This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json) Hash identifier: YCfXphfziw78OUpCikVwGv8yfpfR+MMMh2SDyw4wapo= Subject key identifier: 11:95:00:67:5B:40:12:84:63:4F:27:CB:DA:80:96:89:99:87:53:67 Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59 Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159 Certificate serial: 019AF540EEFB6D3DA1F1139C34BC6920FA8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft Manifest number: 069A Signing time: Sat 06 Dec 2025 20:01:04 +0000 Manifest this update: Sat 06 Dec 2025 20:01:04 +0000 Manifest next update: Sun 07 Dec 2025 20:01:04 +0000 Files and hashes: 1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=) 2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: K5ZI/jbWLU2v5aUzho+rhRxwRZSiJoHG00qM8U3KeZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ee:fb:6d:3d:a1:f1:13:9c:34:bc:69:20:fa:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159 Validity Not Before: Dec 6 20:01:04 2025 GMT Not After : Dec 7 20:01:04 2025 GMT Subject: CN=119500675b401284634f27cbda80968999875367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:90:0f:18:dd:7c:b1:c1:7d:1c:7a:a6:05: 0f:f6:7a:54:9e:0f:c4:e0:8e:f7:2e:4d:d1:99:a5: 1b:49:ab:91:eb:d5:4b:e3:fb:53:4e:f3:21:de:91: 6d:ee:e2:58:80:60:29:e5:aa:2b:9e:f8:19:27:2e: fe:e5:c5:91:bf:b9:bd:bd:30:05:20:96:8f:bc:d4: e3:ee:e4:15:9c:80:1b:34:97:39:bb:fe:0f:87:34: 28:de:8d:52:f8:db:8f:89:12:dd:77:af:15:47:0f: 9d:36:88:4b:f6:88:f7:04:8e:74:76:a4:b6:23:98: 55:da:e2:4a:e7:4b:5c:9c:7a:f5:57:b3:ea:7b:b6: ca:85:63:72:b7:12:6e:3d:0b:4a:88:71:78:30:21: 4b:52:c8:86:ee:22:7f:3c:8b:53:61:a0:9a:2f:86: 33:f1:cc:1b:cb:76:9d:51:95:81:ef:f1:db:7c:80: fe:34:a5:68:7b:e1:b8:ad:4e:67:e4:ae:83:15:63: ec:22:75:bb:12:d4:cc:d5:53:a4:4b:90:7d:6d:03: 11:dd:b3:4c:27:bc:32:34:c1:0f:36:82:fe:9a:3b: c0:90:5d:07:42:8e:d8:8b:28:02:6a:4f:dc:14:10: 1c:09:ec:b1:ab:36:58:db:7e:1f:e5:68:d4:66:52: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:95:00:67:5B:40:12:84:63:4F:27:CB:DA:80:96:89:99:87:53:67 X509v3 Authority Key Identifier: keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:84:a5:ee:89:d2:90:6a:89:f1:ef:9d:03:24:01:47:ab:47: 67:ed:c4:53:c7:8b:66:29:78:81:e7:ca:b1:b6:8d:ad:e7:b2: 94:fb:01:d7:ed:46:91:2b:85:9e:04:af:44:3e:84:3d:2c:73: 06:9c:0b:5e:26:3a:1d:0a:81:15:6f:bd:8b:53:99:70:8a:1e: 5b:c5:e1:93:05:82:b8:f3:4e:bd:a1:3f:b4:ab:8f:fb:aa:78: 19:30:62:1b:42:9d:90:35:09:89:e0:e8:8c:ff:ce:ff:b8:a3: 86:a7:ba:aa:c5:a9:c8:cc:dc:e2:8a:ce:89:15:58:e8:80:6f: 56:87:e7:5d:b9:19:72:5a:9a:0f:e0:45:52:3d:70:30:df:70: 8a:a7:63:bc:ef:76:16:84:ae:89:8b:96:e8:d4:9c:dd:2c:6a: e8:58:8f:65:b3:71:da:eb:96:e9:55:09:57:99:c5:b1:79:50: 66:76:c0:27:33:e7:2e:91:ee:b6:ef:4c:64:da:84:61:3d:38: 15:e7:cb:26:f8:d0:20:9f:4d:4c:90:59:12:d5:39:5f:cc:0f: 83:57:74:bb:c0:8a:c6:4f:4f:9e:ac:77:24:5c:6a:88:cc:a4: b8:51:6f:a2:1c:ec:04:71:98:ee:7d:78:d8:de:80:ca:0b:85: 40:a4:5a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QO77bT2h8ROcNLxpIPqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YjM2ZmVhMjJjMzY2ZDA4YTRiNTQ2YWM4M2Y0NDg1YjJi MWUxNTkwHhcNMjUxMjA2MjAwMTA0WhcNMjUxMjA3MjAwMTA0WjAzMTEwLwYDVQQD EygxMTk1MDA2NzViNDAxMjg0NjM0ZjI3Y2JkYTgwOTY4OTk5ODc1MzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw+QDxjdfLHBfRx6pgUP9npUng/E 4I73Lk3RmaUbSauR69VL4/tTTvMh3pFt7uJYgGAp5aornvgZJy7+5cWRv7m9vTAF IJaPvNTj7uQVnIAbNJc5u/4PhzQo3o1S+NuPiRLdd68VRw+dNohL9oj3BI50dqS2 I5hV2uJK50tcnHr1V7Pqe7bKhWNytxJuPQtKiHF4MCFLUsiG7iJ/PItTYaCaL4Yz 8cwby3adUZWB7/HbfID+NKVoe+G4rU5n5K6DFWPsInW7EtTM1VOkS5B9bQMR3bNM J7wyNMEPNoL+mjvAkF0HQo7YiygCak/cFBAcCeyxqzZY234f5WjUZlJWiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGVAGdbQBKEY08ny9qAlomZh1NnMB8GA1UdIwQY MBaAFMazb+oiw2bQiktUasg/RIWyseFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jYzA4M2MtZmU3Ni00NDNmLWEyMTQt NTRkMjBkODg5MTVkLzEveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jYzA4M2MtZmU3Ni00NDNmLWEyMTQtNTRkMjBkODg5MTVk LzEveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfISl7onS kGqJ8e+dAyQBR6tHZ+3EU8eLZil4gefKsbaNreeylPsB1+1GkSuFngSvRD6EPSxz BpwLXiY6HQqBFW+9i1OZcIoeW8XhkwWCuPNOvaE/tKuP+6p4GTBiG0KdkDUJieDo jP/O/7ijhqe6qsWpyMzc4orOiRVY6IBvVofnXbkZclqaD+BFUj1wMN9wiqdjvO92 FoSuiYuW6NSc3Sxq6FiPZbNx2uuW6VUJV5nFsXlQZnbAJzPnLpHutu9MZNqEYT04 FefLJvjQIJ9NTJBZEtU5X8wPg1d0u8CKxk9Pnqx3JFxqiMykuFFvohzsBHGY7n14 2N6AyguFQKRaPg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:39 2025 by rpki-client