This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json) Hash identifier: TsWQv9W5qHROURV5RvN354U2ZDzMw6GNgnza5+0JeEE= Subject key identifier: 41:00:1D:71:59:E7:60:BC:DC:77:B2:0E:20:B5:8E:8B:C5:5F:C0:8A Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb Certificate serial: 019AF12CDD64DEE98FB22ED3230E82C0C3A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:40 +0000 Manifest this update: Sat 06 Dec 2025 01:00:40 +0000 Manifest next update: Sun 07 Dec 2025 01:00:40 +0000 Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=) 2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: kdnxjdjW6svU4qTZPFReVvHcwng6WFZeRUP5Rw3iG8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:dd:64:de:e9:8f:b2:2e:d3:23:0e:82:c0:c3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb Validity Not Before: Dec 6 01:00:40 2025 GMT Not After : Dec 7 01:00:40 2025 GMT Subject: CN=41001d7159e760bcdc77b20e20b58e8bc55fc08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:89:2e:38:a2:62:c1:73:7a:d4:30:ad:40:92: 88:fa:bb:a5:d3:c4:6f:42:a3:1b:d7:b2:56:d4:1e: d3:89:33:84:96:ef:41:63:66:2d:39:35:c6:31:3e: 74:ad:20:5f:a0:a9:d9:7f:d6:2c:ce:0c:6b:a6:9b: 81:36:29:32:8d:6f:da:74:11:63:7f:40:29:9c:e4: 91:cd:7e:0a:ac:3a:d0:1a:78:e0:24:aa:52:2b:4a: 9e:3b:0c:4d:31:a6:02:85:ad:49:52:f2:84:18:43: 47:b4:e0:91:d9:c8:6e:d0:c5:76:e1:52:a3:e4:9e: 75:82:0e:8e:31:7b:3e:b0:2f:d5:d2:d2:86:af:a3: 93:bb:f6:62:4e:1f:b3:3d:26:7b:5d:9e:ae:f4:86: 29:b6:c4:0f:75:b7:5d:e8:57:79:3b:20:a5:63:e7: 2b:6b:e5:6c:af:49:1f:44:f1:09:c1:1b:9c:db:1e: fb:58:bc:98:2e:c1:11:98:97:12:cb:ed:be:28:4c: 42:5d:fd:4d:c5:06:a2:23:a7:de:e5:b5:d2:5d:33: da:0f:91:17:ac:65:81:9c:0b:78:fc:eb:0a:03:d0: 09:35:72:15:ac:a6:49:dd:92:96:01:6c:c5:45:76: db:5e:b7:4c:15:d6:c5:02:80:4b:90:b8:2c:d3:20: 23:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:00:1D:71:59:E7:60:BC:DC:77:B2:0E:20:B5:8E:8B:C5:5F:C0:8A X509v3 Authority Key Identifier: keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5a:f3:22:e1:50:c2:f4:ce:9a:0e:09:a9:dc:e1:4f:d2:db: e4:d4:8e:ab:01:41:d1:aa:3d:1e:4f:51:af:96:80:d4:07:b2: f4:ad:c2:56:4b:0e:f0:e5:5e:00:d6:dc:4d:54:a0:85:dd:f5: 0a:9c:a9:27:2d:bf:bb:8f:59:4c:52:88:ab:7c:86:c9:3d:58: 19:0f:1f:be:de:7d:77:d8:97:29:d4:62:37:c0:4b:ff:a0:7e: c6:78:de:c7:86:ed:46:50:9e:ed:33:aa:38:dd:02:c2:ca:b7: c5:44:1e:85:26:bf:cc:e2:61:c3:a2:9c:e6:13:cd:7e:df:23: 96:f8:81:69:e1:d9:33:6a:0b:a1:20:96:b5:97:e2:19:70:22: 79:ac:c6:cb:69:d4:0f:18:a1:8f:8a:d9:de:3d:20:8c:52:7f: 19:6b:9a:01:fe:4f:96:76:1e:1d:43:65:3b:0b:e2:46:62:d6: 68:b8:a8:e9:50:0e:96:e5:69:8e:ac:0b:b5:dd:12:61:9d:df: 50:49:b9:0b:56:6e:ac:aa:09:06:ce:ba:d6:c1:2b:80:b3:06: 34:9a:a9:f1:34:2b:e9:80:53:7a:a2:76:7a:8d:3a:f8:2b:ac: 39:90:be:9c:1e:dc:e3:fa:bd:98:51:89:6a:25:3f:f5:9e:c4: 61:76:95:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLN1k3umPsi7TIw6CwMOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNGI3NzdkNmEwMTc1ZmViYmEwNWI0OGI0N2NkZjBhNmI4 OWQ3ZmIwHhcNMjUxMjA2MDEwMDQwWhcNMjUxMjA3MDEwMDQwWjAzMTEwLwYDVQQD Eyg0MTAwMWQ3MTU5ZTc2MGJjZGM3N2IyMGUyMGI1OGU4YmM1NWZjMDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIkuOKJiwXN61DCtQJKI+rul08Rv QqMb17JW1B7TiTOElu9BY2YtOTXGMT50rSBfoKnZf9YszgxrppuBNikyjW/adBFj f0ApnOSRzX4KrDrQGnjgJKpSK0qeOwxNMaYCha1JUvKEGENHtOCR2chu0MV24VKj 5J51gg6OMXs+sC/V0tKGr6OTu/ZiTh+zPSZ7XZ6u9IYptsQPdbdd6Fd5OyClY+cr a+Vsr0kfRPEJwRuc2x77WLyYLsERmJcSy+2+KExCXf1NxQaiI6fe5bXSXTPaD5EX rGWBnAt4/OsKA9AJNXIVrKZJ3ZKWAWzFRXbbXrdMFdbFAoBLkLgs0yAjlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEAHXFZ52C83HeyDiC1jovFX8CKMB8GA1UdIwQY MBaAFFxLd31qAXX+u6BbSLR83wpridf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQt OWQzZTU5ZGE1YWQxLzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQtOWQzZTU5ZGE1YWQx LzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVrzIuFQ wvTOmg4JqdzhT9Lb5NSOqwFB0ao9Hk9Rr5aA1Aey9K3CVksO8OVeANbcTVSghd31 CpypJy2/u49ZTFKIq3yGyT1YGQ8fvt59d9iXKdRiN8BL/6B+xnjex4btRlCe7TOq ON0Cwsq3xUQehSa/zOJhw6Kc5hPNft8jlviBaeHZM2oLoSCWtZfiGXAieazGy2nU Dxihj4rZ3j0gjFJ/GWuaAf5PlnYeHUNlOwviRmLWaLio6VAOluVpjqwLtd0SYZ3f UEm5C1ZurKoJBs661sErgLMGNJqp8TQr6YBTeqJ2eo06+CusOZC+nB7c4/q9mFGJ aiU/9Z7EYXaVdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:43:54 2025 by rpki-client