This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json) Hash identifier: bkMm9FHQ8QrlamEfm1BrVOPJdE0Ci2S5P5xyOkXrcDA= Subject key identifier: CB:68:38:9D:05:9C:8A:30:21:B5:ED:CB:A4:F6:72:C3:6F:68:4E:6C Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d Certificate serial: 019AF46589C40DCFA2194F8B8B58342E9CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft Manifest number: 16CF Signing time: Sat 06 Dec 2025 16:01:26 +0000 Manifest this update: Sat 06 Dec 2025 16:01:26 +0000 Manifest next update: Sun 07 Dec 2025 16:01:26 +0000 Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=) 2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: mMUgnmJnfVQGrbpjZ/7gULueReLzRJbBor6+8AFJBTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:89:c4:0d:cf:a2:19:4f:8b:8b:58:34:2e:9c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d Validity Not Before: Dec 6 16:01:26 2025 GMT Not After : Dec 7 16:01:26 2025 GMT Subject: CN=cb68389d059c8a3021b5edcba4f672c36f684e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:34:80:ad:99:c8:00:1b:f5:a3:d2:36:d3:60: 3f:df:5f:3d:86:4d:b7:d6:89:3d:ad:a3:a2:60:4a: 95:a5:13:f8:28:3c:53:d1:9c:16:ac:89:f0:87:dd: 54:7a:ba:f5:e6:fa:a1:cf:53:bd:69:e3:89:7d:b9: c6:7a:12:71:9b:45:18:38:9c:a2:dd:0f:d0:64:df: f2:75:12:b2:9a:87:86:ce:1c:6a:2d:7f:e6:0f:7a: 76:44:5d:8c:f7:ff:71:6b:a5:be:aa:76:13:c2:95: 67:39:55:c3:0f:2b:5f:01:ee:52:bc:b6:8b:03:b1: 7c:98:e3:43:d8:32:ab:10:ce:98:6b:31:f8:d8:9e: 32:57:36:f4:ab:da:a5:34:86:26:8c:67:d4:96:06: ad:9f:5e:f1:e4:d1:62:14:c9:4b:b4:73:b0:ff:44: 2d:88:23:fd:0c:b1:aa:53:2f:ec:93:a4:6d:c5:4d: 62:ce:e5:b6:fa:70:40:bd:45:92:27:50:4c:60:81: e8:f8:64:c9:27:c0:95:e4:0c:0d:b4:8e:d8:c1:35: cc:76:cc:53:7c:85:b5:e6:5d:96:81:9b:e8:d1:93: 92:03:47:00:19:38:1c:08:f2:bf:92:db:06:24:b2: c1:90:c4:ff:38:b4:99:38:28:9b:d4:92:c8:b5:63: 82:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:68:38:9D:05:9C:8A:30:21:B5:ED:CB:A4:F6:72:C3:6F:68:4E:6C X509v3 Authority Key Identifier: keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:04:bd:02:aa:3c:2b:96:6d:f6:7a:80:d7:25:88:29:80:d1: 9f:7f:7b:9c:d0:d8:0d:a1:ce:bf:54:00:e9:38:c3:b0:35:7b: 8e:a7:29:d5:08:a8:6d:74:aa:7b:74:7c:cb:16:08:dd:87:71: c0:4f:2e:bc:f9:62:5d:a6:a3:85:d2:bd:35:c0:10:c2:2f:fa: 2c:03:3f:6e:ff:19:7f:50:5a:8a:c8:f7:21:e4:fa:12:c3:31: 20:75:80:6e:75:a1:40:57:e4:04:c9:f5:61:63:a2:b8:a4:b3: 9c:b2:72:aa:31:ca:20:05:26:24:58:fe:0b:e4:0a:3a:6e:79: 56:44:1c:95:33:5c:9a:1a:f6:ad:d9:c5:e0:ac:82:48:5c:b5: 09:00:59:70:fb:41:21:1a:5e:f9:ac:97:ff:27:b0:95:90:fa: 7f:2a:38:af:27:0c:fd:4a:17:e6:cc:19:a3:84:46:c9:f7:01: e9:bd:4b:b9:c7:48:a2:32:fa:2c:27:a1:38:f8:5b:82:35:ef: fe:71:39:f3:d0:f0:c0:ad:c4:bb:fd:92:63:b2:7f:86:e1:46: 46:2d:ea:d4:62:40:ff:86:f8:fc:1f:a1:b5:80:24:cf:08:9b: 05:82:b4:c2:c9:a4:a1:5b:8a:9f:1f:e3:c6:5d:8f:77:11:67: b2:ec:d1:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYnEDc+iGU+Li1g0Lpz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZhMDZkNWRiYWRhNDNkZTQ0ZjRlNGIxZGM5NDkyYmIy ODdjOWQwHhcNMjUxMjA2MTYwMTI2WhcNMjUxMjA3MTYwMTI2WjAzMTEwLwYDVQQD EyhjYjY4Mzg5ZDA1OWM4YTMwMjFiNWVkY2JhNGY2NzJjMzZmNjg0ZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jSArZnIABv1o9I202A/3189hk23 1ok9raOiYEqVpRP4KDxT0ZwWrInwh91Uerr15vqhz1O9aeOJfbnGehJxm0UYOJyi 3Q/QZN/ydRKymoeGzhxqLX/mD3p2RF2M9/9xa6W+qnYTwpVnOVXDDytfAe5SvLaL A7F8mOND2DKrEM6YazH42J4yVzb0q9qlNIYmjGfUlgatn17x5NFiFMlLtHOw/0Qt iCP9DLGqUy/sk6RtxU1izuW2+nBAvUWSJ1BMYIHo+GTJJ8CV5AwNtI7YwTXMdsxT fIW15l2WgZvo0ZOSA0cAGTgcCPK/ktsGJLLBkMT/OLSZOCib1JLItWOCWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtoOJ0FnIowIbXty6T2csNvaE5sMB8GA1UdIwQY MBaAFF8foG1dutpD3kT05LHclJK7KHydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUt MjU4NDZkNTlmZDYwLzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUtMjU4NDZkNTlmZDYw LzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwS9Aqo8 K5Zt9nqA1yWIKYDRn397nNDYDaHOv1QA6TjDsDV7jqcp1QiobXSqe3R8yxYI3Ydx wE8uvPliXaajhdK9NcAQwi/6LAM/bv8Zf1Baisj3IeT6EsMxIHWAbnWhQFfkBMn1 YWOiuKSznLJyqjHKIAUmJFj+C+QKOm55VkQclTNcmhr2rdnF4KyCSFy1CQBZcPtB IRpe+ayX/yewlZD6fyo4rycM/UoX5swZo4RGyfcB6b1LucdIojL6LCehOPhbgjXv /nE589DwwK3Eu/2SY7J/huFGRi3q1GJA/4b4/B+htYAkzwibBYK0wsmkoVuKnx/j xl2PdxFnsuzRLA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:19 2025 by rpki-client