This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json) Hash identifier: /CfPDjxgsTm1x82KAJKkHKVDN0ys85eBnOHg2/ZSU6Q= Subject key identifier: 6A:0E:43:61:20:E6:69:7B:54:1C:91:50:9E:BE:39:6C:A4:D8:4E:08 Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21 Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121 Certificate serial: 019AF1D22D79565D0FDA0016F63D1D5D0A36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=) 2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: lEOsUelU/dTq2qKIERIjV8Qr9LZDCcFAKGvJh9l8WYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2d:79:56:5d:0f:da:00:16:f6:3d:1d:5d:0a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=6a0e436120e6697b541c91509ebe396ca4d84e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:b0:6f:05:68:35:ff:0c:96:eb:68:0e:32: 9a:48:0a:e3:7c:ae:31:b2:0b:e9:d2:9c:78:98:4e: f4:2f:b6:0a:99:d4:21:49:63:27:02:69:76:e3:37: 95:f8:11:46:60:36:a1:21:c2:07:72:66:a7:15:22: fb:66:bb:20:88:01:39:07:7b:26:c1:15:62:50:ad: de:da:fb:cd:73:20:a2:c9:16:fd:e2:31:a8:0a:56: 51:07:c4:0f:f9:6e:c9:a8:9d:53:34:ec:b6:f2:24: 9d:3a:90:45:89:8a:44:47:1d:43:c9:4f:0f:3b:4e: 53:9a:47:cd:a4:df:f7:09:d4:f9:92:44:81:6c:67: 58:03:7f:f6:6e:2d:43:e6:41:d2:b4:b8:28:57:7a: 07:59:17:59:91:9e:e4:50:1c:77:c1:46:22:e7:b3: 64:de:60:d1:c2:95:73:00:f1:40:0b:8c:cd:73:85: 2f:6d:84:d4:92:c2:e2:11:42:64:38:cb:a7:ee:85: ba:7f:22:33:95:20:ed:9b:7a:52:60:17:c3:4b:3a: 25:81:d9:81:5c:ec:99:55:c7:e3:16:4a:76:da:ba: f0:55:b3:4c:16:97:a8:16:08:72:20:0a:30:69:45: 0e:86:29:79:b7:7b:e8:2a:58:d0:23:72:ac:1c:44: b7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0E:43:61:20:E6:69:7B:54:1C:91:50:9E:BE:39:6C:A4:D8:4E:08 X509v3 Authority Key Identifier: keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:51:5b:f3:04:36:de:5f:12:4e:08:a1:ab:8e:e7:4d:cb:a1: 57:e4:25:a7:25:fe:67:2b:06:55:17:61:a1:6a:7e:4b:5f:71: 8e:71:3b:e4:3b:4d:81:ca:fe:3e:6e:1a:c6:13:cf:4e:0b:de: 0b:3b:55:b1:f2:8b:a7:cb:90:b0:e1:33:41:9c:21:8f:20:87: 9d:47:07:98:31:1b:50:ac:ee:1a:14:d6:49:f3:70:ca:35:81: 00:3b:08:8d:b3:16:85:18:47:aa:49:60:73:d3:04:a8:d3:5f: 8e:a3:3e:e4:2c:db:7c:37:64:9e:56:59:4a:d6:6c:7f:89:b9: f0:ed:a1:04:67:72:84:26:c5:a7:b5:cf:1d:1d:72:20:6f:5c: 27:17:c5:ac:01:ab:a3:b6:0a:59:9b:33:f1:af:0c:59:2a:6b: b8:c5:fd:aa:6b:d5:f6:e0:09:02:c7:f7:9e:96:04:e0:c2:49: 53:db:5c:74:fb:d0:2b:28:7f:06:20:82:33:f8:e9:83:7f:90: 4d:9a:f6:25:72:f1:b5:27:0e:f3:ff:c9:60:50:8a:5c:9c:78: 0f:e8:89:a2:7b:2b:b7:df:a6:78:e2:7d:e4:88:42:ab:22:39: 8e:43:b1:5a:22:fc:6d:ce:36:a4:ef:2a:94:c1:1c:c9:4f:12: 9b:f3:dc:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i15Vl0P2gAW9j0dXQo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYjc5MzllZDcwYzhhZWEzMWJlNDkzZTc4ZTg4ZjQ4NjFm NTMxMjEwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD Eyg2YTBlNDM2MTIwZTY2OTdiNTQxYzkxNTA5ZWJlMzk2Y2E0ZDg0ZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfewbwVoNf8MlutoDjKaSArjfK4x sgvp0px4mE70L7YKmdQhSWMnAml24zeV+BFGYDahIcIHcmanFSL7ZrsgiAE5B3sm wRViUK3e2vvNcyCiyRb94jGoClZRB8QP+W7JqJ1TNOy28iSdOpBFiYpERx1DyU8P O05TmkfNpN/3CdT5kkSBbGdYA3/2bi1D5kHStLgoV3oHWRdZkZ7kUBx3wUYi57Nk 3mDRwpVzAPFAC4zNc4UvbYTUksLiEUJkOMun7oW6fyIzlSDtm3pSYBfDSzolgdmB XOyZVcfjFkp22rrwVbNMFpeoFghyIAowaUUOhil5t3voKljQI3KsHES3IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoOQ2Eg5ml7VByRUJ6+OWyk2E4IMB8GA1UdIwQY MBaAFFy3k57XDIrqMb5JPnjoj0hh9TEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYt MmVkYWZjNjBmMmRmLzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jNDM4NmYtZDFiZS00M2M4LTk5MmYtMmVkYWZjNjBmMmRm LzEvWExlVG50Y01pdW94dmtrLWVPaVBTR0gxTVNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFFb8wQ2 3l8STgihq47nTcuhV+QlpyX+ZysGVRdhoWp+S19xjnE75DtNgcr+Pm4axhPPTgve CztVsfKLp8uQsOEzQZwhjyCHnUcHmDEbUKzuGhTWSfNwyjWBADsIjbMWhRhHqklg c9MEqNNfjqM+5CzbfDdknlZZStZsf4m58O2hBGdyhCbFp7XPHR1yIG9cJxfFrAGr o7YKWZsz8a8MWSpruMX9qmvV9uAJAsf3npYE4MJJU9tcdPvQKyh/BiCCM/jpg3+Q TZr2JXLxtScO8//JYFCKXJx4D+iJonsrt9+meOJ95IhCqyI5jkOxWiL8bc42pO8q lMEcyU8Sm/Pc/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:18 2025 by rpki-client