This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json) Hash identifier: 9ScPxe4otHvuUtXhJ5yzyJle5lYtdaVtyJ9Wap4Uy54= Subject key identifier: 98:74:DA:9D:EF:D2:1D:DD:EE:D9:AD:0C:7B:BE:64:CB:CF:87:C4:4F Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Certificate serial: 019AF3F74FB0E8999FA2030669A31DD17589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft Manifest number: 0ACF Signing time: Sat 06 Dec 2025 14:01:02 +0000 Manifest this update: Sat 06 Dec 2025 14:01:02 +0000 Manifest next update: Sun 07 Dec 2025 14:01:02 +0000 Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: l9GkUJeOxMuTmR2M/4ysvWZgP90Y7zKEgRmTlbVNMkk=) 2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=) 3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:4f:b0:e8:99:9f:a2:03:06:69:a3:1d:d1:75:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Validity Not Before: Dec 6 14:01:02 2025 GMT Not After : Dec 7 14:01:02 2025 GMT Subject: CN=9874da9defd21dddeed9ad0c7bbe64cbcf87c44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:e9:89:96:a8:49:da:ed:70:2c:30:f6:6b: 75:ef:6f:0a:ba:b4:6a:dc:b3:d2:47:33:0f:2f:71: a8:d8:4c:f0:21:fe:40:05:2f:0e:cf:ce:ef:f6:09: 57:16:d0:88:d5:60:2c:10:85:69:ca:d1:48:b8:70: 61:b8:db:2f:80:77:f4:90:c0:50:cb:39:22:b8:8a: 11:b5:a3:4b:59:3d:01:a1:2f:a5:b2:03:e3:c4:6a: 56:39:62:c3:a7:35:2e:51:8f:9a:07:e1:fe:62:15: 4c:dd:e2:32:c3:2b:ae:33:b8:1d:55:f0:e0:7f:22: 51:d8:9d:20:45:2f:ab:d2:a5:56:4a:5a:6f:0e:49: 52:60:36:3b:ae:5f:f1:9d:6e:24:de:cd:1a:b8:59: 80:61:82:ba:1a:82:a5:16:e7:26:26:21:57:82:c2: 92:cf:01:10:57:17:d6:20:dc:ac:f6:b5:14:08:c4: 55:0d:63:c7:db:4c:11:26:4c:51:f1:fb:5f:0a:e1: 10:22:0f:49:3e:e5:95:62:dd:66:fe:a5:b4:52:40: 71:26:9e:cc:e3:81:95:ee:06:85:9a:b1:26:ea:b9: 32:06:7c:6b:d5:51:0c:87:61:f4:32:a0:17:f4:ca: af:fc:2e:c8:ee:4e:9c:e0:ac:83:1a:62:c4:95:01: ef:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:DA:9D:EF:D2:1D:DD:EE:D9:AD:0C:7B:BE:64:CB:CF:87:C4:4F X509v3 Authority Key Identifier: keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:68:49:22:c0:22:2f:e1:0c:4a:ea:06:99:09:0f:c6:e3:b3: af:9d:ad:9d:53:e1:f1:6a:6e:db:45:b5:a8:fe:f5:2a:ab:d2: d5:f9:28:86:a5:6b:6f:05:d0:7f:60:96:de:45:91:01:13:28: a3:8b:3c:cb:03:35:a3:1a:f5:97:fb:1c:dc:8d:4f:02:00:83: 59:a7:f6:7f:4b:61:7e:24:68:c7:22:14:d9:6f:47:ba:97:32: c7:cb:ac:48:fa:d7:d2:4b:2d:19:3a:0b:2f:29:5c:03:ed:fc: 9e:f1:48:30:06:98:69:ce:4b:31:8b:36:4e:57:45:b8:99:12: dc:61:4f:d3:f0:66:f0:90:03:ca:ff:14:d5:22:2c:59:60:2a: 93:17:2b:2f:d2:63:ad:83:c3:8a:90:cd:f8:21:24:54:89:83: 6a:2b:19:2f:cb:76:97:08:2c:cb:84:23:95:e6:c2:f7:de:48: 66:0e:e0:49:dd:16:83:ac:6f:2e:0d:d9:bd:16:a1:69:4c:b8: 53:dd:43:38:c0:ed:96:ec:a7:b3:12:ab:dc:7c:30:74:96:1e: 0d:f1:d3:71:b3:25:bf:ee:21:e4:07:b0:9a:f5:bd:4e:66:55: bd:34:80:4a:89:34:da:d5:db:6c:b8:f3:a1:13:d7:49:cc:28: 0b:ca:13:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90+w6JmfogMGaaMd0XWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYjg4ZDkxNzg4ZmU5OTIxMDg5ZDliNjI3MWUyMTBmN2Y4 OTE0YTIwHhcNMjUxMjA2MTQwMTAyWhcNMjUxMjA3MTQwMTAyWjAzMTEwLwYDVQQD Eyg5ODc0ZGE5ZGVmZDIxZGRkZWVkOWFkMGM3YmJlNjRjYmNmODdjNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygnpiZaoSdrtcCww9mt1728KurRq 3LPSRzMPL3Go2EzwIf5ABS8Oz87v9glXFtCI1WAsEIVpytFIuHBhuNsvgHf0kMBQ yzkiuIoRtaNLWT0BoS+lsgPjxGpWOWLDpzUuUY+aB+H+YhVM3eIywyuuM7gdVfDg fyJR2J0gRS+r0qVWSlpvDklSYDY7rl/xnW4k3s0auFmAYYK6GoKlFucmJiFXgsKS zwEQVxfWINys9rUUCMRVDWPH20wRJkxR8ftfCuEQIg9JPuWVYt1m/qW0UkBxJp7M 44GV7gaFmrEm6rkyBnxr1VEMh2H0MqAX9Mqv/C7I7k6c4KyDGmLElQHvHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJh02p3v0h3d7tmtDHu+ZMvPh8RPMB8GA1UdIwQY MBaAFF+4jZF4j+mSEInZticeIQ9/iRSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQt NGNlNGQ4ZmVhNmVmLzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQtNGNlNGQ4ZmVhNmVm LzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2hJIsAi L+EMSuoGmQkPxuOzr52tnVPh8Wpu20W1qP71KqvS1fkohqVrbwXQf2CW3kWRARMo o4s8ywM1oxr1l/sc3I1PAgCDWaf2f0thfiRoxyIU2W9Hupcyx8usSPrX0kstGToL LylcA+38nvFIMAaYac5LMYs2TldFuJkS3GFP0/Bm8JADyv8U1SIsWWAqkxcrL9Jj rYPDipDN+CEkVImDaisZL8t2lwgsy4QjlebC995IZg7gSd0Wg6xvLg3ZvRahaUy4 U91DOMDtluynsxKr3HwwdJYeDfHTcbMlv+4h5AewmvW9TmZVvTSASok02tXbbLjz oRPXScwoC8oToQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:05:30 2025 by rpki-client