This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json) Hash identifier: eOAYjMG3G/lrTv3ifoxfTD0o20ROY9tdFltHZU6pVAo= Subject key identifier: 30:23:5B:50:5C:3D:BA:CC:D9:70:CD:37:35:78:C5:DC:59:08:B4:86 Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Certificate serial: 019AF2ADA5B83ADF5A33C589CE660D73A884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 08:00:57 +0000 Manifest this update: Sat 06 Dec 2025 08:00:57 +0000 Manifest next update: Sun 07 Dec 2025 08:00:57 +0000 Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=) 2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: BphhZq+7xZAPRsxbBRwLLdEofG0tuizOWIEnK8AlnIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a5:b8:3a:df:5a:33:c5:89:ce:66:0d:73:a8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Validity Not Before: Dec 6 08:00:57 2025 GMT Not After : Dec 7 08:00:57 2025 GMT Subject: CN=30235b505c3dbaccd970cd373578c5dc5908b486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:5e:01:3b:15:75:13:fd:36:5e:e2:ab:76: 76:28:56:73:90:ab:b5:ee:b7:4a:f1:b6:83:50:6a: 9f:61:67:e5:36:c8:96:fc:10:36:c1:24:7c:7e:cb: 16:9d:74:a9:7a:a7:a1:87:04:00:1c:07:f5:5a:52: c1:06:7d:50:3e:bd:99:8f:de:5a:04:c5:02:53:85: c8:63:15:b5:ac:7c:ee:e0:6d:9f:38:bb:38:23:65: 8f:c0:35:3d:9e:90:0c:a3:ce:16:0e:94:6e:71:72: ba:49:dd:60:55:e4:43:30:30:2d:28:6f:b7:7e:f5: 26:0f:70:02:cb:47:0a:4a:57:90:93:7f:c6:6d:83: f2:4e:79:d7:d1:91:f6:e4:31:15:1b:97:d5:04:7d: 4a:9d:13:5f:fe:cb:02:3c:e3:e3:26:49:15:fc:52: 48:0f:87:c4:aa:a7:8e:7c:15:eb:60:a2:53:09:d7: ad:3d:3f:b1:34:e0:f0:f9:e5:f0:35:c4:dc:f1:17: 24:ef:33:64:f3:91:cb:10:cd:c3:4b:9f:a7:f1:0a: 4d:cc:10:e3:6a:31:64:f7:39:f4:e6:71:52:ec:47: 20:8b:6f:c3:d0:d2:22:b0:81:e1:d6:b0:20:6e:2d: 17:d5:b6:f1:fb:bb:96:cb:8f:3b:10:c0:35:44:d7: 11:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:23:5B:50:5C:3D:BA:CC:D9:70:CD:37:35:78:C5:DC:59:08:B4:86 X509v3 Authority Key Identifier: keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:51:22:da:dd:a9:f6:ea:af:ed:2c:66:c8:45:b5:fd:03:8f: d1:9c:2d:ee:aa:e0:b1:b6:57:9e:0c:c5:c4:2c:c8:e5:40:71: c2:a7:b8:72:86:9c:9e:68:38:e8:02:e9:09:92:80:2d:9b:ae: 31:1f:79:16:51:46:37:ec:3a:db:c9:b7:d0:d4:6a:47:7d:b9: 54:7a:0e:0e:d3:61:5b:72:4d:32:01:fb:eb:94:f4:3b:f8:76: c7:5c:9b:c2:11:e2:e2:13:43:e9:79:cb:4f:ba:16:12:cf:8c: 4f:fd:94:16:55:b3:8a:37:0e:dc:55:dc:5d:7b:31:f5:0e:4c: d4:46:a8:8a:f4:5f:39:3a:18:8b:13:28:75:7a:8f:2d:ff:29: 01:9f:2b:90:60:c6:95:ce:dd:ca:59:9a:f8:d1:60:37:7d:7b: 1e:f6:3e:d2:53:2c:14:e5:c6:0e:43:85:ba:98:f0:3c:6b:4d: 01:a2:b8:15:ad:98:cc:d5:c6:25:59:bc:d7:5b:4f:c8:4c:61: ef:79:a6:94:9b:85:f6:d6:33:8e:46:4a:05:02:8d:ce:b0:2e: 93:1d:c7:44:fb:29:31:cc:dc:6e:73:bf:6c:62:09:b0:bf:76: e1:a6:56:e6:5d:b4:c8:4c:b4:eb:87:c3:a5:15:2d:5d:59:36: a2:c9:2b:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraW4Ot9aM8WJzmYNc6iEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi NjdlNDkwHhcNMjUxMjA2MDgwMDU3WhcNMjUxMjA3MDgwMDU3WjAzMTEwLwYDVQQD EygzMDIzNWI1MDVjM2RiYWNjZDk3MGNkMzczNTc4YzVkYzU5MDhiNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuspeATsVdRP9Nl7iq3Z2KFZzkKu1 7rdK8baDUGqfYWflNsiW/BA2wSR8fssWnXSpeqehhwQAHAf1WlLBBn1QPr2Zj95a BMUCU4XIYxW1rHzu4G2fOLs4I2WPwDU9npAMo84WDpRucXK6Sd1gVeRDMDAtKG+3 fvUmD3ACy0cKSleQk3/GbYPyTnnX0ZH25DEVG5fVBH1KnRNf/ssCPOPjJkkV/FJI D4fEqqeOfBXrYKJTCdetPT+xNODw+eXwNcTc8Rck7zNk85HLEM3DS5+n8QpNzBDj ajFk9zn05nFS7Ecgi2/D0NIisIHh1rAgbi0X1bbx+7uWy487EMA1RNcRBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAjW1BcPbrM2XDNNzV4xdxZCLSGMB8GA1UdIwQY MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt YTQ4NmJlMzU2OWE3LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3 LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1Ei2t2p 9uqv7SxmyEW1/QOP0Zwt7qrgsbZXngzFxCzI5UBxwqe4coacnmg46ALpCZKALZuu MR95FlFGN+w628m30NRqR325VHoODtNhW3JNMgH765T0O/h2x1ybwhHi4hND6XnL T7oWEs+MT/2UFlWzijcO3FXcXXsx9Q5M1EaoivRfOToYixModXqPLf8pAZ8rkGDG lc7dylma+NFgN317HvY+0lMsFOXGDkOFupjwPGtNAaK4Fa2YzNXGJVm811tPyExh 73mmlJuF9tYzjkZKBQKNzrAukx3HRPspMczcbnO/bGIJsL924aZW5l20yEy064fD pRUtXVk2oskrxA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:27 2025 by rpki-client