This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json) Hash identifier: K8ZU7srOZQUijnnGzYk742BgczPnxixhBWWSvaeHIPY= Subject key identifier: 12:9A:75:8A:F3:98:24:6C:AC:E1:D1:ED:22:43:80:B0:8C:74:C2:BE Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Certificate serial: 019AF209106076AC4EF4686A36BB73C2AED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft Manifest number: 0FC8 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: 5tqPEp3EliYZS2xI-t2SOYASA6Q.roa (hash: rrWZ9V7KWJ4Q+nTEuZg3LRcJ0iLHgZLsCePpW9vxZts=) 2: CFHgd4L73NmnKwbNZX4Ea5xUqNI.roa (hash: 1vwfxPtMAo6Ane/X/c4BMzTm00LQJy+F2i0HA+2GRDU=) 3: FNknYOM-2Xofk1XbcOJNM1rObAg.roa (hash: FASTd9f7x4x3qa5aRCBcwSFhMWBiMZ3cOy9OdE4lRwc=) 4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: F741s7y/E1W0d5M0VafEj0QowI1vxQ2zz2g8I/YjyxI=) 5: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (hash: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:10:60:76:ac:4e:f4:68:6a:36:bb:73:c2:ae:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=129a758af398246cace1d1ed224380b08c74c2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:d5:bc:99:98:05:e5:7a:0c:bc:9f:6a:d6: b2:1c:e2:f1:2f:3b:11:70:65:50:5e:61:ed:8e:ec: 4e:c8:d9:bb:48:c0:e3:03:00:b4:09:c9:bb:aa:a9: c9:ea:19:fc:82:7a:ce:9d:9d:d7:57:9c:20:ab:a0: 9b:ec:6f:b7:d2:ef:af:24:af:72:77:64:bb:bf:00: e5:7c:a2:e9:01:03:dc:69:7b:75:a8:c6:2d:41:7d: 7e:58:27:e4:e9:32:2a:b0:f4:d6:b1:b2:3c:a4:b7: 66:2d:39:26:05:04:e9:76:75:46:91:a9:36:ac:bd: 04:a9:ac:3f:d4:50:00:2d:6c:7a:4f:5d:53:ad:c5: e6:2d:53:a9:c6:a9:82:e3:26:12:ab:6c:9a:20:05: f5:65:db:06:ee:1a:c7:b9:be:4d:f6:6a:04:fe:e4: f8:da:dc:9f:99:ef:8c:7d:95:03:df:06:55:fc:34: d0:36:8f:1b:cd:7f:68:54:b8:f0:11:3e:d9:a7:8d: 40:b3:43:c1:df:6f:f2:45:7f:92:ed:47:60:78:4f: cc:0b:65:b4:d1:fd:97:07:52:3c:3e:12:13:f2:49: d7:39:37:bc:28:90:96:d0:6a:f7:53:15:d2:5f:ea: e0:5f:ff:d3:3d:f4:f7:44:9e:64:d2:42:9e:0e:03: 64:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9A:75:8A:F3:98:24:6C:AC:E1:D1:ED:22:43:80:B0:8C:74:C2:BE X509v3 Authority Key Identifier: keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ed:b5:db:f5:42:96:81:27:a6:ef:f2:32:13:3a:65:04:c5: f4:37:a7:b9:fa:59:95:e9:16:bf:50:32:86:fb:2c:01:ba:a1: e6:b5:a2:3f:8a:18:88:e0:25:d7:dc:1d:0b:0b:94:1e:cc:7e: 76:a2:c7:63:72:da:7d:5f:72:f9:fb:a5:8b:07:a3:34:c7:d5: be:d6:dd:db:e9:25:c5:3d:4d:90:0d:67:e6:ab:77:04:67:ab: 1e:60:f9:8d:b1:86:f7:ac:4b:98:47:76:72:be:88:16:3a:54: 7a:d2:37:18:d6:6a:ca:80:6d:30:a1:c1:81:80:c9:2d:3b:7a: 54:70:f0:33:4a:e7:bd:36:78:46:a3:0a:b5:3f:5c:61:9c:9d: 8f:58:f5:64:09:4c:cb:53:02:e4:d1:2e:00:33:42:93:23:8b: 78:e7:8d:33:96:f7:52:d9:05:b6:ef:18:c0:37:f0:2b:49:db: 93:ac:9d:b7:38:5b:f6:96:b6:89:d6:00:24:27:12:18:12:f3: b2:05:85:1a:d4:89:d5:f4:6e:d5:9d:52:9e:a8:43:94:17:c3: 99:54:9b:9c:d8:d3:4b:07:9a:61:2a:d0:5c:81:c0:ba:85:5d: 3f:af:32:72:40:0a:5d:45:f0:2a:1a:c1:2f:27:d1:5f:b2:31: 3c:de:71:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRBgdqxO9GhqNrtzwq7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTAwNGJlZmE1NTNkZGIzNTU2NGZiNzc2MmIwNWViMjIy ZWNmOTMwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD EygxMjlhNzU4YWYzOTgyNDZjYWNlMWQxZWQyMjQzODBiMDhjNzRjMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dzVvJmYBeV6DLyfatayHOLxLzsR cGVQXmHtjuxOyNm7SMDjAwC0Ccm7qqnJ6hn8gnrOnZ3XV5wgq6Cb7G+30u+vJK9y d2S7vwDlfKLpAQPcaXt1qMYtQX1+WCfk6TIqsPTWsbI8pLdmLTkmBQTpdnVGkak2 rL0Eqaw/1FAALWx6T11TrcXmLVOpxqmC4yYSq2yaIAX1ZdsG7hrHub5N9moE/uT4 2tyfme+MfZUD3wZV/DTQNo8bzX9oVLjwET7Zp41As0PB32/yRX+S7UdgeE/MC2W0 0f2XB1I8PhIT8knXOTe8KJCW0Gr3UxXSX+rgX//TPfT3RJ5k0kKeDgNkTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKadYrzmCRsrOHR7SJDgLCMdMK+MB8GA1UdIwQY MBaAFF7gBL76VT3bNVZPt3YrBesiLs+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjIt ZTIyOGFhYjQ1MDE0LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjItZTIyOGFhYjQ1MDE0 LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+212/VC loEnpu/yMhM6ZQTF9DenufpZlekWv1AyhvssAbqh5rWiP4oYiOAl19wdCwuUHsx+ dqLHY3LafV9y+fuliwejNMfVvtbd2+klxT1NkA1n5qt3BGerHmD5jbGG96xLmEd2 cr6IFjpUetI3GNZqyoBtMKHBgYDJLTt6VHDwM0rnvTZ4RqMKtT9cYZydj1j1ZAlM y1MC5NEuADNCkyOLeOeNM5b3UtkFtu8YwDfwK0nbk6ydtzhb9pa2idYAJCcSGBLz sgWFGtSJ1fRu1Z1SnqhDlBfDmVSbnNjTSweaYSrQXIHAuoVdP68yckAKXUXwKhrB LyfRX7IxPN5xDw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:32 2025 by rpki-client