This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json) Hash identifier: +auuS3CDzU+SmhtUZBwa/p4oTn38wyrEGH/xSVCz0v4= Subject key identifier: 87:DE:A0:C5:DC:A0:31:3C:0C:8D:94:9B:58:8D:4F:E2:DC:59:31:0A Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Certificate serial: 019AF1642847AEE968116B90160805D596E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=) 2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=) 3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: u6XaVJ+3ZbmMUAGiNIxlNOjRu1CWkRNReY0+eC7Bsqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:28:47:ae:e9:68:11:6b:90:16:08:05:d5:96:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=87dea0c5dca0313c0c8d949b588d4fe2dc59310a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:cb:c7:4c:6e:73:c1:58:9c:fb:b9:8a:2a: b1:6a:95:ed:92:a0:b8:ff:7b:e0:1a:bf:ab:99:63: 5a:1c:7f:d7:08:e9:09:23:3b:05:39:d4:d0:55:2d: 9a:af:68:b9:ec:43:93:6c:2a:76:ca:f7:3e:3f:57: 69:54:2f:94:e7:fb:40:be:7a:44:e0:4b:8d:d3:fb: 79:20:fe:15:2e:13:74:bc:65:db:64:92:78:47:16: 60:4b:18:02:68:a0:b1:52:f9:b4:88:a6:8d:2d:d6: 6d:ca:f4:c6:e8:3b:31:38:3a:ca:a3:93:6a:7d:09: d8:ba:8a:ad:fe:12:c5:d0:80:81:48:10:9d:19:02: 8f:e3:54:8e:25:32:4b:93:8f:a7:83:96:cf:c5:ea: a5:84:1d:5f:cd:7f:c0:5d:38:91:7a:cf:eb:5b:24: dc:30:f4:68:37:32:8b:25:73:b7:97:cc:bb:18:6a: 38:17:38:96:33:79:3e:a6:21:b4:d5:29:90:9f:da: e6:ee:be:bc:ca:22:fd:cc:ba:ec:b8:51:f2:bd:61: 0e:d2:75:cf:93:11:f6:a0:57:53:64:06:9a:58:45: 3e:24:4f:41:a9:12:9e:4f:76:84:e3:63:ed:ff:50: 01:16:1f:2c:7e:18:b2:f9:99:94:4e:19:8a:4d:b4: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DE:A0:C5:DC:A0:31:3C:0C:8D:94:9B:58:8D:4F:E2:DC:59:31:0A X509v3 Authority Key Identifier: keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c2:57:03:94:6d:e9:ac:98:99:0e:82:ea:10:98:5b:ec:7b: dd:d3:bb:16:2f:0d:a7:f7:de:cf:5f:1b:1a:e5:a5:94:29:ba: ec:c8:58:fe:71:8c:8f:5f:ab:06:29:fe:24:d1:c2:69:a4:d2: e6:7e:ba:9b:0a:eb:fa:fd:64:d3:72:82:5c:03:d5:44:58:3b: a9:b8:a8:cb:e1:fd:20:8e:74:3a:a9:59:3a:6a:1c:8f:a3:78: 5c:0c:09:51:66:2a:0a:37:e5:9b:84:ec:92:08:1e:94:23:3b: 27:c8:b5:ec:4c:83:42:6f:af:8c:c8:89:df:f7:61:74:85:68: a3:4b:30:0a:3a:8d:2f:35:f7:d7:70:88:d8:0e:fc:71:79:e3: ec:14:85:00:44:24:f5:00:d7:d0:90:32:fb:96:ca:cb:df:f8: 5d:15:b1:38:4a:a2:74:7d:6b:da:19:2b:7a:be:e1:a6:6c:14: ee:f9:a1:f2:63:52:b2:53:fb:9c:11:43:22:38:b0:05:61:96: bd:6e:b3:79:b2:89:e3:4d:65:8a:29:43:25:b7:6b:60:7e:8a: 82:55:77:d2:45:73:fb:5e:43:07:d1:16:f8:76:bf:b8:db:6c: 3e:cb:a5:ec:73:63:39:1c:da:e1:85:29:8f:7d:48:c1:9d:6d: 8f:ee:f9:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZChHruloEWuQFggF1ZboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1N2U1OGMzNDZlN2I0MTU1NTBjMTNhZWFkZDJjZjkwZWRk MDc4OTUwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD Eyg4N2RlYTBjNWRjYTAzMTNjMGM4ZDk0OWI1ODhkNGZlMmRjNTkzMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydLLx0xuc8FYnPu5iiqxapXtkqC4 /3vgGr+rmWNaHH/XCOkJIzsFOdTQVS2ar2i57EOTbCp2yvc+P1dpVC+U5/tAvnpE 4EuN0/t5IP4VLhN0vGXbZJJ4RxZgSxgCaKCxUvm0iKaNLdZtyvTG6DsxODrKo5Nq fQnYuoqt/hLF0ICBSBCdGQKP41SOJTJLk4+ng5bPxeqlhB1fzX/AXTiRes/rWyTc MPRoNzKLJXO3l8y7GGo4FziWM3k+piG01SmQn9rm7r68yiL9zLrsuFHyvWEO0nXP kxH2oFdTZAaaWEU+JE9BqRKeT3aE42Pt/1ABFh8sfhiy+ZmUThmKTbQxPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfeoMXcoDE8DI2Um1iNT+LcWTEKMB8GA1UdIwQY MBaAFMV+WMNG57QVVQwTrq3Sz5Dt0HiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2Mt MDc0MzA1NzM1YWMyLzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2MtMDc0MzA1NzM1YWMy LzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcJXA5Rt 6ayYmQ6C6hCYW+x73dO7Fi8Np/fez18bGuWllCm67MhY/nGMj1+rBin+JNHCaaTS 5n66mwrr+v1k03KCXAPVRFg7qbioy+H9II50OqlZOmocj6N4XAwJUWYqCjflm4Ts kggelCM7J8i17EyDQm+vjMiJ3/dhdIVoo0swCjqNLzX313CI2A78cXnj7BSFAEQk 9QDX0JAy+5bKy9/4XRWxOEqidH1r2hkrer7hpmwU7vmh8mNSslP7nBFDIjiwBWGW vW6zebKJ401liilDJbdrYH6KglV30kVz+15DB9EW+Ha/uNtsPsul7HNjORza4YUp j31IwZ1tj+759g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:02 2025 by rpki-client