This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json) Hash identifier: 5/fchecqC31KQtft3gtDw6XXXBl9BGqf0rwJP6XfY/U= Subject key identifier: 5D:58:DA:4F:7C:A9:55:DC:35:65:C6:8A:F6:FA:FB:1D:E7:04:92:56 Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd Certificate serial: 019AF19B2E7C60EFE52C1D02CD53C66B069C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=) 2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: UhovMQjU7X2G2XnWGgHv+fAGubI6CPjnN58o1s2Dzgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2e:7c:60:ef:e5:2c:1d:02:cd:53:c6:6b:06:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=5d58da4f7ca955dc3565c68af6fafb1de7049256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:34:8a:65:c7:6e:c6:ad:a1:4b:7c:b7:9c: f5:55:44:a8:86:b7:bf:1b:91:bb:5d:40:e6:35:e6: 16:c3:17:a4:63:8b:53:05:6b:71:c2:14:36:a5:cc: 9b:a1:aa:21:68:21:57:f0:e2:47:82:1e:54:6c:b7: ed:60:58:23:5a:a9:1b:c0:8f:f2:89:0d:e0:3e:a2: 4b:54:58:6d:71:9e:ce:fc:9a:97:71:f1:2c:65:cb: e7:55:c2:14:a5:eb:0e:eb:6a:93:c6:a8:ab:e6:ba: dd:52:9b:8f:dd:2b:dc:f6:ff:ce:4e:56:28:ea:bf: ee:47:b5:d0:3e:d7:d9:7c:03:a5:6e:a5:ce:c4:6f: c8:99:d3:94:1e:93:d3:fc:36:88:db:4e:39:1c:12: 8b:e6:96:1a:1c:ae:31:7d:5d:d9:43:44:3a:44:a9: 6a:2c:71:a4:a9:db:c1:c5:e3:b8:95:41:58:2c:e6: fc:cc:f0:9c:27:66:da:80:2d:96:c2:cf:0d:19:21: bd:2f:d1:4d:ef:38:7a:fa:90:97:7c:d9:ff:46:e9: 86:a2:ff:b4:64:6a:5b:2c:97:7d:b5:72:6f:a0:5d: 03:39:cc:df:c7:27:7a:0f:6c:0d:43:79:4a:68:71: 1f:cf:d6:5d:09:4d:9d:28:70:92:e2:80:25:f2:16: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:58:DA:4F:7C:A9:55:DC:35:65:C6:8A:F6:FA:FB:1D:E7:04:92:56 X509v3 Authority Key Identifier: keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:81:50:fa:76:c2:8b:eb:64:12:fd:ad:87:31:b1:51:b0:66: 18:d9:2f:36:84:4d:76:f0:7f:f5:3e:e6:f1:5a:04:1c:54:81: 93:a2:b3:e4:cc:3e:6b:d1:30:f8:7e:5d:85:e7:0b:a6:a4:c7: d6:ea:12:a5:5b:fe:9e:e1:cb:e0:5f:ba:ad:2a:93:82:5f:31: 2d:b6:b4:35:e0:62:d8:71:24:8d:e0:c0:a9:b0:61:09:e9:22: ef:f4:14:89:f5:f1:a3:90:a2:7b:89:0e:86:e9:d8:ed:96:57: f8:f5:7a:2c:b3:c5:50:d3:6c:26:2f:1e:e1:ad:2e:c0:00:1e: c5:9e:97:39:07:bb:0e:3e:6b:ab:dd:f3:a3:e6:9f:ab:5a:46: ae:60:c0:47:03:c6:49:f7:ec:94:45:47:eb:e5:5a:91:bf:6a: 9c:c7:2e:c2:2d:4c:87:5b:81:d1:92:4a:f6:a8:10:5a:de:a1: 2d:4f:cd:30:6b:64:d1:e5:3b:c2:6f:0f:43:c3:a8:5a:6e:15: 2f:c0:1a:27:29:30:aa:ed:e8:f1:c6:a9:44:9c:f3:c9:a9:da: c3:71:37:b4:bb:a2:9a:ba:17:88:f0:4a:9e:54:35:d8:0f:63: 35:a0:ca:10:ec:75:1e:61:46:ab:ba:ff:ec:50:03:24:23:3b: fd:58:b6:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy58YO/lLB0CzVPGawacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNTdiNjE2MTE3MTllYzdjOGUwMDEyYjFhZmY3ZTgxZmM3 Njg5YmQwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD Eyg1ZDU4ZGE0ZjdjYTk1NWRjMzU2NWM2OGFmNmZhZmIxZGU3MDQ5MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYc0imXHbsatoUt8t5z1VUSohre/ G5G7XUDmNeYWwxekY4tTBWtxwhQ2pcyboaohaCFX8OJHgh5UbLftYFgjWqkbwI/y iQ3gPqJLVFhtcZ7O/JqXcfEsZcvnVcIUpesO62qTxqir5rrdUpuP3Svc9v/OTlYo 6r/uR7XQPtfZfAOlbqXOxG/ImdOUHpPT/DaI2045HBKL5pYaHK4xfV3ZQ0Q6RKlq LHGkqdvBxeO4lUFYLOb8zPCcJ2bagC2Wws8NGSG9L9FN7zh6+pCXfNn/RumGov+0 ZGpbLJd9tXJvoF0DOczfxyd6D2wNQ3lKaHEfz9ZdCU2dKHCS4oAl8ha3nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1Y2k98qVXcNWXGivb6+x3nBJJWMB8GA1UdIwQY MBaAFFxXthYRcZ7HyOABKxr/foH8dom9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1Mjgt ZmEzMDcxYzQzNWYxLzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1MjgtZmEzMDcxYzQzNWYx LzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoFQ+nbC i+tkEv2thzGxUbBmGNkvNoRNdvB/9T7m8VoEHFSBk6Kz5Mw+a9Ew+H5dhecLpqTH 1uoSpVv+nuHL4F+6rSqTgl8xLba0NeBi2HEkjeDAqbBhCeki7/QUifXxo5Cie4kO hunY7ZZX+PV6LLPFUNNsJi8e4a0uwAAexZ6XOQe7Dj5rq93zo+afq1pGrmDARwPG SffslEVH6+Vakb9qnMcuwi1Mh1uB0ZJK9qgQWt6hLU/NMGtk0eU7wm8PQ8OoWm4V L8AaJykwqu3o8capRJzzyanaw3E3tLuimroXiPBKnlQ12A9jNaDKEOx1HmFGq7r/ 7FADJCM7/Vi24w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:05 2025 by rpki-client