This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json) Hash identifier: R2zyLTV9UWI8LnYQ+BMKYHerQxR4qXQmx46i0lj6Xvo= Subject key identifier: A4:1E:9A:30:FD:B9:1C:12:B3:21:35:56:EF:D6:2F:9E:00:85:91:41 Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f Certificate serial: 019AF31C66B95AC459205ED1B1D1E7072C58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft Manifest number: 1685 Signing time: Sat 06 Dec 2025 10:01:56 +0000 Manifest this update: Sat 06 Dec 2025 10:01:56 +0000 Manifest next update: Sun 07 Dec 2025 10:01:56 +0000 Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: nbfdxjsCQNgyP55QVG2hrX4kPWYgkg97oU7akrD34XE=) 2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:66:b9:5a:c4:59:20:5e:d1:b1:d1:e7:07:2c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f Validity Not Before: Dec 6 10:01:56 2025 GMT Not After : Dec 7 10:01:56 2025 GMT Subject: CN=a41e9a30fdb91c12b3213556efd62f9e00859141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:13:90:c9:8d:4c:3d:0b:6b:74:08:38:4c:e2: 30:57:ea:06:dc:0d:02:73:14:93:e9:ab:26:9f:7b: 44:7f:ab:71:0d:a0:e0:8b:9d:65:e8:cd:7a:7e:0d: 3c:69:8b:b0:30:e5:ae:f9:5b:2c:d5:e1:e9:a7:53: 84:e1:91:fc:3d:19:08:41:50:f1:b7:df:94:2b:25: 9d:ed:9d:62:58:65:aa:fa:15:91:2a:7f:71:0b:34: 77:65:0d:15:7c:ce:a8:c6:2f:05:a1:70:d9:bf:f7: ec:70:b8:cb:58:f2:14:d0:b8:1e:cc:b0:01:fd:bc: 60:94:25:e8:85:5f:e8:7d:7b:cc:0f:c0:46:f7:1a: 33:23:52:a9:cc:84:f9:57:e4:14:b2:d9:14:40:44: a8:14:e1:4b:c9:08:cd:00:24:c1:5f:ef:da:35:2b: af:f4:09:80:0a:f5:0e:71:fa:51:54:db:07:dd:f2: 29:04:24:25:2a:6c:f9:e5:8c:47:0b:0d:97:ea:b1: 81:09:12:f0:a6:ba:db:68:69:97:de:9e:5b:b3:9b: dc:1a:f8:36:a3:1d:f4:4d:ca:6a:8b:06:7b:28:ed: df:e8:09:d6:a1:70:03:5a:2c:6c:28:35:42:29:42: 11:83:c3:d1:89:2c:5b:dd:9a:68:42:2a:70:45:3d: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1E:9A:30:FD:B9:1C:12:B3:21:35:56:EF:D6:2F:9E:00:85:91:41 X509v3 Authority Key Identifier: keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2e:97:9b:68:a3:bd:e6:05:a4:6b:c7:25:de:a3:2b:2d:02: ee:ad:3a:38:f5:2e:33:3f:c4:cf:10:3f:7f:09:0d:7b:a2:89: ae:b9:0e:88:c7:7e:02:ba:0e:ab:5b:bd:3d:57:9a:d1:27:a3: 97:8a:a3:7a:ae:b2:a3:01:e2:64:c1:2e:4b:a3:5b:9b:8c:f5: 70:6d:dc:50:45:4e:ed:1d:8f:26:1d:39:d4:fc:55:c5:37:93: fe:18:7a:00:70:1f:4b:af:94:28:d5:df:64:d0:c0:e8:41:da: b3:fe:9c:90:08:be:29:4a:26:e1:78:5c:86:47:33:bd:5f:15: 4f:92:2e:9d:e5:93:c0:f9:a6:34:67:3b:1e:cc:e9:5c:a1:b7: ba:af:b5:0b:b7:32:f2:fb:20:de:d0:d7:96:8e:45:6d:99:69: b4:46:9a:6b:60:a8:62:ac:a1:1d:58:74:b8:df:83:9e:19:e2: 7c:2b:3b:0e:dd:3b:f4:e9:92:9c:d1:5b:88:89:23:c8:54:34: 55:88:ed:ed:92:c2:17:29:95:4e:6d:03:08:f1:a3:44:63:e1: 33:fa:6a:ee:f4:ed:29:13:04:d7:a1:62:6b:fb:4b:e3:2c:46: 1c:cb:b7:44:bb:99:ef:ce:16:9e:af:ae:7f:6d:13:d9:30:31: bd:34:cf:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGa5WsRZIF7RsdHnByxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZWJiOGI3OTQyMmZiMmQ2ZDhhODJkYjdmMWFjMGI2YWE1 OWIzN2YwHhcNMjUxMjA2MTAwMTU2WhcNMjUxMjA3MTAwMTU2WjAzMTEwLwYDVQQD EyhhNDFlOWEzMGZkYjkxYzEyYjMyMTM1NTZlZmQ2MmY5ZTAwODU5MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xOQyY1MPQtrdAg4TOIwV+oG3A0C cxST6asmn3tEf6txDaDgi51l6M16fg08aYuwMOWu+Vss1eHpp1OE4ZH8PRkIQVDx t9+UKyWd7Z1iWGWq+hWRKn9xCzR3ZQ0VfM6oxi8FoXDZv/fscLjLWPIU0LgezLAB /bxglCXohV/ofXvMD8BG9xozI1KpzIT5V+QUstkUQESoFOFLyQjNACTBX+/aNSuv 9AmACvUOcfpRVNsH3fIpBCQlKmz55YxHCw2X6rGBCRLwprrbaGmX3p5bs5vcGvg2 ox30TcpqiwZ7KO3f6AnWoXADWixsKDVCKUIRg8PRiSxb3ZpoQipwRT1ldQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQemjD9uRwSsyE1Vu/WL54AhZFBMB8GA1UdIwQY MBaAFMXruLeUIvstbYqC238awLaqWbN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUt Yzg0YmZkNGVlODc4LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUtYzg0YmZkNGVlODc4 LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy6Xm2ij veYFpGvHJd6jKy0C7q06OPUuMz/EzxA/fwkNe6KJrrkOiMd+AroOq1u9PVea0Sej l4qjeq6yowHiZMEuS6Nbm4z1cG3cUEVO7R2PJh051PxVxTeT/hh6AHAfS6+UKNXf ZNDA6EHas/6ckAi+KUom4XhchkczvV8VT5IuneWTwPmmNGc7HszpXKG3uq+1C7cy 8vsg3tDXlo5FbZlptEaaa2CoYqyhHVh0uN+DnhnifCs7Dt079OmSnNFbiIkjyFQ0 VYjt7ZLCFymVTm0DCPGjRGPhM/pq7vTtKRME16Fia/tL4yxGHMu3RLuZ784Wnq+u f20T2TAxvTTPpA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:14 2025 by rpki-client