This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json) Hash identifier: kp+wwV+JD0DOU7hiK9qKjquUgIfhYdUacQN0Ck3ZUPU= Subject key identifier: CB:DA:6D:37:8E:CE:79:60:15:E9:8D:5C:1F:45:EF:85:CC:12:0C:11 Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8 Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8 Certificate serial: 019B3BA274A997E40A8E7645BB7C6C188429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft Manifest number: 01B5 Signing time: Sat 20 Dec 2025 12:01:00 +0000 Manifest this update: Sat 20 Dec 2025 12:01:00 +0000 Manifest next update: Sun 21 Dec 2025 12:01:00 +0000 Files and hashes: 1: HRoRP4XhhYpU785BEKhZ1q4e20g.roa (hash: G6jwo30XwlnomMCEKD4f2VAkjCPOzmiVIHus+OyycRI=) 2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: BR3+96uvbH2ZL9zvoh9DJMWusrznmTefLd0VugeDJhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:74:a9:97:e4:0a:8e:76:45:bb:7c:6c:18:84:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8 Validity Not Before: Dec 20 12:01:00 2025 GMT Not After : Dec 21 12:01:00 2025 GMT Subject: CN=cbda6d378ece796015e98d5c1f45ef85cc120c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:11:c7:62:00:12:d1:d0:68:5f:47:a8:88: 83:a6:61:4f:91:ac:2f:ee:70:f1:3f:b3:5b:4f:e7: 17:d6:91:02:03:f5:ad:0e:61:5b:17:1a:c6:d4:d5: 30:58:6e:2f:0d:96:91:0b:5e:78:86:98:98:15:9d: 4f:8e:93:06:24:f0:ee:3d:25:f4:62:f5:bc:74:3f: 19:d5:0b:c2:1f:36:90:5a:f2:d0:54:a7:97:c0:ac: b7:c5:4a:21:68:64:68:2c:fe:97:5a:0b:e2:fc:f2: 9e:c9:32:34:1c:b8:59:44:ee:6f:1a:ea:1f:e1:a5: 48:17:de:66:a5:07:91:24:a5:2f:f5:cf:e9:66:35: 03:ca:f6:ca:16:72:ba:9a:48:fa:79:0c:43:d1:63: ec:d3:1c:94:af:e6:ff:66:d1:87:b3:1c:8e:e4:ce: fe:08:d8:e9:b1:18:72:54:3c:fc:08:44:db:30:63: 8b:95:95:4d:7e:15:68:58:e9:c0:61:33:aa:3b:4d: df:19:b8:5e:a8:4c:a5:46:4a:ea:91:ef:1e:2c:dc: c9:af:e1:a9:e1:7c:ff:21:44:fa:fc:f3:b0:7a:5d: 2b:1f:04:9c:20:e8:8a:1f:6d:6f:b1:bc:71:d7:d6: ee:0e:d3:a3:51:0c:85:10:5f:83:d0:0d:cc:4a:2a: 23:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DA:6D:37:8E:CE:79:60:15:E9:8D:5C:1F:45:EF:85:CC:12:0C:11 X509v3 Authority Key Identifier: keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c3:9d:63:51:66:e3:43:65:e2:cd:04:b7:2b:ce:16:75:3a: 38:19:5e:a4:51:8f:8c:e8:b0:06:e6:db:1b:96:04:67:7a:45: 2f:39:0e:8d:ad:6a:3b:58:d3:ad:d9:fa:63:a9:c2:aa:da:da: 15:c9:20:29:e6:68:37:fd:bd:89:33:6b:af:02:9f:fb:fe:ab: ab:e9:17:52:e4:1c:ec:8a:2c:91:8d:0f:a1:1e:c2:73:4c:3e: 8a:65:5b:fa:23:6f:b3:a5:cb:5f:34:cc:9c:4e:28:3c:fa:8e: 94:97:83:5f:4b:48:23:b7:c4:e4:8b:82:49:6d:b9:11:d9:7d: f2:3d:24:40:49:bb:05:00:1c:8c:09:9d:62:b8:68:30:7a:48: 31:49:c5:77:ce:0b:e7:33:ed:13:0c:c9:df:3c:48:13:b7:56: ae:8a:d8:d5:fc:40:dc:25:d6:21:3d:e5:28:c5:94:49:60:f2: dc:40:28:b6:02:28:0f:b8:66:f9:65:e0:92:b1:6b:d3:71:34: c3:70:30:dd:84:77:13:49:a3:3a:8b:6e:89:71:f8:66:37:4f: f9:21:c7:ab:41:84:e9:66:9f:88:cc:13:cd:e7:7c:b3:41:2c: 84:a7:ea:94:1e:b5:7f:df:2d:85:17:46:0e:ce:4f:ea:77:a1: 1f:1a:3c:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7onSpl+QKjnZFu3xsGIQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMTdjY2NlNzRjMWFmYmE4M2I3YmE4NWQ5NzcxMmIyYmNj NGE1ZTgwHhcNMjUxMjIwMTIwMTAwWhcNMjUxMjIxMTIwMTAwWjAzMTEwLwYDVQQD EyhjYmRhNmQzNzhlY2U3OTYwMTVlOThkNWMxZjQ1ZWY4NWNjMTIwYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGIRx2IAEtHQaF9HqIiDpmFPkawv 7nDxP7NbT+cX1pECA/WtDmFbFxrG1NUwWG4vDZaRC154hpiYFZ1PjpMGJPDuPSX0 YvW8dD8Z1QvCHzaQWvLQVKeXwKy3xUohaGRoLP6XWgvi/PKeyTI0HLhZRO5vGuof 4aVIF95mpQeRJKUv9c/pZjUDyvbKFnK6mkj6eQxD0WPs0xyUr+b/ZtGHsxyO5M7+ CNjpsRhyVDz8CETbMGOLlZVNfhVoWOnAYTOqO03fGbheqEylRkrqke8eLNzJr+Gp 4Xz/IUT6/POwel0rHwScIOiKH21vsbxx19buDtOjUQyFEF+D0A3MSioj0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvabTeOznlgFemNXB9F74XMEgwRMB8GA1UdIwQY MBaAFK8XzM50wa+6g7e6hdl3ErK8xKXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEt YTU3NTdhYWFmZmZhLzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iNzNjYWMtMzYxMC00MjI0LWJkYmEtYTU3NTdhYWFmZmZh LzEvcnhmTXpuVEJyN3FEdDdxRjJYY1NzcnpFcGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcOdY1Fm 40Nl4s0EtyvOFnU6OBlepFGPjOiwBubbG5YEZ3pFLzkOja1qO1jTrdn6Y6nCqtra FckgKeZoN/29iTNrrwKf+/6rq+kXUuQc7IoskY0PoR7Cc0w+imVb+iNvs6XLXzTM nE4oPPqOlJeDX0tII7fE5IuCSW25Edl98j0kQEm7BQAcjAmdYrhoMHpIMUnFd84L 5zPtEwzJ3zxIE7dWrorY1fxA3CXWIT3lKMWUSWDy3EAotgIoD7hm+WXgkrFr03E0 w3Aw3YR3E0mjOotuiXH4ZjdP+SHHq0GE6WafiMwTzed8s0EshKfqlB61f98thRdG Ds5P6nehHxo8Cg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:51:49 2025 by rpki-client