This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json) Hash identifier: PqspgG+GUECOIwgLt5PP9RhUyr0h2WHPQ6lqh/kBQs0= Subject key identifier: 07:69:9E:B0:6F:DC:15:EC:ED:FB:D3:34:7F:49:25:D9:18:76:F2:14 Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Certificate serial: 019AF276C26CA6766503649667E761EB6AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft Manifest number: 0A90 Signing time: Sat 06 Dec 2025 07:01:00 +0000 Manifest this update: Sat 06 Dec 2025 07:01:00 +0000 Manifest next update: Sun 07 Dec 2025 07:01:00 +0000 Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=) 2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: cUKL10EvU+WK2utiQqSHwADq1R34rYsCNnZ32kXMHXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c2:6c:a6:76:65:03:64:96:67:e7:61:eb:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Validity Not Before: Dec 6 07:01:00 2025 GMT Not After : Dec 7 07:01:00 2025 GMT Subject: CN=07699eb06fdc15ecedfbd3347f4925d91876f214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:a0:8a:e9:2f:f9:6d:f7:b4:57:1d:8c:04: 82:ca:13:7e:0e:00:a2:77:cb:1b:ca:39:dc:f1:f1: fb:cb:ee:98:10:26:91:fb:c4:6c:20:cc:64:7a:42: ef:c0:d0:68:71:9c:26:b3:3d:68:0d:e4:f0:56:56: 4c:be:52:a6:1b:c0:01:e3:f0:3e:39:ff:37:e9:ac: a3:21:2b:55:54:7d:37:b2:62:76:48:e7:18:80:f8: 79:f5:fb:f1:7c:e6:3b:04:cb:61:96:2c:57:fb:99: 2a:44:e2:a3:05:30:65:0e:ca:7c:30:f3:4a:4c:b5: 8c:b5:b2:d5:76:e5:59:63:98:7e:b2:a0:8c:cf:90: e4:46:c9:ca:75:bd:91:c2:d1:c5:2f:60:ce:7f:d5: 4d:88:ac:5a:37:60:ec:19:33:83:26:ca:e7:74:35: 06:cb:41:0a:d5:fb:75:98:2d:e6:e4:40:17:92:ea: 22:91:36:d6:bb:24:07:24:04:3a:e7:5f:0d:0f:ff: 45:38:22:be:0e:bf:96:3d:db:d7:85:e1:c4:43:22: a8:df:96:42:6a:e7:fe:1c:8d:e1:51:49:20:c2:78: a9:af:55:97:b5:bf:a7:51:90:cd:87:b0:c8:1c:51: d9:11:e2:53:fe:48:9e:51:47:2e:a0:a4:c2:6a:c9: 24:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:69:9E:B0:6F:DC:15:EC:ED:FB:D3:34:7F:49:25:D9:18:76:F2:14 X509v3 Authority Key Identifier: keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:09:da:6b:bb:e1:cc:a3:91:35:e6:34:cd:45:bc:b9:43:5f: 21:69:10:3e:62:68:f4:1c:a4:a8:10:fe:dd:b0:de:e7:d0:c9: c7:79:4d:0d:4c:cd:33:e9:80:46:ac:0f:94:27:d4:b9:ec:3c: f1:48:57:04:5b:48:d5:70:45:81:f6:6b:69:a0:26:8f:7e:c0: 7b:09:fc:ac:cc:23:2c:af:7e:de:98:f0:cd:76:35:ac:67:95: 19:6d:a8:d3:d2:12:b7:60:3e:92:da:38:7c:2d:f2:f9:4f:5e: 0a:16:bd:9e:c5:22:aa:bd:e7:7d:23:31:c5:de:77:14:4e:c1: a1:ee:bc:57:9c:76:40:43:9f:01:6f:6f:39:9c:26:9b:c9:e0: 6b:a2:f8:57:b3:cc:b9:53:e6:8e:e3:4b:c3:f6:be:eb:a8:10: e8:bc:b6:dc:d7:50:4a:52:64:8e:fd:43:ba:7f:25:32:5e:8f: a2:54:19:97:66:e2:6f:ac:c2:0c:83:94:64:3a:13:7a:60:00: 71:46:89:f3:19:d7:25:15:ce:10:3c:60:89:97:9f:6c:a4:cb: 7b:30:49:80:ae:a8:47:4d:40:0e:5b:aa:05:03:8c:8e:ae:b3: ff:e7:00:57:47:e9:75:79:ff:c6:66:79:c3:4c:2b:d9:82:9d: 4f:a1:60:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsJspnZlA2SWZ+dh62qgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3 MDFhNDgwHhcNMjUxMjA2MDcwMTAwWhcNMjUxMjA3MDcwMTAwWjAzMTEwLwYDVQQD EygwNzY5OWViMDZmZGMxNWVjZWRmYmQzMzQ3ZjQ5MjVkOTE4NzZmMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uGgiukv+W33tFcdjASCyhN+DgCi d8sbyjnc8fH7y+6YECaR+8RsIMxkekLvwNBocZwmsz1oDeTwVlZMvlKmG8AB4/A+ Of836ayjIStVVH03smJ2SOcYgPh59fvxfOY7BMthlixX+5kqROKjBTBlDsp8MPNK TLWMtbLVduVZY5h+sqCMz5DkRsnKdb2RwtHFL2DOf9VNiKxaN2DsGTODJsrndDUG y0EK1ft1mC3m5EAXkuoikTbWuyQHJAQ6518ND/9FOCK+Dr+WPdvXheHEQyKo35ZC auf+HI3hUUkgwnipr1WXtb+nUZDNh7DIHFHZEeJT/kieUUcuoKTCaskkFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdpnrBv3BXs7fvTNH9JJdkYdvIUMB8GA1UdIwQY MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5 LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgnaa7vh zKORNeY0zUW8uUNfIWkQPmJo9BykqBD+3bDe59DJx3lNDUzNM+mARqwPlCfUuew8 8UhXBFtI1XBFgfZraaAmj37Aewn8rMwjLK9+3pjwzXY1rGeVGW2o09ISt2A+kto4 fC3y+U9eCha9nsUiqr3nfSMxxd53FE7Boe68V5x2QEOfAW9vOZwmm8nga6L4V7PM uVPmjuNLw/a+66gQ6Ly23NdQSlJkjv1Dun8lMl6PolQZl2bib6zCDIOUZDoTemAA cUaJ8xnXJRXOEDxgiZefbKTLezBJgK6oR01ADluqBQOMjq6z/+cAV0fpdXn/xmZ5 w0wr2YKdT6FgNg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:53 2025 by rpki-client