This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json) Hash identifier: Zz6xzkhRiKm7mnD4kBRA5cvbGYvH9GKIimZwbLk6+HM= Subject key identifier: 88:86:FD:CC:45:F9:04:95:76:E5:B2:57:40:48:F8:61:0D:FA:1E:A1 Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e Certificate serial: 019B3B34C81C14575C5BEFD9D3B21B034157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft Manifest number: 1183 Signing time: Sat 20 Dec 2025 10:01:13 +0000 Manifest this update: Sat 20 Dec 2025 10:01:13 +0000 Manifest next update: Sun 21 Dec 2025 10:01:13 +0000 Files and hashes: 1: 2aM17soBmqh_GBtRMWQDctgH7fc.roa (hash: 6/ySI4kErv/JIgLnQhnbSKqi6Bg38OiTTBN0AB/24r8=) 2: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=) 3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=) 4: TjpJjcuyANtrBUwpt-ltVjypyq0.roa (hash: 6I0zwsgf60E7cL93x6R+EuPe6JdbwhpcovM4vLNnw1A=) 5: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=) 6: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=) 7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=) 8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: lurEMfqSQNN0Oq8X0U7AW/Oz5iqFWQ1NyaUP28UcdAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:c8:1c:14:57:5c:5b:ef:d9:d3:b2:1b:03:41:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e Validity Not Before: Dec 20 10:01:13 2025 GMT Not After : Dec 21 10:01:13 2025 GMT Subject: CN=8886fdcc45f9049576e5b2574048f8610dfa1ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f3:b0:c7:46:11:98:66:37:e2:27:76:74:cb: 15:05:a9:51:d4:e1:c7:20:05:e7:83:0d:3f:62:04: 33:85:2d:32:65:65:d4:bb:1d:e7:ab:3e:39:9d:bf: 2a:b4:8e:10:ee:0d:b2:28:30:74:ab:ac:e0:9b:1c: 61:9c:6e:f5:18:b9:64:5e:9d:c1:25:80:3e:5d:5c: c7:71:3d:40:71:08:b9:f0:c1:3a:f4:28:73:49:88: 0a:8e:84:06:0c:d6:40:86:98:01:65:36:ca:14:21: 24:67:8e:1b:55:41:8a:1d:70:c4:86:03:fe:90:0c: b9:d4:24:d4:86:4c:c0:1b:2b:90:3f:f5:db:15:dc: 26:80:8b:1b:4d:5e:cd:45:83:9f:aa:ec:8d:b2:b7: e7:89:83:27:d6:0a:f7:99:9a:46:d3:8f:e9:b5:81: d4:e6:46:4f:d3:37:aa:13:00:25:ed:d7:b9:40:96: b8:4c:34:30:89:9c:61:1c:87:91:91:f4:08:ff:47: ea:72:d5:95:f5:60:80:f7:c9:be:96:4a:dd:69:21: 66:ac:09:a8:98:56:5e:4f:16:8d:4c:f0:da:7a:36: 98:10:13:37:f5:7e:65:52:46:e8:6d:b5:6f:95:8a: 2a:1a:36:b5:82:d6:3c:cb:3b:43:69:ef:65:fb:ee: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:86:FD:CC:45:F9:04:95:76:E5:B2:57:40:48:F8:61:0D:FA:1E:A1 X509v3 Authority Key Identifier: keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:8a:73:a8:8a:ce:b1:0a:46:98:51:2e:5f:57:e9:a8:13:02: f6:41:d3:37:ab:de:5e:18:68:55:1c:ef:b5:11:61:9c:9c:ce: 6f:f8:ae:fc:3d:83:e1:b5:3d:86:2e:14:1b:7a:86:b3:30:4f: 14:b1:08:20:d3:0c:c7:ef:2d:43:05:ce:bd:b4:23:0f:02:d9: c2:f4:53:f8:35:7c:c4:40:2c:50:7f:41:59:01:68:53:1b:10: 0c:56:57:4c:29:75:d2:57:d0:90:a1:2f:e1:9c:54:f4:b3:5e: e8:a4:c9:bb:31:ff:ae:3b:ce:bf:5c:f7:9c:36:3e:55:52:ee: 64:bd:68:a0:d4:3e:b7:5d:51:93:76:49:3d:72:e0:09:4f:de: d5:cb:48:5b:46:a9:64:40:26:fb:cf:ea:9d:c2:40:c3:54:86: d2:40:c4:3e:5d:8a:83:85:68:3c:1c:d4:ed:5a:73:ce:bd:e6: ad:81:c0:d7:f8:be:4b:d8:c0:33:b7:77:6a:f6:93:27:47:85: 04:44:e5:88:33:48:a4:86:ee:b4:8a:b3:83:39:c9:f1:03:cb: a9:92:39:80:a4:41:2b:2a:51:e1:26:2d:2e:4a:cc:6e:af:1e: dc:16:78:d3:29:73:8e:10:e0:41:aa:e7:53:c9:c7:5b:48:76: 8d:c6:d2:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NMgcFFdcW+/Z07IbA0FXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi NDE1M2UwHhcNMjUxMjIwMTAwMTEzWhcNMjUxMjIxMTAwMTEzWjAzMTEwLwYDVQQD Eyg4ODg2ZmRjYzQ1ZjkwNDk1NzZlNWIyNTc0MDQ4Zjg2MTBkZmExZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vOwx0YRmGY34id2dMsVBalR1OHH IAXngw0/YgQzhS0yZWXUux3nqz45nb8qtI4Q7g2yKDB0q6zgmxxhnG71GLlkXp3B JYA+XVzHcT1AcQi58ME69ChzSYgKjoQGDNZAhpgBZTbKFCEkZ44bVUGKHXDEhgP+ kAy51CTUhkzAGyuQP/XbFdwmgIsbTV7NRYOfquyNsrfniYMn1gr3mZpG04/ptYHU 5kZP0zeqEwAl7de5QJa4TDQwiZxhHIeRkfQI/0fqctWV9WCA98m+lkrdaSFmrAmo mFZeTxaNTPDaejaYEBM39X5lUkbobbVvlYoqGja1gtY8yztDae9l++5TqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiG/cxF+QSVduWyV0BI+GEN+h6hMB8GA1UdIwQY MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt MWQzNzM0OTk5MjRlLzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4pzqIrO sQpGmFEuX1fpqBMC9kHTN6veXhhoVRzvtRFhnJzOb/iu/D2D4bU9hi4UG3qGszBP FLEIINMMx+8tQwXOvbQjDwLZwvRT+DV8xEAsUH9BWQFoUxsQDFZXTCl10lfQkKEv 4ZxU9LNe6KTJuzH/rjvOv1z3nDY+VVLuZL1ooNQ+t11Rk3ZJPXLgCU/e1ctIW0ap ZEAm+8/qncJAw1SG0kDEPl2Kg4VoPBzU7Vpzzr3mrYHA1/i+S9jAM7d3avaTJ0eF BETliDNIpIbutIqzgznJ8QPLqZI5gKRBKypR4SYtLkrMbq8e3BZ40ylzjhDgQarn U8nHW0h2jcbS8g== -----END CERTIFICATE-----Generated at Sat Dec 20 11:45:22 2025 by rpki-client