This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json) Hash identifier: fuHqX3dmTJi48BbgZVMuUH5acxUDFMgSX36lNTV/xjY= Subject key identifier: 9C:F6:2F:E4:83:F4:E3:BA:D4:71:5F:FB:67:AD:DE:52:CB:D1:62:9C Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01 Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001 Certificate serial: 019B3C7DC6EA4846EF2E7BDA54B224211758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft Manifest number: 16F6 Signing time: Sat 20 Dec 2025 16:00:34 +0000 Manifest this update: Sat 20 Dec 2025 16:00:34 +0000 Manifest next update: Sun 21 Dec 2025 16:00:34 +0000 Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: w5ezo75/7uedtGiC0gQePoM55Ssl6DghV1jnRBrzidA=) 2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c6:ea:48:46:ef:2e:7b:da:54:b2:24:21:17:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001 Validity Not Before: Dec 20 16:00:34 2025 GMT Not After : Dec 21 16:00:34 2025 GMT Subject: CN=9cf62fe483f4e3bad4715ffb67adde52cbd1629c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9a:63:c4:4e:ea:28:3d:e0:80:30:21:d1:ca: 6f:7d:15:d8:5d:0f:43:eb:9c:72:4d:6b:ae:d2:23: f3:c5:5e:09:f7:ba:fa:58:51:09:af:5d:e8:8f:30: df:07:b8:43:f3:be:44:ae:d7:28:2d:e9:30:6b:70: 7a:41:d6:49:da:44:3d:1a:33:3b:90:4b:4a:cd:fb: 87:bf:81:f4:8d:b0:d4:3b:68:d8:6a:61:55:c4:4b: f6:e1:a6:30:12:36:a2:65:ad:cf:de:8d:ae:19:36: 8b:04:4d:d2:b1:ab:4b:a8:7a:6b:fb:3f:81:a9:37: 46:12:c7:f2:61:39:74:2c:6e:f7:2a:25:b1:6e:8e: 4b:fe:81:ec:c7:ff:30:9e:3e:bc:d7:f8:ca:cc:05: 5a:45:44:75:62:f5:3a:26:e3:04:ff:7a:9c:26:cd: f7:1e:3a:60:85:d0:cf:07:6c:90:c1:0c:65:b9:05: 2f:c4:67:26:b0:d5:90:ea:b7:d2:69:1b:d8:e6:03: cf:9a:4e:56:83:f8:ed:ff:b7:cd:3b:83:21:63:45: a2:20:72:e4:e9:bc:16:20:39:0a:9b:0f:68:76:2e: 52:c5:c7:3a:ac:2c:46:de:2c:07:78:af:58:e0:00: ac:cc:2b:d5:c3:3a:ca:f1:fd:3d:2a:bb:f7:55:60: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F6:2F:E4:83:F4:E3:BA:D4:71:5F:FB:67:AD:DE:52:CB:D1:62:9C X509v3 Authority Key Identifier: keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f6:1a:ce:3b:e9:0a:4d:0c:6f:1a:53:27:5d:20:1a:73:ec: ee:b7:3f:b9:9e:2a:76:a2:fa:fe:0b:06:e4:56:09:94:d5:e2: ad:ab:dc:d8:ae:0c:0f:87:b2:83:0a:7d:bf:3b:b0:dc:21:00: be:0e:4b:28:69:6f:1f:b9:8c:ab:70:b0:0d:71:36:b8:04:68: 6b:b3:94:e0:3b:85:92:f3:8e:58:a1:e5:3f:32:87:8e:67:fb: 13:0b:fc:f9:8a:52:ec:72:31:dd:0e:34:2d:fe:ad:f0:9c:b7: 71:ce:6a:bf:09:03:46:84:5a:5d:3a:bf:f1:79:03:25:9f:7e: 83:7d:a7:0a:6f:30:f7:ae:16:23:c1:3e:f6:8f:93:f5:ad:8a: a0:da:58:6e:4a:73:59:a1:36:06:66:20:bd:ed:15:db:da:f3: 6e:32:18:c4:96:73:bd:25:23:ff:ff:e3:e2:c3:78:00:d1:e9: 66:1e:e1:51:0e:20:db:ae:a0:22:ef:29:05:a5:1a:1a:ce:d2: b0:b8:bc:ee:c8:f0:94:a6:8d:14:8d:63:3f:54:e9:70:da:7a: 38:09:0d:d5:5c:2b:0b:4e:2e:26:9e:87:a6:c1:92:8a:07:18: 6b:e8:42:a2:01:0a:6a:fb:cc:5a:8d:51:68:23:e4:64:cc:d8: a5:ac:40:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcbqSEbvLnvaVLIkIRdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNzBmZTFkNzVmN2RhNzZkMmUzZGMzNDRmYjFmMGIwYjY5 ZGUwMDEwHhcNMjUxMjIwMTYwMDM0WhcNMjUxMjIxMTYwMDM0WjAzMTEwLwYDVQQD Eyg5Y2Y2MmZlNDgzZjRlM2JhZDQ3MTVmZmI2N2FkZGU1MmNiZDE2MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZpjxE7qKD3ggDAh0cpvfRXYXQ9D 65xyTWuu0iPzxV4J97r6WFEJr13ojzDfB7hD875ErtcoLekwa3B6QdZJ2kQ9GjM7 kEtKzfuHv4H0jbDUO2jYamFVxEv24aYwEjaiZa3P3o2uGTaLBE3SsatLqHpr+z+B qTdGEsfyYTl0LG73KiWxbo5L/oHsx/8wnj681/jKzAVaRUR1YvU6JuME/3qcJs33 HjpghdDPB2yQwQxluQUvxGcmsNWQ6rfSaRvY5gPPmk5Wg/jt/7fNO4MhY0WiIHLk 6bwWIDkKmw9odi5Sxcc6rCxG3iwHeK9Y4ACszCvVwzrK8f09Krv3VWAUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz2L+SD9OO61HFf+2et3lLL0WKcMB8GA1UdIwQY MBaAFD1w/h1199p20uPcNE+x8LC2neABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYt Yjg1MmJkODEyM2YwLzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYtYjg1MmJkODEyM2Yw LzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvYazjvp Ck0MbxpTJ10gGnPs7rc/uZ4qdqL6/gsG5FYJlNXiravc2K4MD4eygwp9vzuw3CEA vg5LKGlvH7mMq3CwDXE2uARoa7OU4DuFkvOOWKHlPzKHjmf7Ewv8+YpS7HIx3Q40 Lf6t8Jy3cc5qvwkDRoRaXTq/8XkDJZ9+g32nCm8w964WI8E+9o+T9a2KoNpYbkpz WaE2BmYgve0V29rzbjIYxJZzvSUj///j4sN4ANHpZh7hUQ4g266gIu8pBaUaGs7S sLi87sjwlKaNFI1jP1TpcNp6OAkN1VwrC04uJp6HpsGSigcYa+hCogEKavvMWo1R aCPkZMzYpaxAbg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:34 2025 by rpki-client