This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json) Hash identifier: l69e4KlLSxXfrI3lCPi0Y7myWUclldntxqRGYR716LI= Subject key identifier: 55:16:AD:DE:F3:F1:1D:8D:B2:8E:57:64:F5:B0:76:4F:9D:46:05:49 Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f Certificate serial: 019AF2ADB2A9FE524061E6D29E1652D02957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft Manifest number: 0616 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: ZoFV4x2tyXT6J_JK-aC-19W61aE.roa (hash: yCSIbKlCnPHK7NkVGp5Sz1FBU5Gf4cXxoSVyvZfoNAM=) 2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: D1MZ8cUvX799+HKo+VlzkxTeNXaADfH/0s7sCbbT48I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b2:a9:fe:52:40:61:e6:d2:9e:16:52:d0:29:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=5516addef3f11d8db28e5764f5b0764f9d460549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:99:bd:a7:cf:44:f3:b3:7c:da:53:0b:b7: 66:4c:bb:2e:53:4e:49:8a:45:af:21:46:11:9e:80: 38:6a:62:20:1d:c4:ba:73:8a:ce:b6:02:e4:b9:6c: 0a:56:cb:09:a9:8c:8c:c7:66:95:e4:46:f5:85:68: a6:b9:8f:ec:bc:2a:81:0b:41:4e:ea:2a:76:c7:c9: 9b:57:35:8d:90:f5:0e:d0:dc:26:bb:f7:cc:1b:d0: 66:1b:e3:a2:5d:47:01:d2:9b:30:4c:28:34:77:57: 8d:e3:87:26:f9:89:56:a7:0b:b3:8f:69:67:7a:24: 3e:8a:4d:62:5a:e5:57:22:36:8e:ec:b8:7f:f1:36: 34:f9:62:3f:00:f7:5d:df:1d:dc:e6:d3:9e:9b:65: 9e:3d:3e:13:21:bd:25:5c:ff:75:62:df:18:30:fe: c2:b3:87:d5:f7:77:7a:c6:6d:84:e5:5f:c3:02:f3: cf:a7:48:f9:2f:29:5c:66:29:bf:72:c6:76:6b:d5: b8:e8:e8:88:7f:66:c1:33:09:a3:0b:66:87:ae:05: 98:53:ac:83:af:b7:0f:66:8a:27:19:8a:e6:fe:32: 25:8f:c7:83:58:94:ce:1e:b8:88:19:91:37:3c:4d: db:b9:3b:5f:fe:0d:2e:56:f3:b8:18:24:59:b1:b1: 1b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:16:AD:DE:F3:F1:1D:8D:B2:8E:57:64:F5:B0:76:4F:9D:46:05:49 X509v3 Authority Key Identifier: keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:41:e1:52:24:75:90:84:52:24:84:80:12:a1:c8:db:c3:c0: de:b9:06:da:0d:00:66:48:ec:8b:cc:8c:32:6c:9c:eb:ea:b8: 3c:b1:d2:dd:ea:41:b5:7f:64:76:47:77:a5:de:4d:eb:e8:2a: fd:a8:78:01:d7:c9:88:c3:c9:65:2f:37:5a:57:d0:89:b6:9d: a2:a4:64:cb:ea:ed:eb:78:ca:06:79:fe:6c:63:b8:51:23:4d: 2f:85:39:2d:aa:ab:71:84:97:74:3b:b5:36:c5:f1:05:0e:99: 5b:b4:61:70:e4:05:9c:b5:df:1f:10:37:6f:57:69:48:46:0d: 47:95:d5:21:40:cc:af:c2:3b:a8:d0:23:dd:e0:d0:c2:47:66: 20:a4:c9:bb:b5:d7:a5:46:79:b2:87:37:7a:10:39:99:91:b9: d6:b6:0c:09:64:24:98:56:b0:12:1e:2f:ee:80:10:b4:52:2e: 36:51:b7:7b:a6:e9:81:cf:39:53:47:7e:95:e4:dd:b6:91:50: 95:f0:a3:1b:fc:c2:95:4c:99:22:cb:b4:89:7c:90:43:d5:8b: 7d:e6:7d:04:d0:cb:5b:d2:a1:e9:68:aa:61:c8:0b:61:1a:9d: 52:98:29:d7:31:15:b4:47:c7:43:1e:1a:b3:31:93:75:86:4a: af:da:78:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbKp/lJAYebSnhZS0ClXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NzFkOTU4MGE4ZjAxZTQ5YzYxYzVmY2ZkZmYyZTU4OTk1 MzRiOGYwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD Eyg1NTE2YWRkZWYzZjExZDhkYjI4ZTU3NjRmNWIwNzY0ZjlkNDYwNTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2uZvafPRPOzfNpTC7dmTLsuU05J ikWvIUYRnoA4amIgHcS6c4rOtgLkuWwKVssJqYyMx2aV5Eb1hWimuY/svCqBC0FO 6ip2x8mbVzWNkPUO0Nwmu/fMG9BmG+OiXUcB0pswTCg0d1eN44cm+YlWpwuzj2ln eiQ+ik1iWuVXIjaO7Lh/8TY0+WI/APdd3x3c5tOem2WePT4TIb0lXP91Yt8YMP7C s4fV93d6xm2E5V/DAvPPp0j5LylcZim/csZ2a9W46OiIf2bBMwmjC2aHrgWYU6yD r7cPZoonGYrm/jIlj8eDWJTOHriIGZE3PE3buTtf/g0uVvO4GCRZsbEbgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUWrd7z8R2Nso5XZPWwdk+dRgVJMB8GA1UdIwQY MBaAFMVx2VgKjwHknGHF/P3/LliZU0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgt NzU0NmRkMTcxNmM4LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgtNzU0NmRkMTcxNmM4 LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtEHhUiR1 kIRSJISAEqHI28PA3rkG2g0AZkjsi8yMMmyc6+q4PLHS3epBtX9kdkd3pd5N6+gq /ah4AdfJiMPJZS83WlfQibadoqRky+rt63jKBnn+bGO4USNNL4U5LaqrcYSXdDu1 NsXxBQ6ZW7RhcOQFnLXfHxA3b1dpSEYNR5XVIUDMr8I7qNAj3eDQwkdmIKTJu7XX pUZ5soc3ehA5mZG51rYMCWQkmFawEh4v7oAQtFIuNlG3e6bpgc85U0d+leTdtpFQ lfCjG/zClUyZIsu0iXyQQ9WLfeZ9BNDLW9Kh6WiqYcgLYRqdUpgp1zEVtEfHQx4a szGTdYZKr9p4xA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:07 2025 by rpki-client