This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json) Hash identifier: IWeCfXYhX8G8jz2EvtvFYrpik8Pi5XvEzGfD8WozXlU= Subject key identifier: D0:10:53:00:08:3A:F3:D2:01:63:25:33:18:76:8B:CA:71:43:DE:43 Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d Certificate serial: 019AF2093A045C4B13D14700DAE68A02A544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=) 2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=) 3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: /0ylQWH6Ry5TVZNpM6DiLwisEP9BQxTtJgh69kgKMhg=) 4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3a:04:5c:4b:13:d1:47:00:da:e6:8a:02:a5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=d0105300083af3d20163253318768bca7143de43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:ae:8d:3b:2f:d2:89:9d:9b:38:67:73:1c: aa:55:ea:ef:7d:6b:bc:fe:7e:bb:75:19:38:22:9f: a5:9b:90:83:66:f0:23:c0:e3:fb:6d:f9:93:79:38: 0e:74:55:b5:ce:ae:53:9e:df:ac:02:0f:d0:00:a0: 05:af:d9:da:ab:95:d0:f5:ac:13:9c:95:f9:d1:27: 3a:17:e8:38:7e:ce:d9:0a:f8:17:32:24:e9:78:32: 64:79:ba:6a:e5:76:34:09:e6:0b:36:8c:36:12:80: c4:77:cc:c0:4d:35:da:d8:94:b3:34:c2:0c:32:11: f8:84:55:3d:24:96:72:2a:5a:cb:70:2b:2c:5e:b3: 26:8e:7d:91:4a:1e:b7:7b:2a:6a:06:41:30:0f:42: f3:e0:77:4b:63:23:52:87:c5:12:ee:63:90:e5:8b: 29:5d:bb:95:13:e3:01:c9:46:83:46:dd:57:b6:27: ec:6f:58:9e:42:20:f0:ce:8e:e6:75:b4:bf:6e:13: 1f:5b:15:58:7a:fc:5f:0a:12:eb:80:3c:4c:6c:1c: 1e:80:5c:9c:6a:3c:d2:e9:3d:5e:c5:d0:9e:9d:22: bc:25:54:16:6c:1d:b9:d9:11:f7:e2:39:f6:35:da: 77:a8:7b:d1:ac:38:72:17:33:d6:04:3b:4f:4d:e2: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:10:53:00:08:3A:F3:D2:01:63:25:33:18:76:8B:CA:71:43:DE:43 X509v3 Authority Key Identifier: keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4f:29:02:99:18:1a:58:89:44:ff:49:76:49:6c:43:a9:51: 1c:10:63:d2:15:ea:93:cf:44:12:6e:1d:66:57:e0:ef:6d:17: 27:ef:cf:79:cd:13:26:b7:cc:b0:54:5d:b1:f9:64:85:db:2a: 60:e4:f4:96:35:30:86:aa:a5:02:ef:69:8e:27:1d:84:50:08: 13:0d:28:4f:15:9a:39:6b:83:f8:19:63:97:b7:4b:ce:83:b0: b1:29:69:94:43:5b:b3:1f:27:5a:3f:81:a2:93:ba:d3:48:53: 1f:8d:a2:e5:69:27:73:03:a4:17:97:48:04:2d:bf:2a:49:19: 2b:da:b6:93:6d:04:65:77:da:79:8a:d7:0a:b5:19:4e:77:15: ed:59:d6:de:2f:88:0c:9f:03:c8:1f:0e:94:f2:1f:98:b0:1f: a8:fd:d5:a1:69:68:73:ff:4f:53:eb:e6:01:12:74:e6:ce:6c: c3:23:ef:f7:0f:ff:46:00:23:17:d2:c7:84:ea:64:81:b8:b7: e5:9d:12:80:95:80:61:85:3e:38:41:5e:0f:b0:3c:f5:c6:ef: ce:15:44:65:43:e0:46:e4:05:0d:25:83:41:8e:63:62:04:85: ca:e4:05:68:d8:ef:33:87:87:ee:3f:ea:79:45:58:d5:ae:bb: 5c:8e:3a:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCToEXEsT0UcA2uaKAqVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjczNTJkNDdkYjk3ODVmNDkxMTgwOTJkZTg3MDRhNjdm NjUyMGQwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EyhkMDEwNTMwMDA4M2FmM2QyMDE2MzI1MzMxODc2OGJjYTcxNDNkZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrKujTsv0omdmzhncxyqVervfWu8 /n67dRk4Ip+lm5CDZvAjwOP7bfmTeTgOdFW1zq5Tnt+sAg/QAKAFr9naq5XQ9awT nJX50Sc6F+g4fs7ZCvgXMiTpeDJkebpq5XY0CeYLNow2EoDEd8zATTXa2JSzNMIM MhH4hFU9JJZyKlrLcCssXrMmjn2RSh63eypqBkEwD0Lz4HdLYyNSh8US7mOQ5Ysp XbuVE+MByUaDRt1Xtifsb1ieQiDwzo7mdbS/bhMfWxVYevxfChLrgDxMbBwegFyc ajzS6T1exdCenSK8JVQWbB252RH34jn2Ndp3qHvRrDhyFzPWBDtPTeI5+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAQUwAIOvPSAWMlMxh2i8pxQ95DMB8GA1UdIwQY MBaAFF/3NS1H25eF9JEYCS3ocEpn9lINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYt NTE3NDgxZDBmODUwLzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYtNTE3NDgxZDBmODUw LzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE8pApkY GliJRP9JdklsQ6lRHBBj0hXqk89EEm4dZlfg720XJ+/Pec0TJrfMsFRdsflkhdsq YOT0ljUwhqqlAu9pjicdhFAIEw0oTxWaOWuD+Bljl7dLzoOwsSlplENbsx8nWj+B opO600hTH42i5WkncwOkF5dIBC2/KkkZK9q2k20EZXfaeYrXCrUZTncV7VnW3i+I DJ8DyB8OlPIfmLAfqP3VoWloc/9PU+vmARJ05s5swyPv9w//RgAjF9LHhOpkgbi3 5Z0SgJWAYYU+OEFeD7A89cbvzhVEZUPgRuQFDSWDQY5jYgSFyuQFaNjvM4eH7j/q eUVY1a67XI468w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:52 2025 by rpki-client