This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json) Hash identifier: NpaEQjZJXJEn82mjvnOV3v9qK9789uEUopWT7TDrTsQ= Subject key identifier: E8:74:D1:A7:4A:95:F2:C8:32:E9:8D:CB:E0:27:3C:99:CC:9B:EC:F7 Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57 Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57 Certificate serial: 019AF19AC5C14E7CCDD72660DC01B39A71AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft Manifest number: 131F Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=) 2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: eUV67j2ja+bEdHGKGLhce35mYiX91Y0KlW6cn5dgIYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c5:c1:4e:7c:cd:d7:26:60:dc:01:b3:9a:71:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=e874d1a74a95f2c832e98dcbe0273c99cc9becf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:45:78:2a:9b:e9:b0:30:62:ac:8f:1a:c3: f5:7e:96:93:7c:1e:f2:5a:53:96:d9:7b:24:ad:bd: cd:c6:37:55:18:16:ae:df:56:fd:99:9b:5a:b0:54: c1:14:c6:56:a3:09:20:b5:3a:2f:c1:a1:db:63:46: 8d:88:2a:cf:6b:94:23:d4:74:a3:32:20:03:ae:a9: ed:dd:f4:e5:9e:01:1b:33:8c:81:b9:04:1c:0b:c9: a3:7b:b3:99:00:d5:5b:2f:d0:6b:51:2b:19:85:63: f8:cb:ca:22:c2:5f:bb:d4:92:65:b3:ae:39:e4:9f: 46:22:22:d0:55:43:08:7e:d5:84:6d:9e:14:67:fa: 94:15:ab:d4:53:ce:79:48:61:60:ea:4c:09:98:3f: 35:3b:3b:9d:40:4e:51:78:eb:91:41:e0:f0:21:36: 5d:85:8f:cb:24:79:af:35:c5:64:52:33:be:c3:0b: 35:9c:71:4b:e2:76:62:d0:b9:95:cf:ef:26:ac:de: 19:4d:d8:a2:78:78:3a:35:dd:e9:76:93:ab:74:b9: 65:e6:1c:8e:ce:ec:aa:67:56:8a:51:fc:45:02:b5: 97:ff:58:d4:8e:15:34:1e:06:c2:a5:9e:a2:89:ec: 5c:3c:41:39:e4:6b:1e:e9:86:3f:6a:25:75:2b:78: 94:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:74:D1:A7:4A:95:F2:C8:32:E9:8D:CB:E0:27:3C:99:CC:9B:EC:F7 X509v3 Authority Key Identifier: keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:bd:5f:2c:87:a9:7c:59:e2:95:70:73:fb:09:a4:e8:5f:e0: 51:21:06:c5:46:22:1e:0f:c8:9f:66:eb:9c:c8:96:50:14:51: fc:78:18:86:7a:02:a8:e7:51:4d:55:78:9e:fb:92:6f:52:6e: 8e:9f:56:85:56:d8:95:88:13:97:74:c9:7a:85:27:c4:9b:25: a5:03:45:4e:55:00:64:e8:9b:6c:87:4b:27:a1:15:b0:66:d1: bc:eb:dd:e0:f5:df:9b:8a:d2:c2:05:81:d6:04:af:94:24:00: 4b:24:9c:fb:4e:a9:8e:fb:f1:50:c7:e9:85:53:9a:01:2a:a2: a0:88:98:e5:58:45:5d:f8:73:42:60:84:54:50:cc:98:37:6e: cd:57:1c:97:e7:f1:d6:4e:67:43:bd:ab:df:aa:f8:58:81:70: 24:0e:7c:48:c5:7a:ef:e3:1e:99:b3:ea:12:5d:38:4b:f2:ce: c8:2c:53:59:6a:1b:94:bf:67:aa:f5:7d:92:8a:24:bf:23:22: 17:a2:2b:a0:bd:12:89:24:ee:0d:75:b0:d3:42:dd:c4:e4:f7: b3:62:d3:95:70:23:e5:92:e9:26:4a:34:29:b8:40:85:82:fb: e3:ad:6c:9a:30:64:e1:ca:ea:4c:94:35:25:b5:ae:6d:40:12: 10:5d:a4:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsXBTnzN1yZg3AGzmnGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzE0OGI5ZWNkMjBlNWZmMjQ2NWE5Y2QxMDFhZGE5YWU1 MDhkNTcwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EyhlODc0ZDFhNzRhOTVmMmM4MzJlOThkY2JlMDI3M2M5OWNjOWJlY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLBFeCqb6bAwYqyPGsP1fpaTfB7y WlOW2Xskrb3NxjdVGBau31b9mZtasFTBFMZWowkgtTovwaHbY0aNiCrPa5Qj1HSj MiADrqnt3fTlngEbM4yBuQQcC8mje7OZANVbL9BrUSsZhWP4y8oiwl+71JJls645 5J9GIiLQVUMIftWEbZ4UZ/qUFavUU855SGFg6kwJmD81OzudQE5ReOuRQeDwITZd hY/LJHmvNcVkUjO+wws1nHFL4nZi0LmVz+8mrN4ZTdiieHg6Nd3pdpOrdLll5hyO zuyqZ1aKUfxFArWX/1jUjhU0HgbCpZ6iiexcPEE55Gse6YY/aiV1K3iUgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOh00adKlfLIMumNy+AnPJnMm+z3MB8GA1UdIwQY MBaAFF4xSLns0g5f8kZanNEBramuUI1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYt ZTQ5MmQ0ZTFiNjMxLzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYtZTQ5MmQ0ZTFiNjMx LzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeL1fLIep fFnilXBz+wmk6F/gUSEGxUYiHg/In2brnMiWUBRR/HgYhnoCqOdRTVV4nvuSb1Ju jp9WhVbYlYgTl3TJeoUnxJslpQNFTlUAZOibbIdLJ6EVsGbRvOvd4PXfm4rSwgWB 1gSvlCQASySc+06pjvvxUMfphVOaASqioIiY5VhFXfhzQmCEVFDMmDduzVccl+fx 1k5nQ72r36r4WIFwJA58SMV67+MembPqEl04S/LOyCxTWWoblL9nqvV9kookvyMi F6IroL0SiSTuDXWw00LdxOT3s2LTlXAj5ZLpJko0KbhAhYL7461smjBk4crqTJQ1 JbWubUASEF2k8A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:11 2025 by rpki-client