This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json) Hash identifier: mh3g2YeIXvC5nq2IwfpBf3IKF0MVIEYGCuXYMDo+j8I= Subject key identifier: 5F:3C:FB:F5:3D:35:E5:AA:C1:5D:6C:1F:D8:B5:B0:00:E8:1A:5D:B9 Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62 Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62 Certificate serial: 019B42B749BB8BD8546357A8BAB992CE9587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft Manifest number: 1799 Signing time: Sun 21 Dec 2025 21:01:06 +0000 Manifest this update: Sun 21 Dec 2025 21:01:06 +0000 Manifest next update: Mon 22 Dec 2025 21:01:06 +0000 Files and hashes: 1: Clf1O67BMO2Rhs6Zi3d5eqYtS78.roa (hash: gEsGT+BkcxrPL5LEXQ9nd6Eso8OhYDY6ncvwiqyMT9o=) 2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: 0MUkGSJUIikqNl2NUSHVnJK9Kwr5SQFPP0dwDiIsYc4=) 3: yedVX2Bb1fw9QHeEL7aMz-eiDBc.roa (hash: nTi5nmxACtrhi4lwIaboxq43TOZLUrk6W1f8QXWcQkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:49:bb:8b:d8:54:63:57:a8:ba:b9:92:ce:95:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62 Validity Not Before: Dec 21 21:01:06 2025 GMT Not After : Dec 22 21:01:06 2025 GMT Subject: CN=5f3cfbf53d35e5aac15d6c1fd8b5b000e81a5db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:fc:38:1e:16:fd:fc:ab:b1:0b:a0:ca:68: a4:3b:07:15:f8:57:57:b2:ee:22:18:fa:e9:73:19: 42:61:1a:34:f1:88:58:65:bf:31:23:2f:09:f5:8d: 7f:ca:b1:25:a9:37:78:66:1b:7b:89:28:37:75:d2: 80:2d:40:a4:85:5f:7e:8f:1e:c1:21:0d:f3:bd:de: 64:4a:60:aa:61:f9:54:23:41:da:66:d8:8c:17:fc: 25:dd:ea:1d:58:b7:0b:98:eb:1f:8a:42:ab:65:89: bd:6e:45:74:ee:5f:dc:b1:81:41:15:8e:e3:bb:3b: a1:48:bd:ac:ed:77:22:26:f5:5d:d4:73:22:58:bc: 8a:ee:0e:a8:e4:94:e2:18:de:8f:c9:7e:63:66:57: de:4d:22:64:08:21:d4:6c:2e:21:b1:98:fd:b6:3b: d2:72:fa:81:92:89:e6:13:00:9e:40:f7:2c:15:1e: ff:2f:3a:d9:00:b9:61:3b:8c:c4:17:77:b6:75:e0: 11:54:ce:b6:73:42:d7:f7:0c:1a:58:44:46:33:52: c0:a8:84:76:0e:f3:05:fb:92:91:b1:cf:55:0a:3d: 9c:f4:fd:b3:9f:4a:f9:4d:04:26:37:96:48:ec:e0: 0c:cb:66:ed:ea:bb:1b:d0:6e:d1:87:9e:6d:3d:24: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3C:FB:F5:3D:35:E5:AA:C1:5D:6C:1F:D8:B5:B0:00:E8:1A:5D:B9 X509v3 Authority Key Identifier: keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e5:e8:09:98:c2:d4:22:39:3f:83:03:c2:e1:87:5d:b0:7b: 49:09:70:c2:82:c2:3f:24:ba:a4:dc:fc:68:ef:74:8a:74:6a: 66:31:47:66:ca:01:a6:22:a8:93:31:d4:a6:84:d6:ea:43:e6: e5:96:c3:a8:e2:be:cd:06:cf:1d:a7:82:f7:0e:8e:85:38:fa: d8:d3:fa:5a:3b:85:40:35:cc:64:76:c0:80:9d:2e:e8:42:a9: 3a:af:b0:7f:1a:c0:47:84:fd:2d:2f:cd:57:da:4a:e2:89:3c: 6c:89:4b:c3:00:5a:ba:1a:4f:61:37:18:4c:90:72:3b:92:22: 8f:ae:03:86:08:23:14:fa:13:1e:ba:81:ad:f3:b6:c2:85:e2: 48:d5:01:9a:82:9e:fe:8d:9e:a5:b6:ca:1d:96:01:8d:fa:e9: 01:00:41:27:84:02:c0:8d:42:45:3d:1a:b8:87:9b:bb:5a:75: 86:5c:e4:1e:cc:25:cc:f4:23:a2:c1:11:e3:0b:3c:b3:03:12: ed:76:80:2a:d8:12:31:f1:06:66:00:fc:4d:f0:7c:06:8c:bc: 5d:b8:e5:78:59:88:7e:d0:53:32:d3:aa:7b:60:ca:ff:49:ef: 7a:ba:4a:95:b1:3b:7e:c1:45:ab:de:51:f0:21:b0:b3:b4:cb: 45:f8:6e:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0m7i9hUY1eourmSzpWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2 NjNjNjIwHhcNMjUxMjIxMjEwMTA2WhcNMjUxMjIyMjEwMTA2WjAzMTEwLwYDVQQD Eyg1ZjNjZmJmNTNkMzVlNWFhYzE1ZDZjMWZkOGI1YjAwMGU4MWE1ZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6j8OB4W/fyrsQugymikOwcV+FdX su4iGPrpcxlCYRo08YhYZb8xIy8J9Y1/yrElqTd4Zht7iSg3ddKALUCkhV9+jx7B IQ3zvd5kSmCqYflUI0HaZtiMF/wl3eodWLcLmOsfikKrZYm9bkV07l/csYFBFY7j uzuhSL2s7XciJvVd1HMiWLyK7g6o5JTiGN6PyX5jZlfeTSJkCCHUbC4hsZj9tjvS cvqBkonmEwCeQPcsFR7/LzrZALlhO4zEF3e2deARVM62c0LX9wwaWERGM1LAqIR2 DvMF+5KRsc9VCj2c9P2zn0r5TQQmN5ZI7OAMy2bt6rsb0G7Rh55tPSTJMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF88+/U9NeWqwV1sH9i1sADoGl25MB8GA1UdIwQY MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut ZjFmMGI5NTk4ZjMyLzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+XoCZjC 1CI5P4MDwuGHXbB7SQlwwoLCPyS6pNz8aO90inRqZjFHZsoBpiKokzHUpoTW6kPm 5ZbDqOK+zQbPHaeC9w6OhTj62NP6WjuFQDXMZHbAgJ0u6EKpOq+wfxrAR4T9LS/N V9pK4ok8bIlLwwBauhpPYTcYTJByO5Iij64DhggjFPoTHrqBrfO2woXiSNUBmoKe /o2epbbKHZYBjfrpAQBBJ4QCwI1CRT0auIebu1p1hlzkHswlzPQjosER4ws8swMS 7XaAKtgSMfEGZgD8TfB8Boy8XbjleFmIftBTMtOqe2DK/0nverpKlbE7fsFFq95R 8CGws7TLRfhunA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:06:30 2025 by rpki-client