This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json) Hash identifier: 7TJ6uwuGkwwU2y8XRkrdRqOuDz50Aa77f81NnTERy8s= Subject key identifier: 21:3B:BB:18:90:26:16:3D:73:DD:B3:90:FA:62:4A:F5:39:A0:32:6D Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51 Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251 Certificate serial: 019AF208E3D23581E074B858B4D8734621E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=) 2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: aDb1kW4dU2GzuCAansb6nrk1urkginHBJcOcGQ1b1lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e3:d2:35:81:e0:74:b8:58:b4:d8:73:46:21:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=213bbb189026163d73ddb390fa624af539a0326d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:7e:e0:e0:1f:e5:1c:20:69:30:47:43:64: 1d:1a:11:8e:c4:93:d1:37:bd:46:7f:44:ce:2e:94: 2f:27:fa:a6:4d:00:b5:d8:0b:0c:ad:59:c0:ba:eb: 36:ef:ad:ad:13:77:96:57:51:5d:b6:7a:c8:02:b5: 37:89:e7:d5:39:9b:07:a8:2e:76:a7:82:4a:71:8c: 05:19:97:13:58:c6:53:84:6a:9d:87:1b:18:f5:b0: 8d:63:0c:5c:2e:8f:56:93:b0:b8:e8:7c:a5:89:03: 01:78:1c:e4:e2:85:48:fe:4f:cc:6b:97:53:95:3d: dd:ca:8c:fb:65:18:63:c9:3d:20:b3:67:16:83:13: ff:25:31:c9:26:9a:39:a8:19:51:ae:b6:3d:50:db: c3:f9:f3:90:6b:d3:0e:ad:38:d3:b5:2d:93:83:42: 5e:c6:6b:59:3d:8f:77:4d:b4:b9:09:29:1d:f1:94: 77:a5:a7:9b:b6:ab:5c:68:10:9d:ac:15:2d:dd:be: e5:59:09:81:d2:ec:34:a0:91:ef:2b:43:36:2d:cd: f6:b9:f9:b9:55:f5:d1:57:2b:b8:01:62:7f:e7:07: 51:43:21:37:70:e5:89:00:fa:8a:2f:05:28:d1:af: 79:33:2c:a2:e6:94:88:65:ef:c8:30:e4:fe:62:37: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3B:BB:18:90:26:16:3D:73:DD:B3:90:FA:62:4A:F5:39:A0:32:6D X509v3 Authority Key Identifier: keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f2:d6:47:cf:20:40:80:d2:d0:b2:74:22:b5:01:11:a2:8e: a1:df:e3:97:38:da:78:bb:0b:ed:30:52:d0:79:1e:b3:8a:ae: 49:c8:b8:b9:82:03:ea:57:97:36:a5:06:ee:1b:d9:bd:6d:f7: ad:a9:d2:a7:cd:28:73:85:33:34:1b:94:7c:64:b4:e6:32:07: 4a:a1:70:13:a4:60:e5:bc:d7:d4:30:e3:78:18:45:f1:cb:57: 45:a6:c9:52:92:03:86:cd:92:22:6b:ce:53:74:80:68:0a:a7: d0:ab:29:f1:3a:d6:73:78:16:03:71:e2:6e:b8:f5:81:79:be: e5:24:9e:d0:46:4a:97:37:ef:37:4a:9e:4a:8b:04:1a:21:9c: 91:5c:cb:70:d0:c7:6e:d0:8d:59:1b:28:e2:a5:2a:c0:7c:8c: 8d:e5:88:5c:5f:ad:8b:16:1f:75:8a:fd:23:4d:70:26:49:d8: 70:78:02:78:99:92:c0:13:c0:e6:5b:06:67:46:0b:04:d2:82: 62:bc:28:2e:7c:08:63:ce:78:b6:9e:13:56:96:8d:05:16:15: f9:d1:56:59:b3:dc:42:07:1b:c9:0e:4e:e1:ee:d0:01:99:1a: fa:e8:7c:2a:a4:55:46:33:72:1b:ea:35:e5:b3:d3:18:e2:b3: 39:8d:50:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOPSNYHgdLhYtNhzRiHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NjNjMzQ2MDNhOTQ2OTUyZmYyNzZlMGEyNWZkMzYxZmNh Y2YyNTEwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EygyMTNiYmIxODkwMjYxNjNkNzNkZGIzOTBmYTYyNGFmNTM5YTAzMjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstt+4OAf5RwgaTBHQ2QdGhGOxJPR N71Gf0TOLpQvJ/qmTQC12AsMrVnAuus2762tE3eWV1FdtnrIArU3iefVOZsHqC52 p4JKcYwFGZcTWMZThGqdhxsY9bCNYwxcLo9Wk7C46HyliQMBeBzk4oVI/k/Ma5dT lT3dyoz7ZRhjyT0gs2cWgxP/JTHJJpo5qBlRrrY9UNvD+fOQa9MOrTjTtS2Tg0Je xmtZPY93TbS5CSkd8ZR3paebtqtcaBCdrBUt3b7lWQmB0uw0oJHvK0M2Lc32ufm5 VfXRVyu4AWJ/5wdRQyE3cOWJAPqKLwUo0a95Myyi5pSIZe/IMOT+YjcfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE7uxiQJhY9c92zkPpiSvU5oDJtMB8GA1UdIwQY MBaAFMRjw0YDqUaVL/J24KJf02H8rPJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUt MDA2NDIwZTQzNDRkLzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUtMDA2NDIwZTQzNDRk LzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefLWR88g QIDS0LJ0IrUBEaKOod/jlzjaeLsL7TBS0Hkes4quSci4uYID6leXNqUG7hvZvW33 ranSp80oc4UzNBuUfGS05jIHSqFwE6Rg5bzX1DDjeBhF8ctXRabJUpIDhs2SImvO U3SAaAqn0Ksp8TrWc3gWA3Hibrj1gXm+5SSe0EZKlzfvN0qeSosEGiGckVzLcNDH btCNWRso4qUqwHyMjeWIXF+tixYfdYr9I01wJknYcHgCeJmSwBPA5lsGZ0YLBNKC YrwoLnwIY854tp4TVpaNBRYV+dFWWbPcQgcbyQ5O4e7QAZka+uh8KqRVRjNyG+o1 5bPTGOKzOY1QMw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:56 2025 by rpki-client