This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json) Hash identifier: tCP3puoFbUgaFe/d9YZp7bW9tHoC/AJFLK4n7HYr9VY= Subject key identifier: 91:C7:D9:E8:9C:B5:C7:E2:DC:7F:03:1D:9D:46:AB:FB:59:08:24:A8 Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60 Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460 Certificate serial: 019AF208A9E1C32B612A3B22E9F0510B5278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft Manifest number: 1143 Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: PIN37trPlN3lxY67H1mn7O/e6m/EaDLyQPcufIjG3BU=) 2: wonoA_cs_njK19k2rpw4egFrSTU.roa (hash: ng5AEw7xNqDcHFkEECYFEyho12TTUkJenLRXIkEgt5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a9:e1:c3:2b:61:2a:3b:22:e9:f0:51:0b:52:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460 Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=91c7d9e89cb5c7e2dc7f031d9d46abfb590824a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:41:21:09:fa:5e:0d:55:86:c5:d7:ca:8a: e8:34:de:82:27:97:d9:c7:02:b2:2b:27:13:13:06: 40:65:d2:34:59:d4:cd:8a:36:29:0c:66:72:c0:9a: 2d:84:64:85:54:e2:cd:06:e3:5c:27:a1:94:03:00: 76:b0:61:0f:ca:19:b9:60:c5:05:c3:35:f5:8b:d0: 8f:f7:47:aa:61:c6:2b:ae:c2:81:d6:6a:57:6f:d4: cd:88:8f:7d:a8:4e:12:75:e0:4f:50:0a:ea:bf:4a: c6:b5:75:60:a7:f2:2b:c0:88:a3:39:a2:d8:06:10: fa:96:c5:55:99:20:2f:ff:21:e9:e4:e3:d8:ba:19: e2:7f:4e:a5:72:48:98:95:02:cc:16:28:f3:89:f7: bb:d9:6c:e6:f1:d7:2e:ca:69:a5:59:47:50:99:6d: 98:88:0a:a1:c4:40:41:51:f0:13:48:b7:2d:12:1e: b0:70:a7:5d:aa:28:35:73:f5:da:92:e8:09:b0:d9: 49:d3:88:28:81:c9:65:b7:ee:16:db:9f:1c:a2:7d: b7:59:42:75:ea:41:9a:0c:b3:ca:f6:94:d6:35:3e: 4d:2e:b3:50:98:3b:e7:d7:6a:03:10:1f:ae:5d:35: 12:9a:c0:9c:1e:01:55:19:c5:f1:08:ea:72:95:02: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C7:D9:E8:9C:B5:C7:E2:DC:7F:03:1D:9D:46:AB:FB:59:08:24:A8 X509v3 Authority Key Identifier: keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:69:1b:bf:af:bd:43:42:10:64:02:ad:9e:3c:7a:f4:8c:02: 54:3a:61:94:17:78:f3:3f:a6:96:73:8a:c0:b7:f9:ad:29:d1: 5a:91:96:63:47:70:ce:26:7f:96:c3:e5:51:16:1d:c5:eb:b7: 1e:12:f8:90:ff:fd:3d:50:fc:5d:12:01:e5:c8:0b:6f:a5:64: 3a:f8:e2:31:0f:da:a7:0d:9a:11:2b:cd:2f:8c:8d:2a:cb:10: d3:eb:cb:3e:fd:92:5a:03:76:5f:92:d1:94:0c:2d:43:e8:4b: fd:b4:4a:1a:fd:86:5b:f3:4d:b8:42:f2:dc:0e:15:74:48:f8: 6c:8d:86:a2:6b:4b:68:9e:c8:0f:61:cf:9f:c9:c0:c4:03:5f: a3:61:33:6c:92:25:75:92:2b:d4:b3:64:e3:2b:11:4d:25:a3: a9:d9:16:9d:94:ab:89:48:20:d9:89:0f:67:5c:ac:74:e3:70: 4e:f4:93:4c:53:e1:b5:ea:cc:84:1d:80:97:ee:80:f8:cd:d9: 40:d0:60:50:8d:80:15:84:8e:ca:ae:dd:90:86:d5:34:4e:31: 84:a0:dd:76:2f:90:ae:45:dc:37:2c:a0:92:f1:a7:db:9b:56: e2:61:8a:75:c5:5c:a0:f4:5a:ee:19:dd:a5:e8:30:17:0b:1c: 39:ce:a7:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKnhwythKjsi6fBRC1J4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZmY3M2E4YjIxODM1ODJiYjRlZmQ3ZGU4NTdkNDgxZjZk NGI0NjAwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD Eyg5MWM3ZDllODljYjVjN2UyZGM3ZjAzMWQ5ZDQ2YWJmYjU5MDgyNGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTVBIQn6Xg1VhsXXyoroNN6CJ5fZ xwKyKycTEwZAZdI0WdTNijYpDGZywJothGSFVOLNBuNcJ6GUAwB2sGEPyhm5YMUF wzX1i9CP90eqYcYrrsKB1mpXb9TNiI99qE4SdeBPUArqv0rGtXVgp/IrwIijOaLY BhD6lsVVmSAv/yHp5OPYuhnif06lckiYlQLMFijzife72Wzm8dcuymmlWUdQmW2Y iAqhxEBBUfATSLctEh6wcKddqig1c/XakugJsNlJ04gogcllt+4W258con23WUJ1 6kGaDLPK9pTWNT5NLrNQmDvn12oDEB+uXTUSmsCcHgFVGcXxCOpylQL7FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHH2eictcfi3H8DHZ1Gq/tZCCSoMB8GA1UdIwQY MBaAFF3/c6iyGDWCu079fehX1IH21LRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGY5enFMSVlOWUs3VHYxOTZGZlVnZmJVdEdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNzQ1NTMtMGI5My00YjQ3LWExNTQt M2E3OGEwOWZlNmZjLzEvWGY5enFMSVlOWUs3VHYxOTZGZlVnZmJVdEdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yNzQ1NTMtMGI5My00YjQ3LWExNTQtM2E3OGEwOWZlNmZj LzEvWGY5enFMSVlOWUs3VHYxOTZGZlVnZmJVdEdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2kbv6+9 Q0IQZAKtnjx69IwCVDphlBd48z+mlnOKwLf5rSnRWpGWY0dwziZ/lsPlURYdxeu3 HhL4kP/9PVD8XRIB5cgLb6VkOvjiMQ/apw2aESvNL4yNKssQ0+vLPv2SWgN2X5LR lAwtQ+hL/bRKGv2GW/NNuELy3A4VdEj4bI2GomtLaJ7ID2HPn8nAxANfo2EzbJIl dZIr1LNk4ysRTSWjqdkWnZSriUgg2YkPZ1ysdONwTvSTTFPhterMhB2Al+6A+M3Z QNBgUI2AFYSOyq7dkIbVNE4xhKDddi+QrkXcNyygkvGn25tW4mGKdcVcoPRa7hnd pegwFwscOc6nyw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:00 2025 by rpki-client