This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json) Hash identifier: AUBlAk6CkCZ5f+kKlFIAJDa9uitmpt2r7R4qqKvgljA= Subject key identifier: 81:AF:27:CF:37:19:68:AB:DA:7D:74:4F:12:EC:EE:B7:37:0D:2C:B7 Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3 Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3 Certificate serial: 019B2A40BDDD62A21B5DA91F96A56D6FF0EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft Manifest number: 1375 Signing time: Wed 17 Dec 2025 03:00:44 +0000 Manifest this update: Wed 17 Dec 2025 03:00:44 +0000 Manifest next update: Thu 18 Dec 2025 03:00:44 +0000 Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=) 2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: rCcZwTXduN9dvCjVXYwtsnaG6WqCdEyPjaK+RImeA+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:40:bd:dd:62:a2:1b:5d:a9:1f:96:a5:6d:6f:f0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3 Validity Not Before: Dec 17 03:00:44 2025 GMT Not After : Dec 18 03:00:44 2025 GMT Subject: CN=81af27cf371968abda7d744f12eceeb7370d2cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:4d:04:65:0d:02:b5:54:52:b6:fe:bf:4a: a4:33:57:db:e5:03:c5:1d:9f:e7:2a:bf:33:a0:ed: 39:a9:1a:d6:8e:0a:a4:eb:d8:de:34:d6:50:05:3f: 92:6a:5d:12:97:a8:ce:7e:54:a2:ef:52:b0:d9:bf: 9c:c3:e0:d5:a3:51:9e:57:0d:40:4c:60:b6:47:04: 93:39:dd:87:c0:34:78:e0:54:6f:cc:a7:e7:77:6a: 5e:2e:ac:8f:38:fc:fa:83:05:ba:19:a8:41:17:95: 2b:ea:6c:c4:0a:dd:62:6c:c0:60:40:0e:29:01:dc: 86:73:e5:90:6b:fa:00:dd:95:cc:b1:0e:81:37:7c: 78:f5:32:12:3a:d0:53:13:76:e6:99:5e:c7:dc:be: 71:a7:1a:48:15:27:98:31:15:ec:af:6d:dc:d3:96: 27:79:4b:a2:99:cb:48:60:a9:38:6c:9c:91:21:f9: 1c:f4:2f:02:35:7a:e8:9a:22:c9:1a:a4:96:a9:54: a8:1f:40:ab:b4:8e:b0:06:4f:2d:c0:0b:0d:99:3d: 2b:26:a2:30:93:30:d1:6b:09:70:0f:77:89:9b:ea: 18:1c:7b:8e:b6:82:f2:2e:4b:e1:95:37:64:80:2d: d1:ee:5b:e1:ca:a9:28:f1:31:33:87:42:6a:b7:7e: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AF:27:CF:37:19:68:AB:DA:7D:74:4F:12:EC:EE:B7:37:0D:2C:B7 X509v3 Authority Key Identifier: keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:44:60:ae:c1:42:fc:7b:17:9a:1e:52:77:fe:19:1f:0a:71: a4:f1:49:c4:d7:ca:29:87:c0:32:f7:0c:35:08:e7:be:ff:00: eb:55:a1:ee:89:be:7c:ff:e9:16:45:b4:63:e3:dc:84:0d:d6: 77:a0:a5:df:ad:c8:82:95:26:cc:1e:68:f8:ae:7a:78:06:f0: 1c:b2:cb:a5:37:df:76:db:38:e0:71:4a:0b:bf:ee:d4:b2:5f: 8a:74:16:c2:e0:02:7c:a1:95:3b:9f:35:3d:3a:a1:82:a5:17: ff:ba:67:5e:2b:6a:6b:70:89:fe:f3:ca:cd:8d:ce:3f:b9:d8: e0:e0:72:59:5d:90:6f:c1:93:3f:ec:d1:f3:0d:99:a4:1c:d5: ae:2d:0a:93:1d:3a:90:1d:ae:f4:9d:98:34:8b:47:e5:ea:90: 39:05:a2:21:ec:62:2d:5c:02:3c:67:35:c5:68:14:1d:5f:60: 91:90:14:eb:4e:67:3c:a2:f3:95:9f:39:39:b9:2d:17:58:f9: 19:4c:ce:99:31:5c:b9:78:c2:14:32:ff:f5:29:60:e3:34:5d: 82:72:c2:62:ee:fe:86:49:5d:10:1a:e0:dd:d1:90:e5:b9:82: b8:5d:ce:a8:a5:24:36:ca:39:33:cf:fa:1d:4a:2b:ec:18:52: fc:46:60:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqQL3dYqIbXakflqVtb/DqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkN2Q4ZGU4Y2EwNjFlYTE2NGU2NzFjMzRlYjMzNzdmNTcz NmJiYzMwHhcNMjUxMjE3MDMwMDQ0WhcNMjUxMjE4MDMwMDQ0WjAzMTEwLwYDVQQD Eyg4MWFmMjdjZjM3MTk2OGFiZGE3ZDc0NGYxMmVjZWViNzM3MGQyY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0FNBGUNArVUUrb+v0qkM1fb5QPF HZ/nKr8zoO05qRrWjgqk69jeNNZQBT+Sal0Sl6jOflSi71Kw2b+cw+DVo1GeVw1A TGC2RwSTOd2HwDR44FRvzKfnd2peLqyPOPz6gwW6GahBF5Ur6mzECt1ibMBgQA4p AdyGc+WQa/oA3ZXMsQ6BN3x49TISOtBTE3bmmV7H3L5xpxpIFSeYMRXsr23c05Yn eUuimctIYKk4bJyRIfkc9C8CNXromiLJGqSWqVSoH0CrtI6wBk8twAsNmT0rJqIw kzDRawlwD3eJm+oYHHuOtoLyLkvhlTdkgC3R7lvhyqko8TEzh0Jqt344cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGvJ883GWir2n10TxLs7rc3DSy3MB8GA1UdIwQY MBaAFK19jejKBh6hZOZxw06zN39XNrvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAt NDk3ODVmY2RkOWM0LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAtNDk3ODVmY2RkOWM0 LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMURgrsFC /HsXmh5Sd/4ZHwpxpPFJxNfKKYfAMvcMNQjnvv8A61Wh7om+fP/pFkW0Y+PchA3W d6Cl363IgpUmzB5o+K56eAbwHLLLpTffdts44HFKC7/u1LJfinQWwuACfKGVO581 PTqhgqUX/7pnXitqa3CJ/vPKzY3OP7nY4OByWV2Qb8GTP+zR8w2ZpBzVri0Kkx06 kB2u9J2YNItH5eqQOQWiIexiLVwCPGc1xWgUHV9gkZAU605nPKLzlZ85ObktF1j5 GUzOmTFcuXjCFDL/9Slg4zRdgnLCYu7+hkldEBrg3dGQ5bmCuF3OqKUkNso5M8/6 HUor7BhS/EZgHw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:43:58 2025 by rpki-client