This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json) Hash identifier: EiOZY6kk29cT6Oi7uWDWMVnEmpt/0YXY1H2vAuh7+sc= Subject key identifier: 16:4A:8F:09:E9:34:17:A7:99:A0:11:B8:52:EA:88:1C:58:5A:4D:FB Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Certificate serial: 019AF23F9952378683A4546A781C7AB88284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=) 2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=) 3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=) 4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: /8nrIt4uiSJXz+0GclJ11y38lms8L0wo2ARDyJb/QoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:99:52:37:86:83:a4:54:6a:78:1c:7a:b8:82:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=164a8f09e93417a799a011b852ea881c585a4dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:98:0b:ee:6a:1c:76:60:de:ee:1d:37:a2:6e: 4f:33:ba:fb:f1:38:df:44:c3:c5:6e:06:ec:01:1c: 2a:4b:56:dc:3e:41:41:13:e8:6d:7f:08:fd:59:f4: c4:d3:73:db:70:be:70:0c:3f:a0:cd:6b:b2:f9:bb: 9d:95:ca:88:79:7d:51:20:b3:83:6e:7a:26:a4:65: 8e:e5:46:62:6f:26:03:ab:bf:f3:01:8c:09:ed:33: 41:96:5a:bf:71:8b:aa:70:e2:e4:d5:b1:46:bf:39: b3:49:82:e3:88:43:b5:4b:1d:e3:c0:d7:97:db:fd: fd:ea:27:59:93:51:e2:90:d8:29:19:e4:fb:db:07: 88:4f:de:92:91:12:f9:3b:f9:c9:e4:a1:e7:c2:ea: 7f:d6:d5:26:0e:32:8b:1f:3e:7f:90:86:cf:e7:20: db:98:d9:28:c5:0f:01:8a:61:d0:b3:9a:e6:e2:0c: 55:bd:97:36:08:20:2c:36:a6:6c:dc:ca:e9:eb:ca: e4:fd:a1:7b:77:11:04:e3:e4:90:4e:aa:df:1d:12: ae:a3:27:84:6d:bf:1b:27:65:21:9b:2a:b6:ed:f4: 8f:0d:a5:65:03:8e:7f:10:45:09:89:4e:e5:07:26: e8:13:57:98:cb:5e:21:bb:cc:e2:95:78:ee:1d:d5: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4A:8F:09:E9:34:17:A7:99:A0:11:B8:52:EA:88:1C:58:5A:4D:FB X509v3 Authority Key Identifier: keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f8:24:68:d4:5e:e1:be:e8:9b:d2:8f:a8:8c:c5:36:cf:ac: c8:21:fe:a4:83:3f:0b:f7:ba:1b:65:b3:7f:0c:ab:40:2a:0e: 37:2d:65:d2:04:8e:2a:95:4c:cf:c6:17:00:dd:63:ca:a0:e8: 96:07:ed:74:60:0d:72:f1:01:8a:c0:dc:d7:96:23:34:02:f4: 1d:ce:18:51:06:df:7c:af:16:94:c4:ba:b7:10:6b:8d:7b:30: 14:52:30:d9:4e:8f:aa:6b:4d:36:ee:bb:0a:fc:d2:f7:9b:3d: e9:df:2d:ff:e2:ba:ff:6d:91:fa:b1:4d:a8:7c:3a:52:b6:d5: 17:33:c2:21:54:c8:5e:72:71:ac:0c:ca:68:56:56:ed:2a:0a: 83:1c:40:52:35:fa:df:27:cd:67:3f:f8:f4:bb:c2:a7:69:61: 5b:9d:99:05:75:74:bd:06:62:b8:d5:4c:a1:7e:87:70:b4:78: 45:54:d4:62:08:87:4c:7a:a5:d5:7c:30:4f:a7:69:f6:54:bc: 8b:88:23:6c:19:bd:0e:4c:89:c7:13:f7:0e:f5:17:7b:99:ef: 14:c0:9b:14:32:f1:08:6e:38:13:c2:ca:08:35:8a:0b:c6:94: 34:c4:61:46:6f:c9:d0:99:b0:a9:69:c4:be:b7:34:07:68:05: a2:a4:21:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5lSN4aDpFRqeBx6uIKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz NzBhMTkwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD EygxNjRhOGYwOWU5MzQxN2E3OTlhMDExYjg1MmVhODgxYzU4NWE0ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5gL7mocdmDe7h03om5PM7r78Tjf RMPFbgbsARwqS1bcPkFBE+htfwj9WfTE03PbcL5wDD+gzWuy+budlcqIeX1RILOD bnompGWO5UZibyYDq7/zAYwJ7TNBllq/cYuqcOLk1bFGvzmzSYLjiEO1Sx3jwNeX 2/396idZk1HikNgpGeT72weIT96SkRL5O/nJ5KHnwup/1tUmDjKLHz5/kIbP5yDb mNkoxQ8BimHQs5rm4gxVvZc2CCAsNqZs3Mrp68rk/aF7dxEE4+SQTqrfHRKuoyeE bb8bJ2Uhmyq27fSPDaVlA45/EEUJiU7lByboE1eYy14hu8zilXjuHdVQNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZKjwnpNBenmaARuFLqiBxYWk37MB8GA1UdIwQY MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefgkaNRe 4b7om9KPqIzFNs+syCH+pIM/C/e6G2WzfwyrQCoONy1l0gSOKpVMz8YXAN1jyqDo lgftdGANcvEBisDc15YjNAL0Hc4YUQbffK8WlMS6txBrjXswFFIw2U6PqmtNNu67 CvzS95s96d8t/+K6/22R+rFNqHw6UrbVFzPCIVTIXnJxrAzKaFZW7SoKgxxAUjX6 3yfNZz/49LvCp2lhW52ZBXV0vQZiuNVMoX6HcLR4RVTUYgiHTHql1XwwT6dp9lS8 i4gjbBm9DkyJxxP3DvUXe5nvFMCbFDLxCG44E8LKCDWKC8aUNMRhRm/J0JmwqWnE vrc0B2gFoqQhTA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:43 2025 by rpki-client