This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json) Hash identifier: ZMAXdtVffQY2GCb7mW/K9S/tZoGqwdhDln2SdSjzNWc= Subject key identifier: 7C:39:A1:9C:CD:12:F9:AE:F0:90:21:9D:3F:72:0B:27:4B:1B:84:23 Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Certificate serial: 019AF577FB2875B1D6EE53015B6000537258 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft Manifest number: 0641 Signing time: Sat 06 Dec 2025 21:01:12 +0000 Manifest this update: Sat 06 Dec 2025 21:01:12 +0000 Manifest next update: Sun 07 Dec 2025 21:01:12 +0000 Files and hashes: 1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: kz3QT+tLINauli3NWIlPd91Uag248yIV4WDsbZ25ekg=) 2: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (hash: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:fb:28:75:b1:d6:ee:53:01:5b:60:00:53:72:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Validity Not Before: Dec 6 21:01:12 2025 GMT Not After : Dec 7 21:01:12 2025 GMT Subject: CN=7c39a19ccd12f9aef090219d3f720b274b1b8423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:74:39:0b:75:93:ef:bc:1e:b3:18:ac:8a: d2:8d:08:51:4a:80:20:d4:68:17:d3:9c:01:84:d5: c5:7c:36:9c:3c:95:2c:fc:5a:37:52:7b:91:8a:ae: 13:33:70:c8:71:8c:ea:bb:ba:6a:f7:a0:70:40:87: c1:5c:67:a7:5c:a0:1d:f8:0e:b9:b0:89:3d:6b:4b: 57:d9:14:e6:b1:89:e1:2f:9d:28:91:3f:3a:bc:32: 36:3a:43:4f:9e:c4:bf:cc:50:d4:39:77:96:a3:dc: 1e:06:c4:f0:2e:05:53:7a:33:87:9a:0e:19:0e:be: 1d:2d:e0:68:bf:09:24:fb:f7:4b:70:2f:dc:23:4c: c8:41:f3:2a:de:df:de:20:5a:fb:e2:36:6a:81:35: 35:d9:16:28:9b:b1:d4:d0:70:9c:8e:ab:45:a3:4f: 19:8f:88:7a:7e:8b:a9:3f:17:4a:d7:73:02:51:47: 1b:85:ff:6f:f3:e0:6f:51:1b:14:10:a3:64:2e:ed: 40:45:2e:e0:7a:ce:dd:b9:e8:b8:d3:25:7f:84:fe: 21:78:31:ef:53:4d:11:cb:8b:09:9f:d5:07:d6:ba: 3d:3b:03:5c:90:0f:99:36:27:28:e2:4a:c4:6f:d8: 2c:5a:3a:46:55:ec:f6:3a:03:56:7d:3f:24:67:17: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:39:A1:9C:CD:12:F9:AE:F0:90:21:9D:3F:72:0B:27:4B:1B:84:23 X509v3 Authority Key Identifier: keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f0:d1:18:42:d2:a9:49:f6:7c:c9:3b:4e:8c:dc:e0:d6:79: ec:c9:d0:80:2c:01:ca:c6:e9:66:e1:5c:60:90:6a:cf:05:8b: e1:43:26:9d:bc:1c:ed:b0:53:56:f3:41:9f:98:0b:e2:01:6a: ef:c9:fc:5f:97:d7:7f:ec:4b:3c:72:56:e3:00:84:47:5d:fa: 5c:d7:53:dd:c6:d2:ab:cb:4b:bc:79:f9:2b:02:4e:9c:b2:1e: 2c:9b:21:01:4d:22:ae:85:50:da:e8:1e:e1:38:a9:6b:f6:49: a1:b1:ef:15:e3:84:c1:62:06:0b:25:df:80:2c:71:76:3e:cb: ab:f6:e1:5e:fc:21:b4:7b:a5:cd:20:64:ec:51:7f:e7:40:53: ec:af:af:77:cf:e6:65:c3:8a:10:d1:56:5f:0f:d9:b7:83:91: 8c:69:78:67:61:0d:60:dc:ab:f7:1a:dc:64:df:bd:b6:13:a1: 9a:df:33:41:ae:85:90:95:05:b0:37:a9:c4:89:e1:86:a5:4b: b8:1b:09:58:11:64:46:b8:5f:93:27:cc:5c:72:c7:e3:55:72: 7e:47:5c:43:8f:f2:9a:35:86:8a:38:7e:94:58:a9:40:6f:54: ae:c2:bc:05:0d:5e:4b:99:68:29:55:3f:40:1b:db:6e:ff:18: 69:f3:54:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/sodbHW7lMBW2AAU3JYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmM2E2YzIxOTQxYzFlMTNiZmZjNGQ0NGQ2MWJkMjU5NWZk ZDhmZTgwHhcNMjUxMjA2MjEwMTEyWhcNMjUxMjA3MjEwMTEyWjAzMTEwLwYDVQQD Eyg3YzM5YTE5Y2NkMTJmOWFlZjA5MDIxOWQzZjcyMGIyNzRiMWI4NDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8J0OQt1k++8HrMYrIrSjQhRSoAg 1GgX05wBhNXFfDacPJUs/Fo3UnuRiq4TM3DIcYzqu7pq96BwQIfBXGenXKAd+A65 sIk9a0tX2RTmsYnhL50okT86vDI2OkNPnsS/zFDUOXeWo9weBsTwLgVTejOHmg4Z Dr4dLeBovwkk+/dLcC/cI0zIQfMq3t/eIFr74jZqgTU12RYom7HU0HCcjqtFo08Z j4h6foupPxdK13MCUUcbhf9v8+BvURsUEKNkLu1ARS7ges7duei40yV/hP4heDHv U00Ry4sJn9UH1ro9OwNckA+ZNico4krEb9gsWjpGVez2OgNWfT8kZxfqtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHw5oZzNEvmu8JAhnT9yCydLG4QjMB8GA1UdIwQY MBaAFF86bCGUHB4Tv/xNRNYb0llf3Y/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMt Y2Y4Njk4NzU3ZDM3LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMtY2Y4Njk4NzU3ZDM3 LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/DRGELS qUn2fMk7Tozc4NZ57MnQgCwBysbpZuFcYJBqzwWL4UMmnbwc7bBTVvNBn5gL4gFq 78n8X5fXf+xLPHJW4wCER136XNdT3cbSq8tLvHn5KwJOnLIeLJshAU0iroVQ2uge 4Tipa/ZJobHvFeOEwWIGCyXfgCxxdj7Lq/bhXvwhtHulzSBk7FF/50BT7K+vd8/m ZcOKENFWXw/Zt4ORjGl4Z2ENYNyr9xrcZN+9thOhmt8zQa6FkJUFsDepxInhhqVL uBsJWBFkRrhfkyfMXHLH41VyfkdcQ4/ymjWGijh+lFipQG9UrsK8BQ1eS5loKVU/ QBvbbv8YafNU8w== -----END CERTIFICATE-----Generated at Sun Dec 7 05:40:55 2025 by rpki-client