This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json) Hash identifier: 0mN1dx5VNsd0BOpYaz+1QVK3VKELIljch83oTZiiw+A= Subject key identifier: A8:9B:8E:5B:D3:6B:5F:74:5B:03:E4:3D:0C:F5:A8:AC:69:BD:F2:D2 Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Certificate serial: 019AF23F93402FF772074976802477DCD256 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft Manifest number: 077B Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: PM3-UGKjLr96XIFPl-hOFG_Fkxo.roa (hash: 1qezTMxLLeCKKaAo2JrFFrXX9RE2wcF8+6TlYZv7BMc=) 2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: 7zboqrb2CIyH0IQShaqKt/7hDPeUpnMehZxJtw4O0y0=) 3: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:93:40:2f:f7:72:07:49:76:80:24:77:dc:d2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=a89b8e5bd36b5f745b03e43d0cf5a8ac69bdf2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e0:c0:62:73:89:4f:44:c0:f4:23:54:b2:2f: a2:5d:ae:fb:9a:b9:81:9e:69:80:72:3f:9c:d0:c9: 31:7a:06:de:ca:b2:10:d3:27:8d:80:e9:a5:a1:47: 6c:ff:38:d6:e3:79:e7:b7:12:21:b9:3d:0e:45:0e: 0e:6d:d5:d5:fe:02:ff:92:61:54:fd:6f:85:fd:43: 5e:af:ea:40:2a:23:17:90:45:80:46:30:d0:06:0e: 45:e4:2c:89:1c:df:c0:e1:65:68:cc:62:df:08:bf: dd:63:78:44:72:c0:b2:96:10:a0:02:32:c5:f1:6e: b5:82:f8:4a:b1:7b:4e:b5:1e:ff:4b:b0:d7:6b:f9: 62:61:58:21:d9:25:2d:89:10:2c:63:08:5b:38:ca: 9c:be:a2:07:3e:00:44:32:d7:0c:08:8d:f0:4c:17: b4:5a:1c:71:f7:30:b3:ce:ce:0d:e5:2b:e7:7e:45: a0:da:44:0d:9d:1e:87:79:eb:cc:f2:ae:05:61:88: f7:3d:35:39:ad:a4:8a:be:a5:76:4f:67:17:f1:34: 46:28:06:45:b0:a5:51:0e:b8:3d:38:f6:c2:d6:c5: c3:62:d8:aa:8f:55:34:a5:db:2c:52:be:39:9f:7c: 91:4e:88:83:56:04:d5:af:88:31:5e:d6:82:d5:28: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9B:8E:5B:D3:6B:5F:74:5B:03:E4:3D:0C:F5:A8:AC:69:BD:F2:D2 X509v3 Authority Key Identifier: keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5e:2d:74:d4:51:78:57:ba:87:27:8a:3d:4f:bf:c4:10:86: 4a:df:59:1d:f4:b7:db:09:7c:55:bf:90:b7:2a:31:a7:49:21: 2e:34:68:44:17:05:b5:0a:15:d3:c7:2c:cb:8b:7a:58:74:a6: 62:c7:cc:a3:1f:13:f8:bb:75:87:6c:c4:67:67:89:a2:ee:74: 93:84:de:65:fa:82:1a:9a:be:7b:53:7d:9a:4f:68:14:83:6d: ce:97:7d:bb:c8:b1:0c:e3:fb:fc:e8:b2:f8:e6:ba:79:e4:9a: 9d:c0:9d:7b:ce:f6:5b:6f:77:cf:5f:57:e9:e2:94:d7:54:75: 5e:7d:2c:a4:48:ae:28:02:5d:90:2d:2a:62:6f:7e:90:05:5f: be:5e:a2:b7:a9:14:25:e0:c3:68:d8:82:2d:6e:dd:a6:32:67: 36:b3:e3:ea:19:91:bb:ca:83:e9:b1:70:ef:4a:de:11:e3:a4: 28:6b:5a:54:50:23:5d:39:4d:6b:3e:13:68:ff:b3:4a:74:1d: b5:21:c6:a4:d8:ef:8c:d8:68:1f:86:cd:d4:1c:2c:d7:5f:52: be:6a:6b:41:9e:26:25:e8:4a:0f:a4:76:3f:80:23:98:de:99: a0:2b:03:f2:46:b7:af:33:19:64:8b:6a:20:9f:64:05:23:85: 1f:b3:91:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5NAL/dyB0l2gCR33NJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4 MTk5ZTYwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhhODliOGU1YmQzNmI1Zjc0NWIwM2U0M2QwY2Y1YThhYzY5YmRmMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlODAYnOJT0TA9CNUsi+iXa77mrmB nmmAcj+c0MkxegbeyrIQ0yeNgOmloUds/zjW43nntxIhuT0ORQ4ObdXV/gL/kmFU /W+F/UNer+pAKiMXkEWARjDQBg5F5CyJHN/A4WVozGLfCL/dY3hEcsCylhCgAjLF 8W61gvhKsXtOtR7/S7DXa/liYVgh2SUtiRAsYwhbOMqcvqIHPgBEMtcMCI3wTBe0 Whxx9zCzzs4N5SvnfkWg2kQNnR6HeevM8q4FYYj3PTU5raSKvqV2T2cX8TRGKAZF sKVRDrg9OPbC1sXDYtiqj1U0pdssUr45n3yRToiDVgTVr4gxXtaC1ShBsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKibjlvTa190WwPkPQz1qKxpvfLSMB8GA1UdIwQY MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt ZGYyN2YxMGM3MDk3LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3 LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF14tdNRR eFe6hyeKPU+/xBCGSt9ZHfS32wl8Vb+Qtyoxp0khLjRoRBcFtQoV08csy4t6WHSm YsfMox8T+Lt1h2zEZ2eJou50k4TeZfqCGpq+e1N9mk9oFINtzpd9u8ixDOP7/Oiy +Oa6eeSancCde872W293z19X6eKU11R1Xn0spEiuKAJdkC0qYm9+kAVfvl6it6kU JeDDaNiCLW7dpjJnNrPj6hmRu8qD6bFw70reEeOkKGtaVFAjXTlNaz4TaP+zSnQd tSHGpNjvjNhoH4bN1Bws119SvmprQZ4mJehKD6R2P4AjmN6ZoCsD8ka3rzMZZItq IJ9kBSOFH7ORQw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:33 2025 by rpki-client