This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft File: xddsGvj60uvGNOouIzcPEMXFnQs.mft (raw, json) Hash identifier: KGRXlIIBvfbQgLlli3xTUlqjiGONdC5sd7WEfQTxKpQ= Subject key identifier: E6:05:13:C9:5C:79:3C:3C:1A:32:51:6D:11:A4:FB:34:67:DB:3C:E5 Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B Certificate issuer: /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b Certificate serial: 019AF19B8280E77B19517E753CDA7AEE613F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft Manifest number: 0697 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: Acbly_fCXeuRyFDFzZjmCcQPl8U.roa (hash: 97l8f98tI95Opzr22XniXOh4lBsa/Ac1EBZZQOTU4Lo=) 2: xddsGvj60uvGNOouIzcPEMXFnQs.crl (hash: tPTIWy1i7XnEQuL5dnzWp2v6EeagOPOFYo6NquIm5a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:82:80:e7:7b:19:51:7e:75:3c:da:7a:ee:61:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=e60513c95c793c3c1a32516d11a4fb3467db3ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:98:54:3a:4e:fb:06:27:20:ed:97:d7:c6: 95:8a:6b:e8:df:fe:81:e7:e1:80:08:22:85:21:65: 35:c9:6f:5f:a5:b2:be:45:dd:76:a9:51:3c:a4:fc: 9c:02:26:7f:65:b1:47:b7:bd:2a:6a:cf:74:ec:d3: ab:74:17:d3:68:10:f4:24:92:6d:23:8e:c9:d7:37: 5d:5d:64:89:0c:1e:8d:96:3f:9a:b0:3c:21:bc:01: f2:84:90:66:e2:51:94:91:a9:a1:00:ca:98:da:13: 0a:53:bd:96:49:43:8f:d5:ae:26:cf:d7:7a:81:cc: df:5b:f3:ce:81:e0:e0:84:02:d8:7b:e2:c4:1c:43: ce:8e:7e:65:58:99:40:b3:1f:56:dc:d7:ce:91:0c: b4:c2:5d:b9:4a:bd:a3:30:08:90:29:10:c4:b8:79: 03:96:96:26:b1:b3:eb:6b:29:a4:9c:ef:bb:d8:5d: 02:f3:76:ab:3a:3a:4f:dc:38:c2:10:5c:92:24:f1: 29:b4:0a:c7:2b:2d:cc:76:36:05:04:07:55:82:3c: e0:77:9d:8a:2b:4d:29:08:35:c4:3f:b6:c4:ed:52: 5a:34:82:76:04:41:17:dd:cf:30:b6:6f:42:97:be: fd:28:a4:fe:c8:c6:77:f1:35:9c:fc:2a:79:0a:a5: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:05:13:C9:5C:79:3C:3C:1A:32:51:6D:11:A4:FB:34:67:DB:3C:E5 X509v3 Authority Key Identifier: keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:93:a1:99:c6:28:bb:01:e6:7e:17:3c:03:b3:bd:d1:10:3d: 26:66:62:cd:ab:82:01:da:44:b4:e2:44:7b:01:48:e7:a3:95: a6:9d:f9:32:d7:37:b5:ef:e4:ec:57:0a:40:e0:ba:1b:07:05: ac:4b:7d:6d:f5:1f:81:24:35:a5:9a:85:ab:0a:6d:df:f7:f1: 42:db:99:8f:36:84:16:95:71:65:6d:75:a5:bb:32:00:a2:30: 5e:d9:5b:95:ca:8e:0f:81:16:69:4f:2f:8f:72:75:be:ea:98: 38:3d:96:17:23:cb:19:71:54:4f:f0:8e:39:96:0a:fb:b8:1a: f9:00:e7:34:6e:cc:f9:59:a9:e3:c0:34:2c:d7:a3:3e:f0:23: cb:da:40:a8:59:7f:79:38:b0:0b:5b:bc:d2:11:4a:cb:30:44: 33:09:bb:8a:18:bd:fe:7d:b3:e3:a0:01:a3:b0:fa:0b:80:9e: 11:41:08:9a:04:23:df:ca:e8:86:d8:56:6e:ae:38:ff:ec:dc: 8a:bd:9c:6f:ae:4c:19:2a:36:65:43:51:17:cf:ba:61:b5:04: 63:b0:82:3b:5b:27:56:57:0f:cd:8f:62:c8:7a:8d:86:1a:3c: 31:b7:c8:e6:80:9a:52:f8:3b:74:ea:b0:1d:d0:2c:6e:6d:b7: aa:cc:97:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4KA53sZUX51PNp67mE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZDc2YzFhZjhmYWQyZWJjNjM0ZWEyZTIzMzcwZjEwYzVj NTlkMGIwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EyhlNjA1MTNjOTVjNzkzYzNjMWEzMjUxNmQxMWE0ZmIzNDY3ZGIzY2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngyYVDpO+wYnIO2X18aVimvo3/6B 5+GACCKFIWU1yW9fpbK+Rd12qVE8pPycAiZ/ZbFHt70qas907NOrdBfTaBD0JJJt I47J1zddXWSJDB6Nlj+asDwhvAHyhJBm4lGUkamhAMqY2hMKU72WSUOP1a4mz9d6 gczfW/POgeDghALYe+LEHEPOjn5lWJlAsx9W3NfOkQy0wl25Sr2jMAiQKRDEuHkD lpYmsbPraymknO+72F0C83arOjpP3DjCEFySJPEptArHKy3MdjYFBAdVgjzgd52K K00pCDXEP7bE7VJaNIJ2BEEX3c8wtm9Cl779KKT+yMZ38TWc/Cp5CqW5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYFE8lceTw8GjJRbRGk+zRn2zzlMB8GA1UdIwQY MBaAFMXXbBr4+tLrxjTqLiM3DxDFxZ0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQt ZmRlNmZiOWFmMjMwLzEveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQtZmRlNmZiOWFmMjMw LzEveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJOhmcYo uwHmfhc8A7O90RA9JmZizauCAdpEtOJEewFI56OVpp35Mtc3te/k7FcKQOC6GwcF rEt9bfUfgSQ1pZqFqwpt3/fxQtuZjzaEFpVxZW11pbsyAKIwXtlblcqOD4EWaU8v j3J1vuqYOD2WFyPLGXFUT/COOZYK+7ga+QDnNG7M+Vmp48A0LNejPvAjy9pAqFl/ eTiwC1u80hFKyzBEMwm7ihi9/n2z46ABo7D6C4CeEUEImgQj38rohthWbq44/+zc ir2cb65MGSo2ZUNRF8+6YbUEY7CCO1snVlcPzY9iyHqNhho8MbfI5oCaUvg7dOqw HdAsbm23qsyXpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:49 2025 by rpki-client