This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json) Hash identifier: p7I4zeEnf1bAJyBKF+6IrNAeEy17XDSj0vOekot1Weg= Subject key identifier: 4C:F0:AC:68:3B:92:BA:64:47:7F:3D:FA:E7:82:B7:7B:24:9D:3A:F0 Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f Certificate serial: 019AF31C1D0483570BB3BAA8C50190AE8B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft Manifest number: 1320 Signing time: Sat 06 Dec 2025 10:01:37 +0000 Manifest this update: Sat 06 Dec 2025 10:01:37 +0000 Manifest next update: Sun 07 Dec 2025 10:01:37 +0000 Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=) 2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=) 3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: fAPOMkCbOPyUNlsmfvHdivtgI/fw4iDw5OnPwqJ7u8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:1d:04:83:57:0b:b3:ba:a8:c5:01:90:ae:8b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f Validity Not Before: Dec 6 10:01:37 2025 GMT Not After : Dec 7 10:01:37 2025 GMT Subject: CN=4cf0ac683b92ba64477f3dfae782b77b249d3af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:8c:f0:b7:62:0c:94:94:e3:ef:9f:07:4c: 18:f4:d1:72:30:9d:2a:b3:6d:0b:a6:f9:1b:36:77: 78:d0:cd:32:7e:96:e1:aa:3c:16:a8:5f:04:42:de: 72:d9:04:2a:70:c4:b7:fc:e8:79:1a:66:5f:62:50: 54:91:6c:3f:3c:61:8f:1a:e0:47:32:5c:ae:d5:58: af:98:eb:d4:16:32:60:b4:bf:a8:93:0a:bf:9a:40: 8e:f7:a0:68:82:0b:67:52:2c:dc:b7:b4:50:dd:6b: 02:41:a2:09:f0:68:08:1e:2a:c2:83:cb:32:60:2c: 47:dc:09:e3:6a:e5:de:3e:4d:68:73:f5:f0:37:f1: 2f:d7:2c:9f:53:af:f6:7d:5e:44:77:33:2a:f2:c7: 3c:f2:c2:7f:8b:2c:8e:7f:52:2c:4e:aa:fa:9b:14: a4:f3:e9:9a:bf:90:a8:58:c8:b1:d6:67:5d:36:05: 11:a2:08:d8:35:7e:6e:67:5b:7c:ea:d6:63:5a:6a: f7:6f:54:71:2c:ad:a1:d4:2e:cd:57:d9:f2:09:d7: de:6c:02:11:27:3f:33:5f:b1:4d:8e:c5:81:1f:38: 92:b6:d4:e5:05:c9:01:7b:31:42:62:cb:5d:a1:f0: 61:16:ec:da:64:0a:6b:b8:37:b6:5d:59:3c:7d:26: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:AC:68:3B:92:BA:64:47:7F:3D:FA:E7:82:B7:7B:24:9D:3A:F0 X509v3 Authority Key Identifier: keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bf:49:d5:83:f3:0a:1e:35:b0:95:ed:3d:c1:ac:b1:37:f6: d6:fa:93:a6:dc:8e:74:fc:b2:61:8f:4e:41:2c:49:75:33:47: 5d:1b:34:f6:a5:d2:22:fd:c1:bb:7f:d9:23:f4:df:68:0e:db: 99:68:eb:47:6d:91:f1:e3:57:8a:9a:72:87:88:42:5d:37:ab: 1f:81:66:63:d5:6c:0b:44:c1:55:9a:59:16:e2:07:a3:54:50: b1:9a:34:67:cf:0e:8a:64:71:bc:9b:75:05:00:cb:cb:16:1f: 50:39:ce:d3:fa:26:c8:e5:c3:f4:6a:a7:b8:0e:e4:d3:f5:a7: 42:42:11:1d:ef:e6:62:20:b7:af:01:12:97:14:90:f0:d3:ab: 27:68:1b:cd:0e:43:34:88:cd:d3:85:9a:f6:af:52:9a:31:9b: 80:11:d5:5a:be:97:af:f1:51:b5:a0:a7:5e:2a:77:c2:e7:f5: b3:69:54:c4:e9:0f:3e:b6:93:7d:01:03:5c:75:f8:3e:21:43: 70:28:e5:8c:5b:87:12:c2:d5:22:05:1f:57:1e:f4:50:66:1e: 5f:a0:c1:d8:80:cf:58:7e:21:4d:d6:bf:76:96:1b:1b:e0:24: 13:ac:70:37:a7:5a:3a:f7:ea:7c:1d:e8:6b:46:be:bf:a3:74: 45:e9:49:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHB0Eg1cLs7qoxQGQrotVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTZiY2NiZGM5ZjJlNGJhZGMwYTA1N2VhMDhmN2M3NDgx ODhiMWYwHhcNMjUxMjA2MTAwMTM3WhcNMjUxMjA3MTAwMTM3WjAzMTEwLwYDVQQD Eyg0Y2YwYWM2ODNiOTJiYTY0NDc3ZjNkZmFlNzgyYjc3YjI0OWQzYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI2M8LdiDJSU4++fB0wY9NFyMJ0q s20LpvkbNnd40M0yfpbhqjwWqF8EQt5y2QQqcMS3/Oh5GmZfYlBUkWw/PGGPGuBH Mlyu1VivmOvUFjJgtL+okwq/mkCO96BoggtnUizct7RQ3WsCQaIJ8GgIHirCg8sy YCxH3AnjauXePk1oc/XwN/Ev1yyfU6/2fV5EdzMq8sc88sJ/iyyOf1IsTqr6mxSk 8+mav5CoWMix1mddNgURogjYNX5uZ1t86tZjWmr3b1RxLK2h1C7NV9nyCdfebAIR Jz8zX7FNjsWBHziSttTlBckBezFCYstdofBhFuzaZApruDe2XVk8fSZe1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzwrGg7krpkR389+ueCt3sknTrwMB8GA1UdIwQY MBaAFMVWvMvcny5LrcCgV+oI98dIGIsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYt NDJlYTU1MTRlNzIyLzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYtNDJlYTU1MTRlNzIy LzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP79J1YPz Ch41sJXtPcGssTf21vqTptyOdPyyYY9OQSxJdTNHXRs09qXSIv3Bu3/ZI/TfaA7b mWjrR22R8eNXippyh4hCXTerH4FmY9VsC0TBVZpZFuIHo1RQsZo0Z88OimRxvJt1 BQDLyxYfUDnO0/omyOXD9GqnuA7k0/WnQkIRHe/mYiC3rwESlxSQ8NOrJ2gbzQ5D NIjN04Wa9q9SmjGbgBHVWr6Xr/FRtaCnXip3wuf1s2lUxOkPPraTfQEDXHX4PiFD cCjljFuHEsLVIgUfVx70UGYeX6DB2IDPWH4hTda/dpYbG+AkE6xwN6daOvfqfB3o a0a+v6N0RelJ/g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:39 2025 by rpki-client