This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json) Hash identifier: NaZ0ZzSxSrUODBtCzKshKmFEJuHq7hPYA6WdMg+Iolk= Subject key identifier: D2:AE:DA:4B:04:F9:4D:2F:1A:1A:47:4B:67:C7:FA:3B:F2:FB:AC:78 Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2 Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2 Certificate serial: 019AF19AE8D5070F538E200E1C0F305ED5A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft Manifest number: 144F Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=) 2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: bU6KhDqCojqM+4nIW450LvWJN6UCQM26Etoo13uJXeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e8:d5:07:0f:53:8e:20:0e:1c:0f:30:5e:d5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2 Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=d2aeda4b04f94d2f1a1a474b67c7fa3bf2fbac78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:cc:37:ac:9a:aa:74:0c:15:9d:f4:88:21: 45:34:7c:cb:06:a6:35:ad:72:8d:6e:e0:6a:24:8e: b9:15:63:a3:63:f0:e1:1d:a2:c4:69:80:17:25:09: 93:b2:0b:41:05:2c:fd:ee:9c:22:3e:e8:1b:b2:39: cf:82:36:fc:f6:7f:c8:a4:20:8c:c2:8b:ee:2e:21: ea:ce:ac:d6:71:3c:b0:5b:e4:e8:ec:84:b5:71:63: fb:81:66:c0:ae:2d:aa:fa:ca:65:ec:4f:b7:ce:7e: 93:e8:80:f3:f5:68:f0:00:3a:3d:1f:fb:8b:ac:61: fb:ee:80:1e:38:a3:57:13:55:b6:43:16:43:64:a2: 9d:72:3c:95:d2:ed:4b:64:ac:81:ff:30:4a:a1:39: 98:1e:0f:4a:9e:18:50:4e:9e:3c:33:9f:62:e9:9f: 56:51:61:98:e7:d9:5c:05:70:65:43:d3:87:de:42: 24:3e:98:4b:94:d0:2c:26:90:58:f9:f2:5e:57:b9: 9b:91:05:5e:91:d5:37:66:27:0e:e9:5b:f2:8f:f0: 35:81:67:9b:70:f9:69:6b:10:3b:39:44:d1:bb:37: 3d:af:a4:73:d7:72:3f:42:54:7e:e4:89:bd:9a:6a: 6b:a7:6f:59:c8:5b:f6:1f:78:ca:56:47:8e:ac:84: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AE:DA:4B:04:F9:4D:2F:1A:1A:47:4B:67:C7:FA:3B:F2:FB:AC:78 X509v3 Authority Key Identifier: keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:43:69:01:21:a7:ea:94:71:3b:30:7d:b2:b4:43:a2:5b:9e: 0d:3d:da:cf:ce:bb:da:e3:5b:60:fa:65:ad:93:0d:74:c8:21: 66:fd:31:3c:a8:4a:c8:f7:27:af:6e:de:66:69:02:52:36:a5: 46:6e:50:e8:36:af:7f:aa:f0:18:cf:f1:1c:24:b8:3e:f0:c3: 59:38:d6:55:f0:de:e2:02:96:f3:70:06:bd:ac:71:8b:a0:cb: c5:8f:4b:96:70:d5:02:e3:46:24:6e:51:2e:90:e3:ba:ca:37: dc:4c:85:ab:09:54:9f:88:7f:3a:85:7f:bc:c1:91:29:70:41: 82:7c:35:d8:96:cc:65:aa:05:21:17:49:40:ea:08:fc:43:40: 16:08:ee:85:fd:11:a6:ad:f7:b3:2f:a8:dd:35:e3:86:4c:b9: 9b:aa:1f:6f:ed:74:6e:49:df:60:d9:d5:bf:d8:d5:1c:d5:7e: 31:d3:13:00:4f:07:62:fe:8f:41:bb:cb:70:9f:73:09:f1:eb: 38:8a:bf:50:50:ca:bb:79:2a:89:78:6c:7d:61:ba:cc:22:72: 5d:24:17:b5:a4:52:36:e6:c1:db:00:7e:40:29:df:d1:95:2c: d6:4f:6b:9c:89:b9:be:48:46:ad:23:0e:99:5a:88:15:d6:3c: b1:ec:92:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmujVBw9TjiAOHA8wXtWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Mjk3OGQ1MzI2OThmYjIwODQwZjk0MmIwMjQ3YzAxYzhm NTc4YjIwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EyhkMmFlZGE0YjA0Zjk0ZDJmMWExYTQ3NGI2N2M3ZmEzYmYyZmJhYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9/MN6yaqnQMFZ30iCFFNHzLBqY1 rXKNbuBqJI65FWOjY/DhHaLEaYAXJQmTsgtBBSz97pwiPugbsjnPgjb89n/IpCCM wovuLiHqzqzWcTywW+To7IS1cWP7gWbAri2q+spl7E+3zn6T6IDz9WjwADo9H/uL rGH77oAeOKNXE1W2QxZDZKKdcjyV0u1LZKyB/zBKoTmYHg9KnhhQTp48M59i6Z9W UWGY59lcBXBlQ9OH3kIkPphLlNAsJpBY+fJeV7mbkQVekdU3ZicO6Vvyj/A1gWeb cPlpaxA7OUTRuzc9r6Rz13I/QlR+5Im9mmprp29ZyFv2H3jKVkeOrIRtbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKu2ksE+U0vGhpHS2fH+jvy+6x4MB8GA1UdIwQY MBaAFMQpeNUyaY+yCED5QrAkfAHI9XiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGIt NzdkNTE2YmU3YTg3LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGItNzdkNTE2YmU3YTg3 LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUNpASGn 6pRxOzB9srRDolueDT3az8672uNbYPplrZMNdMghZv0xPKhKyPcnr27eZmkCUjal Rm5Q6Davf6rwGM/xHCS4PvDDWTjWVfDe4gKW83AGvaxxi6DLxY9LlnDVAuNGJG5R LpDjuso33EyFqwlUn4h/OoV/vMGRKXBBgnw12JbMZaoFIRdJQOoI/ENAFgjuhf0R pq33sy+o3TXjhky5m6ofb+10bknfYNnVv9jVHNV+MdMTAE8HYv6PQbvLcJ9zCfHr OIq/UFDKu3kqiXhsfWG6zCJyXSQXtaRSNubB2wB+QCnf0ZUs1k9rnIm5vkhGrSMO mVqIFdY8seySNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:41 2025 by rpki-client