This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json) Hash identifier: +31Nb8x8uPA3R7UAha9W2OMQneYA90VONxs5vavqyY8= Subject key identifier: C7:A0:1D:2A:52:82:06:2E:2D:6A:FA:A9:1E:C6:7B:CB:FD:07:FD:70 Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95 Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95 Certificate serial: 019AF1D18E13673F133F2D4B4EA7854D4524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft Manifest number: 057A Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: 9Y8g7vb3Kw/tm2jsfd4EpvZaPf3LjQWInodMhx6YWAo=) 2: ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa (hash: LkPu7W8d8SU9QHrC15AzmgPhWHRle+7DN15uGWx+c9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8e:13:67:3f:13:3f:2d:4b:4e:a7:85:4d:45:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=c7a01d2a5282062e2d6afaa91ec67bcbfd07fd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:98:c0:e0:72:15:f7:69:ec:54:f8:8f:10: ae:af:e6:48:22:d9:48:20:7a:c9:05:23:97:52:58: 6a:d0:af:ca:27:d9:20:c6:02:a7:ac:9e:e5:a0:46: 6a:fb:0a:3b:52:93:9f:b9:b4:4c:b3:e8:5f:08:65: 4b:f6:5d:c7:24:13:80:ec:bb:15:9e:51:b2:b7:41: 22:0f:95:b3:2d:50:e4:88:86:14:b4:9b:d4:a2:0d: fa:2c:38:c1:b0:2e:27:e6:95:89:3a:3f:6d:e0:0f: 37:b8:91:a8:6b:b8:5d:20:90:d0:ae:a3:26:66:31: 6e:96:11:0d:f1:78:bc:a8:4e:25:bb:e8:eb:a0:04: ad:2a:5f:8e:99:1d:19:65:92:a5:2b:13:f2:8e:7c: 96:56:6f:24:7e:a8:9a:44:5a:28:da:07:50:59:96: 5b:b9:7d:71:ca:ff:65:9a:48:e4:cc:b8:25:83:20: 4b:61:4a:30:70:29:b1:dd:63:4a:dc:71:e4:f4:96: bc:4b:6c:b8:5b:cb:12:d6:f3:55:d4:9b:b6:55:88: c9:1d:e3:24:b2:b0:68:18:58:5c:6e:5f:f0:97:c9: 79:f4:03:f0:d0:75:a3:06:2d:bb:bb:23:54:00:91: 8d:cd:5e:b1:bd:b7:39:3b:af:3e:8d:6c:d0:8f:ba: 6c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A0:1D:2A:52:82:06:2E:2D:6A:FA:A9:1E:C6:7B:CB:FD:07:FD:70 X509v3 Authority Key Identifier: keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ac:7d:e3:6a:f9:86:ff:be:ef:dd:94:94:d9:51:1d:96:5f: d2:e6:1f:78:e1:48:8e:ba:63:78:67:ae:f9:8f:b9:5e:3e:4b: 2c:6a:e5:bc:07:52:69:8f:a1:69:73:e4:59:bb:75:f3:32:3c: 89:11:89:41:8c:98:ee:9f:50:21:d0:55:e7:96:a0:9f:d2:96: fe:c7:cd:b0:ba:a4:29:46:47:48:1a:9d:dc:fc:61:77:23:e0: c1:e3:ad:9a:71:01:6b:50:e7:c5:e1:4d:a7:ff:74:df:c9:01: 87:1f:3d:08:4a:a3:51:43:e0:55:d8:8e:c3:b6:45:62:3b:94: 7c:59:cb:ce:f5:65:ca:a2:ae:8f:ab:a5:32:25:eb:80:6d:35: dc:9e:18:ee:52:9e:6b:b6:4c:c7:5f:a4:f2:ad:33:aa:1f:ed: fd:1b:de:0f:96:86:47:13:e7:97:0b:44:47:bf:87:9b:92:86: eb:f7:a2:aa:f6:ed:12:26:41:99:93:90:73:29:73:de:96:d8: 8b:57:31:03:80:e1:f9:95:1c:98:4e:6c:52:e2:fc:40:57:b5: d8:bc:68:33:94:49:9b:21:2f:52:4b:9b:7a:98:e2:3a:c0:91: ba:c2:fb:32:1b:29:23:d5:ea:e7:4f:f6:85:5d:d6:03:bc:e7: b0:72:8b:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y4TZz8TPy1LTqeFTUUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWEwYTc1NTQzODU3MDM5NzRhZTE1ZWY5NDdiYzU0YzBi ODljOTUwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EyhjN2EwMWQyYTUyODIwNjJlMmQ2YWZhYTkxZWM2N2JjYmZkMDdmZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF6YwOByFfdp7FT4jxCur+ZIItlI IHrJBSOXUlhq0K/KJ9kgxgKnrJ7loEZq+wo7UpOfubRMs+hfCGVL9l3HJBOA7LsV nlGyt0EiD5WzLVDkiIYUtJvUog36LDjBsC4n5pWJOj9t4A83uJGoa7hdIJDQrqMm ZjFulhEN8Xi8qE4lu+jroAStKl+OmR0ZZZKlKxPyjnyWVm8kfqiaRFoo2gdQWZZb uX1xyv9lmkjkzLglgyBLYUowcCmx3WNK3HHk9Ja8S2y4W8sS1vNV1Ju2VYjJHeMk srBoGFhcbl/wl8l59APw0HWjBi27uyNUAJGNzV6xvbc5O68+jWzQj7ps0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMegHSpSggYuLWr6qR7Ge8v9B/1wMB8GA1UdIwQY MBaAFP8aCnVUOFcDl0rhXvlHvFTAuJyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAt Mjc1NTBiMjE5NTA3LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAtMjc1NTBiMjE5NTA3 LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKx942r5 hv++792UlNlRHZZf0uYfeOFIjrpjeGeu+Y+5Xj5LLGrlvAdSaY+haXPkWbt18zI8 iRGJQYyY7p9QIdBV55agn9KW/sfNsLqkKUZHSBqd3PxhdyPgweOtmnEBa1DnxeFN p/9038kBhx89CEqjUUPgVdiOw7ZFYjuUfFnLzvVlyqKuj6ulMiXrgG013J4Y7lKe a7ZMx1+k8q0zqh/t/RveD5aGRxPnlwtER7+Hm5KG6/eiqvbtEiZBmZOQcylz3pbY i1cxA4Dh+ZUcmE5sUuL8QFe12LxoM5RJmyEvUkubepjiOsCRusL7MhspI9Xq50/2 hV3WA7znsHKLfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:55 2025 by rpki-client