This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json) Hash identifier: pYc/RRVqo6fyxz4zaMBPsLnbpEeItlQgVr7m3NhB8gI= Subject key identifier: 40:EE:7A:EA:2F:B9:E7:6B:73:4D:74:8B:8E:63:80:E9:85:C0:FA:1F Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Certificate serial: 019AF3F7C0E6B529A3F62BADD672D4A35243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft Manifest number: 0EDF Signing time: Sat 06 Dec 2025 14:01:31 +0000 Manifest this update: Sat 06 Dec 2025 14:01:31 +0000 Manifest next update: Sun 07 Dec 2025 14:01:31 +0000 Files and hashes: 1: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=) 2: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=) 3: EtBWv7v42TBRx3xi5if6zm6OAdo.roa (hash: wUjEWMJsxkGqfJP8Q+fyLu6SEzpYpLZd1/pV8n4as7s=) 4: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=) 5: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: EdvB7XdH8nJUoi2pPU2tm+w7vRfIdi5qBkA8YSllfI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:c0:e6:b5:29:a3:f6:2b:ad:d6:72:d4:a3:52:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Validity Not Before: Dec 6 14:01:31 2025 GMT Not After : Dec 7 14:01:31 2025 GMT Subject: CN=40ee7aea2fb9e76b734d748b8e6380e985c0fa1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:ab:a0:76:36:2d:49:ac:a7:3a:65:22:bd: 29:12:c7:6d:65:ed:19:c4:a0:6f:f2:3a:4f:e1:e4: 38:12:18:6e:0e:5f:06:b0:ea:f2:3b:17:5f:5f:7b: 9b:3a:33:11:f6:b2:48:33:63:98:2b:73:ec:86:15: 13:d0:6d:91:dc:5f:76:1c:f3:ae:53:24:f9:e0:1a: 22:b4:77:51:d5:58:64:ce:33:4c:21:00:0e:7e:74: bb:f3:7f:18:75:6b:52:9c:73:b8:28:c4:53:2c:9d: 25:55:ca:6b:f6:60:c1:51:bb:b9:2b:fd:1a:aa:32: 24:54:72:30:8a:de:83:8a:ba:56:18:fd:cb:8e:f3: 92:70:3f:1c:bb:53:d8:7c:b0:18:3d:6e:0f:4b:f2: a5:51:35:26:4f:8c:66:86:83:29:18:84:05:57:ac: 09:6d:e3:6d:d6:bd:9c:63:cb:ea:f2:0c:06:d2:10: 5c:85:03:ef:c4:5d:53:0f:a5:19:12:e6:9f:2f:40: 8a:70:cb:c9:94:2c:4f:e9:b7:30:54:67:e3:50:b0: 18:b9:92:44:52:fa:fb:f2:77:f7:a0:ad:24:9d:f1: 43:36:88:a5:bc:16:dc:eb:2e:f4:be:0c:c4:f2:3a: 28:9c:71:7b:60:23:12:60:8a:80:9a:ea:a0:b9:c6: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EE:7A:EA:2F:B9:E7:6B:73:4D:74:8B:8E:63:80:E9:85:C0:FA:1F X509v3 Authority Key Identifier: keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2a:b8:37:29:ce:ea:d6:86:08:74:fe:62:f8:4c:ec:8d:79: 63:c0:4b:4a:d6:f4:af:e9:37:c4:5b:27:da:65:3d:75:ed:1b: 64:18:a7:00:93:1e:31:9b:02:a3:45:12:42:d2:ce:48:f4:41: 46:9b:6c:89:6a:93:74:cb:77:ec:21:0c:65:59:a6:1b:80:56: 57:b3:ce:dd:36:ba:b3:c9:cd:86:93:ec:a6:76:03:3c:37:40: cd:1c:b7:4d:b0:cf:71:07:e3:73:cf:2a:18:eb:02:fc:cf:56: 5e:99:8b:aa:c3:28:3d:14:9b:66:5f:e1:d7:16:b2:3b:9b:21: 58:fe:da:88:81:51:ed:bf:3d:d3:58:68:86:43:e3:9d:c3:10: 58:31:6a:c9:ca:73:87:76:8c:a1:ce:7b:f3:7a:d3:9a:73:07: 75:56:d7:e2:de:3b:ba:02:32:3f:8c:16:99:ae:cd:a0:f4:85: 57:d6:64:55:1c:ac:14:2b:cd:12:22:c4:50:bf:8a:f5:32:69: 2d:7e:20:e1:fb:dc:0e:57:2a:c3:9e:08:6d:29:6f:a2:dd:30: 11:5d:4b:02:4c:a9:00:bc:cc:ff:0a:21:9d:b5:7e:e8:06:1a: 22:aa:2c:da:13:ff:0a:b0:43:68:24:45:f7:8b:15:cc:e9:de: 9a:64:3f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98DmtSmj9iut1nLUo1JDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1 NWMzNjEwHhcNMjUxMjA2MTQwMTMxWhcNMjUxMjA3MTQwMTMxWjAzMTEwLwYDVQQD Eyg0MGVlN2FlYTJmYjllNzZiNzM0ZDc0OGI4ZTYzODBlOTg1YzBmYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9iroHY2LUmspzplIr0pEsdtZe0Z xKBv8jpP4eQ4EhhuDl8GsOryOxdfX3ubOjMR9rJIM2OYK3PshhUT0G2R3F92HPOu UyT54BoitHdR1VhkzjNMIQAOfnS7838YdWtSnHO4KMRTLJ0lVcpr9mDBUbu5K/0a qjIkVHIwit6DirpWGP3LjvOScD8cu1PYfLAYPW4PS/KlUTUmT4xmhoMpGIQFV6wJ beNt1r2cY8vq8gwG0hBchQPvxF1TD6UZEuafL0CKcMvJlCxP6bcwVGfjULAYuZJE Uvr78nf3oK0knfFDNoilvBbc6y70vgzE8joonHF7YCMSYIqAmuqgucYH6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDueuovuedrc010i45jgOmFwPofMB8GA1UdIwQY MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut M2FhN2RhYTlkM2VjLzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyq4NynO 6taGCHT+YvhM7I15Y8BLStb0r+k3xFsn2mU9de0bZBinAJMeMZsCo0USQtLOSPRB RptsiWqTdMt37CEMZVmmG4BWV7PO3Ta6s8nNhpPspnYDPDdAzRy3TbDPcQfjc88q GOsC/M9WXpmLqsMoPRSbZl/h1xayO5shWP7aiIFR7b8901hohkPjncMQWDFqycpz h3aMoc5783rTmnMHdVbX4t47ugIyP4wWma7NoPSFV9ZkVRysFCvNEiLEUL+K9TJp LX4g4fvcDlcqw54IbSlvot0wEV1LAkypALzM/wohnbV+6AYaIqos2hP/CrBDaCRF 94sVzOnemmQ/0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:52:32 2025 by rpki-client