This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json) Hash identifier: dUPcnVg8PWP/ayyuPXxOXJCinfOrvwHzgVBLpdzswtQ= Subject key identifier: 58:EE:93:21:B8:71:F1:80:3A:07:15:8F:EA:39:A6:F4:29:30:21:F6 Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c Certificate serial: 019AF540F0C3E6BAED472E0F7C27D10AF6C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft Manifest number: 0144 Signing time: Sat 06 Dec 2025 20:01:04 +0000 Manifest this update: Sat 06 Dec 2025 20:01:04 +0000 Manifest next update: Sun 07 Dec 2025 20:01:04 +0000 Files and hashes: 1: TbZ9-J7RJ19MnUwHQhG72h3QmmA.roa (hash: 1KAnW0BNGRWt07l0J8xmwG1lZvzCRjTvOjNa6gA0ebQ=) 2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: dlqaUQ8LgLUlYJWouC9QsKASTGCfJgkjVrM6Hmt1yCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:f0:c3:e6:ba:ed:47:2e:0f:7c:27:d1:0a:f6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c Validity Not Before: Dec 6 20:01:04 2025 GMT Not After : Dec 7 20:01:04 2025 GMT Subject: CN=58ee9321b871f1803a07158fea39a6f4293021f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:f1:d4:49:59:dc:91:10:53:ca:eb:df:8b: 60:37:80:02:62:2d:5e:c8:9e:bc:35:9c:3c:5f:f1: 0f:6d:5b:93:cf:1b:b7:a3:d5:73:a8:70:20:e7:23: a0:81:9a:a9:51:3c:87:f4:66:3f:8c:ad:0d:e8:06: b1:81:a2:36:61:a8:8c:98:7a:ce:cf:d9:65:03:bb: 92:d1:85:b8:a5:76:da:04:b6:b9:93:82:b0:01:f7: 95:60:c5:f0:8c:3d:26:28:5b:36:71:1f:49:70:59: 9a:c0:fc:18:a2:20:ec:b3:dd:29:16:83:f9:37:2d: 4b:bd:5e:d0:a5:98:b9:6e:2f:37:f7:c8:c4:a2:be: 8b:54:24:83:c3:6e:f3:4c:f6:01:aa:b3:ec:c7:a6: 58:3d:ed:8d:d6:d9:4d:21:2c:41:ea:26:80:28:a7: 74:f4:5b:67:31:06:d2:0e:fa:ae:08:f0:cc:55:73: 7f:1b:78:3c:36:9f:90:af:c8:de:05:61:9c:89:7f: c7:cb:2e:7b:61:1d:70:65:0c:ea:12:5c:43:0b:a4: 90:0f:5e:13:10:8f:0f:0a:71:27:c5:c4:77:e2:3d: 78:33:33:7b:3d:7f:ac:40:6c:ba:b4:de:7e:4e:c0: 3d:43:fa:c2:a6:df:2a:eb:f1:e3:2a:2e:71:75:14: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EE:93:21:B8:71:F1:80:3A:07:15:8F:EA:39:A6:F4:29:30:21:F6 X509v3 Authority Key Identifier: keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d8:22:f6:08:cc:8b:d3:b6:0d:81:62:51:23:6b:a7:c9:30: f5:e4:8c:11:3d:b3:d3:3e:45:89:74:88:bb:b7:3a:db:5b:da: d6:cc:e3:d8:ca:80:63:45:7f:46:aa:8d:bc:2e:a2:02:3d:ab: ea:ec:31:d1:ac:54:1c:8c:89:d0:9c:b5:0b:82:6a:f5:d4:78: 13:a7:67:e4:d3:c3:b9:36:4b:1a:17:f5:26:1c:7a:db:8e:5c: d3:9c:2e:35:1f:74:64:c2:92:e1:40:d2:c2:46:f6:cf:a5:6c: cd:ba:44:10:6a:03:cd:e6:64:0a:24:ef:b0:b5:8c:cd:7d:b5: 84:8b:5d:49:76:14:49:52:e6:de:c6:7d:03:a6:86:fd:ea:d3: 19:b4:ea:14:3a:dd:8f:3f:18:30:80:c3:49:84:53:35:05:29: 78:b6:47:e4:11:21:22:3a:94:c0:6d:15:78:ee:30:c9:a7:b0: 64:f6:07:e1:f4:69:3f:45:89:db:42:2f:5d:e4:0d:81:0a:3a: 73:e7:f4:11:69:19:5f:aa:a7:70:4c:4d:f0:80:c4:ec:2e:8d: 83:dd:89:eb:e9:fd:2b:ae:1b:38:af:b0:f7:e0:1b:a6:aa:a7: f4:2d:ec:e7:a5:3d:b7:46:62:56:41:fa:bc:50:11:13:4c:64: e1:2e:38:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QPDD5rrtRy4PfCfRCvbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MGYzMjQ2ZmRkNjFiYTFiNTc5MmZlMWFlYzRhZGNhOThk NzVhNWMwHhcNMjUxMjA2MjAwMTA0WhcNMjUxMjA3MjAwMTA0WjAzMTEwLwYDVQQD Eyg1OGVlOTMyMWI4NzFmMTgwM2EwNzE1OGZlYTM5YTZmNDI5MzAyMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oLx1ElZ3JEQU8rr34tgN4ACYi1e yJ68NZw8X/EPbVuTzxu3o9VzqHAg5yOggZqpUTyH9GY/jK0N6AaxgaI2YaiMmHrO z9llA7uS0YW4pXbaBLa5k4KwAfeVYMXwjD0mKFs2cR9JcFmawPwYoiDss90pFoP5 Ny1LvV7QpZi5bi8398jEor6LVCSDw27zTPYBqrPsx6ZYPe2N1tlNISxB6iaAKKd0 9FtnMQbSDvquCPDMVXN/G3g8Np+Qr8jeBWGciX/Hyy57YR1wZQzqElxDC6SQD14T EI8PCnEnxcR34j14MzN7PX+sQGy6tN5+TsA9Q/rCpt8q6/HjKi5xdRQaKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjukyG4cfGAOgcVj+o5pvQpMCH2MB8GA1UdIwQY MBaAFMYPMkb91huhtXkv4a7ErcqY11pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUt MTc5NzkyNzY4ZGFlLzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUtMTc5NzkyNzY4ZGFl LzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9gi9gjM i9O2DYFiUSNrp8kw9eSMET2z0z5FiXSIu7c621va1szj2MqAY0V/RqqNvC6iAj2r 6uwx0axUHIyJ0Jy1C4Jq9dR4E6dn5NPDuTZLGhf1Jhx6245c05wuNR90ZMKS4UDS wkb2z6VszbpEEGoDzeZkCiTvsLWMzX21hItdSXYUSVLm3sZ9A6aG/erTGbTqFDrd jz8YMIDDSYRTNQUpeLZH5BEhIjqUwG0VeO4wyaewZPYH4fRpP0WJ20IvXeQNgQo6 c+f0EWkZX6qncExN8IDE7C6Ng92J6+n9K64bOK+w9+Abpqqn9C3s56U9t0ZiVkH6 vFARE0xk4S44dA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:56 2025 by rpki-client