This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json) Hash identifier: i22In2SLSiszRfse5+o903mH9CSXRmVQsQ96qB68jhQ= Subject key identifier: 4D:BD:F7:A3:A0:B7:71:33:7F:A0:97:0C:54:55:F4:BF:61:FA:EA:A9 Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb Certificate serial: 019B5486583639105EBD69752558C6AA99BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft Manifest number: 02C7 Signing time: Thu 25 Dec 2025 08:00:49 +0000 Manifest this update: Thu 25 Dec 2025 08:00:49 +0000 Manifest next update: Fri 26 Dec 2025 08:00:49 +0000 Files and hashes: 1: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (hash: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=) 2: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: AfQgIuMUKWaUOlcpnVQpuKw1tENMZiKn0HphlY4tm5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:58:36:39:10:5e:bd:69:75:25:58:c6:aa:99:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb Validity Not Before: Dec 25 08:00:49 2025 GMT Not After : Dec 26 08:00:49 2025 GMT Subject: CN=4dbdf7a3a0b771337fa0970c5455f4bf61faeaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:62:f3:80:7f:16:d9:03:21:9c:01:f0:f5: cd:40:91:b4:8d:fa:70:d7:a6:49:6c:4f:b0:54:c7: 77:00:84:d1:14:f4:90:bf:55:ab:0a:c1:69:39:95: 90:f9:b0:3e:6e:2b:e1:cc:e1:34:0c:bf:d3:79:49: 27:5a:7d:49:36:77:e9:ef:8b:2b:a2:85:aa:8d:65: ce:93:7f:e6:cc:d6:97:e9:5e:7c:f1:2a:0e:e3:cb: 0c:fe:85:b6:59:a7:2b:fb:4c:e8:6c:0f:f4:28:f3: 20:8f:02:cc:e9:d1:8f:2d:4d:0f:9d:df:b7:7f:56: 4c:3f:4e:f1:a3:7e:08:0f:9b:41:08:4c:be:73:e4: 9d:40:e9:b2:5b:04:bb:cd:48:c2:e2:a7:a5:a0:f5: bd:35:88:b9:25:c8:61:6c:bb:88:46:a5:e9:36:24: ab:91:f8:dd:57:70:7f:66:29:bd:b4:b0:30:8b:6b: 1d:e0:84:6d:76:d7:f4:16:b6:2a:92:4f:14:37:ea: f6:a7:88:c8:b2:5e:a6:d5:0d:52:62:8e:f2:63:31: 81:68:14:28:11:41:42:53:f7:ce:5b:29:d9:e8:b4: ce:37:05:bf:41:f2:67:67:ed:a8:e0:12:34:e9:0d: f6:19:8e:62:82:80:ec:9e:6d:97:72:02:88:74:44: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BD:F7:A3:A0:B7:71:33:7F:A0:97:0C:54:55:F4:BF:61:FA:EA:A9 X509v3 Authority Key Identifier: keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:88:fe:83:67:c2:ff:32:3f:db:65:03:4c:ea:5d:98:b7:3e: 17:6f:5d:1b:9e:ed:30:91:d2:cc:72:3c:2a:29:10:f4:9c:1a: 74:27:04:2f:b8:1b:98:96:18:b8:bf:56:dd:4a:5b:14:fe:f2: 25:10:26:cf:68:f5:f2:8a:c9:f6:e3:4f:df:e9:d3:f3:cd:85: 57:3f:83:a2:72:ef:8a:78:2b:b6:a0:27:7f:2a:88:49:5b:ca: e2:a2:74:ed:56:51:58:82:72:45:50:7b:57:88:ec:58:f7:7a: 78:7d:7f:96:35:1e:75:7e:7e:ea:09:54:0b:16:99:d9:ce:9e: a7:8a:9a:23:fc:6d:08:62:5d:c5:54:73:6d:31:80:5f:54:87: c2:4f:25:90:27:3a:86:45:0d:03:e3:47:61:ac:24:50:0b:a3: 63:b6:ab:eb:9e:eb:dd:1a:0b:c9:64:73:59:f3:6a:04:7a:2a: b5:46:19:e6:27:ad:de:e1:3b:e9:f8:b0:12:53:9d:6b:b5:05: f1:cf:51:45:22:67:5e:ff:41:53:df:ba:ed:86:4c:c0:16:40: bd:d4:6a:2a:32:3e:66:af:40:b7:3c:be:1b:e6:b1:14:93:b9: 1c:52:7b:39:9b:fa:e9:f7:d5:28:36:fc:37:b8:4d:68:a4:06: 83:39:9d:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhlg2ORBevWl1JVjGqpm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTQzZGQ2Njc2OWRiMTgzYjhiZDc5YjkwZmM4M2Q5NWQ2 ZTQ4ZmIwHhcNMjUxMjI1MDgwMDQ5WhcNMjUxMjI2MDgwMDQ5WjAzMTEwLwYDVQQD Eyg0ZGJkZjdhM2EwYjc3MTMzN2ZhMDk3MGM1NDU1ZjRiZjYxZmFlYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpdi84B/FtkDIZwB8PXNQJG0jfpw 16ZJbE+wVMd3AITRFPSQv1WrCsFpOZWQ+bA+bivhzOE0DL/TeUknWn1JNnfp74sr ooWqjWXOk3/mzNaX6V588SoO48sM/oW2Wacr+0zobA/0KPMgjwLM6dGPLU0Pnd+3 f1ZMP07xo34ID5tBCEy+c+SdQOmyWwS7zUjC4qeloPW9NYi5JchhbLuIRqXpNiSr kfjdV3B/Zim9tLAwi2sd4IRtdtf0FrYqkk8UN+r2p4jIsl6m1Q1SYo7yYzGBaBQo EUFCU/fOWynZ6LTONwW/QfJnZ+2o4BI06Q32GY5igoDsnm2XcgKIdESIVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2996Ogt3Ezf6CXDFRV9L9h+uqpMB8GA1UdIwQY MBaAFEcUPdZnadsYO4vXm5D8g9ldbkj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2It MzQ2MDI2MjQ1NWIyLzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2ItMzQ2MDI2MjQ1NWIy LzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYj+g2fC /zI/22UDTOpdmLc+F29dG57tMJHSzHI8KikQ9JwadCcEL7gbmJYYuL9W3UpbFP7y JRAmz2j18orJ9uNP3+nT882FVz+DonLvingrtqAnfyqISVvK4qJ07VZRWIJyRVB7 V4jsWPd6eH1/ljUedX5+6glUCxaZ2c6ep4qaI/xtCGJdxVRzbTGAX1SHwk8lkCc6 hkUNA+NHYawkUAujY7ar657r3RoLyWRzWfNqBHoqtUYZ5iet3uE76fiwElOda7UF 8c9RRSJnXv9BU9+67YZMwBZAvdRqKjI+Zq9Atzy+G+axFJO5HFJ7OZv66ffVKDb8 N7hNaKQGgzmdng== -----END CERTIFICATE-----Generated at Thu Dec 25 13:04:01 2025 by rpki-client