This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json) Hash identifier: D3qROGj0TkJPenTY/CUe2DAet9JyG9jEENsFyb3gpyA= Subject key identifier: FD:CD:0F:BF:0E:6C:61:B4:98:C4:45:CE:C8:8D:BB:E8:28:EF:0F:75 Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e Certificate serial: 019AF087F9DA3D0BD07133A55D32ACF3FC23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft Manifest number: 06E5 Signing time: Fri 05 Dec 2025 22:00:34 +0000 Manifest this update: Fri 05 Dec 2025 22:00:34 +0000 Manifest next update: Sat 06 Dec 2025 22:00:34 +0000 Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: t7EtaBNQmBVyQfkRbRmfluGf29DFdtnoVG9dGAXUeg8=) 2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=) 3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=) 4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=) 5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f9:da:3d:0b:d0:71:33:a5:5d:32:ac:f3:fc:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e Validity Not Before: Dec 5 22:00:34 2025 GMT Not After : Dec 6 22:00:34 2025 GMT Subject: CN=fdcd0fbf0e6c61b498c445cec88dbbe828ef0f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4c:bd:0f:41:db:24:65:20:0d:b0:59:c4:bc: 17:36:52:0c:bb:17:53:8d:65:a6:4c:e4:2c:05:27: e3:92:41:c2:21:70:d5:e9:4f:82:7f:a9:25:6d:c6: 5d:b4:2a:b2:01:1b:41:5b:a1:bc:ad:2a:c3:90:6c: 20:9b:a6:89:4f:18:5e:74:ed:d8:46:ad:91:61:0c: e0:8a:d9:18:3c:8b:83:8a:9d:ef:5c:4d:ad:5b:79: d1:b4:27:78:98:52:d8:fa:94:3e:16:67:ae:5f:49: 8d:2e:54:a0:be:a2:4f:e1:85:8d:86:7f:79:46:e3: bc:77:44:bf:61:e2:4e:23:41:d7:75:bb:31:00:63: 00:02:66:33:07:70:3e:dd:a6:51:b1:46:7e:46:68: 6a:cb:7b:27:94:87:3c:e3:9d:3e:53:0b:5e:c9:4b: db:df:4c:4f:f6:cc:8b:15:32:4f:48:39:2f:9a:36: 56:86:22:00:3e:78:07:d0:0a:d4:52:ac:87:76:df: 95:d3:f9:a9:0a:b1:6b:f9:7a:a9:a4:b8:91:d7:42: 11:1f:fa:88:49:f2:51:65:5a:29:2c:ee:d9:0b:f6: 24:47:8d:c9:23:7f:a1:60:d5:b3:44:0a:5e:b1:22: 05:83:95:66:32:44:48:e9:38:3e:85:fc:39:1f:b2: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CD:0F:BF:0E:6C:61:B4:98:C4:45:CE:C8:8D:BB:E8:28:EF:0F:75 X509v3 Authority Key Identifier: keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5e:06:62:ca:b7:a3:b2:b9:ba:d0:88:37:32:c8:d3:dc:0d: a0:71:33:2b:85:31:5e:67:a4:4f:cf:23:13:8b:28:b4:36:58: 2a:bb:ab:f4:37:99:f2:20:a9:eb:e7:37:35:49:fc:fd:99:b7: 3c:8b:f4:9f:f8:8c:76:a5:38:31:10:3d:0e:1e:53:b7:ea:e7: a9:ff:f3:14:d9:69:4e:52:9a:bc:6b:07:df:6e:a6:13:44:97: 23:5e:05:69:c3:d2:21:b3:08:c2:97:79:95:15:b2:2a:c5:27: 13:43:31:16:53:78:50:b4:3a:10:24:e2:5b:f5:0a:8e:e2:8d: 17:24:af:a5:20:8d:ba:a4:ae:c5:67:1e:bc:7c:54:ab:85:21: 06:a4:be:ee:f3:d2:de:33:47:be:fb:e7:68:9d:e6:3f:7f:72: 49:2d:92:48:2b:65:52:a9:cb:9c:a4:15:12:f6:0f:54:e1:78: d2:65:44:39:6f:ef:47:d6:ee:da:8a:63:a0:d2:7c:22:f5:4d: 16:61:b7:9c:c9:0c:ac:a9:8a:4c:7c:00:d5:98:d1:09:da:5c: e6:d6:94:d6:af:5f:39:79:6e:1f:aa:7d:fa:8c:48:09:e7:ca: 78:db:9a:c7:0e:33:fe:f7:37:37:d4:91:7c:f3:ac:3d:4d:c7: 51:b0:13:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/naPQvQcTOlXTKs8/wjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxN2FlOWRjOWY0M2EyNjllYjBhY2NmMzQ4OGU4NjFmNGZm MGU4OWUwHhcNMjUxMjA1MjIwMDM0WhcNMjUxMjA2MjIwMDM0WjAzMTEwLwYDVQQD EyhmZGNkMGZiZjBlNmM2MWI0OThjNDQ1Y2VjODhkYmJlODI4ZWYwZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ey9D0HbJGUgDbBZxLwXNlIMuxdT jWWmTOQsBSfjkkHCIXDV6U+Cf6klbcZdtCqyARtBW6G8rSrDkGwgm6aJTxhedO3Y Rq2RYQzgitkYPIuDip3vXE2tW3nRtCd4mFLY+pQ+FmeuX0mNLlSgvqJP4YWNhn95 RuO8d0S/YeJOI0HXdbsxAGMAAmYzB3A+3aZRsUZ+Rmhqy3snlIc8450+UwteyUvb 30xP9syLFTJPSDkvmjZWhiIAPngH0ArUUqyHdt+V0/mpCrFr+XqppLiR10IRH/qI SfJRZVopLO7ZC/YkR43JI3+hYNWzRApesSIFg5VmMkRI6Tg+hfw5H7LOzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3ND78ObGG0mMRFzsiNu+go7w91MB8GA1UdIwQY MBaAFNF66dyfQ6Jp6wrM80iOhh9P8OieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUt ZmRhNGU4YTViNDZlLzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUtZmRhNGU4YTViNDZl LzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMV4GYsq3 o7K5utCINzLI09wNoHEzK4UxXmekT88jE4sotDZYKrur9DeZ8iCp6+c3NUn8/Zm3 PIv0n/iMdqU4MRA9Dh5Tt+rnqf/zFNlpTlKavGsH326mE0SXI14FacPSIbMIwpd5 lRWyKsUnE0MxFlN4ULQ6ECTiW/UKjuKNFySvpSCNuqSuxWcevHxUq4UhBqS+7vPS 3jNHvvvnaJ3mP39ySS2SSCtlUqnLnKQVEvYPVOF40mVEOW/vR9bu2opjoNJ8IvVN FmG3nMkMrKmKTHwA1ZjRCdpc5taU1q9fOXluH6p9+oxICefKeNuaxw4z/vc3N9SR fPOsPU3HUbATLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:04 2025 by rpki-client