This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json) Hash identifier: 9e+5ChLG88NWvk0DaubdSbTF0XsUblCCbie/EiwVlcg= Subject key identifier: 4D:AE:70:39:D0:5D:1D:37:65:D4:15:DB:10:BF:7D:11:9C:61:CB:71 Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Certificate serial: 019AF0BF376591480F3772D5527A2B15018C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft Manifest number: 06DA Signing time: Fri 05 Dec 2025 23:00:54 +0000 Manifest this update: Fri 05 Dec 2025 23:00:54 +0000 Manifest next update: Sat 06 Dec 2025 23:00:54 +0000 Files and hashes: 1: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (hash: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=) 2: 3pGMf2uelis93d-cWIqOvjIte_8.roa (hash: hCA0m5958CMIXlTPuOx73BRCeRHxrLBc3i7kaHRRzvM=) 3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: 2zhenBYvri2s1Z/42sx1P2kSy5PRphBinHno5wHCcmw=) 4: lmViBZUrJauVEE0G2QrmSk33TZM.roa (hash: HMXZlZJ5YNloePMdOCSIn559A8cE+RQD1iAwls1t7fk=) 5: p5sda-HwuWNCoJb8ZwZwGaKEMGY.roa (hash: aNaLV+OqbrfnfcABJDi26qGq5f1GualuPpkp1NT1+Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:37:65:91:48:0f:37:72:d5:52:7a:2b:15:01:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Validity Not Before: Dec 5 23:00:54 2025 GMT Not After : Dec 6 23:00:54 2025 GMT Subject: CN=4dae7039d05d1d3765d415db10bf7d119c61cb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:76:20:a9:78:36:a6:a9:3f:a7:b2:ba:d4: c7:0c:65:35:ec:25:8f:1e:7e:cc:83:7a:96:5d:33: bc:47:08:f3:f9:0e:b2:98:8c:a1:7e:bc:17:27:29: 34:20:ce:22:4a:5d:7a:bb:39:dd:3c:d3:bc:59:9f: 9f:a2:f8:ba:c3:e1:da:04:8d:16:cf:f4:d3:83:38: d3:62:5b:3c:8b:88:a4:80:d0:50:ae:c4:e7:f7:95: 12:be:aa:36:13:44:06:fc:63:72:2c:97:a4:7c:50: 7a:00:d5:c3:05:c7:75:01:9e:07:f9:dc:fc:cf:71: 1d:4c:ea:57:a7:a4:f5:e1:c5:7c:c1:92:b9:28:11: 5c:03:3e:ce:15:fb:7d:00:16:2c:e1:81:ba:0e:ee: 23:2a:35:84:e0:0d:35:54:9d:75:61:f3:c2:06:46: dd:0e:c8:5b:2f:45:7a:74:1b:b4:c9:35:ee:91:a8: 38:19:2c:04:9e:0f:ca:7a:9a:7b:89:71:e6:eb:54: 21:df:6c:b1:c1:1c:36:f9:6c:ba:09:5d:6d:bf:8c: 95:09:b0:53:60:c9:3a:c4:71:06:d2:ea:a3:ec:ca: 76:e2:af:7a:8b:58:a2:3d:c1:db:f2:aa:cd:6c:e8: 43:ed:7b:56:39:8e:a1:d0:35:29:26:6a:db:a1:d1: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AE:70:39:D0:5D:1D:37:65:D4:15:DB:10:BF:7D:11:9C:61:CB:71 X509v3 Authority Key Identifier: keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cd:a1:65:ad:56:f2:3f:03:b3:af:1b:7c:99:9b:e5:17:05: ee:0a:21:cb:f7:d3:3b:ce:0c:3e:5a:b9:56:2a:d7:7d:37:1d: ef:40:3f:08:44:dc:76:f2:09:08:47:da:17:e7:2a:06:69:c0: 82:ee:d6:76:9e:92:b5:c3:91:93:eb:38:93:b9:59:e9:8c:ef: 87:0d:c8:15:bd:fe:92:1b:5c:e2:19:d8:c4:55:3a:1d:26:f0: a6:b2:60:9a:ac:05:4e:99:93:23:34:66:c6:0f:09:4c:24:5d: 77:b5:c5:b2:e6:47:50:2e:70:15:7b:b7:c2:b8:eb:f6:56:1f: b4:a7:94:a8:51:fc:00:ea:21:58:5e:e0:87:2e:3f:76:2b:15: 72:8d:0f:44:56:e9:c3:b7:83:7c:79:4c:bc:9f:18:c6:3a:5f: e6:60:fa:c6:5e:56:7c:aa:9a:1e:8c:5a:14:8c:e7:34:9f:41: 49:26:5f:89:37:fe:ed:80:c9:7a:81:72:2b:99:40:ab:f8:45: 7f:50:13:6d:d1:64:5f:ac:54:da:95:a4:2e:49:de:84:ee:e0: 06:10:74:91:06:04:02:5f:91:74:3c:43:08:fb:d9:82:67:fd: d7:f9:e4:84:ba:7f:cc:3c:56:70:ef:66:5e:65:b9:ce:31:ca: ed:55:9d:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzdlkUgPN3LVUnorFQGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl YmFjYmYwHhcNMjUxMjA1MjMwMDU0WhcNMjUxMjA2MjMwMDU0WjAzMTEwLwYDVQQD Eyg0ZGFlNzAzOWQwNWQxZDM3NjVkNDE1ZGIxMGJmN2QxMTljNjFjYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPZ2IKl4NqapP6eyutTHDGU17CWP Hn7Mg3qWXTO8Rwjz+Q6ymIyhfrwXJyk0IM4iSl16uzndPNO8WZ+fovi6w+HaBI0W z/TTgzjTYls8i4ikgNBQrsTn95USvqo2E0QG/GNyLJekfFB6ANXDBcd1AZ4H+dz8 z3EdTOpXp6T14cV8wZK5KBFcAz7OFft9ABYs4YG6Du4jKjWE4A01VJ11YfPCBkbd DshbL0V6dBu0yTXukag4GSwEng/Kepp7iXHm61Qh32yxwRw2+Wy6CV1tv4yVCbBT YMk6xHEG0uqj7Mp24q96i1iiPcHb8qrNbOhD7XtWOY6h0DUpJmrbodFIDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2ucDnQXR03ZdQV2xC/fRGcYctxMB8GA1UdIwQY MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt NGE3ZGRmMmQ4NmJkLzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX82hZa1W 8j8Ds68bfJmb5RcF7gohy/fTO84MPlq5VirXfTcd70A/CETcdvIJCEfaF+cqBmnA gu7Wdp6StcORk+s4k7lZ6Yzvhw3IFb3+khtc4hnYxFU6HSbwprJgmqwFTpmTIzRm xg8JTCRdd7XFsuZHUC5wFXu3wrjr9lYftKeUqFH8AOohWF7ghy4/disVco0PRFbp w7eDfHlMvJ8Yxjpf5mD6xl5WfKqaHoxaFIznNJ9BSSZfiTf+7YDJeoFyK5lAq/hF f1ATbdFkX6xU2pWkLknehO7gBhB0kQYEAl+RdDxDCPvZgmf91/nkhLp/zDxWcO9m XmW5zjHK7VWdCA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:35 2025 by rpki-client