This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft File: XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json) Hash identifier: VpVHmb8pRZAA7lJaHaNGMi9p/OmsNh7d3YoTQnQYR1I= Subject key identifier: 71:03:FE:7C:AD:A2:78:CE:AA:D9:D9:3B:E8:D4:A8:B4:67:06:F3:C6 Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Certificate serial: 019AF2764E48818E6AACE5A20CD38BA71DF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 07:00:30 +0000 Manifest this update: Sat 06 Dec 2025 07:00:30 +0000 Manifest next update: Sun 07 Dec 2025 07:00:30 +0000 Files and hashes: 1: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (hash: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=) 2: Kj2NqGC5bBv1gEhFpzdHWkRY4ZI.roa (hash: 51Tc+Qzr9atasRV0RiCoKJQOUvFVgpnHk2il25DGklM=) 3: LxxlY-veNdEFSuClmgliyHMOZOA.roa (hash: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=) 4: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (hash: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=) 5: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: JfmvkMRalsgvPWRYcGchk/W/TZ5533hXcXGbZ3q1W0o=) 6: aa3wYkdpjQEDieV4Tr1D1UlS-yQ.roa (hash: OvNz6w0TsSCTT94cQ7JVYM2YwdlsjARoid2lWLlXj5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4e:48:81:8e:6a:ac:e5:a2:0c:d3:8b:a7:1d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Validity Not Before: Dec 6 07:00:30 2025 GMT Not After : Dec 7 07:00:30 2025 GMT Subject: CN=7103fe7cada278ceaad9d93be8d4a8b46706f3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:65:f7:44:40:eb:3c:f4:01:a8:f5:4b:e6: 8d:75:e4:39:72:54:fa:79:92:6f:d6:d8:95:46:87: 3d:6c:53:4d:70:b2:d0:cb:70:4c:0b:b2:d4:6e:f3: 6d:c1:fa:aa:fb:9e:5e:68:9d:5d:42:b1:b7:a2:19: 30:e7:85:83:0a:03:79:df:a1:46:65:c8:08:34:62: eb:d6:4f:f0:eb:88:b2:28:c1:05:b7:cb:90:c5:92: a4:78:e3:b8:3d:6e:5d:49:9f:25:49:a3:a1:3d:ce: b7:6f:a0:05:04:f8:cf:ad:a9:10:c2:f9:3c:4d:50: a9:e1:8e:f0:be:6b:d5:fe:1d:d1:98:f3:43:dd:59: a3:ff:08:ed:5f:ad:bb:68:06:e8:fb:d0:36:0f:cc: ce:2e:50:6d:b3:ed:83:5e:6b:f0:e8:5a:63:30:31: 85:a3:b2:e3:b6:ba:8a:fd:ee:e1:cd:e1:35:de:4b: a2:34:e0:4b:33:b6:a9:46:51:c7:94:d3:96:00:28: b8:3c:0c:7a:55:04:a0:62:0d:5f:02:81:4f:4e:d4: 9f:61:6f:82:4b:6d:1a:1c:32:4c:4b:fa:38:72:f3: ca:51:8c:5e:8a:3e:14:c8:fd:49:a2:4c:cb:72:40: e9:45:bf:f4:84:dc:9a:e0:2d:30:e3:19:62:07:61: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:FE:7C:AD:A2:78:CE:AA:D9:D9:3B:E8:D4:A8:B4:67:06:F3:C6 X509v3 Authority Key Identifier: keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0a:90:e5:40:65:c2:da:8e:f3:02:5b:76:24:ba:20:06:bf: b3:21:5a:2a:41:66:9a:ca:e2:49:7c:46:65:47:bc:7a:47:f0: c0:a7:0b:8b:3c:9d:65:89:56:c6:59:a3:6d:08:cf:06:5d:60: ea:9e:be:41:09:83:15:f9:27:d6:61:57:cc:07:d7:ea:a1:7a: 1a:9b:fd:ce:52:36:bd:b4:f8:80:c8:cb:b8:90:1c:2b:3a:d4: bf:bb:1a:2b:8e:53:be:43:4e:a0:ea:97:1b:33:05:9f:73:80: e4:10:72:fa:6a:d0:a5:f6:65:c6:3a:8e:f6:4a:8b:e1:e3:0b: fb:89:c6:01:af:b9:1f:49:99:87:e5:3a:f3:41:56:a6:01:3a: cd:12:32:96:b2:89:86:29:54:99:16:11:f6:61:c3:74:02:75: 9f:44:37:85:11:d4:54:6d:31:c0:da:f2:53:8c:1f:fd:7c:ee: 5f:c6:56:23:07:f2:c5:3a:46:2b:48:27:f4:cc:ee:d5:5f:2a: 30:6c:65:ba:c7:e5:44:97:15:c4:89:33:3d:6d:92:59:7c:25: 85:34:66:b3:9b:ec:f9:7a:1a:b6:22:a0:98:cb:9c:b4:6e:ed: 7a:1b:da:db:7f:5f:17:cc:59:97:7b:a3:6e:33:d9:34:59:ac: 4e:b6:72:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydk5IgY5qrOWiDNOLpx33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj NTNjMDYwHhcNMjUxMjA2MDcwMDMwWhcNMjUxMjA3MDcwMDMwWjAzMTEwLwYDVQQD Eyg3MTAzZmU3Y2FkYTI3OGNlYWFkOWQ5M2JlOGQ0YThiNDY3MDZmM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ANl90RA6zz0Aaj1S+aNdeQ5clT6 eZJv1tiVRoc9bFNNcLLQy3BMC7LUbvNtwfqq+55eaJ1dQrG3ohkw54WDCgN536FG ZcgINGLr1k/w64iyKMEFt8uQxZKkeOO4PW5dSZ8lSaOhPc63b6AFBPjPrakQwvk8 TVCp4Y7wvmvV/h3RmPND3Vmj/wjtX627aAbo+9A2D8zOLlBts+2DXmvw6FpjMDGF o7LjtrqK/e7hzeE13kuiNOBLM7apRlHHlNOWACi4PAx6VQSgYg1fAoFPTtSfYW+C S20aHDJMS/o4cvPKUYxeij4UyP1JokzLckDpRb/0hNya4C0w4xliB2GtGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHED/nytonjOqtnZO+jUqLRnBvPGMB8GA1UdIwQY MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt YTg4MWVjODIyOGI1LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1 LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAqQ5UBl wtqO8wJbdiS6IAa/syFaKkFmmsriSXxGZUe8ekfwwKcLizydZYlWxlmjbQjPBl1g 6p6+QQmDFfkn1mFXzAfX6qF6Gpv9zlI2vbT4gMjLuJAcKzrUv7saK45TvkNOoOqX GzMFn3OA5BBy+mrQpfZlxjqO9kqL4eML+4nGAa+5H0mZh+U680FWpgE6zRIylrKJ hilUmRYR9mHDdAJ1n0Q3hRHUVG0xwNryU4wf/XzuX8ZWIwfyxTpGK0gn9Mzu1V8q MGxlusflRJcVxIkzPW2SWXwlhTRms5vs+XoatiKgmMuctG7tehva239fF8xZl3uj bjPZNFmsTrZypw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:27 2025 by rpki-client