This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json) Hash identifier: UMRSGGzkzQag6cgatUIn5SAyupBbZMq4a2j8gpq3ekA= Subject key identifier: 34:AC:2F:14:C3:65:1A:6A:F7:12:38:2C:08:50:7F:E7:CA:C2:A8:C7 Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04 Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04 Certificate serial: 019AF49C550C9B6A4346DA96611E84E17140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:17 +0000 Manifest this update: Sat 06 Dec 2025 17:01:17 +0000 Manifest next update: Sun 07 Dec 2025 17:01:17 +0000 Files and hashes: 1: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (hash: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=) 2: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: 9EQR8xYmAL4T9MQjCoRHQJ3Ik8OBnrVkb3P02QvSPGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:55:0c:9b:6a:43:46:da:96:61:1e:84:e1:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04 Validity Not Before: Dec 6 17:01:17 2025 GMT Not After : Dec 7 17:01:17 2025 GMT Subject: CN=34ac2f14c3651a6af712382c08507fe7cac2a8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:cc:5a:0c:69:3b:ee:93:4a:21:1d:18:5b: 85:b8:de:18:33:c3:d3:6f:c6:b7:ad:a5:11:27:ea: 62:62:48:e2:d4:ec:14:f0:b2:11:1b:95:7b:b1:91: a7:46:45:b8:b8:60:6d:ed:f0:51:12:84:82:f8:1f: c6:86:45:de:60:a0:4f:2e:a2:45:07:f6:2c:d6:e1: 85:e6:d1:c9:3f:02:aa:37:6b:72:01:ac:68:92:08: 62:bb:d4:f5:d9:bb:13:e1:ce:c7:4a:be:8e:0f:5c: 79:49:db:17:20:0d:cd:92:e4:bd:b5:1c:59:51:3a: 21:57:9f:b4:1f:89:1c:de:1a:f6:78:62:7d:01:be: db:2c:14:ed:c1:c2:7b:bc:65:32:6e:b3:01:98:5c: a7:ae:9d:fe:58:8d:b2:33:7f:f0:db:ae:d4:84:0a: 5a:85:0a:f3:b2:bc:33:45:cd:e6:82:ee:85:21:ca: 1b:5e:8b:79:ed:8e:91:26:22:6a:2a:5f:42:6c:85: 87:25:59:ca:b0:64:f6:9d:6f:25:92:3f:f5:d4:cc: 53:11:b2:9d:05:f7:37:12:c6:f0:af:f1:bc:36:1c: b4:d6:f0:44:b2:30:b3:03:e3:2e:7a:aa:73:38:55: 43:9a:59:70:ea:10:e7:fe:ba:77:b9:6a:bf:cc:9c: 61:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AC:2F:14:C3:65:1A:6A:F7:12:38:2C:08:50:7F:E7:CA:C2:A8:C7 X509v3 Authority Key Identifier: keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9c:59:20:ad:4d:31:59:c4:0b:a7:36:a2:13:2a:1e:3d:7b: 58:a4:76:90:bb:af:c6:ef:d0:e9:b8:c4:0f:08:ba:0a:72:82: 3e:d6:cd:70:02:84:8a:cd:93:6f:8a:c7:5d:3b:7c:5b:94:06: bb:09:93:79:a7:98:1a:de:dc:0b:4e:fa:a5:7d:5a:65:e6:24: 19:42:c0:46:aa:5d:9d:14:38:f8:46:0b:28:61:5c:13:21:bf: 5a:46:f4:b1:b8:a0:36:4c:21:12:8b:05:f1:ef:f2:1c:14:d5: 1a:b1:90:43:73:6d:d5:a2:f9:ee:9a:c3:9b:4d:97:18:a2:62: 0e:a1:d6:a8:59:04:2d:1d:ef:e8:9d:c2:66:f5:dc:f6:bd:39: 34:43:75:06:21:b3:81:21:3f:6d:e4:4a:4b:a9:69:8a:8e:23: af:65:b1:04:91:c7:f3:76:32:c3:8f:bd:ed:7a:82:72:19:9e: 54:a8:69:ff:2e:f0:de:1b:d2:b4:04:76:59:b5:62:8b:fe:c8: 87:b6:cf:4f:ef:f7:e5:0f:8c:ea:36:5e:dc:25:e9:1b:9d:2e: 3b:9f:e7:a3:5c:1a:4d:a3:95:4f:97:0b:2e:90:4c:0e:ae:8e: 16:15:cd:91:4f:17:0f:e9:49:0d:36:0c:eb:3a:5a:81:c4:fd: 17:52:e2:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFUMm2pDRtqWYR6E4XFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjExYTE4MGRmMTc5OTRlNDhhZDMzMTg3MmNmZDAwYWQ5 YWJhMDQwHhcNMjUxMjA2MTcwMTE3WhcNMjUxMjA3MTcwMTE3WjAzMTEwLwYDVQQD EygzNGFjMmYxNGMzNjUxYTZhZjcxMjM4MmMwODUwN2ZlN2NhYzJhOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9DMWgxpO+6TSiEdGFuFuN4YM8PT b8a3raURJ+piYkji1OwU8LIRG5V7sZGnRkW4uGBt7fBREoSC+B/GhkXeYKBPLqJF B/Ys1uGF5tHJPwKqN2tyAaxokghiu9T12bsT4c7HSr6OD1x5SdsXIA3NkuS9tRxZ UTohV5+0H4kc3hr2eGJ9Ab7bLBTtwcJ7vGUybrMBmFynrp3+WI2yM3/w267UhApa hQrzsrwzRc3mgu6FIcobXot57Y6RJiJqKl9CbIWHJVnKsGT2nW8lkj/11MxTEbKd Bfc3Esbwr/G8Nhy01vBEsjCzA+MueqpzOFVDmllw6hDn/rp3uWq/zJxhtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSsLxTDZRpq9xI4LAhQf+fKwqjHMB8GA1UdIwQY MBaAFF3xGhgN8XmU5IrTMYcs/QCtmroEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTct NmJjZTc3OTljYmVhLzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy83M2QxNDUtZWI5OS00YmQ4LWE4MTctNmJjZTc3OTljYmVh LzEvWGZFYUdBM3hlWlRraXRNeGh5ejlBSzJhdWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJxZIK1N MVnEC6c2ohMqHj17WKR2kLuvxu/Q6bjEDwi6CnKCPtbNcAKEis2Tb4rHXTt8W5QG uwmTeaeYGt7cC076pX1aZeYkGULARqpdnRQ4+EYLKGFcEyG/Wkb0sbigNkwhEosF 8e/yHBTVGrGQQ3Nt1aL57prDm02XGKJiDqHWqFkELR3v6J3CZvXc9r05NEN1BiGz gSE/beRKS6lpio4jr2WxBJHH83Yyw4+97XqCchmeVKhp/y7w3hvStAR2WbVii/7I h7bPT+/35Q+M6jZe3CXpG50uO5/no1waTaOVT5cLLpBMDq6OFhXNkU8XD+lJDTYM 6zpagcT9F1Li4g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:32:07 2025 by rpki-client