This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json) Hash identifier: T1qn0FSXBGcnaOrnK7iAVGpuRTUdoM46uxqSYJb7ANQ= Subject key identifier: 43:67:51:DB:1C:23:13:5F:68:73:4D:CF:2B:08:4B:99:8E:11:59:97 Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Certificate serial: 019AF19BD529256275F46FB00F7A52E4081B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft Manifest number: 1781 Signing time: Sat 06 Dec 2025 03:01:52 +0000 Manifest this update: Sat 06 Dec 2025 03:01:52 +0000 Manifest next update: Sun 07 Dec 2025 03:01:52 +0000 Files and hashes: 1: 3V6q1-UeO36fLmJlReM_Gz13sMA.roa (hash: PylpUbq0fhCG4XR5C05AhKT8758HGTKJAPQDgwx9IwI=) 2: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=) 3: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=) 4: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=) 5: kwPr5vzt3-ySJo5MI-LQFyEqrD0.roa (hash: wgaBbEuKlBEgI0/63TFwHnJqqn8xIpVCdKTwEP7oyo4=) 6: pNjGXJ-Sea4Ni2pVy1WIRiDYEDE.roa (hash: nLlZJFuKRcHnPRrTWYdH+coSN27tpwhU2HPjFKfGC1o=) 7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: tOujWs1PvzgvSV/GfM6y368Eq8zR3cLl4oxd6VtudU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:d5:29:25:62:75:f4:6f:b0:0f:7a:52:e4:08:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Validity Not Before: Dec 6 03:01:52 2025 GMT Not After : Dec 7 03:01:52 2025 GMT Subject: CN=436751db1c23135f68734dcf2b084b998e115997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:ce:c5:b4:de:cc:b8:1e:2c:e2:ec:1a:db: a0:e4:02:83:e4:08:e9:e0:60:15:ee:2e:d5:ee:68: f7:f8:92:ae:84:de:31:62:06:23:67:f0:7e:5e:0a: 52:c4:a6:66:40:d9:d4:41:37:ff:ad:2b:8e:90:03: 63:d9:17:5e:f8:4e:37:68:b2:3d:cf:31:5c:5f:65: 3e:b7:c8:16:d9:0d:87:c5:1c:fc:a4:3e:d5:84:89: 89:3b:f9:9e:87:72:6e:1a:32:d8:7d:84:ef:d9:34: 78:1a:82:4b:05:0a:30:7c:c1:84:52:dc:c3:64:cf: 4a:87:d8:70:3d:05:31:6f:4e:a3:ee:d3:70:40:ee: c1:eb:0b:c8:eb:70:47:c3:ad:4a:b2:d1:34:a6:a3: 75:29:35:8f:a8:c4:09:12:0a:ea:7d:88:f5:ce:38: 49:a5:dc:07:2d:10:02:3c:5e:0c:45:b7:da:f2:26: 9d:48:40:9a:23:00:4a:dd:f2:92:18:f6:6a:36:d5: f9:6c:24:b4:2c:6f:e0:a3:1a:12:51:02:96:dc:d8: ea:ef:57:fb:52:56:d1:ce:a4:50:b9:15:ad:7c:9c: 60:c6:00:c0:95:0b:40:f1:32:e4:69:3d:d7:ee:c3: 07:62:c4:27:05:04:e3:10:92:c1:69:30:62:4e:22: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:51:DB:1C:23:13:5F:68:73:4D:CF:2B:08:4B:99:8E:11:59:97 X509v3 Authority Key Identifier: keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:60:fd:7f:7e:72:4c:23:ae:7f:8d:ae:92:31:12:50:6a:ff: 4f:2a:97:f8:02:40:c9:62:95:10:a1:dc:14:b9:33:21:0f:76: 5d:d6:19:6d:2a:12:7d:6b:c5:91:2b:1a:f8:af:fe:53:19:96: 0f:3e:34:4b:cc:4c:4b:1e:06:fe:d6:22:77:2b:e3:3e:f1:12: 10:70:51:e5:48:c1:f8:c5:b9:42:69:3e:1b:41:ce:d9:95:3d: 53:06:5f:6f:64:74:7a:5e:20:94:02:84:f7:82:2b:e5:a0:e2: a7:ec:9c:7f:74:c2:00:0a:29:e3:e1:b0:8d:ba:ca:a3:92:66: ff:98:39:ca:15:96:a5:70:3b:e1:f1:ed:dd:37:99:62:0b:64: 02:9f:0a:f4:5e:e0:b0:f8:de:c1:96:4d:35:69:83:3b:3d:27: 8b:15:6a:3d:12:e6:69:69:b9:f5:41:3a:c6:3f:f8:1a:f7:0f: e8:24:5e:42:ec:a2:70:b5:a6:82:cc:50:79:8f:78:26:a1:48: 4a:76:b7:cf:ab:d2:de:cb:61:3a:22:c4:45:3c:5a:e0:9c:ea: 8e:10:51:f6:e5:2d:25:a5:8c:cc:5c:dd:7a:93:c8:8e:26:73: 9c:9e:70:a5:75:2f:6f:aa:a1:13:3c:80:41:ce:39:58:21:34: ac:5f:0b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm9UpJWJ19G+wD3pS5AgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz YTBjZTIwHhcNMjUxMjA2MDMwMTUyWhcNMjUxMjA3MDMwMTUyWjAzMTEwLwYDVQQD Eyg0MzY3NTFkYjFjMjMxMzVmNjg3MzRkY2YyYjA4NGI5OThlMTE1OTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqivOxbTezLgeLOLsGtug5AKD5Ajp 4GAV7i7V7mj3+JKuhN4xYgYjZ/B+XgpSxKZmQNnUQTf/rSuOkANj2Rde+E43aLI9 zzFcX2U+t8gW2Q2HxRz8pD7VhImJO/meh3JuGjLYfYTv2TR4GoJLBQowfMGEUtzD ZM9Kh9hwPQUxb06j7tNwQO7B6wvI63BHw61KstE0pqN1KTWPqMQJEgrqfYj1zjhJ pdwHLRACPF4MRbfa8iadSECaIwBK3fKSGPZqNtX5bCS0LG/goxoSUQKW3Njq71f7 UlbRzqRQuRWtfJxgxgDAlQtA8TLkaT3X7sMHYsQnBQTjEJLBaTBiTiLC9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENnUdscIxNfaHNNzysIS5mOEVmXMB8GA1UdIwQY MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt NTZjYzM5ZGI2ZWQ2LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2 LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWD9f35y TCOuf42ukjESUGr/TyqX+AJAyWKVEKHcFLkzIQ92XdYZbSoSfWvFkSsa+K/+UxmW Dz40S8xMSx4G/tYidyvjPvESEHBR5UjB+MW5Qmk+G0HO2ZU9UwZfb2R0el4glAKE 94Ir5aDip+ycf3TCAAop4+GwjbrKo5Jm/5g5yhWWpXA74fHt3TeZYgtkAp8K9F7g sPjewZZNNWmDOz0nixVqPRLmaWm59UE6xj/4GvcP6CReQuyicLWmgsxQeY94JqFI Sna3z6vS3sthOiLERTxa4JzqjhBR9uUtJaWMzFzdepPIjiZznJ5wpXUvb6qhEzyA Qc45WCE0rF8LqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:54 2025 by rpki-client