This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json) Hash identifier: usNhQ4eBMD9qYyWCJcKfoTBon3YDn5+AO68vzhNMoQE= Subject key identifier: 21:8C:DE:B3:BC:EE:40:36:D3:C6:D5:22:5E:5F:7B:50:8B:FC:E9:87 Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e Certificate serial: 019AF3F770751A6BB034B5C27488670D5845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft Manifest number: 091F Signing time: Sat 06 Dec 2025 14:01:10 +0000 Manifest this update: Sat 06 Dec 2025 14:01:10 +0000 Manifest next update: Sun 07 Dec 2025 14:01:10 +0000 Files and hashes: 1: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (hash: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=) 2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: h97rU1yYmOD5p7gPuTGMTeMAtYGJlKbq6vaDv+fm1v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:70:75:1a:6b:b0:34:b5:c2:74:88:67:0d:58:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e Validity Not Before: Dec 6 14:01:10 2025 GMT Not After : Dec 7 14:01:10 2025 GMT Subject: CN=218cdeb3bcee4036d3c6d5225e5f7b508bfce987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:e6:7b:d2:09:fa:f8:cd:84:a8:86:df:4e: b5:7f:d3:3b:96:a4:9f:04:9d:46:3d:11:c3:df:dc: 95:fe:db:c0:4b:f0:9f:ea:d6:69:b2:2f:b2:44:60: ca:dd:d4:85:28:1d:34:e4:bb:6f:b1:61:18:a8:d8: 7b:f3:45:68:a4:6b:65:0f:59:12:48:2c:d4:92:65: fd:75:c0:79:07:33:e3:5c:1f:e8:2b:12:5e:c2:29: e0:80:ee:a2:46:78:10:40:9d:89:fc:91:00:2f:c8: 2d:09:0e:98:cc:c8:2d:66:f2:a0:87:d5:66:88:1c: ce:ae:a9:8a:51:49:c7:c0:17:f5:cc:c3:5a:ba:26: 29:92:14:38:7c:c1:8f:12:01:92:9f:ec:61:a8:6e: 9a:40:bc:58:be:b4:5c:f7:0b:c4:4b:28:d6:6c:36: 39:30:bf:07:c4:07:07:9e:b8:80:f2:95:5e:2a:63: 12:54:62:73:21:96:8b:6a:ea:b4:d0:31:3c:d2:bc: e4:8c:74:ef:aa:f7:5f:44:26:87:52:9b:11:5c:4c: 3f:14:78:1f:3c:28:22:c9:7e:29:95:18:74:df:a4: ed:c0:48:c8:70:a1:a0:1e:69:e6:ba:5f:ba:27:73: 79:69:e7:7b:eb:9c:db:28:b9:e7:dc:ba:6f:f7:1e: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:DE:B3:BC:EE:40:36:D3:C6:D5:22:5E:5F:7B:50:8B:FC:E9:87 X509v3 Authority Key Identifier: keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ae:94:cd:cc:92:63:32:6a:44:59:61:57:51:45:30:4d:81: 2f:0d:d4:a3:48:6b:81:d2:7f:81:a2:92:7d:b9:43:ba:cb:ac: 3f:75:b1:6e:5f:35:42:c3:b4:df:68:70:be:b6:c1:c9:9c:b3: bd:db:71:07:14:32:47:4c:7b:ac:ce:78:73:cb:73:d0:ee:06: 61:43:5d:19:57:6a:da:d4:94:49:36:e2:28:5a:b9:1d:4e:bb: c0:05:fe:70:33:d1:c2:9e:64:90:e3:be:a4:88:62:b4:2d:cc: 9e:c8:48:d7:e2:a8:45:66:79:d8:42:c6:bb:4e:85:95:4c:cf: 93:5a:33:4e:ea:e7:7c:4a:0a:37:3c:d2:1b:82:b8:a4:6b:28: 97:4e:4d:4a:b9:4d:3c:f5:37:2b:f8:22:31:cc:ae:66:81:56: a4:3d:db:b2:8e:e1:e9:fd:4e:3f:c4:95:70:00:fa:eb:28:fc: b3:28:70:2a:4d:39:18:f4:35:44:f8:2e:9c:3e:9b:eb:53:b0: 6c:81:f1:69:37:72:33:0c:e1:45:45:da:73:9e:44:fb:57:c7: f0:78:b2:67:64:6b:c3:47:a4:2f:4d:4c:f8:7b:4e:c2:eb:59: ab:3e:bc:9e:71:64:03:3a:57:56:85:71:bb:a0:df:67:75:a4: 8a:d4:f0:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93B1GmuwNLXCdIhnDVhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZDhkZTA4MjA2NGViM2ZlYjQwMmE4NzNlNThiYjY4Y2Y1 ZDQ5MWUwHhcNMjUxMjA2MTQwMTEwWhcNMjUxMjA3MTQwMTEwWjAzMTEwLwYDVQQD EygyMThjZGViM2JjZWU0MDM2ZDNjNmQ1MjI1ZTVmN2I1MDhiZmNlOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBPme9IJ+vjNhKiG3061f9M7lqSf BJ1GPRHD39yV/tvAS/Cf6tZpsi+yRGDK3dSFKB005LtvsWEYqNh780VopGtlD1kS SCzUkmX9dcB5BzPjXB/oKxJewinggO6iRngQQJ2J/JEAL8gtCQ6YzMgtZvKgh9Vm iBzOrqmKUUnHwBf1zMNauiYpkhQ4fMGPEgGSn+xhqG6aQLxYvrRc9wvESyjWbDY5 ML8HxAcHnriA8pVeKmMSVGJzIZaLauq00DE80rzkjHTvqvdfRCaHUpsRXEw/FHgf PCgiyX4plRh036TtwEjIcKGgHmnmul+6J3N5aed765zbKLnn3Lpv9x5cVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGM3rO87kA208bVIl5fe1CL/OmHMB8GA1UdIwQY MBaAFF7Y3gggZOs/60Aqhz5Yu2jPXUkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYt YWVhMmM0ZTI2NzcwLzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYtYWVhMmM0ZTI2Nzcw LzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq6UzcyS YzJqRFlhV1FFME2BLw3Uo0hrgdJ/gaKSfblDususP3Wxbl81QsO032hwvrbByZyz vdtxBxQyR0x7rM54c8tz0O4GYUNdGVdq2tSUSTbiKFq5HU67wAX+cDPRwp5kkOO+ pIhitC3MnshI1+KoRWZ52ELGu06FlUzPk1ozTurnfEoKNzzSG4K4pGsol05NSrlN PPU3K/giMcyuZoFWpD3bso7h6f1OP8SVcAD66yj8syhwKk05GPQ1RPgunD6b61Ow bIHxaTdyMwzhRUXac55E+1fH8HiyZ2Rrw0ekL01M+HtOwutZqz68nnFkAzpXVoVx u6DfZ3WkitTwaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:24 2025 by rpki-client