This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json) Hash identifier: rFWIWTC3tfBLOWGtyYsJjR4LpXSyh4eSspHPSY1ExN8= Subject key identifier: CA:EB:77:EF:54:B6:62:3A:D2:DE:85:F5:9C:21:4E:E5:61:36:8E:FD Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32 Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132 Certificate serial: 019AF38A0C9B147A66CA4319819005828FD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft Manifest number: 068B Signing time: Sat 06 Dec 2025 12:01:41 +0000 Manifest this update: Sat 06 Dec 2025 12:01:41 +0000 Manifest next update: Sun 07 Dec 2025 12:01:41 +0000 Files and hashes: 1: kHiX8WHdFwuPFdrPXqiFRGBzUrk.roa (hash: otjzQBnh+aIeRc4Qh5LotaBSTmBU7xZUCsHLwTppJLQ=) 2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: 9FO4lSxQAUzB55W7hAnrMZoyaizdRWasl9GitR4BPLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:0c:9b:14:7a:66:ca:43:19:81:90:05:82:8f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132 Validity Not Before: Dec 6 12:01:41 2025 GMT Not After : Dec 7 12:01:41 2025 GMT Subject: CN=caeb77ef54b6623ad2de85f59c214ee561368efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:f6:9d:c0:4b:0f:dc:15:d7:61:74:4f:6a: 39:79:fe:46:4b:66:0a:d3:62:c0:96:fe:33:0d:4c: fc:d3:87:68:ab:47:b6:10:ef:ad:f3:00:23:11:76: cf:58:be:c1:e1:75:72:12:80:1a:1a:44:7f:3a:79: 8a:57:28:f1:9c:c8:b8:3f:fb:6d:e8:f5:4a:7c:5c: 74:1c:31:81:e3:b0:43:04:bd:57:11:de:d0:29:c1: 57:b2:c9:c1:ec:56:e2:e1:b9:2c:20:e6:09:a8:24: 0d:51:89:ba:b4:8b:aa:8d:4c:9b:14:bd:b1:45:e5: 61:45:0c:30:e4:36:81:07:0a:3c:a6:30:77:cc:ee: ed:c0:2d:ac:47:d2:1a:dc:78:bd:84:55:39:3c:4e: 5a:26:de:67:85:38:0c:da:3f:2c:c8:13:7d:88:e5: 53:91:f3:90:66:bf:8f:8f:21:b9:36:00:02:fe:5b: da:0c:50:9d:75:7b:f6:1c:42:4d:12:e0:e2:75:ea: 09:92:f8:70:df:a3:4b:b5:74:63:d0:df:04:ea:1e: 86:2d:98:95:c1:10:17:f5:5b:ad:18:bd:c0:e8:f5: 2a:96:71:65:8b:66:41:ab:82:1a:9d:2f:b3:c1:a7: 98:2a:f9:b6:c6:dc:98:e4:2a:7e:01:7b:ab:6a:5d: 2c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EB:77:EF:54:B6:62:3A:D2:DE:85:F5:9C:21:4E:E5:61:36:8E:FD X509v3 Authority Key Identifier: keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:78:e5:fd:23:54:30:f1:46:58:36:99:92:f0:c8:a9:9a:57: d2:30:3a:aa:01:00:72:f4:95:1a:8c:30:14:2b:fd:8c:9d:4a: 06:8b:d7:d4:34:7f:76:ba:f8:47:34:2b:cc:14:50:4e:0d:20: 82:48:03:2e:d6:ba:4f:63:58:ba:57:8f:d1:dd:37:72:06:7d: 5e:4e:25:62:58:b4:bf:dd:20:81:b5:c1:20:25:f4:f0:b3:8c: 86:08:12:7d:11:1c:00:2f:e6:02:50:97:0f:03:0c:1a:10:34: 00:b9:65:1a:ad:a8:74:17:c0:2a:31:32:fb:c7:80:91:81:17: 56:9d:35:27:dc:75:59:0f:fc:d9:7a:1e:a7:61:56:f2:87:7f: 23:3b:e2:e1:90:b3:d9:8b:06:2b:1c:da:39:a3:7b:a0:c1:f7: 75:f6:fe:2d:90:01:f4:88:da:0e:db:ce:84:6d:c0:7a:68:87: eb:ff:84:bf:b4:01:cd:93:92:b8:11:05:21:ad:a1:ce:29:ad: bb:f0:73:d9:89:c1:1a:eb:a7:8e:00:1c:35:3b:e5:5d:d5:65: 61:da:c4:cb:a2:7e:01:62:da:31:c6:0e:57:b7:42:3c:be:a6: b6:5c:4a:01:36:4f:35:47:03:1a:71:88:89:76:f6:f7:e5:8f: 31:b9:bf:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigybFHpmykMZgZAFgo/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YmM1OWY4Zjc1NDRmMWVhNWJhNWMxOGIzOGUyNTczNTE3 YzkxMzIwHhcNMjUxMjA2MTIwMTQxWhcNMjUxMjA3MTIwMTQxWjAzMTEwLwYDVQQD EyhjYWViNzdlZjU0YjY2MjNhZDJkZTg1ZjU5YzIxNGVlNTYxMzY4ZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVH2ncBLD9wV12F0T2o5ef5GS2YK 02LAlv4zDUz804doq0e2EO+t8wAjEXbPWL7B4XVyEoAaGkR/OnmKVyjxnMi4P/tt 6PVKfFx0HDGB47BDBL1XEd7QKcFXssnB7Fbi4bksIOYJqCQNUYm6tIuqjUybFL2x ReVhRQww5DaBBwo8pjB3zO7twC2sR9Ia3Hi9hFU5PE5aJt5nhTgM2j8syBN9iOVT kfOQZr+PjyG5NgAC/lvaDFCddXv2HEJNEuDideoJkvhw36NLtXRj0N8E6h6GLZiV wRAX9VutGL3A6PUqlnFli2ZBq4IanS+zwaeYKvm2xtyY5Cp+AXural0sPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrrd+9UtmI60t6F9ZwhTuVhNo79MB8GA1UdIwQY MBaAFMa8Wfj3VE8epbpcGLOOJXNRfJEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAt M2NhNDA5YjUzMTFmLzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAtM2NhNDA5YjUzMTFm LzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXjl/SNU MPFGWDaZkvDIqZpX0jA6qgEAcvSVGowwFCv9jJ1KBovX1DR/drr4RzQrzBRQTg0g gkgDLta6T2NYuleP0d03cgZ9Xk4lYli0v90ggbXBICX08LOMhggSfREcAC/mAlCX DwMMGhA0ALllGq2odBfAKjEy+8eAkYEXVp01J9x1WQ/82Xoep2FW8od/Izvi4ZCz 2YsGKxzaOaN7oMH3dfb+LZAB9IjaDtvOhG3AemiH6/+Ev7QBzZOSuBEFIa2hzimt u/Bz2YnBGuunjgAcNTvlXdVlYdrEy6J+AWLaMcYOV7dCPL6mtlxKATZPNUcDGnGI iXb29+WPMbm/BQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:33 2025 by rpki-client