This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json) Hash identifier: 3+UNzvBHmav6AagGDls/tdDER6DvCkjo0v3UvDx/suc= Subject key identifier: 69:FA:FE:4A:9B:6A:72:C1:A2:B0:94:56:EA:10:50:15:98:8D:4B:BE Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Certificate serial: 019AF31C2BDB3B70F4E397233F049C91D911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 10:01:40 +0000 Manifest this update: Sat 06 Dec 2025 10:01:40 +0000 Manifest next update: Sun 07 Dec 2025 10:01:40 +0000 Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=) 2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=) 3: Me2RurdP2NLhCjdqhoeK0mf-VUg.roa (hash: LOxCBjCfnlrjhQuF86hx7twRBwn91CADOctOtx6FzQE=) 4: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=) 5: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: WvoCKsdlXLhegEtmRw+Z51JfCftvxuwgH4kT6L20040=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2b:db:3b:70:f4:e3:97:23:3f:04:9c:91:d9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Validity Not Before: Dec 6 10:01:40 2025 GMT Not After : Dec 7 10:01:40 2025 GMT Subject: CN=69fafe4a9b6a72c1a2b09456ea105015988d4bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:20:8d:c2:05:c6:7f:d0:57:30:4e:b0:01:51: 70:97:b7:34:ee:87:22:27:78:15:a3:17:03:a5:f7: ec:28:3d:e0:19:e6:cf:fa:af:3b:94:98:e9:1c:bc: f6:3b:73:9b:b9:c6:7e:66:88:24:4b:ae:c4:ca:71: 5f:b5:85:fd:1c:39:32:21:d7:e4:b6:0e:61:2e:7e: 07:31:ec:9c:3b:01:fc:35:2a:7e:d1:77:78:10:98: 6a:7d:a6:2d:cd:e5:e6:7e:ff:1d:9c:ce:90:23:a7: 76:25:35:99:03:31:f9:ac:72:84:7f:84:47:09:76: 7a:ee:6e:69:2e:6c:8e:30:17:86:48:2b:e9:13:8d: 6f:04:0d:fe:73:72:c6:7b:fa:70:f9:2c:51:8d:81: 2a:e2:9f:37:4a:2d:24:d8:36:09:b0:45:43:3d:fd: a2:bb:20:b2:bb:1b:83:96:54:cf:3a:98:0e:f3:ff: 52:96:1f:92:3d:b4:1d:2a:bf:d5:e7:83:0e:25:5e: ee:20:f0:ea:b2:7a:75:6e:ac:3c:64:ff:c3:e9:43: f1:39:c1:2d:c4:c9:5c:c1:47:5b:df:ec:59:5e:be: 40:9d:75:25:a0:21:b5:3d:a6:52:3b:77:95:a2:ef: d8:97:d1:37:25:a7:1e:01:e7:38:ac:f1:c5:ba:56: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FA:FE:4A:9B:6A:72:C1:A2:B0:94:56:EA:10:50:15:98:8D:4B:BE X509v3 Authority Key Identifier: keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f4:44:13:0c:d6:17:12:af:c1:ff:5c:15:09:84:65:9e:52: 94:75:9e:85:aa:3f:a7:ae:63:61:30:0f:d0:f0:6a:4a:20:43: b1:04:5b:18:02:ff:13:ca:d8:38:d9:2d:88:88:6d:68:44:fa: 1f:ab:47:ed:76:4e:8d:3d:8b:34:e3:73:0b:d1:9c:5f:4b:99: 26:0f:8e:db:62:b1:0e:c3:d0:66:74:31:6a:10:8d:f3:02:99: e5:14:90:de:f0:75:7d:24:bc:83:d3:3c:a1:64:35:50:91:4f: 1f:c8:78:c5:76:53:af:07:99:55:84:b0:c5:d3:0f:df:0f:92: 7f:0b:ef:87:5e:fe:c5:43:ed:8c:fc:81:0e:11:81:1b:72:69: d4:7b:83:58:e4:40:99:83:7a:6b:5f:e3:2a:71:1b:fe:2d:b2: 4f:c9:bf:2d:bd:fb:91:01:a5:2d:6a:74:0b:8a:5d:89:b8:4d: 88:15:59:29:d1:87:5a:30:b2:28:05:ef:24:fb:4f:ca:e8:77: 7e:f4:62:02:d1:1a:97:1f:3d:be:b4:34:f0:7f:81:e3:95:9e: 01:5a:bf:32:d9:8f:d7:c7:5a:96:ba:17:0e:81:e4:59:55:d4: e4:48:8b:99:70:7a:a8:10:8c:0b:84:fa:b7:a5:02:5a:a4:9a: 37:14:5f:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCvbO3D045cjPwSckdkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZhOTRmNjEzNGUzOTYwZWE1ZjMxODg0NmEzMGNmM2U5 MjJkZDcwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD Eyg2OWZhZmU0YTliNmE3MmMxYTJiMDk0NTZlYTEwNTAxNTk4OGQ0YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yCNwgXGf9BXME6wAVFwl7c07oci J3gVoxcDpffsKD3gGebP+q87lJjpHLz2O3ObucZ+ZogkS67EynFftYX9HDkyIdfk tg5hLn4HMeycOwH8NSp+0Xd4EJhqfaYtzeXmfv8dnM6QI6d2JTWZAzH5rHKEf4RH CXZ67m5pLmyOMBeGSCvpE41vBA3+c3LGe/pw+SxRjYEq4p83Si0k2DYJsEVDPf2i uyCyuxuDllTPOpgO8/9Slh+SPbQdKr/V54MOJV7uIPDqsnp1bqw8ZP/D6UPxOcEt xMlcwUdb3+xZXr5AnXUloCG1PaZSO3eVou/Yl9E3JaceAec4rPHFularXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn6/kqbanLBorCUVuoQUBWYjUu+MB8GA1UdIwQY MBaAFMbPqU9hNOOWDqXzGIRqMM8+ki3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUt ZjlhNDM3MDlkMDBiLzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUtZjlhNDM3MDlkMDBi LzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPREEwzW FxKvwf9cFQmEZZ5SlHWehao/p65jYTAP0PBqSiBDsQRbGAL/E8rYONktiIhtaET6 H6tH7XZOjT2LNONzC9GcX0uZJg+O22KxDsPQZnQxahCN8wKZ5RSQ3vB1fSS8g9M8 oWQ1UJFPH8h4xXZTrweZVYSwxdMP3w+Sfwvvh17+xUPtjPyBDhGBG3Jp1HuDWORA mYN6a1/jKnEb/i2yT8m/Lb37kQGlLWp0C4pdibhNiBVZKdGHWjCyKAXvJPtPyuh3 fvRiAtEalx89vrQ08H+B45WeAVq/MtmP18dalroXDoHkWVXU5EiLmXB6qBCMC4T6 t6UCWqSaNxRf9w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:47:05 2025 by rpki-client