This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json) Hash identifier: Im8Sp62kr+6lM2+cY+6RwhPFQoNcfPfWDgwGxzvAHX0= Subject key identifier: 75:A5:E7:98:70:21:B6:43:A7:2A:D9:31:78:5C:68:2F:A5:6C:F9:28 Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2 Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2 Certificate serial: 019AF2AD62D8AA9945600475C75C7FEA55D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: K3K73SOKoUl1BbH2-VG761We22I.roa (hash: JYStvIUn6egbkb0Wps8aA9dlj6GWDzxPYmBqdWiziOs=) 2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: wNHEp1lVE+DQVHHcr+0SeF837sEwJmalEQPvF2GPZUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:62:d8:aa:99:45:60:04:75:c7:5c:7f:ea:55:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2 Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=75a5e7987021b643a72ad931785c682fa56cf928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:b5:e4:7f:f4:4f:c0:8c:a3:ca:b7:b3:36: 43:1a:e8:0e:8a:2c:fe:aa:20:16:c1:83:bf:f7:ab: e2:7f:ea:dc:3b:8f:41:f5:06:68:38:09:c9:e2:e9: 2f:c0:23:6d:d6:e7:24:1d:64:be:1b:c3:6c:3c:b9: af:ea:0a:95:4d:87:38:72:3b:54:ac:0a:33:c1:8b: 7a:d6:f0:af:a1:52:b9:af:9b:ff:3f:72:c1:62:5e: 38:fb:d1:82:90:d5:2a:99:83:7b:16:39:1d:ce:0f: 27:d7:94:14:5e:9e:e7:66:f9:49:bc:85:9b:54:a1: 76:77:b9:a0:2a:91:7a:d8:68:7e:43:bd:ba:eb:13: 40:71:44:7b:83:38:ea:65:de:d7:18:78:94:97:a4: 7b:26:18:54:3a:7c:98:89:33:6a:d5:fa:73:49:63: f7:37:0c:2b:12:41:4a:fa:10:a8:5a:66:6f:04:a1: 3e:ad:6b:5c:cd:a6:07:ff:38:d4:ed:e4:57:f4:43: 99:81:2b:0c:51:c0:af:63:df:a6:86:e0:16:d9:06: 83:7e:ee:8a:48:b2:64:ad:25:ba:9a:aa:f8:ea:cf: 6c:e6:b2:ad:8a:46:b9:60:aa:42:e7:03:bc:01:96: 6b:e7:f9:25:0c:76:1a:36:04:fd:42:98:ad:f1:36: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A5:E7:98:70:21:B6:43:A7:2A:D9:31:78:5C:68:2F:A5:6C:F9:28 X509v3 Authority Key Identifier: keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:25:2b:f6:3b:6b:4d:4e:7c:c4:af:d9:4d:f1:e1:30:17:dc: 93:59:73:75:ad:01:89:7a:07:6e:27:d4:31:34:a3:5b:a3:24: 80:98:02:3c:cd:23:3b:3a:2f:8b:b9:f6:63:f5:97:95:e5:41: 0f:be:cc:6c:e3:fc:3b:04:01:c2:06:e6:9f:33:3d:70:80:fd: 5b:6b:45:49:e0:d4:01:bf:62:9d:2a:5d:2a:09:b5:1c:ed:d7: 24:bf:43:63:46:ab:97:8c:71:56:e7:c5:a8:93:8c:22:f4:42: 45:20:2a:43:67:2b:c8:4d:54:e9:af:ff:da:2a:2f:bc:b7:05: 79:b3:21:cb:7b:68:41:a7:1f:f7:0c:8f:24:3b:62:bf:92:59: 94:08:67:5a:63:0a:34:12:da:a2:1a:72:9f:48:dd:da:d6:70: 09:cf:cf:ce:3f:1a:0e:50:2e:d4:d1:a9:4a:26:33:7b:29:4b: f1:a5:72:15:98:95:88:6a:00:0c:30:e7:f0:41:7d:1d:9b:43: 10:75:64:bb:d5:82:a6:51:5d:3d:c9:48:c1:11:4e:b4:7b:1f: 10:47:55:11:01:fa:a8:ed:e3:05:55:4a:70:9c:3a:12:6f:df: 80:3c:c5:3b:05:e1:78:88:b3:2d:18:0a:40:cc:e2:f3:2d:64: ef:77:14:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWLYqplFYAR1x1x/6lXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNzRkZWI0MTg0NDI2ZmE2MjIyNWI2MTIwYzM2NzA2Zjcz N2I4ZTIwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD Eyg3NWE1ZTc5ODcwMjFiNjQzYTcyYWQ5MzE3ODVjNjgyZmE1NmNmOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHq15H/0T8CMo8q3szZDGugOiiz+ qiAWwYO/96vif+rcO49B9QZoOAnJ4ukvwCNt1uckHWS+G8NsPLmv6gqVTYc4cjtU rAozwYt61vCvoVK5r5v/P3LBYl44+9GCkNUqmYN7Fjkdzg8n15QUXp7nZvlJvIWb VKF2d7mgKpF62Gh+Q7266xNAcUR7gzjqZd7XGHiUl6R7JhhUOnyYiTNq1fpzSWP3 NwwrEkFK+hCoWmZvBKE+rWtczaYH/zjU7eRX9EOZgSsMUcCvY9+mhuAW2QaDfu6K SLJkrSW6mqr46s9s5rKtika5YKpC5wO8AZZr5/klDHYaNgT9Qpit8TYVIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWl55hwIbZDpyrZMXhcaC+lbPkoMB8GA1UdIwQY MBaAFP103rQYRCb6YiJbYSDDZwb3N7jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1hUZXRCaEVKdnBpSWx0aElNTm5CdmMzdU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODQ5MWYtYjA0ZC00YjBkLTkwN2It ZDU3MDVhZTM3MDE0LzEvX1hUZXRCaEVKdnBpSWx0aElNTm5CdmMzdU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODQ5MWYtYjA0ZC00YjBkLTkwN2ItZDU3MDVhZTM3MDE0 LzEvX1hUZXRCaEVKdnBpSWx0aElNTm5CdmMzdU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiUr9jtr TU58xK/ZTfHhMBfck1lzda0BiXoHbifUMTSjW6MkgJgCPM0jOzovi7n2Y/WXleVB D77MbOP8OwQBwgbmnzM9cID9W2tFSeDUAb9inSpdKgm1HO3XJL9DY0arl4xxVufF qJOMIvRCRSAqQ2cryE1U6a//2iovvLcFebMhy3toQacf9wyPJDtiv5JZlAhnWmMK NBLaohpyn0jd2tZwCc/Pzj8aDlAu1NGpSiYzeylL8aVyFZiViGoADDDn8EF9HZtD EHVku9WCplFdPclIwRFOtHsfEEdVEQH6qO3jBVVKcJw6Em/fgDzFOwXheIizLRgK QMzi8y1k73cU6A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:44:25 2025 by rpki-client