This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json) Hash identifier: aE+XkNADod2dQ0cLzMEDAj+CfOOh/+gtVg9tsThErPQ= Subject key identifier: 42:A3:A4:93:36:81:CD:FB:C6:24:A2:45:08:63:52:93:6C:79:3D:3B Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c Certificate serial: 019AF5408458CDD0304BB175F33ED94B957E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft Manifest number: 1475 Signing time: Sat 06 Dec 2025 20:00:37 +0000 Manifest this update: Sat 06 Dec 2025 20:00:37 +0000 Manifest next update: Sun 07 Dec 2025 20:00:37 +0000 Files and hashes: 1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=) 2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=) 3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=) 4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=) 5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=) 6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=) 7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: I+TnavKk4ded2px2OVjJPiQOvnefExxfQl6Y2x15IKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:84:58:cd:d0:30:4b:b1:75:f3:3e:d9:4b:95:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Validity Not Before: Dec 6 20:00:37 2025 GMT Not After : Dec 7 20:00:37 2025 GMT Subject: CN=42a3a4933681cdfbc624a245086352936c793d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:67:bf:f7:b7:3b:a7:9c:26:4e:62:19:fc:0b: 99:a8:37:38:05:88:4a:56:5e:77:23:e8:b5:b6:cc: 00:55:5c:2a:9c:91:ea:ed:94:9c:9d:18:58:4d:26: 94:a5:9b:c7:fc:60:73:c9:51:71:8d:9b:12:d4:88: b4:e7:1c:c0:c0:03:f2:ab:29:a7:61:b1:80:2c:e7: a2:0f:4d:22:ff:e3:30:3b:5d:61:ca:44:ed:58:75: d1:94:dd:9e:ec:6e:2a:be:15:aa:03:b1:63:56:ce: e9:2a:8e:0f:04:4d:10:03:f3:d4:1f:d9:87:2b:1b: 63:57:3e:10:6f:0d:f5:f7:64:5d:8a:9d:a5:ff:9d: 41:c0:74:47:e7:03:70:b6:83:1d:9c:a0:d5:de:50: 30:d9:29:79:5b:37:ca:9b:f7:83:63:9e:ab:79:18: f8:b6:76:73:56:3f:0c:c7:48:45:4f:7f:db:70:93: d1:27:37:83:b3:0e:ec:26:92:1f:fa:80:82:71:c4: f6:de:ca:5a:27:79:7e:16:b1:a2:24:73:a0:71:53: 91:56:e4:e3:0c:cc:b8:b6:ec:2c:66:43:2d:38:99: fd:66:c8:ef:92:41:82:c3:66:77:e1:25:12:ae:fc: a4:2d:5b:fd:2d:16:e3:af:65:6b:1b:3f:58:5f:37: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:A4:93:36:81:CD:FB:C6:24:A2:45:08:63:52:93:6C:79:3D:3B X509v3 Authority Key Identifier: keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1c:3a:c8:48:48:22:97:0b:ab:38:08:1c:be:79:36:4b:ed: 60:05:75:e2:b7:c0:48:cb:3e:5f:bc:23:fc:3c:59:08:2f:6d: 4e:b7:dd:ec:a6:2b:3e:be:67:69:ab:2e:61:0b:a0:9f:ee:25: e0:c6:bc:48:2e:46:79:6a:c1:e4:e0:3d:61:6a:e6:bb:2e:94: 5c:5b:b4:5e:38:52:f0:18:2b:f8:a8:e6:05:fb:2a:ad:39:57: 48:46:c3:ae:ad:72:24:96:c0:05:64:ab:32:44:ef:c8:0b:50: 12:41:e8:07:9a:37:b8:bc:8f:68:db:77:92:a7:d8:1d:4f:68: 86:a2:bf:63:0a:5c:b2:fa:c3:68:09:eb:91:a3:b9:ea:41:d1: 49:32:1b:3a:3d:d9:b4:73:29:70:39:fd:b7:04:ea:44:23:3f: 94:d5:e1:4a:f6:df:78:c1:d6:c6:2c:28:bb:08:63:dc:a6:ac: 30:9c:ae:3d:7c:c4:df:48:28:e4:05:de:72:8a:43:c1:87:fe: 05:9b:06:89:7c:9b:4a:ca:c7:dc:58:48:a8:5c:2e:0b:5a:36: da:7e:7d:46:b6:49:78:1c:d2:7b:20:f6:08:11:58:8e:b6:4b: 04:04:c2:90:3d:6c:76:26:4e:7c:80:69:65:1e:41:2f:bd:cd: 59:76:fe:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIRYzdAwS7F18z7ZS5V+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4 MmEyM2MwHhcNMjUxMjA2MjAwMDM3WhcNMjUxMjA3MjAwMDM3WjAzMTEwLwYDVQQD Eyg0MmEzYTQ5MzM2ODFjZGZiYzYyNGEyNDUwODYzNTI5MzZjNzkzZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ge/97c7p5wmTmIZ/AuZqDc4BYhK Vl53I+i1tswAVVwqnJHq7ZScnRhYTSaUpZvH/GBzyVFxjZsS1Ii05xzAwAPyqymn YbGALOeiD00i/+MwO11hykTtWHXRlN2e7G4qvhWqA7FjVs7pKo4PBE0QA/PUH9mH KxtjVz4Qbw3192Rdip2l/51BwHRH5wNwtoMdnKDV3lAw2Sl5WzfKm/eDY56reRj4 tnZzVj8Mx0hFT3/bcJPRJzeDsw7sJpIf+oCCccT23spaJ3l+FrGiJHOgcVORVuTj DMy4tuwsZkMtOJn9ZsjvkkGCw2Z34SUSrvykLVv9LRbjr2VrGz9YXzebqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKjpJM2gc37xiSiRQhjUpNseT07MB8GA1UdIwQY MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt MjM4NDA1ZjJjZGU5LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5 LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRw6yEhI IpcLqzgIHL55NkvtYAV14rfASMs+X7wj/DxZCC9tTrfd7KYrPr5naasuYQugn+4l 4Ma8SC5GeWrB5OA9YWrmuy6UXFu0XjhS8Bgr+KjmBfsqrTlXSEbDrq1yJJbABWSr MkTvyAtQEkHoB5o3uLyPaNt3kqfYHU9ohqK/YwpcsvrDaAnrkaO56kHRSTIbOj3Z tHMpcDn9twTqRCM/lNXhSvbfeMHWxiwouwhj3KasMJyuPXzE30go5AXecopDwYf+ BZsGiXybSsrH3FhIqFwuC1o22n59RrZJeBzSeyD2CBFYjrZLBATCkD1sdiZOfIBp ZR5BL73NWXb+BA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:12 2025 by rpki-client