This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json) Hash identifier: +AnopLry6nbmOSnA5Tv6m38nYN3kICRbEOgBoP0fZFc= Subject key identifier: 9E:0C:15:4D:75:04:C5:DE:76:A8:6F:8B:E5:CA:95:24:5C:B4:99:75 Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34 Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134 Certificate serial: 019AF5AE440C703BEE457B17B31D0E5CD72E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft Manifest number: 02A6 Signing time: Sat 06 Dec 2025 22:00:29 +0000 Manifest this update: Sat 06 Dec 2025 22:00:29 +0000 Manifest next update: Sun 07 Dec 2025 22:00:29 +0000 Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: 8Odr53uZT1Nltz+Vutk+d3b1R8RJzC6XHNUdJZRoJ+g=) 2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:44:0c:70:3b:ee:45:7b:17:b3:1d:0e:5c:d7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134 Validity Not Before: Dec 6 22:00:29 2025 GMT Not After : Dec 7 22:00:29 2025 GMT Subject: CN=9e0c154d7504c5de76a86f8be5ca95245cb49975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:9a:39:52:34:ce:5a:36:c7:5b:49:1b:49: 2d:55:e7:fd:cb:53:46:b0:95:a4:91:cd:7d:6e:46: 50:b1:88:72:5b:26:0f:6a:a6:10:a5:2d:3f:e8:4b: 8f:41:aa:31:df:18:d8:c0:e6:52:cb:4e:76:6a:79: c4:94:e4:a3:b6:8c:77:54:ee:b9:ed:59:c2:e9:a0: 2e:6a:5a:2f:11:e0:55:5c:de:34:3d:5e:11:28:f0: b1:6d:29:8c:3f:c7:46:2d:c4:41:3f:fc:10:9d:6b: 6e:0f:1e:e7:95:8e:c3:f1:17:c2:e5:11:0c:85:77: 03:4f:a0:62:1e:e2:fe:b1:71:28:98:4d:2a:dc:b7: a2:73:3d:3c:c9:2c:5b:4f:07:78:a0:1c:98:ca:63: 38:d0:71:fa:ba:8a:b3:d6:69:15:12:28:e6:67:0e: 69:d1:76:c7:7b:47:ef:e2:7d:02:16:b5:35:a3:a3: b9:2f:7a:7c:05:f8:4a:2d:da:db:a3:8f:0a:28:7e: 74:07:c3:37:53:1d:1b:6f:cb:92:d2:3a:cb:b7:ab: 2d:e3:2f:db:b9:8b:f3:55:2f:e4:a6:c8:8c:29:95: 23:7e:47:b2:e3:0f:38:50:34:e2:6b:a0:52:ce:94: c2:30:6d:ec:bd:9c:d0:a4:f3:26:ee:6c:29:7a:5e: 71:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0C:15:4D:75:04:C5:DE:76:A8:6F:8B:E5:CA:95:24:5C:B4:99:75 X509v3 Authority Key Identifier: keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4f:13:08:9e:17:6d:bb:a8:e5:e6:10:b8:05:f0:1a:8e:28: c9:f0:7f:18:25:37:26:49:8d:d1:d6:c6:d8:c8:13:08:15:dc: 92:1f:82:b1:a4:16:87:93:db:97:ed:e4:3a:a2:24:b1:69:d6: cd:b0:f0:e0:77:1f:88:7e:90:45:c0:65:d1:54:03:7a:a4:80: 79:94:e1:0f:7e:37:6d:17:6b:bf:af:5b:c3:ff:6e:ea:ee:f0: dc:dd:ae:84:87:0e:c3:a0:6e:94:7a:76:f3:24:15:f6:fb:80: 53:6d:48:39:b3:9e:0e:80:b1:2c:7e:2a:25:18:2c:f0:a9:96: c2:a2:25:f7:50:f0:8f:ac:b4:98:bd:fa:f4:d6:cb:af:a9:a5: 50:dc:58:f7:60:d6:8f:62:32:5f:af:4e:c1:66:b8:5c:58:97: 00:db:7f:b4:d6:a4:18:6d:2e:95:ab:51:6a:6c:68:d0:a1:01: 6e:3f:18:fc:d8:cf:cf:60:8d:2e:2c:00:9e:3e:9c:a9:d0:87: fd:1d:08:3b:da:f2:07:67:b1:b0:4a:17:01:b6:85:ed:36:af: ff:b6:65:72:d6:0e:72:1f:a8:27:7b:76:c6:9e:f8:5d:17:a7: 2a:80:92:49:6b:9f:7c:63:1d:51:08:b2:43:e6:7f:1b:f3:78: c6:e9:a8:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rkQMcDvuRXsXsx0OXNcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOGVkYTZmZWE2YjE4ZjEwZGZkNmFmYzBkODNiZWZiYWE2 OWMxMzQwHhcNMjUxMjA2MjIwMDI5WhcNMjUxMjA3MjIwMDI5WjAzMTEwLwYDVQQD Eyg5ZTBjMTU0ZDc1MDRjNWRlNzZhODZmOGJlNWNhOTUyNDVjYjQ5OTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG+aOVI0zlo2x1tJG0ktVef9y1NG sJWkkc19bkZQsYhyWyYPaqYQpS0/6EuPQaox3xjYwOZSy052annElOSjtox3VO65 7VnC6aAualovEeBVXN40PV4RKPCxbSmMP8dGLcRBP/wQnWtuDx7nlY7D8RfC5REM hXcDT6BiHuL+sXEomE0q3Leicz08ySxbTwd4oByYymM40HH6uoqz1mkVEijmZw5p 0XbHe0fv4n0CFrU1o6O5L3p8BfhKLdrbo48KKH50B8M3Ux0bb8uS0jrLt6st4y/b uYvzVS/kpsiMKZUjfkey4w84UDTia6BSzpTCMG3svZzQpPMm7mwpel5xvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4MFU11BMXedqhvi+XKlSRctJl1MB8GA1UdIwQY MBaAFFyO2m/qaxjxDf1q/A2DvvuqacE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEk3YWItcHJHUEVOX1dyOERZTy0tNnBwd1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZjZhMDgtNDBjNi00YTYzLWIwNjAt MzExMWI2MmQyZmJkLzEvWEk3YWItcHJHUEVOX1dyOERZTy0tNnBwd1RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85ZjZhMDgtNDBjNi00YTYzLWIwNjAtMzExMWI2MmQyZmJk LzEvWEk3YWItcHJHUEVOX1dyOERZTy0tNnBwd1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAek8TCJ4X bbuo5eYQuAXwGo4oyfB/GCU3JkmN0dbG2MgTCBXckh+CsaQWh5Pbl+3kOqIksWnW zbDw4HcfiH6QRcBl0VQDeqSAeZThD343bRdrv69bw/9u6u7w3N2uhIcOw6BulHp2 8yQV9vuAU21IObOeDoCxLH4qJRgs8KmWwqIl91Dwj6y0mL369NbLr6mlUNxY92DW j2IyX69OwWa4XFiXANt/tNakGG0ulatRamxo0KEBbj8Y/NjPz2CNLiwAnj6cqdCH /R0IO9ryB2exsEoXAbaF7Tav/7ZlctYOch+oJ3t2xp74XRenKoCSSWuffGMdUQiy Q+Z/G/N4xumoPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:31 2025 by rpki-client