This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json) Hash identifier: mDIfVs81u/hfIm1dqxkJvM8TqvbaDhnRJniGfeNvpLE= Subject key identifier: 56:3A:F4:B1:28:2E:92:C5:FB:50:CE:64:90:47:AB:76:43:CD:81:07 Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Certificate serial: 019AF42E078381935E7F6D85A9BC77789004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 15:00:48 +0000 Manifest this update: Sat 06 Dec 2025 15:00:48 +0000 Manifest next update: Sun 07 Dec 2025 15:00:48 +0000 Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=) 2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=) 3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=) 4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: BHtQwJ0JGjSlGNTOrwi9hhPss5hYzulFp7Z6oxg6Adc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:07:83:81:93:5e:7f:6d:85:a9:bc:77:78:90:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Validity Not Before: Dec 6 15:00:48 2025 GMT Not After : Dec 7 15:00:48 2025 GMT Subject: CN=563af4b1282e92c5fb50ce649047ab7643cd8107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:18:94:a6:68:49:0d:f3:1c:1f:2c:d0:72: dd:12:fd:8f:f5:9d:64:eb:59:60:75:aa:1e:4b:d9: 51:10:f2:97:e6:8f:9a:6f:2a:b2:60:be:2b:23:ce: 6e:17:d9:96:47:8f:64:80:83:40:9f:d8:00:59:92: da:04:ca:eb:72:14:c6:88:58:3e:66:21:a4:e7:c8: 46:04:e6:33:46:1c:8a:09:27:e4:5c:1c:71:69:f2: 9a:9a:a2:81:d6:d4:57:54:49:6c:5b:36:40:55:20: 47:26:39:88:54:90:99:6b:ca:de:8f:58:b2:24:40: d8:da:28:dd:d8:c2:72:b7:b4:c7:ed:84:18:00:c9: 63:ec:81:66:bc:d6:30:19:48:3c:c6:8e:f0:f4:d8: a8:1b:e1:cc:2c:43:e2:d0:84:89:8d:af:26:44:ed: bc:6a:ea:bb:da:7e:37:6c:83:a2:55:63:32:1f:93: 78:5e:25:8d:e7:95:ed:c1:94:9c:7b:21:be:c7:19: 8c:c9:02:d4:2a:46:bc:16:bd:25:21:07:13:6f:a0: 0b:ad:6e:44:5d:bd:7c:23:87:5e:ec:54:9f:19:3c: 8c:f5:26:f6:91:fd:04:4f:f9:07:b5:f0:f9:d1:f3: cb:26:c9:29:fc:77:a1:04:a5:36:47:0f:35:e3:c6: e8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3A:F4:B1:28:2E:92:C5:FB:50:CE:64:90:47:AB:76:43:CD:81:07 X509v3 Authority Key Identifier: keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:70:8a:cb:dc:e1:2d:d0:6b:3e:9a:fd:63:ba:dd:9e:be:da: 60:ae:88:c3:c4:cb:d9:a3:fd:9f:b8:75:a7:30:1f:ab:3b:0e: 0f:c1:dc:80:a6:b9:fd:d3:35:39:2b:65:40:98:ba:c3:d8:9b: 9a:2e:15:32:8b:96:90:67:98:1e:04:30:ad:a9:f5:dc:06:23: 89:0a:2c:4a:26:7f:35:f6:f6:ba:e3:da:34:c9:14:ee:4f:9c: 46:02:c4:80:af:b3:95:8b:16:27:a4:f3:ae:c4:5e:68:33:07: c6:76:17:38:5e:a1:32:60:88:c1:da:14:59:4b:6a:f8:41:7a: f6:86:f2:f3:73:03:e1:7c:05:02:58:62:b7:16:28:8d:0f:c9: 1d:43:cb:7d:1c:20:ba:1c:21:ac:bd:0f:ab:b0:aa:70:1c:d2: 33:ea:bb:40:2a:55:6c:66:48:78:e3:6f:69:4a:d2:62:8d:34: 4b:30:dc:9e:37:83:69:3f:40:ed:62:91:51:9a:8e:e4:7a:81: 16:88:94:f3:9f:25:46:2a:75:a9:bb:ec:7c:2d:b3:e5:8d:e6: 95:d3:1c:ce:18:90:75:56:a2:d1:42:f1:71:04:f9:2d:07:54: 89:14:94:ae:ef:e5:f1:6b:ff:82:06:4f:47:93:b0:f1:af:3d: 80:34:18:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LgeDgZNef22Fqbx3eJAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz NzBhMTkwHhcNMjUxMjA2MTUwMDQ4WhcNMjUxMjA3MTUwMDQ4WjAzMTEwLwYDVQQD Eyg1NjNhZjRiMTI4MmU5MmM1ZmI1MGNlNjQ5MDQ3YWI3NjQzY2Q4MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IYYlKZoSQ3zHB8s0HLdEv2P9Z1k 61lgdaoeS9lREPKX5o+abyqyYL4rI85uF9mWR49kgINAn9gAWZLaBMrrchTGiFg+ ZiGk58hGBOYzRhyKCSfkXBxxafKamqKB1tRXVElsWzZAVSBHJjmIVJCZa8rej1iy JEDY2ijd2MJyt7TH7YQYAMlj7IFmvNYwGUg8xo7w9NioG+HMLEPi0ISJja8mRO28 auq72n43bIOiVWMyH5N4XiWN55XtwZSceyG+xxmMyQLUKka8Fr0lIQcTb6ALrW5E Xb18I4de7FSfGTyM9Sb2kf0ET/kHtfD50fPLJskp/HehBKU2Rw8148boLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY69LEoLpLF+1DOZJBHq3ZDzYEHMB8GA1UdIwQY MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXCKy9zh LdBrPpr9Y7rdnr7aYK6Iw8TL2aP9n7h1pzAfqzsOD8HcgKa5/dM1OStlQJi6w9ib mi4VMouWkGeYHgQwran13AYjiQosSiZ/Nfb2uuPaNMkU7k+cRgLEgK+zlYsWJ6Tz rsReaDMHxnYXOF6hMmCIwdoUWUtq+EF69oby83MD4XwFAlhitxYojQ/JHUPLfRwg uhwhrL0Pq7CqcBzSM+q7QCpVbGZIeONvaUrSYo00SzDcnjeDaT9A7WKRUZqO5HqB FoiU858lRip1qbvsfC2z5Y3mldMczhiQdVai0ULxcQT5LQdUiRSUru/l8Wv/ggZP R5Ow8a89gDQYPw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:58 2025 by rpki-client