This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json) Hash identifier: O8IDikfF28L8Z3Eei3yu++X2Zb8Cf95+GMAAcRMj4Nw= Subject key identifier: 1A:A8:F7:9B:F2:81:9E:9C:5F:05:DF:13:EC:08:24:98:59:99:10:C7 Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Certificate serial: 019AF2765DB2944DD6441FFB8DAC0076C360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft Manifest number: 1297 Signing time: Sat 06 Dec 2025 07:00:34 +0000 Manifest this update: Sat 06 Dec 2025 07:00:34 +0000 Manifest next update: Sun 07 Dec 2025 07:00:34 +0000 Files and hashes: 1: EOCWiGvbLbC8SrTdZuW8112GldA.roa (hash: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=) 2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: rotjH2zNElOuROzC8dOGL98fMdiYBx3yxpi9NOUYOOE=) 3: ZSASssxXWzh67IcbvQuSjMbjXlE.roa (hash: 8NFvVB0e1Ed6PcQb0KzEDJBB77MUqbc2YSQy8ySf1Y4=) 4: iefIsjicRY6rMPB46yzGeoYmfDY.roa (hash: wYK+cODxbPgs0PQn468rpCusa1e+6M4kLS/qnuHcsvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5d:b2:94:4d:d6:44:1f:fb:8d:ac:00:76:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Validity Not Before: Dec 6 07:00:34 2025 GMT Not After : Dec 7 07:00:34 2025 GMT Subject: CN=1aa8f79bf2819e9c5f05df13ec082498599910c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:fa:5a:24:6a:dc:99:a7:a2:c3:54:cd:9e: 1b:22:3f:13:2b:3e:28:5e:9a:ed:04:ff:93:58:ac: 54:04:0e:d0:67:b4:25:13:06:f8:61:91:68:1e:31: 6c:aa:6f:84:06:0e:9f:b6:77:b8:a1:a0:79:06:24: d3:a5:bb:8d:c1:9e:0f:59:c2:01:df:98:10:14:c0: a3:1e:6e:4f:6a:78:3f:9d:5b:15:c5:19:dc:49:66: 61:7c:89:97:a4:df:88:0d:cd:a4:3e:da:99:cf:04: 74:ee:d9:97:10:72:8c:3d:83:ce:a2:02:a3:1d:ca: 84:fc:fd:2c:1d:8c:98:4e:c7:57:6a:a4:95:cb:fd: c4:35:63:12:5d:01:75:1a:28:51:4a:88:4d:cb:fa: b2:2a:05:94:e6:5a:8c:f8:06:e0:6b:75:05:65:30: 52:e5:55:35:ca:b9:92:08:08:e3:7b:06:ee:e7:11: b4:8c:81:7e:0c:fb:f1:f3:c9:c3:f1:cb:8a:8c:25: 76:84:f2:82:01:2e:49:d4:65:18:11:00:d5:d7:55: e0:35:b6:75:ad:e9:43:0c:27:10:cd:e4:a1:74:ea: fd:a4:1c:98:43:80:c2:0b:05:20:6c:e0:60:63:9b: 7f:b7:e6:11:f8:08:3d:3f:db:0d:2d:a4:89:89:d9: 32:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:F7:9B:F2:81:9E:9C:5F:05:DF:13:EC:08:24:98:59:99:10:C7 X509v3 Authority Key Identifier: keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:30:b5:bf:87:26:d6:a7:1d:5b:b5:d7:9e:88:2d:96:95:cb: 8e:c8:8a:e3:8b:82:ed:9f:25:bf:ee:82:25:1d:3b:42:03:9d: 5f:5a:b6:27:15:da:5c:81:e6:a0:bb:fa:0a:1b:69:49:fd:4c: f9:fb:89:ae:1f:d4:a1:3b:21:af:6c:87:18:f8:69:b9:b1:ce: 4a:c9:6d:29:b8:47:1e:0c:30:9e:01:86:57:12:0a:c9:a5:29: ef:34:e4:01:60:33:2b:0f:30:7b:a8:a6:65:27:36:ef:b2:4a: 9c:b7:80:39:c6:61:a6:4d:0c:12:28:79:4f:77:25:22:a3:58: 7f:1b:11:92:e1:05:0c:79:d3:be:d5:5d:2b:f3:37:5c:2c:bb: 4b:db:15:58:62:41:7e:db:3a:3c:51:f0:c4:28:3c:12:4d:f3: be:88:ea:3f:b6:ed:c6:96:42:58:49:e0:5c:e1:81:22:9a:e8: 93:0a:8f:d2:81:df:c8:ec:00:c7:5f:e1:be:8d:3a:33:c8:90: 72:1a:b0:8d:15:1e:6c:9a:bb:2b:4a:52:3d:46:28:70:71:e6: 58:97:57:e5:9b:70:cb:d1:f0:2d:ad:51:e8:ce:9c:09:bf:10: 81:fb:1d:45:bf:94:e7:00:8e:01:cd:1c:d2:d0:f5:5b:ee:d6: 58:c9:e3:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydl2ylE3WRB/7jawAdsNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl NWNmOTYwHhcNMjUxMjA2MDcwMDM0WhcNMjUxMjA3MDcwMDM0WjAzMTEwLwYDVQQD EygxYWE4Zjc5YmYyODE5ZTljNWYwNWRmMTNlYzA4MjQ5ODU5OTkxMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9H6WiRq3JmnosNUzZ4bIj8TKz4o XprtBP+TWKxUBA7QZ7QlEwb4YZFoHjFsqm+EBg6ftne4oaB5BiTTpbuNwZ4PWcIB 35gQFMCjHm5Pang/nVsVxRncSWZhfImXpN+IDc2kPtqZzwR07tmXEHKMPYPOogKj HcqE/P0sHYyYTsdXaqSVy/3ENWMSXQF1GihRSohNy/qyKgWU5lqM+Abga3UFZTBS 5VU1yrmSCAjjewbu5xG0jIF+DPvx88nD8cuKjCV2hPKCAS5J1GUYEQDV11XgNbZ1 relDDCcQzeShdOr9pByYQ4DCCwUgbOBgY5t/t+YR+Ag9P9sNLaSJidkymQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqo95vygZ6cXwXfE+wIJJhZmRDHMB8GA1UdIwQY MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt NGY4YzYzOGE3MmUxLzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDC1v4cm 1qcdW7XXnogtlpXLjsiK44uC7Z8lv+6CJR07QgOdX1q2JxXaXIHmoLv6ChtpSf1M +fuJrh/UoTshr2yHGPhpubHOSsltKbhHHgwwngGGVxIKyaUp7zTkAWAzKw8we6im ZSc277JKnLeAOcZhpk0MEih5T3clIqNYfxsRkuEFDHnTvtVdK/M3XCy7S9sVWGJB fts6PFHwxCg8Ek3zvojqP7btxpZCWEngXOGBIprokwqP0oHfyOwAx1/hvo06M8iQ chqwjRUebJq7K0pSPUYocHHmWJdX5Ztwy9HwLa1R6M6cCb8QgfsdRb+U5wCOAc0c 0tD1W+7WWMnjNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:46 2025 by rpki-client