This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json) Hash identifier: xx8qPwDwRH7RMFWOvC4CznYGr43yxXdEGHqk9e14lGo= Subject key identifier: A9:94:2F:E6:B1:61:CE:B3:2C:06:E9:A6:B9:68:76:C7:EB:05:26:F6 Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a Certificate serial: 019B4B4C37D3614B411FAF2929AB83D7BB5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft Manifest number: 09CB Signing time: Tue 23 Dec 2025 13:00:44 +0000 Manifest this update: Tue 23 Dec 2025 13:00:44 +0000 Manifest next update: Wed 24 Dec 2025 13:00:44 +0000 Files and hashes: 1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=) 2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: R0g6WL4iy5ibCrnVF8MYRDMHrE9nNzFbknq5D2RfKtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:37:d3:61:4b:41:1f:af:29:29:ab:83:d7:bb:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a Validity Not Before: Dec 23 13:00:44 2025 GMT Not After : Dec 24 13:00:44 2025 GMT Subject: CN=a9942fe6b161ceb32c06e9a6b96876c7eb0526f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:8f:4c:b5:d4:ce:f0:10:68:ba:0e:cf:95: 0a:26:de:2d:c2:a7:22:2f:06:de:21:ae:db:fe:78: 32:1e:8e:7c:00:7f:15:fb:b3:0a:6c:29:02:d4:5b: 16:d3:ff:c5:e3:5f:62:a5:05:9e:5a:1a:d7:20:6b: 8e:98:c8:ff:8c:a1:41:14:33:a9:90:cb:be:9f:2f: 77:73:fc:57:be:16:09:e3:25:22:ae:24:19:ba:48: df:a4:7c:ff:2e:c8:c9:1a:a8:dd:63:d6:e6:1b:e7: ff:f5:96:62:12:3f:d6:d0:6e:fc:f3:da:b6:0e:2e: fa:74:64:c6:65:d6:77:b0:d4:10:ba:99:9a:f0:fe: 28:c5:c1:61:2b:fe:ec:01:57:a2:0e:5a:a8:f1:cc: 57:90:78:97:bf:08:bf:2e:73:22:f4:6e:e8:d7:42: 1e:80:a8:c0:1f:eb:db:af:95:79:ee:32:23:c5:5e: da:50:3c:5f:9c:88:94:ca:42:d0:b3:d6:a9:d4:76: f1:13:db:49:f6:6f:6a:ff:80:4d:dd:c1:75:c5:87: 89:5b:f0:98:6e:33:77:2a:cb:81:a9:c9:32:25:1b: c7:8e:3a:5a:df:da:4d:6c:2e:ac:a7:b7:f7:08:10: 37:df:19:9a:95:b2:43:50:eb:b9:0c:c5:ed:de:6c: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:2F:E6:B1:61:CE:B3:2C:06:E9:A6:B9:68:76:C7:EB:05:26:F6 X509v3 Authority Key Identifier: keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:59:a7:d8:70:dc:af:55:9e:c6:79:d7:2d:76:be:0f:ad:5f: ab:ad:97:6f:04:e2:67:28:11:d6:60:55:b6:f4:fd:11:ef:15: 76:f0:74:4a:a9:ef:2b:aa:88:a5:e9:e7:65:6c:d8:32:56:3a: d9:48:67:82:71:9f:6c:55:47:43:b2:f6:fe:fe:0a:fa:0e:25: 2c:60:6a:f5:cc:42:96:b4:df:81:b2:bb:c4:de:d6:5c:bc:7a: 10:57:16:a7:b2:25:36:66:27:fe:59:e6:a3:6e:7f:ef:c8:59: 6a:cc:13:08:8e:65:e0:8b:4b:21:d4:37:87:13:ec:82:dd:8d: 9c:6b:74:44:fb:24:38:af:5d:9e:6d:25:08:a3:2d:67:ed:68: 53:d6:51:90:8d:c8:60:02:e0:41:32:1c:11:d5:bf:7a:67:ec: 8d:d8:7a:5e:09:aa:cf:f0:c6:fe:51:6e:23:c3:c8:37:ff:3f: 8d:f0:4a:a5:97:16:77:67:04:3c:82:24:fb:61:78:0a:30:7b: 62:b8:b3:26:cc:51:af:04:e7:cb:20:24:37:15:39:73:7a:f8: e5:cf:05:d1:d6:02:5f:27:a6:0e:3b:e5:63:4b:34:d0:d8:70: 9d:6e:a7:9e:ae:d5:4d:a8:25:61:e2:86:98:ef:9a:17:c3:32: a9:18:30:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTDfTYUtBH68pKauD17teMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDVjOWM4NWZmYjc0NjM5NDVlODEyNjU3MGI3ZTI4NTFi M2ZiN2EwHhcNMjUxMjIzMTMwMDQ0WhcNMjUxMjI0MTMwMDQ0WjAzMTEwLwYDVQQD EyhhOTk0MmZlNmIxNjFjZWIzMmMwNmU5YTZiOTY4NzZjN2ViMDUyNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTqPTLXUzvAQaLoOz5UKJt4twqci LwbeIa7b/ngyHo58AH8V+7MKbCkC1FsW0//F419ipQWeWhrXIGuOmMj/jKFBFDOp kMu+ny93c/xXvhYJ4yUiriQZukjfpHz/LsjJGqjdY9bmG+f/9ZZiEj/W0G7889q2 Di76dGTGZdZ3sNQQupma8P4oxcFhK/7sAVeiDlqo8cxXkHiXvwi/LnMi9G7o10Ie gKjAH+vbr5V57jIjxV7aUDxfnIiUykLQs9ap1HbxE9tJ9m9q/4BN3cF1xYeJW/CY bjN3KsuBqckyJRvHjjpa39pNbC6sp7f3CBA33xmalbJDUOu5DMXt3mxriwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmUL+axYc6zLAbpprlodsfrBSb2MB8GA1UdIwQY MBaAFDLVychf+3RjlF6BJlcLfihRs/t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTkt MTljMDVmNGY0YTdiLzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTktMTljMDVmNGY0YTdi LzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClmn2HDc r1WexnnXLXa+D61fq62XbwTiZygR1mBVtvT9Ee8VdvB0SqnvK6qIpennZWzYMlY6 2UhngnGfbFVHQ7L2/v4K+g4lLGBq9cxClrTfgbK7xN7WXLx6EFcWp7IlNmYn/lnm o25/78hZaswTCI5l4ItLIdQ3hxPsgt2NnGt0RPskOK9dnm0lCKMtZ+1oU9ZRkI3I YALgQTIcEdW/emfsjdh6Xgmqz/DG/lFuI8PIN/8/jfBKpZcWd2cEPIIk+2F4CjB7 YrizJsxRrwTnyyAkNxU5c3r45c8F0dYCXyemDjvlY0s00NhwnW6nnq7VTaglYeKG mO+aF8MyqRgwGg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:31:24 2025 by rpki-client