This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json) Hash identifier: hizSB9MdKQh+jBGeutQnGFjge4G9KcJhtcDHI3FtYns= Subject key identifier: EE:33:58:B2:17:93:59:47:0B:16:CE:2D:6E:64:96:49:04:18:FC:B3 Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a Certificate serial: 019B3CEBE8985BA4EEDFAA98A49D0A9CEC29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft Manifest number: 10C7 Signing time: Sat 20 Dec 2025 18:00:51 +0000 Manifest this update: Sat 20 Dec 2025 18:00:51 +0000 Manifest next update: Sun 21 Dec 2025 18:00:51 +0000 Files and hashes: 1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=) 2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: Sp+K4/mh2rPMKgURb4d8ef0vRNkJzVfxjoViRo4ikEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:e8:98:5b:a4:ee:df:aa:98:a4:9d:0a:9c:ec:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a Validity Not Before: Dec 20 18:00:51 2025 GMT Not After : Dec 21 18:00:51 2025 GMT Subject: CN=ee3358b2179359470b16ce2d6e6496490418fcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:72:70:22:d4:f3:2b:bc:18:3a:5b:fb:db: 2f:5c:89:dd:80:24:6c:2b:d8:d0:14:ac:53:78:89: 31:e3:08:78:cd:0f:ba:e6:eb:c1:4b:e3:bb:9b:a3: cb:dd:02:49:f0:eb:d0:3d:3b:2b:21:ba:d0:6a:a0: 6d:5e:ba:09:80:b5:7b:bc:b7:9b:b6:46:18:a2:79: f3:1b:2b:3e:87:f4:6e:b7:55:4e:c6:b8:aa:b6:d7: 1f:0d:43:2a:50:6e:5b:e6:a6:f1:46:20:31:44:a6: 0c:c1:d0:7c:19:ce:4b:85:53:51:80:ac:18:a0:2c: 94:ef:ba:41:cb:62:c7:06:39:a2:1d:98:7e:e5:c9: e4:a6:44:5d:67:58:74:86:2b:86:f9:80:05:7f:5a: b6:82:58:d2:86:8c:3f:92:14:65:0f:64:29:ea:7d: 61:55:18:68:1d:55:ea:58:85:42:fc:ad:3d:b8:64: 2e:8d:f9:3c:7e:10:f9:aa:df:6c:47:6d:c0:ff:84: 47:90:a8:f1:23:25:32:05:b3:16:e6:60:20:c4:ca: f0:16:9b:6b:8d:59:6d:92:27:a8:b6:e8:1f:29:2c: da:26:d5:96:09:19:4c:15:cc:8f:61:cb:a7:ee:29: d0:96:2d:3b:47:dc:ca:8d:01:f9:d2:3c:86:53:85: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:33:58:B2:17:93:59:47:0B:16:CE:2D:6E:64:96:49:04:18:FC:B3 X509v3 Authority Key Identifier: keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:68:50:2e:10:91:87:03:7d:e9:a6:0c:28:cb:c5:6d:20:ea: e3:92:a1:cc:18:ce:92:ca:d3:b2:b9:05:c4:81:48:ec:7a:54: 6d:18:11:a8:53:8d:1e:f3:72:84:6c:f2:7d:70:1c:60:74:b8: f8:7c:19:c1:f1:1d:b9:8b:a8:cd:f0:8a:65:1e:d4:9d:d2:06: 38:f1:94:26:e2:2f:36:9a:80:d8:4a:b4:dd:09:e0:25:cb:65: 1c:bf:6d:81:e2:be:d8:f9:be:fa:b5:42:c4:98:15:ae:b0:4f: 3a:4d:52:94:85:b2:3b:47:c8:1a:4e:9e:08:da:80:6e:a2:11: 14:1f:ad:76:57:f7:0f:e8:7d:7c:95:fd:26:fa:2a:86:4d:87: 81:7d:4e:56:7a:3e:b8:b4:96:b1:e7:38:5b:c0:8b:ec:64:56: fa:b9:e8:4e:76:35:4f:67:e7:5b:08:39:b7:3b:67:46:86:12: be:6b:de:cf:f1:6e:09:58:6a:7a:80:66:81:20:06:bc:9b:83: 09:68:f1:30:97:69:a8:88:77:2e:6c:94:05:d5:e5:49:8d:74: 01:c1:91:7e:f3:f0:17:2a:8e:fa:7e:30:28:a3:3b:0a:8c:80: 89:2d:31:f7:a8:05:5e:95:ae:40:e1:d3:bb:94:03:00:b8:15: d8:c5:91:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+iYW6Tu36qYpJ0KnOwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTVkNTJiM2NhODc0NTQ1NzViNjViNzIwZWVmODFhMjYy YTVmM2EwHhcNMjUxMjIwMTgwMDUxWhcNMjUxMjIxMTgwMDUxWjAzMTEwLwYDVQQD EyhlZTMzNThiMjE3OTM1OTQ3MGIxNmNlMmQ2ZTY0OTY0OTA0MThmY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3tycCLU8yu8GDpb+9svXIndgCRs K9jQFKxTeIkx4wh4zQ+65uvBS+O7m6PL3QJJ8OvQPTsrIbrQaqBtXroJgLV7vLeb tkYYonnzGys+h/Rut1VOxriqttcfDUMqUG5b5qbxRiAxRKYMwdB8Gc5LhVNRgKwY oCyU77pBy2LHBjmiHZh+5cnkpkRdZ1h0hiuG+YAFf1q2gljShow/khRlD2Qp6n1h VRhoHVXqWIVC/K09uGQujfk8fhD5qt9sR23A/4RHkKjxIyUyBbMW5mAgxMrwFptr jVltkieotugfKSzaJtWWCRlMFcyPYcun7inQli07R9zKjQH50jyGU4VZZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4zWLIXk1lHCxbOLW5klkkEGPyzMB8GA1UdIwQY MBaAFK2l1Ss8qHRUV1tltyDu+BomKl86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMt ZDE4YWI0ZjdmNWRmLzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMtZDE4YWI0ZjdmNWRm LzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmhQLhCR hwN96aYMKMvFbSDq45KhzBjOksrTsrkFxIFI7HpUbRgRqFONHvNyhGzyfXAcYHS4 +HwZwfEduYuozfCKZR7UndIGOPGUJuIvNpqA2Eq03QngJctlHL9tgeK+2Pm++rVC xJgVrrBPOk1SlIWyO0fIGk6eCNqAbqIRFB+tdlf3D+h9fJX9Jvoqhk2HgX1OVno+ uLSWsec4W8CL7GRW+rnoTnY1T2fnWwg5tztnRoYSvmvez/FuCVhqeoBmgSAGvJuD CWjxMJdpqIh3LmyUBdXlSY10AcGRfvPwFyqO+n4wKKM7CoyAiS0x96gFXpWuQOHT u5QDALgV2MWRsA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:58 2025 by rpki-client