This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json) Hash identifier: YyK5qCdr47FAbyNaXWicBFTycdQVAvOjQHdCELytooo= Subject key identifier: 8B:5C:D1:75:D5:4B:8E:27:8C:E1:72:77:57:3B:2E:D1:41:5A:79:64 Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Certificate serial: 019AF0BF3D3C5B0410922A1A29D13DCCB090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft Manifest number: 11C2 Signing time: Fri 05 Dec 2025 23:00:56 +0000 Manifest this update: Fri 05 Dec 2025 23:00:56 +0000 Manifest next update: Sat 06 Dec 2025 23:00:56 +0000 Files and hashes: 1: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: GjegdIdy8TNkWhRJcf0Gc9r+PJyqHDv1llOGYnHZ4O0=) 2: a15ql9whSmA7v8PDlzobAKStIYU.roa (hash: i4JQTq1d7soOmwMqfdiIR8FwyHTrIMo+VQIkB92oIzE=) 3: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (hash: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=) 4: tars8J2v-8N6JtB2suJ6nsAGhgI.roa (hash: VKSpLn3FB2L/sDLR9l5iJR3MIMweqN1CpStbR7qOoA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3d:3c:5b:04:10:92:2a:1a:29:d1:3d:cc:b0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Validity Not Before: Dec 5 23:00:56 2025 GMT Not After : Dec 6 23:00:56 2025 GMT Subject: CN=8b5cd175d54b8e278ce17277573b2ed1415a7964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:ef:8b:29:5d:6f:6d:91:3d:18:fc:2e:8e: c9:a0:11:ae:ea:84:b0:03:14:86:97:6e:06:03:69: 09:ff:3c:05:f2:b3:42:05:32:aa:aa:48:42:e7:d4: 34:5c:5d:19:57:78:8d:39:49:72:27:76:a1:53:17: 7b:54:e3:eb:73:33:d1:a9:8a:7d:6c:0c:32:e4:f0: 0d:1d:53:72:d9:e8:32:73:b8:c0:bb:21:bf:78:fe: 80:34:d1:91:08:56:8c:e6:4c:47:e8:4b:2a:cf:dd: b3:bb:3b:ee:91:39:07:a9:77:02:2a:11:41:b8:20: e3:2f:f2:b4:a2:d4:88:02:83:5b:2f:d5:b3:a9:54: 37:8d:14:14:e2:88:d0:8f:97:3d:5e:93:06:1c:1c: bb:da:78:38:99:7a:36:10:ec:a6:03:cb:e9:6a:8a: 2b:64:80:17:89:17:50:b9:7e:9b:07:d1:31:84:5d: 43:7a:89:8c:07:4a:80:29:91:6e:22:b9:05:17:ea: d1:3f:4b:e4:40:31:58:43:10:00:4f:31:9a:41:b5: 16:3d:5b:20:c3:76:4f:e9:16:c4:b4:ec:cd:17:9d: b3:17:d2:50:7a:25:16:14:51:6a:4b:3c:2f:aa:9f: f5:2a:9e:06:45:19:9a:2c:70:1f:86:6e:48:55:f1: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5C:D1:75:D5:4B:8E:27:8C:E1:72:77:57:3B:2E:D1:41:5A:79:64 X509v3 Authority Key Identifier: keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:87:b4:88:c1:f1:3c:a6:1d:59:7e:ea:e8:aa:05:ed:5a:76: 14:e5:33:e4:90:a0:f3:81:3f:47:4e:41:e7:f0:2a:d5:60:50: 61:10:07:f5:0d:a3:85:ec:d7:cf:79:05:eb:93:08:01:d4:de: 4a:9e:72:65:5e:4f:8e:52:2f:e1:9f:85:5c:ef:6e:45:88:89: 45:a0:68:bd:48:82:8b:d8:36:2e:da:e0:40:cd:a6:8e:f7:ad: 2d:6a:08:51:fe:c8:4e:45:1f:03:14:94:42:81:59:6b:40:40: 32:b3:9d:ba:3a:ee:d1:61:b7:2a:b5:18:68:03:2c:cf:47:86: 3f:1f:a3:cf:af:9e:e8:1a:ef:46:ff:4e:14:9d:23:14:74:6b: 24:aa:78:d6:43:d7:26:e8:dc:4f:34:51:90:f6:c1:7a:54:07: f4:1f:5c:5d:58:bf:31:28:20:8c:fe:84:ed:0f:28:ea:4a:f3: 96:ea:dc:5c:dc:b3:99:d3:a8:9e:90:c5:a8:1f:3b:96:a4:77: e6:98:17:65:93:2d:92:18:e4:df:aa:e2:4b:5f:37:2a:8c:f0: 21:70:77:63:47:ab:91:d7:e1:da:95:50:b9:69:ac:0a:34:e8: 2c:21:31:f9:42:79:6b:b6:ea:42:2b:6c:b4:66:89:32:00:f1: 26:9e:08:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvz08WwQQkioaKdE9zLCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzk5ZmJhOWFhZTlkMmQ2ZmZlNTJhZThjNzRhZTM4ZmM2 YzFhZjEwHhcNMjUxMjA1MjMwMDU2WhcNMjUxMjA2MjMwMDU2WjAzMTEwLwYDVQQD Eyg4YjVjZDE3NWQ1NGI4ZTI3OGNlMTcyNzc1NzNiMmVkMTQxNWE3OTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhPviyldb22RPRj8Lo7JoBGu6oSw AxSGl24GA2kJ/zwF8rNCBTKqqkhC59Q0XF0ZV3iNOUlyJ3ahUxd7VOPrczPRqYp9 bAwy5PANHVNy2egyc7jAuyG/eP6ANNGRCFaM5kxH6Esqz92zuzvukTkHqXcCKhFB uCDjL/K0otSIAoNbL9WzqVQ3jRQU4ojQj5c9XpMGHBy72ng4mXo2EOymA8vpaoor ZIAXiRdQuX6bB9ExhF1DeomMB0qAKZFuIrkFF+rRP0vkQDFYQxAATzGaQbUWPVsg w3ZP6RbEtOzNF52zF9JQeiUWFFFqSzwvqp/1Kp4GRRmaLHAfhm5IVfHMbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItc0XXVS44njOFyd1c7LtFBWnlkMB8GA1UdIwQY MBaAFF45n7qarp0tb/5Srox0rjj8bBrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMt YmQ4MDlkOWRlZGI5LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMtYmQ4MDlkOWRlZGI5 LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYe0iMHx PKYdWX7q6KoF7Vp2FOUz5JCg84E/R05B5/Aq1WBQYRAH9Q2jhezXz3kF65MIAdTe Sp5yZV5PjlIv4Z+FXO9uRYiJRaBovUiCi9g2LtrgQM2mjvetLWoIUf7ITkUfAxSU QoFZa0BAMrOdujru0WG3KrUYaAMsz0eGPx+jz6+e6BrvRv9OFJ0jFHRrJKp41kPX JujcTzRRkPbBelQH9B9cXVi/MSggjP6E7Q8o6krzlurcXNyzmdOonpDFqB87lqR3 5pgXZZMtkhjk36riS183KozwIXB3Y0erkdfh2pVQuWmsCjToLCEx+UJ5a7bqQits tGaJMgDxJp4IJA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:05 2025 by rpki-client