This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft File: XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json) Hash identifier: CMUgSzwQtw0QTsuSg0b6yQoBKGakxe9LjrSj6BX8YfA= Subject key identifier: C1:56:D4:0D:06:7F:4C:8B:D9:C0:7B:92:8E:9F:A6:E2:36:E9:2F:E4 Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Certificate serial: 019AF209A2DF402EDFAEB89B29B78440ACC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft Manifest number: 05A2 Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=) 2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=) 3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: 4qb8UETcSuOKEpsRoLHeodxSxBtR6+EJqK8oDeyIfJY=) 4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=) 5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a2:df:40:2e:df:ae:b8:9b:29:b7:84:40:ac:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=c156d40d067f4c8bd9c07b928e9fa6e236e92fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:87:55:86:53:4c:9c:7e:e0:81:bc:d8:44: 82:6e:60:6c:0e:19:b2:6d:98:3b:d5:15:89:e5:94: 58:fe:b3:e5:51:b4:76:cf:ed:62:98:fb:f3:d0:d3: 34:0f:1a:25:d0:09:b9:e0:8d:fe:34:46:84:a4:2d: 66:58:01:ec:8e:e5:23:b9:53:58:6a:43:f2:7a:40: 78:b9:4e:10:28:69:85:36:58:00:3a:3e:5f:ec:47: 4d:27:e6:bb:24:d7:64:d2:07:ff:0c:31:a1:27:b2: 99:45:3b:c8:30:64:a5:a9:1e:44:ce:c7:b2:3d:9a: d5:69:76:41:29:ee:d3:2d:11:db:a2:1a:00:5d:78: 02:89:79:db:4f:99:2d:27:fb:57:01:4b:b3:18:f2: 1c:de:97:cd:b8:49:f0:a0:4e:44:4d:7b:b4:5e:0f: ce:d3:1e:43:9a:9f:3a:69:ec:83:09:e6:2d:ba:df: fc:ca:6d:a1:2e:c4:0e:42:32:26:12:22:c4:b4:5f: d5:34:5f:89:68:40:2c:e4:a1:00:df:df:bd:18:a2: f0:a1:d2:29:c8:a1:08:f7:3e:1d:2b:06:e3:3b:5c: c2:92:3d:17:da:77:a0:aa:9e:5f:41:aa:99:c0:99: af:3b:4b:95:f9:fe:fa:df:fc:87:27:08:5d:c3:49: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:56:D4:0D:06:7F:4C:8B:D9:C0:7B:92:8E:9F:A6:E2:36:E9:2F:E4 X509v3 Authority Key Identifier: keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:25:0d:38:ec:ca:d7:16:f4:c8:5b:f6:9e:a6:b3:92:c1:2e: c7:49:25:bb:73:1d:0d:d4:1b:f8:95:c4:38:a5:ba:eb:95:ba: 74:67:d6:c9:0b:2d:28:5b:61:a0:51:c9:d3:a0:9d:8c:3c:59: c3:18:47:9a:a7:a4:4e:08:c6:5b:82:dd:82:37:94:e6:34:bb: 4e:7a:e7:79:36:bb:b1:8e:40:d6:53:c5:36:3f:d7:a6:4a:a5: 74:88:86:bc:52:d4:46:e7:4d:02:fc:7d:bf:31:30:e0:85:f1: 5f:61:ed:79:be:3c:3b:9f:d0:9a:e7:9e:3b:f3:f7:5c:4a:9e: 4d:77:36:55:c1:55:c3:9b:7a:ae:50:f7:0b:67:35:fc:46:c4: d4:9e:fa:44:2e:7f:a0:ab:7b:9f:d4:f9:d0:ca:4f:0b:7a:f5: 03:99:48:99:44:28:21:b3:82:8d:33:d5:0b:b4:a1:3d:1c:9f: f2:14:92:06:5d:4e:d4:a5:16:65:81:21:7b:1f:c6:cc:6c:52: 94:22:20:d8:b7:17:44:70:ee:c6:1f:dd:86:1f:db:5a:cf:e7: a9:6f:6d:2b:94:ec:30:25:73:3a:86:bd:61:8a:18:b6:8b:86: 6d:c6:58:71:78:27:9a:66:90:5a:7d:04:38:ef:cb:3b:48:14: be:87:37:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaLfQC7frribKbeEQKzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjM1MThmYWE5Yjk0YTQyZDFhM2I0ZDlmNjNiOTc0Mzk0 ZDA2NjIwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD EyhjMTU2ZDQwZDA2N2Y0YzhiZDljMDdiOTI4ZTlmYTZlMjM2ZTkyZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYiHVYZTTJx+4IG82ESCbmBsDhmy bZg71RWJ5ZRY/rPlUbR2z+1imPvz0NM0Dxol0Am54I3+NEaEpC1mWAHsjuUjuVNY akPyekB4uU4QKGmFNlgAOj5f7EdNJ+a7JNdk0gf/DDGhJ7KZRTvIMGSlqR5Ezsey PZrVaXZBKe7TLRHbohoAXXgCiXnbT5ktJ/tXAUuzGPIc3pfNuEnwoE5ETXu0Xg/O 0x5Dmp86aeyDCeYtut/8ym2hLsQOQjImEiLEtF/VNF+JaEAs5KEA39+9GKLwodIp yKEI9z4dKwbjO1zCkj0X2negqp5fQaqZwJmvO0uV+f763/yHJwhdw0lVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFW1A0Gf0yL2cB7ko6fpuI26S/kMB8GA1UdIwQY MBaAFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUt YTQ4YWMzMWRiYmYwLzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUtYTQ4YWMzMWRiYmYw LzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCUNOOzK 1xb0yFv2nqazksEux0klu3MdDdQb+JXEOKW665W6dGfWyQstKFthoFHJ06CdjDxZ wxhHmqekTgjGW4LdgjeU5jS7TnrneTa7sY5A1lPFNj/XpkqldIiGvFLURudNAvx9 vzEw4IXxX2Hteb48O5/QmueeO/P3XEqeTXc2VcFVw5t6rlD3C2c1/EbE1J76RC5/ oKt7n9T50MpPC3r1A5lImUQoIbOCjTPVC7ShPRyf8hSSBl1O1KUWZYEhex/GzGxS lCIg2LcXRHDuxh/dhh/bWs/nqW9tK5TsMCVzOoa9YYoYtouGbcZYcXgnmmaQWn0E OO/LO0gUvoc3gg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:32 2025 by rpki-client