This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json) Hash identifier: t1tyezB7+rZ/odUr/3B4w+JQuddWznYDMmDdgdgB++Y= Subject key identifier: BD:6C:4D:5B:B0:A6:D1:E5:7E:F3:9D:C2:40:7C:27:07:4A:F7:1C:F8 Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69 Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069 Certificate serial: 019AF23FA578DF1DA471AD11BA72332C12B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa (hash: a7bo8HXeX2LyPkuCveHxDVKdqnbGHzPDqS6LymzXHUs=) 2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: qzI61au1MOEvs0VfbdXOeFDwF6XxCRP7iUNZ0oR47+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a5:78:df:1d:a4:71:ad:11:ba:72:33:2c:12:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069 Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=bd6c4d5bb0a6d1e57ef39dc2407c27074af71cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:59:3a:b8:24:ac:43:00:bc:96:11:ce:9e: e4:4a:3e:bb:7c:a7:d7:31:fd:1d:17:90:d5:fa:a0: f3:34:f9:27:66:4e:cc:da:d0:eb:3e:be:8d:a5:fa: ff:dc:11:32:8c:f7:1a:9d:b5:50:97:83:9f:fd:5a: 09:d3:38:33:99:d2:58:8f:a8:ec:6e:38:51:d2:68: 07:8b:5e:05:e8:86:a7:20:04:38:6c:03:18:53:3b: 0c:7a:c6:8f:75:5f:9a:cd:59:04:7c:50:fa:55:5d: 30:35:5f:e2:47:81:af:1e:9f:32:26:e2:db:65:8b: 2b:8d:ad:a8:45:56:d5:80:58:ae:85:03:a3:34:e9: cd:42:92:57:11:1b:ee:55:ee:5d:b8:96:c8:35:de: 43:1f:ab:12:7c:be:75:e4:a2:85:a1:85:a8:90:29: 26:c4:b7:51:48:34:11:3f:31:76:ed:4f:d4:1b:8c: 2e:bf:26:d0:ab:f2:02:ca:5f:da:a5:8f:c1:b7:cf: 6d:f9:b4:1d:b1:5f:59:d5:f6:ac:77:2a:da:14:a1: c8:99:94:93:da:97:41:a4:b3:b1:6a:66:7c:81:2a: 2b:ea:09:90:b0:db:0a:be:b0:e4:04:ea:06:a4:87: 6a:ac:5b:a0:22:d1:8e:90:05:04:dc:16:42:37:a1: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6C:4D:5B:B0:A6:D1:E5:7E:F3:9D:C2:40:7C:27:07:4A:F7:1C:F8 X509v3 Authority Key Identifier: keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:32:fd:cc:2e:93:58:f1:f7:fb:3a:0c:1f:8c:d9:8b:50:1e: 3e:38:48:a2:0b:fa:d0:b6:8b:c0:50:fc:13:13:70:92:82:dd: 9c:0c:a7:57:84:72:1f:e9:3a:a5:58:49:39:9d:8b:6b:99:06: fc:53:56:e6:bd:18:0b:0a:a6:02:0c:ad:38:e5:08:a2:e2:3b: 5d:c5:8e:0d:32:f7:48:ab:eb:f6:13:59:4a:e8:ba:ea:fb:25: c3:a8:b6:95:c3:8b:53:a0:fe:8d:a9:28:50:dd:c0:31:ae:a3: aa:77:d6:60:3f:ce:41:aa:de:0c:bc:e0:ab:ae:37:3d:7a:66: fd:0d:53:0a:25:d9:8a:8f:5b:56:10:49:f2:59:50:e4:fc:79: 75:2c:ba:06:f2:af:fd:ac:69:99:d0:31:74:bf:7b:e1:6d:ec: 70:b7:15:b8:d5:bc:74:5a:67:e5:2b:be:38:32:77:c5:a3:da: 57:71:17:c9:9b:3c:b8:d1:21:9d:30:be:10:1b:5e:4c:ff:fa: b6:48:20:89:e7:a7:e5:11:6d:a4:da:7e:85:b6:7d:1b:a4:8c: f2:a7:a2:a0:62:6c:90:20:57:db:99:c4:0c:bb:ca:0a:1a:b2: a5:18:79:43:18:2c:7d:77:28:ac:37:67:db:f2:7a:9e:67:0a: f5:c1:f6:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6V43x2kca0RunIzLBKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2Y3YjNmZDg3Y2U5YmNlOTlmOTAwYjY0MTk5ZDYwNmJm MTYwNjkwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD EyhiZDZjNGQ1YmIwYTZkMWU1N2VmMzlkYzI0MDdjMjcwNzRhZjcxY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIVZOrgkrEMAvJYRzp7kSj67fKfX Mf0dF5DV+qDzNPknZk7M2tDrPr6Npfr/3BEyjPcanbVQl4Of/VoJ0zgzmdJYj6js bjhR0mgHi14F6IanIAQ4bAMYUzsMesaPdV+azVkEfFD6VV0wNV/iR4GvHp8yJuLb ZYsrja2oRVbVgFiuhQOjNOnNQpJXERvuVe5duJbINd5DH6sSfL515KKFoYWokCkm xLdRSDQRPzF27U/UG4wuvybQq/ICyl/apY/Bt89t+bQdsV9Z1fasdyraFKHImZST 2pdBpLOxamZ8gSor6gmQsNsKvrDkBOoGpIdqrFugItGOkAUE3BZCN6EgZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1sTVuwptHlfvOdwkB8JwdK9xz4MB8GA1UdIwQY MBaAFFzPez/YfOm86Z+QC2QZnWBr8WBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NGRlYmItZDBiNi00NGQxLThlNTgt OGNmOWU2ZjhhYjQ1LzEvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81NGRlYmItZDBiNi00NGQxLThlNTgtOGNmOWU2ZjhhYjQ1 LzEvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTL9zC6T WPH3+zoMH4zZi1AePjhIogv60LaLwFD8ExNwkoLdnAynV4RyH+k6pVhJOZ2La5kG /FNW5r0YCwqmAgytOOUIouI7XcWODTL3SKvr9hNZSui66vslw6i2lcOLU6D+jako UN3AMa6jqnfWYD/OQareDLzgq643PXpm/Q1TCiXZio9bVhBJ8llQ5Px5dSy6BvKv /axpmdAxdL974W3scLcVuNW8dFpn5Su+ODJ3xaPaV3EXyZs8uNEhnTC+EBteTP/6 tkggieen5RFtpNp+hbZ9G6SM8qeioGJskCBX25nEDLvKChqypRh5QxgsfXcorDdn 2/J6nmcK9cH2gA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:57 2025 by rpki-client