This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: HY22VHJUFUZJzVG8oqfJDkVqHy1PO9rSJ19bW8n5NjE= Subject key identifier: DB:4A:1D:BF:BD:3F:6B:38:F0:E3:EF:C2:44:BB:59:3E:72:E8:5E:D9 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019AF0BF166BCF31AD83AE8DA77542195F94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 131B Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (hash: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=) 2: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=) 3: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=) 4: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=) 5: DvF8t9IlxmCDE7eFFlHlL3S7BtQ.roa (hash: q1i0GBgyIfuASOH5psAfGMqR7ZZC66TTNfURWKBgMUE=) 6: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=) 7: Y2nJBnRnNh-WlEWlPML8mjTDUbM.roa (hash: EQQSLf951cekN3Ib/OD0TFtguegsJd5BXORrWTSHjrc=) 8: ZAx7Azq9YHnuLtmsAGgkpQ9XaQk.roa (hash: Nv+QAFomBrYRU4aOf9OpKKgjZFP6zJcF4QMA/O4RLyo=) 9: cGP_gRD-iBTmMU6jmRktcee-Lfo.roa (hash: wwltlEMfjaaWf1NiPcGDf2EH6nVadz8p372jM5CZNuE=) 10: fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa (hash: xpyUK/0mWO28W5ZFHD9SD69xhudYUF35PPRLXFMXs6I=) 11: kskuiZFZ4qnR7ertADOXhwQ9Oco.roa (hash: ZSYBr6SFSDGeJPdXMk2oIUoftKHvv6I70l0Yr4tHKxk=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: tMhLewm0jBhp/f8YwWdAdQP8lFVL93zUgNAKCjx4t6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:16:6b:cf:31:ad:83:ae:8d:a7:75:42:19:5f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=db4a1dbfbd3f6b38f0e3efc244bb593e72e85ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:4b:29:e9:72:64:a6:37:83:f3:cd:30:59: 3b:71:ef:b1:fc:65:56:cf:09:94:81:55:13:fa:10: d0:8d:bf:57:21:b0:c8:75:b1:ed:c8:b5:0c:24:d8: c1:6e:7e:f7:d8:89:38:59:3a:10:e7:b5:72:54:12: 1e:b1:63:46:55:a8:07:1a:a9:a4:10:65:3e:4a:ca: 6d:09:59:37:b8:36:12:75:68:94:c5:f8:30:a2:a8: 5f:14:cd:b8:de:34:c8:83:38:24:fb:e4:93:8a:4a: e3:82:a9:98:3b:5f:a0:d4:04:68:4d:73:ef:64:12: 86:b5:cc:fa:ef:2f:78:2c:cd:02:d2:77:c5:35:86: 19:12:ae:cc:78:ef:94:27:c0:5d:fa:b9:0d:98:61: 6e:6e:fe:80:3e:7a:22:69:9e:b9:2e:6b:d4:61:5d: 82:56:5f:b4:41:24:8b:d4:e2:52:3f:9f:b6:4f:dd: 93:09:d1:73:35:14:f8:26:12:6e:6e:50:0c:e2:44: 33:3f:95:4e:e7:bd:f2:ca:13:c5:2b:dd:09:54:b0: 2c:4c:c7:6c:c0:7e:42:f4:a6:b0:43:66:26:73:72: 2e:1c:76:0d:ad:63:98:da:5f:21:2a:0f:af:eb:1a: 22:02:2a:59:94:bf:69:48:d0:da:88:6f:23:52:a9: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4A:1D:BF:BD:3F:6B:38:F0:E3:EF:C2:44:BB:59:3E:72:E8:5E:D9 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:3e:d4:38:44:88:aa:2e:09:6c:37:c8:5c:42:ca:60:b6:ff: c8:08:66:f4:e7:a5:3e:dc:37:bd:d7:2f:79:25:5b:31:5b:52: fb:a8:09:5b:2d:3f:9c:b7:3b:8d:92:4b:f6:13:07:42:dc:9c: 71:aa:43:9e:08:15:02:29:39:f6:b8:ae:10:78:f3:e9:74:ec: ad:5f:f9:be:3a:fd:f6:1b:84:50:dd:34:cb:4c:e8:71:d7:04: 56:e9:10:63:9a:36:50:3c:ae:2c:61:4f:b4:29:99:7f:cb:b8: 76:e4:1a:c9:a1:48:eb:f7:bc:21:87:c3:37:9e:4d:f4:58:95: 15:13:23:f5:9c:9b:eb:1f:e6:c8:5b:53:45:3b:d2:1f:0b:80: e9:86:7a:ce:3f:d8:c6:48:3a:f0:ef:a2:4a:39:04:e2:31:d8: 40:14:a1:c2:1d:f9:2e:a6:60:51:7a:02:d1:dc:cb:a3:d2:f6: ba:e9:71:5b:54:dd:0c:7a:a0:47:38:06:c4:00:b5:56:07:9a: 35:b4:83:46:fd:3c:f2:86:53:aa:b4:5d:92:4f:f8:e8:65:74: 40:9d:5b:02:b4:f9:cc:5b:6c:73:c6:af:be:72:d2:18:b6:e0: 8f:d0:5a:51:cb:da:1e:9e:6c:66:aa:a5:1c:91:e0:7b:e3:cd: 96:c1:0e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxZrzzGtg66Np3VCGV+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD EyhkYjRhMWRiZmJkM2Y2YjM4ZjBlM2VmYzI0NGJiNTkzZTcyZTg1ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0dLKelyZKY3g/PNMFk7ce+x/GVW zwmUgVUT+hDQjb9XIbDIdbHtyLUMJNjBbn732Ik4WToQ57VyVBIesWNGVagHGqmk EGU+SsptCVk3uDYSdWiUxfgwoqhfFM243jTIgzgk++STikrjgqmYO1+g1ARoTXPv ZBKGtcz67y94LM0C0nfFNYYZEq7MeO+UJ8Bd+rkNmGFubv6APnoiaZ65LmvUYV2C Vl+0QSSL1OJSP5+2T92TCdFzNRT4JhJublAM4kQzP5VO573yyhPFK90JVLAsTMds wH5C9KawQ2Ymc3IuHHYNrWOY2l8hKg+v6xoiAipZlL9pSNDaiG8jUqmEEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtKHb+9P2s48OPvwkS7WT5y6F7ZMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiT7UOESI qi4JbDfIXELKYLb/yAhm9OelPtw3vdcveSVbMVtS+6gJWy0/nLc7jZJL9hMHQtyc capDnggVAik59riuEHjz6XTsrV/5vjr99huEUN00y0zocdcEVukQY5o2UDyuLGFP tCmZf8u4duQayaFI6/e8IYfDN55N9FiVFRMj9Zyb6x/myFtTRTvSHwuA6YZ6zj/Y xkg68O+iSjkE4jHYQBShwh35LqZgUXoC0dzLo9L2uulxW1TdDHqgRzgGxAC1Vgea NbSDRv088oZTqrRdkk/46GV0QJ1bArT5zFtsc8avvnLSGLbgj9BaUcvaHp5sZqql HJHge+PNlsEOUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:38 2025 by rpki-client