This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json) Hash identifier: j1UU5fwNw4h/RZEAh9scjl0qc68UzuBOu/grVBfKc3E= Subject key identifier: F3:22:DE:84:1C:9B:84:1A:00:FE:A6:83:6E:62:4C:BB:37:13:CD:BA Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df Certificate serial: 019AF12CFB755CEFE2BF3BDF18480189D177 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft Manifest number: 1381 Signing time: Sat 06 Dec 2025 01:00:48 +0000 Manifest this update: Sat 06 Dec 2025 01:00:48 +0000 Manifest next update: Sun 07 Dec 2025 01:00:48 +0000 Files and hashes: 1: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: alvoufstZzsX7VmVt5f6bFEmQCPLeBZuhKL/cTRQGpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fb:75:5c:ef:e2:bf:3b:df:18:48:01:89:d1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df Validity Not Before: Dec 6 01:00:48 2025 GMT Not After : Dec 7 01:00:48 2025 GMT Subject: CN=f322de841c9b841a00fea6836e624cbb3713cdba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:24:a8:e7:ae:4d:6e:b8:05:c9:b3:83:12:e0: 83:b3:09:18:c4:11:8f:4f:a1:be:a5:7b:58:48:6e: 85:55:d8:1d:55:71:99:91:ec:0a:f1:84:c3:a6:bb: 65:26:62:62:38:58:f8:49:d6:76:f6:65:6e:ba:33: 5c:fc:ca:8e:0a:10:78:c4:f5:e6:f9:24:d5:36:4f: 01:7e:1d:fa:05:86:3c:9d:40:c8:2a:44:da:02:64: 8b:62:b0:0a:51:59:5e:87:41:55:c8:f6:1c:8e:1a: be:9c:4b:e4:d3:45:dd:33:0d:46:55:5c:de:0e:10: a1:b6:ef:c2:42:15:45:f3:0a:95:07:fc:0b:58:a1: e3:a5:ed:14:ac:a2:e4:f0:73:2b:c1:d9:51:e3:33: c3:99:aa:b4:fe:b0:d1:fe:b0:47:cc:d9:4d:27:3c: bf:c4:1b:b8:3e:1b:30:59:dd:02:0e:c7:73:03:5b: 2d:57:20:06:89:fc:5f:43:3a:26:ac:9e:83:7a:ec: 34:2a:d9:6c:f1:6a:6f:4c:12:db:e4:61:1f:b6:dc: 43:d1:10:61:5b:b9:e7:c5:6c:a0:dc:d8:37:af:30: 7b:fa:61:27:88:5e:90:02:9c:bf:40:25:57:e3:2a: 59:15:06:13:93:c6:ca:23:b4:68:4b:39:72:26:0c: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:22:DE:84:1C:9B:84:1A:00:FE:A6:83:6E:62:4C:BB:37:13:CD:BA X509v3 Authority Key Identifier: keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c8:b4:da:e9:93:de:7f:be:90:32:1e:1b:6f:35:ae:87:ba: 8d:52:80:77:ae:8b:68:46:31:78:5e:1c:c1:35:98:50:3f:50: 08:d0:29:a5:e2:65:fa:68:bf:cb:fb:d4:13:7d:29:b9:fd:b1: 66:d0:1c:23:f1:1e:35:a7:9c:d0:2a:af:1f:53:b7:35:21:a5: 93:fc:2a:f7:76:57:82:7f:6c:ba:b9:eb:1d:cc:b1:d2:48:35: 91:56:f2:5a:ea:3c:ce:b1:24:a6:7c:90:34:40:41:46:10:ca: e8:a6:06:9f:37:8a:10:9f:a9:cd:62:42:ca:4f:b5:1b:90:7e: c4:27:b9:7b:02:ab:a5:11:72:2a:b1:87:30:54:a1:2c:6a:83: f4:01:25:fe:02:b5:37:d4:0a:53:70:09:a5:ff:df:83:a9:0c: df:c9:16:26:a4:25:e9:bf:b1:94:39:96:98:f5:07:24:2a:da: 47:dd:80:74:df:97:6d:2e:8a:74:25:88:6a:b6:bc:5e:03:02: da:bf:d1:8b:6e:15:3c:2b:4c:e4:2c:40:88:c7:60:bb:6f:47: c2:9e:80:37:00:ba:13:db:80:30:5a:2f:55:84:d0:0a:c3:e9: b6:f7:a7:f3:76:2a:d3:9c:71:8e:95:03:58:0a:7b:23:ce:f7: 8a:e7:41:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPt1XO/ivzvfGEgBidF3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZjE1MmI2YTBkMDA0NjI3ZDI4NWQ4NzlhYTgzZTU4NDYx YWIyZGYwHhcNMjUxMjA2MDEwMDQ4WhcNMjUxMjA3MDEwMDQ4WjAzMTEwLwYDVQQD EyhmMzIyZGU4NDFjOWI4NDFhMDBmZWE2ODM2ZTYyNGNiYjM3MTNjZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SSo565NbrgFybODEuCDswkYxBGP T6G+pXtYSG6FVdgdVXGZkewK8YTDprtlJmJiOFj4SdZ29mVuujNc/MqOChB4xPXm +STVNk8Bfh36BYY8nUDIKkTaAmSLYrAKUVleh0FVyPYcjhq+nEvk00XdMw1GVVze DhChtu/CQhVF8wqVB/wLWKHjpe0UrKLk8HMrwdlR4zPDmaq0/rDR/rBHzNlNJzy/ xBu4PhswWd0CDsdzA1stVyAGifxfQzomrJ6Deuw0Ktls8WpvTBLb5GEfttxD0RBh W7nnxWyg3Ng3rzB7+mEniF6QApy/QCVX4ypZFQYTk8bKI7RoSzlyJgxqMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMi3oQcm4QaAP6mg25iTLs3E826MB8GA1UdIwQY MBaAFMXxUrag0ARifShdh5qoPlhGGrLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81M2FkNWEtMGEzNy00ZjY1LWE2YzYt NzM3ZTc4Yzg3MDEyLzEveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81M2FkNWEtMGEzNy00ZjY1LWE2YzYtNzM3ZTc4Yzg3MDEy LzEveGZGU3RxRFFCR0o5S0YySG1xZy1XRVlhc3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksi02umT 3n++kDIeG281roe6jVKAd66LaEYxeF4cwTWYUD9QCNAppeJl+mi/y/vUE30puf2x ZtAcI/EeNaec0CqvH1O3NSGlk/wq93ZXgn9surnrHcyx0kg1kVbyWuo8zrEkpnyQ NEBBRhDK6KYGnzeKEJ+pzWJCyk+1G5B+xCe5ewKrpRFyKrGHMFShLGqD9AEl/gK1 N9QKU3AJpf/fg6kM38kWJqQl6b+xlDmWmPUHJCraR92AdN+XbS6KdCWIara8XgMC 2r/Ri24VPCtM5CxAiMdgu29Hwp6ANwC6E9uAMFovVYTQCsPptven83Yq05xxjpUD WAp7I873iudBgw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:23 2025 by rpki-client