJhcQy2r1GzPzP4XBIgpqXoSzk3yeMPNL00+PrNyuk3fVB eIvWfjZsbKlIWGep8E9mOSKA8ZusRFHWJJ5dh4h2icLcGogU9m0NsmbUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/FeseCMneYq2ytZlJXrfeLHbnfMB8GA1UdIwQY MBaAFEV6ocePbMq8R7VRIaNf8w2Zgn7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQt Yzc0MGUyZmUzMGQzLzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQtYzc0MGUyZmUzMGQz LzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1NEAAqy BFP1npXxYBW2qUomycvwFakY+JXfWXfIa7weYGt46B+b84ppM48EM9gh3CnlHcBR GrSRf6ubfOwPiI8tM0YIKGsLCwNwTa/bNegmPiC/UXTMbFkFk3Fl/bPXzA3JZjEw mQjL17vU7CYhoPE2WjLnKsDmdmKe3RDK1D1WWk2+egaq4V3d/1P+thRfCwevveIb I9Q3U+V9cHqcRWkhI66VipsvUcQ1MR+AkBJcPm5bNH6xMqG05sGPbiX1uBKPBOM9 aputSX1ZjA3VLmGyzreSUaId3RfmIksI9zENiHCo2qVMPC5lova1WkslaOGaRlBt RlHsRsNLH76JVg== -----END CERTIFICATE-----Generated at Sat Dec 27 04:03:02 2025 by rpki-client