This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json) Hash identifier: Fjk54lBvHr6NS3JpkXuGfqe9A51t5vaQlChK9ziMsmc= Subject key identifier: 3E:3D:A7:EA:9D:EB:F9:7B:FD:37:9F:73:4D:A1:02:A5:DB:86:F5:5B Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b Certificate serial: 019B30E99EAD8F7B5E07E67F97CEAB977D3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft Manifest number: 0E94 Signing time: Thu 18 Dec 2025 10:02:55 +0000 Manifest this update: Thu 18 Dec 2025 10:02:55 +0000 Manifest next update: Fri 19 Dec 2025 10:02:55 +0000 Files and hashes: 1: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (hash: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=) 2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: myyuG8R0L8Kk0fTfaY4FQQm/avYHhhZkaQfIZYHJUCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:9e:ad:8f:7b:5e:07:e6:7f:97:ce:ab:97:7d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b Validity Not Before: Dec 18 10:02:55 2025 GMT Not After : Dec 19 10:02:55 2025 GMT Subject: CN=3e3da7ea9debf97bfd379f734da102a5db86f55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:dd:c2:16:0c:9a:38:b0:ac:3e:3c:fc:17: a3:32:eb:8a:3e:b4:d1:4e:93:aa:85:73:39:90:55: cd:23:0e:42:3c:ca:23:18:19:1a:5a:b9:4a:1e:92: 90:2f:77:50:56:61:7f:4e:fc:89:c2:02:4d:21:f8: 61:15:01:67:74:ef:ee:8f:0e:05:dc:c2:49:1d:c5: 10:af:5e:0d:9a:5b:8d:4b:01:b2:15:e5:37:bd:d9: 3e:d8:c2:f4:93:a5:46:0d:2c:f9:60:61:f8:ca:f5: e4:eb:64:4f:39:e6:ff:e8:db:5d:e4:77:de:87:35: ea:89:ab:13:26:12:47:02:5d:f9:60:78:bf:1b:d0: 49:bb:5c:cf:7d:77:ef:49:38:fc:25:31:54:0c:13: 4f:02:ea:b7:a5:4c:99:4b:81:01:f5:aa:6f:97:2d: bd:5d:ca:a4:c4:01:38:5c:2d:c7:90:37:37:28:43: c5:45:fe:9b:a2:e3:ca:66:ea:1a:08:dc:ed:10:df: a0:93:55:6e:d0:aa:f1:45:33:9a:42:4e:b6:03:d4: 0a:88:50:97:40:4b:0c:97:11:02:c3:29:03:7a:17: 85:66:cc:7d:aa:e6:09:e3:b8:76:87:94:f2:84:93: 3a:0d:68:b4:61:88:b9:8b:88:3d:a4:e3:8b:2d:36: 09:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3D:A7:EA:9D:EB:F9:7B:FD:37:9F:73:4D:A1:02:A5:DB:86:F5:5B X509v3 Authority Key Identifier: keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:4d:1e:9a:c9:36:f2:fd:28:62:8c:8c:62:3b:4c:76:ab:06: bf:75:cf:cb:b7:db:1d:f5:67:87:12:27:ce:1c:61:03:33:a2: 5f:ea:61:49:92:7d:06:c7:89:be:31:66:98:d6:f7:a4:29:52: 5e:1e:44:4c:3b:bd:c3:ef:28:31:d3:5c:8d:67:6b:8d:71:ec: 23:6f:2e:31:c5:03:a4:ae:c8:c1:68:7c:04:74:87:c6:fe:a9: 9a:ba:cc:34:d1:c4:64:e5:a1:e2:13:b2:d7:c8:1d:27:07:40: 76:85:5c:29:9d:94:72:99:e8:8b:ab:51:e6:41:15:05:52:1d: 5a:99:89:a7:a3:c6:8a:8b:e9:e0:88:24:31:64:fb:31:e9:2b: bf:ac:83:b5:ce:88:1d:95:10:84:c1:30:2c:89:58:6e:dd:c9: 01:48:f1:88:8c:c9:47:99:54:cb:fa:54:bb:82:84:dd:78:e6: 89:cf:c1:71:9c:aa:b0:e6:48:68:ce:57:1b:1b:f7:b2:79:a9: b9:62:33:61:2b:ec:fc:70:b7:ac:94:69:87:47:ad:a5:6d:0e: d0:45:98:80:1c:d1:be:d8:8c:71:e0:53:ba:98:60:24:71:5d: 21:bf:c6:0c:d7:d9:44:c6:43:c9:53:0b:98:8a:ee:23:b4:f5: af:9e:74:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Z6tj3teB+Z/l86rl309MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTZhNDQzNzRmZWE1ZWM5OWYxMGZiOGQ2YzdkOGVmZTJh MzM0OGIwHhcNMjUxMjE4MTAwMjU1WhcNMjUxMjE5MTAwMjU1WjAzMTEwLwYDVQQD EygzZTNkYTdlYTlkZWJmOTdiZmQzNzlmNzM0ZGExMDJhNWRiODZmNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjzdwhYMmjiwrD48/BejMuuKPrTR TpOqhXM5kFXNIw5CPMojGBkaWrlKHpKQL3dQVmF/TvyJwgJNIfhhFQFndO/ujw4F 3MJJHcUQr14NmluNSwGyFeU3vdk+2ML0k6VGDSz5YGH4yvXk62RPOeb/6Ntd5Hfe hzXqiasTJhJHAl35YHi/G9BJu1zPfXfvSTj8JTFUDBNPAuq3pUyZS4EB9apvly29 XcqkxAE4XC3HkDc3KEPFRf6bouPKZuoaCNztEN+gk1Vu0KrxRTOaQk62A9QKiFCX QEsMlxECwykDeheFZsx9quYJ47h2h5TyhJM6DWi0YYi5i4g9pOOLLTYJgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD49p+qd6/l7/Tefc02hAqXbhvVbMB8GA1UdIwQY MBaAFEcWpEN0/qXsmfEPuNbH2O/iozSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQt NWQ0MDEwOTAwZTg2LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQtNWQ0MDEwOTAwZTg2 LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmU0emsk2 8v0oYoyMYjtMdqsGv3XPy7fbHfVnhxInzhxhAzOiX+phSZJ9BseJvjFmmNb3pClS Xh5ETDu9w+8oMdNcjWdrjXHsI28uMcUDpK7IwWh8BHSHxv6pmrrMNNHEZOWh4hOy 18gdJwdAdoVcKZ2Ucpnoi6tR5kEVBVIdWpmJp6PGiovp4IgkMWT7Mekrv6yDtc6I HZUQhMEwLIlYbt3JAUjxiIzJR5lUy/pUu4KE3Xjmic/BcZyqsOZIaM5XGxv3snmp uWIzYSvs/HC3rJRph0etpW0O0EWYgBzRvtiMceBTuphgJHFdIb/GDNfZRMZDyVML mIruI7T1r550VQ== -----END CERTIFICATE-----Generated at Thu Dec 18 18:37:17 2025 by rpki-client