This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json) Hash identifier: lGQ9JMH5oSbjW1MN3ZQ2Mo3PFzjpwpyKMeK47xpSoEM= Subject key identifier: A8:66:21:EC:58:7D:FA:77:50:D5:14:B2:80:1B:04:E4:94:0A:DE:D8 Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9 Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9 Certificate serial: 019AF4650B4C895AC5187992D714E19F0F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 16:00:53 +0000 Manifest this update: Sat 06 Dec 2025 16:00:53 +0000 Manifest next update: Sun 07 Dec 2025 16:00:53 +0000 Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=) 2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: XQQizeRVztooKHcgctmas/XeOyIK4jOFGLvg+LLMO3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:0b:4c:89:5a:c5:18:79:92:d7:14:e1:9f:0f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9 Validity Not Before: Dec 6 16:00:53 2025 GMT Not After : Dec 7 16:00:53 2025 GMT Subject: CN=a86621ec587dfa7750d514b2801b04e4940aded8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:e9:d0:64:7a:f3:e9:dd:5e:6e:28:ae:06: 4a:f7:e2:1a:44:04:da:c7:50:21:7c:72:81:93:64: 8f:c8:c8:86:91:fe:5e:9c:83:31:79:6a:a5:d6:26: 8e:87:98:7e:6d:52:dd:bc:b2:28:d8:1e:4f:27:26: e6:50:79:3c:d4:86:cf:d0:d2:cd:a8:ec:20:58:b2: d4:04:ac:2c:52:e4:80:8e:fc:09:10:86:d6:0c:6b: 03:6f:cd:9d:4c:8b:89:a1:90:b1:e5:5e:0d:4b:11: 34:de:f5:b1:37:bf:c3:c9:6b:58:ab:39:cf:39:9e: aa:20:de:5d:72:43:69:6f:13:6f:90:4b:f3:1a:b7: c7:e6:c3:d5:ee:d1:c2:0c:88:d7:49:b3:29:78:71: ed:64:16:5f:7e:c4:be:e1:3c:89:2f:c0:89:b6:86: 42:d2:bb:09:a6:f2:bd:16:9d:0b:22:ed:75:d3:f8: d9:c5:c0:f2:ce:e8:59:e3:16:40:82:24:f3:95:b4: e8:16:1b:7c:e1:16:82:f9:10:dd:de:e6:cc:81:68: 29:c4:2d:5e:d5:89:b0:31:cc:88:22:a7:17:fd:36: e5:e0:da:76:d8:e0:78:53:25:5e:d7:61:fb:7a:1c: e9:ca:07:67:38:5d:92:f3:f1:3d:ad:e3:fd:2f:4f: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:66:21:EC:58:7D:FA:77:50:D5:14:B2:80:1B:04:E4:94:0A:DE:D8 X509v3 Authority Key Identifier: keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:08:63:c0:c0:3c:eb:a7:37:48:af:2a:24:6d:bb:bc:b6:ef: 18:63:fc:b4:58:a6:78:ea:23:50:13:ab:7f:7d:08:66:f2:47: ca:04:d8:28:0d:ad:04:99:09:0c:ef:e5:6b:65:c6:12:83:57: fc:9f:e1:ec:04:8b:c1:a6:b3:19:08:f9:2a:36:e2:6b:81:c7: ee:a5:4b:62:57:d2:da:0b:3c:55:a8:fb:d0:84:27:9f:cc:3a: 85:59:65:47:8d:c4:65:5c:bb:4b:69:03:57:d7:38:41:e1:d7: da:19:63:e8:6f:23:ea:73:d7:1a:ee:ef:98:9a:a6:ab:17:48: b1:17:38:2f:aa:ad:c4:dd:24:f0:b1:fd:04:a3:7b:5c:07:79: 85:fe:5b:02:c0:99:06:44:65:41:f0:70:d4:f2:26:2d:fd:b3: 03:72:89:7f:c6:7c:88:fd:69:d5:bd:e2:e8:71:d6:d5:1e:d9: 00:1b:ed:74:1a:33:f0:af:f2:51:6d:c0:61:76:2d:b3:e1:c8: 6c:b5:30:a6:ea:a2:4b:63:a3:be:56:6c:43:dd:fe:10:c4:dd: 1e:10:fd:1d:d5:a3:7f:fc:13:43:b3:09:a0:25:a6:0a:13:ea: 4f:03:5e:4c:77:bb:41:ff:2d:22:b6:5d:a0:da:c3:7b:4c:24: ad:a8:2b:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQtMiVrFGHmS1xThnw8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjVlZDA0MGVmZTJlNTgxNzU0ZGViNWMzY2Q4MmQ5OWRm ZWU4ZDkwHhcNMjUxMjA2MTYwMDUzWhcNMjUxMjA3MTYwMDUzWjAzMTEwLwYDVQQD EyhhODY2MjFlYzU4N2RmYTc3NTBkNTE0YjI4MDFiMDRlNDk0MGFkZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviDp0GR68+ndXm4orgZK9+IaRATa x1AhfHKBk2SPyMiGkf5enIMxeWql1iaOh5h+bVLdvLIo2B5PJybmUHk81IbP0NLN qOwgWLLUBKwsUuSAjvwJEIbWDGsDb82dTIuJoZCx5V4NSxE03vWxN7/DyWtYqznP OZ6qIN5dckNpbxNvkEvzGrfH5sPV7tHCDIjXSbMpeHHtZBZffsS+4TyJL8CJtoZC 0rsJpvK9Fp0LIu110/jZxcDyzuhZ4xZAgiTzlbToFht84RaC+RDd3ubMgWgpxC1e 1YmwMcyIIqcX/Tbl4Np22OB4UyVe12H7ehzpygdnOF2S8/E9reP9L092yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhmIexYffp3UNUUsoAbBOSUCt7YMB8GA1UdIwQY MBaAFF317QQO/i5YF1TetcPNgtmd/ujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMt YmVmZTRiMzRjNmYwLzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMtYmVmZTRiMzRjNmYw LzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwhjwMA8 66c3SK8qJG27vLbvGGP8tFimeOojUBOrf30IZvJHygTYKA2tBJkJDO/la2XGEoNX /J/h7ASLwaazGQj5Kjbia4HH7qVLYlfS2gs8Vaj70IQnn8w6hVllR43EZVy7S2kD V9c4QeHX2hlj6G8j6nPXGu7vmJqmqxdIsRc4L6qtxN0k8LH9BKN7XAd5hf5bAsCZ BkRlQfBw1PImLf2zA3KJf8Z8iP1p1b3i6HHW1R7ZABvtdBoz8K/yUW3AYXYts+HI bLUwpuqiS2OjvlZsQ93+EMTdHhD9HdWjf/wTQ7MJoCWmChPqTwNeTHe7Qf8tIrZd oNrDe0wkragraQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:07 2025 by rpki-client