This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json) Hash identifier: +TPr33yzHmgw1pU5afaIWhFsX+WO5vtv+KWa7M0FuH0= Subject key identifier: 13:90:6A:88:4D:32:AA:14:5F:72:C2:B2:9B:28:98:A9:14:4B:5B:22 Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2 Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2 Certificate serial: 019B3CEC728883B53920B33E2476C329B8B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:01:27 +0000 Manifest this update: Sat 20 Dec 2025 18:01:27 +0000 Manifest next update: Sun 21 Dec 2025 18:01:27 +0000 Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=) 2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: hdmbWN5tPaE3EwDFcMOj1VKVpqhXiSMhoP3FRGehWmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:72:88:83:b5:39:20:b3:3e:24:76:c3:29:b8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2 Validity Not Before: Dec 20 18:01:27 2025 GMT Not After : Dec 21 18:01:27 2025 GMT Subject: CN=13906a884d32aa145f72c2b29b2898a9144b5b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:9e:dc:0d:3e:a6:65:b5:99:50:24:c9:35: 8b:00:45:ff:a3:66:6e:46:83:92:ba:a2:4a:ee:88: 47:e9:c6:ab:ed:6d:72:ba:2d:79:73:cc:69:58:74: 2d:24:0a:d7:31:1f:3b:65:d8:17:01:d8:4b:60:7f: 55:a7:21:44:9b:97:6e:18:a7:80:ea:b9:0d:2f:5e: ad:62:66:a8:af:72:0c:21:7b:d4:48:a3:39:05:a7: f7:3e:ac:a4:da:6e:c4:23:46:40:fe:37:66:35:ae: 54:90:3c:df:ef:bd:9e:cd:85:e0:8f:84:49:da:49: 15:df:c4:40:2a:46:31:33:c3:0c:d0:9d:aa:37:fb: d7:09:0d:da:0e:d6:5f:10:d4:be:76:2a:4f:27:14: 6b:63:fe:f8:40:6c:aa:20:0b:38:87:07:b9:4d:18: e6:77:5f:ba:f9:cd:df:29:bc:fc:34:d0:67:ab:30: e2:e3:7a:77:fc:57:c9:ed:60:ff:9e:f5:14:bb:45: b9:a9:7d:62:8c:c7:f1:96:0b:5f:05:77:9e:83:3e: cb:01:01:7d:9f:99:2a:f5:4c:ea:22:e3:23:9c:9b: 11:d5:74:9c:cb:40:54:3a:fc:18:7e:11:60:61:2c: 7e:54:a0:4c:1e:03:15:8f:98:de:ec:18:6d:cc:8c: f4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:90:6A:88:4D:32:AA:14:5F:72:C2:B2:9B:28:98:A9:14:4B:5B:22 X509v3 Authority Key Identifier: keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:fc:5a:75:2d:a0:f1:ec:6d:5e:72:00:ee:19:b3:a5:47:45: 88:2e:6e:21:98:b4:f9:90:69:61:89:25:16:63:85:b2:07:da: c8:7a:c3:bf:d0:e6:f2:05:c4:6f:43:46:9b:4a:7e:04:4f:fe: 7a:60:b9:5d:ce:95:9d:39:f5:25:35:6d:63:5e:83:35:4c:28: 96:bb:f5:50:d2:75:6c:db:33:e0:b5:89:d3:94:8b:02:87:ed: df:3d:21:b7:12:15:c2:f0:3c:1f:a7:97:68:a9:86:4e:9e:a1: 89:9e:76:e2:0e:2a:61:39:76:1b:90:0a:89:a6:b0:42:c8:ef: 61:07:18:b6:f4:39:98:3b:79:c8:c1:6f:49:96:d7:76:62:6b: 01:e7:94:49:bc:63:c2:a7:a3:33:8f:11:f8:ba:60:f0:99:18: 84:81:9f:83:1e:2c:1b:b4:73:f6:53:5d:e1:f4:64:4b:c2:8e: aa:fe:89:ac:90:68:0a:d2:81:27:55:a3:3c:dd:6b:f4:69:b2: fc:be:6e:9e:1b:86:73:4a:26:c6:9c:ff:b4:9a:01:ff:cb:e1: bc:7a:f6:e7:72:fc:c1:ae:41:5e:1f:cc:fd:fd:32:1d:93:a5: 4e:e0:f1:0e:c4:bc:69:e7:ff:9a:c1:7a:55:2d:fd:7a:b6:68: bd:fb:5c:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HKIg7U5ILM+JHbDKbixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZGE4MmU4Nzc5MzNkOWMyYzk1MmNiMzc2YzkzYWFhMzM3 ZGQ3ZDIwHhcNMjUxMjIwMTgwMTI3WhcNMjUxMjIxMTgwMTI3WjAzMTEwLwYDVQQD EygxMzkwNmE4ODRkMzJhYTE0NWY3MmMyYjI5YjI4OThhOTE0NGI1YjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5me3A0+pmW1mVAkyTWLAEX/o2Zu RoOSuqJK7ohH6car7W1yui15c8xpWHQtJArXMR87ZdgXAdhLYH9VpyFEm5duGKeA 6rkNL16tYmaor3IMIXvUSKM5Baf3Pqyk2m7EI0ZA/jdmNa5UkDzf772ezYXgj4RJ 2kkV38RAKkYxM8MM0J2qN/vXCQ3aDtZfENS+dipPJxRrY/74QGyqIAs4hwe5TRjm d1+6+c3fKbz8NNBnqzDi43p3/FfJ7WD/nvUUu0W5qX1ijMfxlgtfBXeegz7LAQF9 n5kq9UzqIuMjnJsR1XScy0BUOvwYfhFgYSx+VKBMHgMVj5je7BhtzIz0LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOQaohNMqoUX3LCspsomKkUS1siMB8GA1UdIwQY MBaAFMfaguh3kz2cLJUss3bJOqozfdfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2Mt ZWFlNGY2ZDMzY2E2LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2MtZWFlNGY2ZDMzY2E2 LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/xadS2g 8extXnIA7hmzpUdFiC5uIZi0+ZBpYYklFmOFsgfayHrDv9Dm8gXEb0NGm0p+BE/+ emC5Xc6VnTn1JTVtY16DNUwolrv1UNJ1bNsz4LWJ05SLAoft3z0htxIVwvA8H6eX aKmGTp6hiZ524g4qYTl2G5AKiaawQsjvYQcYtvQ5mDt5yMFvSZbXdmJrAeeUSbxj wqejM48R+Lpg8JkYhIGfgx4sG7Rz9lNd4fRkS8KOqv6JrJBoCtKBJ1WjPN1r9Gmy /L5unhuGc0omxpz/tJoB/8vhvHr253L8wa5BXh/M/f0yHZOlTuDxDsS8aef/msF6 VS39erZovftcMw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:45:29 2025 by rpki-client