This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json) Hash identifier: GpXVnxtN+qS1JoaPiQYQhWsT2/Jp3fRrmcqopejJAo0= Subject key identifier: B8:F1:B3:32:06:0A:F3:97:A8:A5:B9:8B:7C:73:81:85:E9:62:4A:FD Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7 Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7 Certificate serial: 019AF2767292144ADE9FCE03B8CF0F882498 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:40 +0000 Manifest this update: Sat 06 Dec 2025 07:00:40 +0000 Manifest next update: Sun 07 Dec 2025 07:00:40 +0000 Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=) 2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: MBlYZipi5wdAZomK2h/45X/W7Hqz9V4aaWJCY4lKQk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:72:92:14:4a:de:9f:ce:03:b8:cf:0f:88:24:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7 Validity Not Before: Dec 6 07:00:40 2025 GMT Not After : Dec 7 07:00:40 2025 GMT Subject: CN=b8f1b332060af397a8a5b98b7c738185e9624afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:db:9c:d6:0c:34:85:13:e0:43:28:e1:72: 11:6c:df:d9:35:af:03:26:d0:8e:4e:fe:c6:e9:d0: 2a:a8:81:39:1a:5e:f6:de:72:51:81:e9:64:4a:cd: 43:9b:de:28:3f:d4:cf:af:00:05:c2:b1:e7:fa:40: 7c:25:57:1b:31:89:68:e4:fd:03:bb:50:06:3f:8b: 9e:8e:f5:8a:3e:f3:70:72:ae:75:09:1f:a0:13:9f: 6d:8d:bf:3f:60:00:3f:ad:ed:79:af:60:0d:00:58: 58:79:a1:bc:be:23:98:bd:68:d7:16:b3:6c:a3:df: 28:18:03:93:15:7c:77:55:d9:85:ba:d2:c7:64:04: e0:cf:2d:a6:9d:55:bd:cb:a5:43:32:61:85:32:e6: 23:f9:3d:8a:e8:d3:50:f2:b9:bf:1c:13:86:88:0d: f9:7a:fd:f4:2d:7d:d8:3f:f8:a3:b2:db:40:21:49: 43:0d:01:4f:4a:fd:88:8d:07:df:b9:32:a0:0e:a4: 83:ed:9a:43:fa:fb:61:1d:36:fe:43:a0:db:01:bc: 2a:6a:52:3e:eb:fd:70:b8:c4:1e:6d:95:29:a5:01: ba:74:3e:20:d2:e7:3b:bf:c5:94:24:e7:d3:3f:4d: a2:46:05:a9:bb:3f:38:58:91:1b:f2:9e:e0:fa:86: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F1:B3:32:06:0A:F3:97:A8:A5:B9:8B:7C:73:81:85:E9:62:4A:FD X509v3 Authority Key Identifier: keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ad:f5:b8:67:67:17:8a:66:a3:9e:1c:5b:f2:c6:d7:44:ea: d2:ae:c5:01:c9:a7:57:b1:23:27:a5:61:49:f6:9c:f9:85:a6: b3:6b:cf:f4:a5:5b:0b:06:e2:3c:9b:91:b0:b0:8d:33:7d:bb: 21:b7:d1:af:be:89:d3:00:5b:4c:34:18:36:0d:6f:26:ed:c6: 5f:3d:99:62:2d:b1:8d:f1:1d:98:69:26:c2:96:81:f3:d0:7d: 20:ee:25:aa:e5:c1:49:e2:7e:2f:91:79:a1:79:79:af:08:da: eb:24:b1:01:d1:a7:e1:bb:89:5b:c1:19:8b:d1:c6:57:e7:79: 6a:ea:c8:c1:4f:ba:c6:eb:4d:12:da:ca:1d:a9:b0:d3:bc:8f: b4:46:ab:07:c8:04:c6:56:34:5d:5b:73:64:cd:08:88:12:7e: 52:b5:76:c3:51:07:4f:8f:8a:f6:d4:e5:f5:83:50:05:b5:f7: 9d:2c:28:09:9c:a5:c1:8f:ae:f8:15:6e:b1:3c:ca:75:c9:69: 51:a8:85:8c:d4:f1:a1:52:7f:f1:e5:21:4c:6b:a0:b5:12:10: ce:89:d6:ec:9e:d1:4c:6e:a6:13:b4:14:5e:c1:b4:b8:5d:35: 00:e1:b3:01:b9:38:0b:e5:75:24:27:06:7f:81:cc:dc:1a:19: 1b:f1:be:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnKSFEren84DuM8PiCSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTA4NTAwNWQwZTQ0OWQzYmFmYTMxYzVjYjQyOWZmODlk MmM0YjcwHhcNMjUxMjA2MDcwMDQwWhcNMjUxMjA3MDcwMDQwWjAzMTEwLwYDVQQD EyhiOGYxYjMzMjA2MGFmMzk3YThhNWI5OGI3YzczODE4NWU5NjI0YWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqInbnNYMNIUT4EMo4XIRbN/ZNa8D JtCOTv7G6dAqqIE5Gl723nJRgelkSs1Dm94oP9TPrwAFwrHn+kB8JVcbMYlo5P0D u1AGP4uejvWKPvNwcq51CR+gE59tjb8/YAA/re15r2ANAFhYeaG8viOYvWjXFrNs o98oGAOTFXx3VdmFutLHZATgzy2mnVW9y6VDMmGFMuYj+T2K6NNQ8rm/HBOGiA35 ev30LX3YP/ijsttAIUlDDQFPSv2IjQffuTKgDqSD7ZpD+vthHTb+Q6DbAbwqalI+ 6/1wuMQebZUppQG6dD4g0uc7v8WUJOfTP02iRgWpuz84WJEb8p7g+obQdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjxszIGCvOXqKW5i3xzgYXpYkr9MB8GA1UdIwQY MBaAFMVQhQBdDkSdO6+jHFy0Kf+J0sS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMt MjBhY2MzOGJjOGZmLzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMtMjBhY2MzOGJjOGZm LzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp631uGdn F4pmo54cW/LG10Tq0q7FAcmnV7EjJ6VhSfac+YWms2vP9KVbCwbiPJuRsLCNM327 IbfRr76J0wBbTDQYNg1vJu3GXz2ZYi2xjfEdmGkmwpaB89B9IO4lquXBSeJ+L5F5 oXl5rwja6ySxAdGn4buJW8EZi9HGV+d5aurIwU+6xutNEtrKHamw07yPtEarB8gE xlY0XVtzZM0IiBJ+UrV2w1EHT4+K9tTl9YNQBbX3nSwoCZylwY+u+BVusTzKdclp UaiFjNTxoVJ/8eUhTGugtRIQzonW7J7RTG6mE7QUXsG0uF01AOGzAbk4C+V1JCcG f4HM3BoZG/G+Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:54 2025 by rpki-client