This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json) Hash identifier: ZAzkIa2z796sqmI31aJU9zPiaFuxVq2zsNCY1wDYUUE= Subject key identifier: 5E:45:8F:D8:66:80:10:77:F4:AE:5E:42:71:35:22:6C:EC:AF:38:18 Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Certificate serial: 019AF5AEAAAC08D07FEF05A5FD8EBFDA169A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft Manifest number: 1474 Signing time: Sat 06 Dec 2025 22:00:56 +0000 Manifest this update: Sat 06 Dec 2025 22:00:56 +0000 Manifest next update: Sun 07 Dec 2025 22:00:56 +0000 Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: JlN09i/iyji1NmeBHq95dL//tgjCR+PkKso++wk88zE=) 2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=) 3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=) 4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:aa:ac:08:d0:7f:ef:05:a5:fd:8e:bf:da:16:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Validity Not Before: Dec 6 22:00:56 2025 GMT Not After : Dec 7 22:00:56 2025 GMT Subject: CN=5e458fd866801077f4ae5e427135226cecaf3818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:9c:69:02:a7:29:a1:ea:b8:ca:4c:8a:2c: 34:26:1b:6e:52:63:cc:99:d2:a6:9d:22:7c:f8:1e: c9:02:45:e8:e2:72:54:7b:00:70:90:32:31:d0:0e: af:79:64:5b:33:05:a3:96:f8:85:04:6a:54:12:1a: c5:e1:b6:3d:be:75:3b:f2:ac:da:3f:22:b9:7b:c3: 3f:c6:f1:aa:d8:b6:c0:b4:da:cd:94:3e:79:37:1a: de:9f:63:4d:b2:74:04:5c:0c:df:fb:99:83:a2:ba: c1:5a:a0:d2:ac:a2:74:37:51:a1:46:87:53:7f:1a: 6a:59:4c:46:57:09:6c:0e:45:6b:87:a6:dc:0c:5f: 8d:58:04:18:67:8a:46:ec:e4:90:17:cc:4c:85:4f: b2:60:db:f6:8f:6f:29:03:a6:ef:f5:d8:d3:da:a0: 81:26:99:d3:8d:8f:60:b4:97:48:c2:29:20:8d:57: cd:f5:8b:48:29:7b:b6:c7:ec:5a:a4:e9:e6:7b:4d: 3e:63:d8:77:8b:bb:87:ab:d5:ff:ce:6e:a5:cc:c9: 57:12:79:27:c0:38:b6:29:ee:ca:ad:be:76:19:e5: 8f:19:62:a7:8f:ba:b9:52:b6:85:dc:cf:47:8b:80: df:fd:7f:09:fd:fb:19:66:ff:d6:01:ec:c0:56:57: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:45:8F:D8:66:80:10:77:F4:AE:5E:42:71:35:22:6C:EC:AF:38:18 X509v3 Authority Key Identifier: keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a2:ff:ff:73:5e:27:5a:41:5f:df:b3:d5:16:c5:3e:54:2b: 71:66:19:4e:0b:51:8f:3c:b9:e0:49:84:7b:e5:5d:eb:ef:a9: e7:59:c7:4c:a9:86:b6:f9:7e:34:6e:ce:12:6b:0e:55:41:a0: 6b:21:d3:94:c2:82:d4:93:92:af:55:15:7c:a6:a1:21:02:e4: 73:bc:1b:8f:7c:ca:4e:c1:4b:7a:35:2d:10:63:93:04:95:12: 80:e3:fc:d8:bc:ab:17:bd:ec:da:06:9f:e8:3f:84:02:19:dc: 6c:13:cc:b2:d2:2d:73:af:2c:b4:0d:c9:bc:42:2e:fa:9c:e1: 58:4a:e6:46:b3:4f:77:1f:fb:20:29:f9:33:7d:c7:84:67:cc: 4d:dc:cd:d6:14:9e:d8:bf:b0:6c:93:a1:e4:b1:fb:78:3d:55: df:75:21:48:43:61:5e:35:ba:54:8d:7c:21:8e:8b:a9:13:c5: 51:88:71:e2:b2:db:b4:82:b7:be:19:ce:07:ee:75:26:0f:e6: 9c:6c:23:f3:9d:7c:6d:61:f1:c4:be:81:47:13:b7:d8:40:63: c7:66:40:7c:57:86:5b:cf:1f:5f:93:18:4d:55:e9:a5:aa:a5: 02:eb:b6:07:52:43:0d:41:30:35:d8:42:0c:9b:10:b0:63:15: 61:83:8b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqqsCNB/7wWl/Y6/2haaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm YTJmYWMwHhcNMjUxMjA2MjIwMDU2WhcNMjUxMjA3MjIwMDU2WjAzMTEwLwYDVQQD Eyg1ZTQ1OGZkODY2ODAxMDc3ZjRhZTVlNDI3MTM1MjI2Y2VjYWYzODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWGcaQKnKaHquMpMiiw0JhtuUmPM mdKmnSJ8+B7JAkXo4nJUewBwkDIx0A6veWRbMwWjlviFBGpUEhrF4bY9vnU78qza PyK5e8M/xvGq2LbAtNrNlD55Nxren2NNsnQEXAzf+5mDorrBWqDSrKJ0N1GhRodT fxpqWUxGVwlsDkVrh6bcDF+NWAQYZ4pG7OSQF8xMhU+yYNv2j28pA6bv9djT2qCB JpnTjY9gtJdIwikgjVfN9YtIKXu2x+xapOnme00+Y9h3i7uHq9X/zm6lzMlXEnkn wDi2Ke7Krb52GeWPGWKnj7q5UraF3M9Hi4Df/X8J/fsZZv/WAezAVlf2hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5Fj9hmgBB39K5eQnE1ImzsrzgYMB8GA1UdIwQY MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqL//3Ne J1pBX9+z1RbFPlQrcWYZTgtRjzy54EmEe+Vd6++p51nHTKmGtvl+NG7OEmsOVUGg ayHTlMKC1JOSr1UVfKahIQLkc7wbj3zKTsFLejUtEGOTBJUSgOP82LyrF73s2gaf 6D+EAhncbBPMstItc68stA3JvEIu+pzhWErmRrNPdx/7ICn5M33HhGfMTdzN1hSe 2L+wbJOh5LH7eD1V33UhSENhXjW6VI18IY6LqRPFUYhx4rLbtIK3vhnOB+51Jg/m nGwj8518bWHxxL6BRxO32EBjx2ZAfFeGW88fX5MYTVXppaqlAuu2B1JDDUEwNdhC DJsQsGMVYYOLog== -----END CERTIFICATE-----Generated at Sun Dec 7 06:35:16 2025 by rpki-client