This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json) Hash identifier: l0fkX8lZtsjSXqSN8tpWNjt+A9JxQqX46C0ZT9k69iQ= Subject key identifier: 5E:9B:87:15:9E:37:34:10:A5:D9:E5:D3:3E:A5:C8:16:39:CC:F4:2B Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503 Certificate serial: 019AF0BF71173ED185218DFDEC24C005766F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft Manifest number: 0F1D Signing time: Fri 05 Dec 2025 23:01:09 +0000 Manifest this update: Fri 05 Dec 2025 23:01:09 +0000 Manifest next update: Sat 06 Dec 2025 23:01:09 +0000 Files and hashes: 1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=) 2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=) 3: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: x24Uu8e2Ypngp8ohUuc6MWrVHiF/p4bt91iZ2qN25LI=) 4: Z81p6D_dRIvEDGrIYx1WijPMCWI.roa (hash: B0c4eefCOibc6e3+7zDAkWkLSK4xkeiQAdhY0t08sgw=) 5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:71:17:3e:d1:85:21:8d:fd:ec:24:c0:05:76:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503 Validity Not Before: Dec 5 23:01:09 2025 GMT Not After : Dec 6 23:01:09 2025 GMT Subject: CN=5e9b87159e373410a5d9e5d33ea5c81639ccf42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:73:20:7d:59:21:e0:e0:19:ab:3a:50:ba: 1b:4c:c1:69:2b:3d:33:df:81:db:4c:94:8b:90:a4: 28:b7:5b:0e:bb:91:46:d1:fb:7b:e9:61:da:0e:f6: d7:b4:1e:8b:8f:27:71:46:00:1d:e2:3c:d5:ae:23: 09:2a:1f:f5:98:7f:dd:7f:02:de:a6:7e:36:27:40: 1e:20:47:cf:b1:3e:fe:d4:c0:80:e6:4f:56:f5:60: ee:8c:83:9d:36:ed:ba:90:55:e9:e1:d9:99:13:40: 97:c2:8e:af:06:6b:80:d0:23:90:73:ed:86:37:4b: 8d:12:e1:23:78:95:51:be:66:91:30:96:9b:b5:35: c3:96:4a:59:ce:10:21:89:21:e1:0e:c8:00:9a:d8: e6:36:5f:aa:f1:65:43:45:3a:6d:41:6b:88:0f:46: ff:5c:fc:f8:bb:6b:f5:3c:aa:66:63:04:dd:c1:d1: ef:69:c4:57:8b:6f:4a:43:31:93:42:b5:29:1f:a3: 54:59:43:7c:9b:4b:7c:68:4f:5f:e1:db:c0:2a:c5: 29:15:8b:80:66:a0:26:64:53:0f:ca:17:5b:83:a2: c3:f0:06:1b:86:2f:e7:6a:44:f8:1a:4c:8e:a4:85: 08:0b:24:15:09:71:01:79:f5:36:72:72:c2:aa:3c: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9B:87:15:9E:37:34:10:A5:D9:E5:D3:3E:A5:C8:16:39:CC:F4:2B X509v3 Authority Key Identifier: keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9b:a4:82:f5:dd:66:0f:a3:e5:cd:86:f0:2e:be:89:f8:5c: 3b:59:cc:e5:f9:b9:86:0b:14:65:ce:01:a5:41:fa:7a:d4:31: 73:d5:3d:54:fa:c0:d0:65:b9:c7:b5:61:5e:ec:75:83:a9:41: 4f:f6:33:6e:33:89:89:90:db:f4:25:2f:52:9b:08:b1:e9:c6: d7:10:d1:9c:d4:c8:f4:25:0c:4c:1d:b9:b9:0a:e2:a0:a4:5f: 25:35:6f:22:fd:5a:b2:8e:19:d0:da:89:50:34:ec:ed:e5:df: 71:92:a4:d7:cc:85:74:55:f7:36:b2:ba:1e:c6:df:8c:72:6e: 83:82:fc:f8:4f:79:8f:9f:41:8d:e0:59:fd:c6:c4:65:6d:89: 1d:8b:02:78:7a:37:8e:33:a4:81:25:d1:d0:64:a0:5b:32:99: e8:3f:4c:f5:80:09:23:ee:e9:21:7c:56:98:00:8e:06:a3:98: cd:15:f2:59:5b:93:4a:ae:23:c3:7b:7e:03:58:5c:00:23:78: 0d:de:de:48:c5:ec:37:b9:e4:e2:87:77:a2:02:66:cd:27:5e: 71:cc:5b:c3:c3:77:bf:47:64:70:37:6c:ff:8a:af:e1:7e:a3: dc:aa:bb:33:82:4e:d1:b1:81:f1:b6:25:d6:41:9d:f7:dc:4d: ff:8f:d3:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3EXPtGFIY397CTABXZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx OTM1MDMwHhcNMjUxMjA1MjMwMTA5WhcNMjUxMjA2MjMwMTA5WjAzMTEwLwYDVQQD Eyg1ZTliODcxNTllMzczNDEwYTVkOWU1ZDMzZWE1YzgxNjM5Y2NmNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mlzIH1ZIeDgGas6ULobTMFpKz0z 34HbTJSLkKQot1sOu5FG0ft76WHaDvbXtB6LjydxRgAd4jzVriMJKh/1mH/dfwLe pn42J0AeIEfPsT7+1MCA5k9W9WDujIOdNu26kFXp4dmZE0CXwo6vBmuA0COQc+2G N0uNEuEjeJVRvmaRMJabtTXDlkpZzhAhiSHhDsgAmtjmNl+q8WVDRTptQWuID0b/ XPz4u2v1PKpmYwTdwdHvacRXi29KQzGTQrUpH6NUWUN8m0t8aE9f4dvAKsUpFYuA ZqAmZFMPyhdbg6LD8AYbhi/nakT4GkyOpIUICyQVCXEBefU2cnLCqjzwNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6bhxWeNzQQpdnl0z6lyBY5zPQrMB8GA1UdIwQY MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt YzM2ZDFjNDYwZTJmLzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZukgvXd Zg+j5c2G8C6+ifhcO1nM5fm5hgsUZc4BpUH6etQxc9U9VPrA0GW5x7VhXux1g6lB T/YzbjOJiZDb9CUvUpsIsenG1xDRnNTI9CUMTB25uQrioKRfJTVvIv1aso4Z0NqJ UDTs7eXfcZKk18yFdFX3NrK6HsbfjHJug4L8+E95j59BjeBZ/cbEZW2JHYsCeHo3 jjOkgSXR0GSgWzKZ6D9M9YAJI+7pIXxWmACOBqOYzRXyWVuTSq4jw3t+A1hcACN4 Dd7eSMXsN7nk4od3ogJmzSdeccxbw8N3v0dkcDds/4qv4X6j3Kq7M4JO0bGB8bYl 1kGd99xN/4/TxA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:54 2025 by rpki-client