This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json) Hash identifier: vuAFp+ZDvGd9MpBM08Vmle+8wGOOWdGRberzqD7/Zws= Subject key identifier: 44:6D:43:60:5F:4C:3A:57:37:90:86:B3:35:DB:91:3B:BB:5B:9C:FB Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Certificate serial: 019AF49C0FD7CF99E2B6D635D91F070BC41D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 17:00:59 +0000 Manifest this update: Sat 06 Dec 2025 17:00:59 +0000 Manifest next update: Sun 07 Dec 2025 17:00:59 +0000 Files and hashes: 1: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (hash: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=) 2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: jt2WJichLYxV9Vcf1aTbOucMnw/0N2L5I8cS3x/Bmk0=) 3: kDFFmEHOxxsPr1PqT9Wra3pOapo.roa (hash: PtmDDx7DD6q5hVM880BXHYOoqWKL19qOEEf16G0FZlQ=) 4: whsaqddiyDI8xyshxKkHo02Q7GA.roa (hash: GiAQ6ec8LMUk9UTzynBovpvos9gk3+nUpwnbIm92gbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:0f:d7:cf:99:e2:b6:d6:35:d9:1f:07:0b:c4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Validity Not Before: Dec 6 17:00:59 2025 GMT Not After : Dec 7 17:00:59 2025 GMT Subject: CN=446d43605f4c3a57379086b335db913bbb5b9cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:ec:23:88:46:2b:54:39:ba:32:4f:46:42: e5:09:7c:f5:58:fd:2a:b4:52:7f:56:68:18:d1:06: c1:70:c6:ba:cf:05:6a:f3:a7:81:25:05:d8:4b:2f: c0:b9:95:b9:21:26:51:70:1a:28:8e:a2:ca:b8:4d: 46:4c:bd:27:67:37:88:19:4a:6b:cc:21:f6:22:f4: b8:9b:4e:4f:d3:4a:b7:41:4d:dd:f3:4b:8c:5e:6c: 25:a4:9c:41:e2:32:8c:2b:31:bb:7c:53:c4:e5:61: 41:5d:84:d9:85:61:b8:84:d9:66:33:29:87:c0:d9: 66:fa:46:88:52:be:38:15:a8:90:04:5c:c3:3c:3c: 33:cd:08:e7:90:31:96:25:bf:38:91:43:36:f6:73: e1:ab:d2:a2:44:bc:93:36:f4:ef:70:5f:2b:b8:ce: be:1c:25:70:0e:ed:df:bb:3e:19:87:e6:f4:a6:f8: fc:ad:d7:40:f3:1f:33:62:0f:a6:50:f5:00:ee:e2: 05:9e:6f:5f:bd:54:fd:38:a3:1c:6c:cb:34:69:c0: c0:23:1e:15:4f:ea:f7:bd:3b:3a:dc:9a:bf:90:77: bc:d7:17:fb:e4:9d:3f:34:26:04:e3:02:e1:0e:60: 47:46:e6:f6:f1:b2:ec:d7:91:6b:13:6b:91:bf:0d: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6D:43:60:5F:4C:3A:57:37:90:86:B3:35:DB:91:3B:BB:5B:9C:FB X509v3 Authority Key Identifier: keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bd:0a:7e:69:01:af:fa:84:f9:b7:a7:6d:c7:27:68:42:58: 46:6d:ec:f7:72:49:92:a4:e8:80:7c:2f:56:7a:30:f7:d4:14: 05:34:a2:c3:08:e8:f7:82:cd:68:eb:d7:93:ce:08:37:5e:57: a7:90:f8:8e:04:68:0d:92:dc:0f:d0:3b:c4:3e:f9:2b:59:0a: 33:22:0e:ab:a6:37:bd:0d:b4:c8:95:60:c9:c6:93:96:83:bb: 20:49:90:1a:b2:09:fb:f2:6b:c2:c9:71:f3:f4:21:a5:8d:40: 58:38:22:c4:f4:72:ec:06:d5:8e:dc:02:78:9c:42:64:68:25: 0f:3a:81:56:ca:e5:61:49:1a:76:0c:f1:58:35:5a:c8:ba:a6: d4:4b:ea:27:b4:4a:ab:47:f1:17:70:97:12:ae:54:1a:b9:1e: 6a:fe:a9:25:70:0f:59:a5:e0:72:e3:0c:00:d8:64:09:63:ce: 5d:51:90:53:e3:5e:c8:14:cc:e2:25:18:49:db:84:2d:a5:c9: d1:73:28:dd:70:f1:fd:a4:cc:ef:19:52:c1:81:da:76:99:78: 45:00:fd:6e:a9:96:cb:6e:32:29:7e:c6:df:69:91:50:aa:96: ba:3f:87:fa:84:8a:3d:98:e0:e5:56:21:92:33:ab:b8:07:e4: 46:e5:eb:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nA/Xz5nittY12R8HC8QdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3 MDViMmYwHhcNMjUxMjA2MTcwMDU5WhcNMjUxMjA3MTcwMDU5WjAzMTEwLwYDVQQD Eyg0NDZkNDM2MDVmNGMzYTU3Mzc5MDg2YjMzNWRiOTEzYmJiNWI5Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti7sI4hGK1Q5ujJPRkLlCXz1WP0q tFJ/VmgY0QbBcMa6zwVq86eBJQXYSy/AuZW5ISZRcBoojqLKuE1GTL0nZzeIGUpr zCH2IvS4m05P00q3QU3d80uMXmwlpJxB4jKMKzG7fFPE5WFBXYTZhWG4hNlmMymH wNlm+kaIUr44FaiQBFzDPDwzzQjnkDGWJb84kUM29nPhq9KiRLyTNvTvcF8ruM6+ HCVwDu3fuz4Zh+b0pvj8rddA8x8zYg+mUPUA7uIFnm9fvVT9OKMcbMs0acDAIx4V T+r3vTs63Jq/kHe81xf75J0/NCYE4wLhDmBHRub28bLs15FrE2uRvw0MuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERtQ2BfTDpXN5CGszXbkTu7W5z7MB8GA1UdIwQY MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt MGUxZGI5OGFkMjMxLzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL70KfmkB r/qE+benbccnaEJYRm3s93JJkqTogHwvVnow99QUBTSiwwjo94LNaOvXk84IN15X p5D4jgRoDZLcD9A7xD75K1kKMyIOq6Y3vQ20yJVgycaTloO7IEmQGrIJ+/Jrwslx 8/QhpY1AWDgixPRy7AbVjtwCeJxCZGglDzqBVsrlYUkadgzxWDVayLqm1EvqJ7RK q0fxF3CXEq5UGrkeav6pJXAPWaXgcuMMANhkCWPOXVGQU+NeyBTM4iUYSduELaXJ 0XMo3XDx/aTM7xlSwYHadpl4RQD9bqmWy24yKX7G32mRUKqWuj+H+oSKPZjg5VYh kjOruAfkRuXrYw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:40 2025 by rpki-client