This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json) Hash identifier: A/oBOuQZddQGhgkoRyFqXgxe0BtS41qZDw9S9uZLPXs= Subject key identifier: 3D:3A:D5:77:52:49:10:C4:7F:14:EF:CF:35:01:5F:35:B7:82:F4:B1 Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Certificate serial: 019AF42E8202B36049932E31B4C6FCCA72A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft Manifest number: 1677 Signing time: Sat 06 Dec 2025 15:01:19 +0000 Manifest this update: Sat 06 Dec 2025 15:01:19 +0000 Manifest next update: Sun 07 Dec 2025 15:01:19 +0000 Files and hashes: 1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=) 2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=) 3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=) 4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=) 5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: O47HYkgFCdSZ3J1FNPAzUplt2fYOFpnBW0PLPnH7Rd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:82:02:b3:60:49:93:2e:31:b4:c6:fc:ca:72:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Validity Not Before: Dec 6 15:01:19 2025 GMT Not After : Dec 7 15:01:19 2025 GMT Subject: CN=3d3ad577524910c47f14efcf35015f35b782f4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:29:70:7d:0a:8e:65:67:32:c5:61:bb:ac: 93:bb:e3:cc:ac:e1:c6:82:78:fe:df:85:37:b1:91: de:e4:24:f5:9a:23:be:3e:07:dd:1d:79:33:af:3b: bc:ff:4f:53:33:16:89:b0:16:99:e6:5e:ba:68:a4: d2:6f:e5:ef:72:b0:32:8a:c4:ec:a5:e6:37:ae:96: 85:bd:0d:66:71:cf:1a:f1:e2:40:d4:f5:14:e2:ef: a1:bf:c0:85:46:35:c5:05:5a:3b:57:db:18:79:e4: 10:9e:e5:51:bc:10:d9:60:b9:bb:50:ff:72:5c:8d: 36:1e:2f:5e:54:ce:87:ed:0b:08:cd:3c:94:54:83: 70:12:3b:3d:3a:f3:e0:dc:9c:fa:a8:32:c6:a4:d1: a9:52:45:3f:5d:0b:48:32:95:c4:e2:d6:58:f1:67: a9:a1:7c:2d:50:37:72:e6:9c:f0:f8:b9:62:c1:f3: cb:15:af:44:ea:95:3d:ea:99:a4:9c:38:2e:0b:bc: ca:0b:a5:62:07:1d:25:6f:b4:01:36:4c:10:fc:2b: d1:5d:bc:9c:9e:a4:34:09:18:8f:a3:e0:74:fd:6d: 5e:da:e2:bd:cb:4f:d3:62:90:9a:29:d2:ae:95:7b: 7d:ef:29:9c:4e:db:c5:9f:6f:91:d6:3f:d9:61:46: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3A:D5:77:52:49:10:C4:7F:14:EF:CF:35:01:5F:35:B7:82:F4:B1 X509v3 Authority Key Identifier: keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:63:3d:18:ee:55:41:01:d8:5d:cc:b1:6b:27:0a:d5:b9:dd: 14:40:da:fc:e2:a4:51:d7:02:cb:6c:a6:ec:5d:19:f7:f0:23: 7f:31:20:2b:e1:8d:c3:5b:55:93:54:b2:20:58:ca:8a:39:15: 48:ed:c7:d3:2c:34:cc:fe:4d:a3:d7:45:0c:30:a8:f5:b2:df: 2e:7f:1b:02:d5:2b:f8:c8:09:1b:15:81:c7:29:6b:09:d6:16: 28:e4:7c:e3:93:95:15:2c:65:90:36:fb:76:06:84:2c:a4:e9: 72:52:5e:d8:69:18:97:8a:e1:2e:a5:25:02:bc:d7:7e:9d:35: c0:c5:cf:cd:5c:1b:38:d0:81:0a:6e:8e:d6:c7:18:49:08:ac: e2:13:76:d9:fc:5e:e1:3b:ab:55:ed:ef:ad:2a:bd:29:73:44: 4a:09:b3:d8:43:67:86:b5:b8:6e:c0:93:7e:7d:77:4b:2f:dd: c7:b8:68:2a:95:21:6f:78:da:22:6d:71:18:f2:28:d2:d1:e6: 62:74:c3:07:7c:0c:82:49:a8:ec:ad:90:4b:11:e9:47:ab:a9: df:80:01:3c:56:08:b4:c2:56:05:89:f6:8c:69:a0:23:a4:c5: 60:a3:a3:5c:31:ef:e3:13:f9:13:ae:ef:07:c2:37:1f:ee:b4: dc:2e:c3:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoICs2BJky4xtMb8ynKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Mzg4MDdhYmI5Y2UxNWI3YTg5MjU5MmI2ZjAwM2YxYTNl MTZiNjAwHhcNMjUxMjA2MTUwMTE5WhcNMjUxMjA3MTUwMTE5WjAzMTEwLwYDVQQD EygzZDNhZDU3NzUyNDkxMGM0N2YxNGVmY2YzNTAxNWYzNWI3ODJmNGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlUpcH0KjmVnMsVhu6yTu+PMrOHG gnj+34U3sZHe5CT1miO+PgfdHXkzrzu8/09TMxaJsBaZ5l66aKTSb+XvcrAyisTs peY3rpaFvQ1mcc8a8eJA1PUU4u+hv8CFRjXFBVo7V9sYeeQQnuVRvBDZYLm7UP9y XI02Hi9eVM6H7QsIzTyUVINwEjs9OvPg3Jz6qDLGpNGpUkU/XQtIMpXE4tZY8Wep oXwtUDdy5pzw+LliwfPLFa9E6pU96pmknDguC7zKC6ViBx0lb7QBNkwQ/CvRXbyc nqQ0CRiPo+B0/W1e2uK9y0/TYpCaKdKulXt97ymcTtvFn2+R1j/ZYUY3jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD061XdSSRDEfxTvzzUBXzW3gvSxMB8GA1UdIwQY MBaAFMc4gHq7nOFbeoklkrbwA/Gj4WtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWIt M2QxZjMwZTA5MjNiLzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWItM2QxZjMwZTA5MjNi LzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGM9GO5V QQHYXcyxaycK1bndFEDa/OKkUdcCy2ym7F0Z9/AjfzEgK+GNw1tVk1SyIFjKijkV SO3H0yw0zP5No9dFDDCo9bLfLn8bAtUr+MgJGxWBxylrCdYWKOR845OVFSxlkDb7 dgaELKTpclJe2GkYl4rhLqUlArzXfp01wMXPzVwbONCBCm6O1scYSQis4hN22fxe 4TurVe3vrSq9KXNESgmz2ENnhrW4bsCTfn13Sy/dx7hoKpUhb3jaIm1xGPIo0tHm YnTDB3wMgkmo7K2QSxHpR6up34ABPFYItMJWBYn2jGmgI6TFYKOjXDHv4xP5E67v B8I3H+603C7D6A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:54:42 2025 by rpki-client