This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft File: XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json) Hash identifier: t/0utd61ru02Zdh2nd8u44fbUoRuQI9DpaHdBRyBmF4= Subject key identifier: 2E:27:58:55:BD:67:E3:6C:CE:12:29:BE:86:95:5F:ED:A3:E5:E7:5E Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41 Certificate issuer: /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41 Certificate serial: 019AF2765D07E55B4E2A07F04272C29409FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:34 +0000 Manifest this update: Sat 06 Dec 2025 07:00:34 +0000 Manifest next update: Sun 07 Dec 2025 07:00:34 +0000 Files and hashes: 1: 1FlLRIIYGSU2lD9s6BElZ_82OMk.roa (hash: Q5lYF3Ib2nrKiWVSyeewvimy0dKCeaCp7d/phtTC4tU=) 2: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: SXKLBr7c2Eh1vk77ppVhKZM7s2JXWNXd7JwDshgR6mE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5d:07:e5:5b:4e:2a:07:f0:42:72:c2:94:09:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41 Validity Not Before: Dec 6 07:00:34 2025 GMT Not After : Dec 7 07:00:34 2025 GMT Subject: CN=2e275855bd67e36cce1229be86955feda3e5e75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e6:4d:8d:93:9a:5c:17:7d:dc:b3:16:46:f2: d4:8b:7d:66:f7:d0:0f:d5:c9:03:3f:cf:ab:e5:11: e9:0a:e6:3d:7c:63:d3:0e:0f:c2:da:98:29:4a:25: bc:20:60:9c:2a:22:c2:77:3e:22:cb:2e:52:9a:42: bc:e7:c7:cc:77:ae:d1:a1:9a:2e:50:6d:16:9e:af: 0c:de:ad:f1:a0:4c:f7:30:b1:61:c5:3b:8d:81:de: 0c:55:74:a7:ce:df:6d:11:fa:ce:d1:cf:d5:7b:b4: 8e:f1:c9:8c:74:52:ee:68:d1:9f:6e:46:43:9b:71: 69:ff:4d:9d:bb:59:7e:f0:25:2f:ec:7f:4e:7f:28: cc:cd:bd:57:5f:3c:68:81:75:11:0a:a4:10:a1:fe: bc:bf:2f:50:f7:07:dc:b9:2c:c7:9e:69:3f:02:12: bb:a6:a1:e7:53:7e:df:28:1d:0f:76:6d:b7:55:b5: d3:23:88:7c:21:08:a1:33:ee:0e:d0:ba:a3:af:84: 06:cf:c3:6e:9d:4b:b4:71:93:3d:96:82:f4:31:1f: 93:43:52:25:76:cf:52:3e:38:97:47:bd:8d:ae:9b: 5c:2b:fd:8d:87:8b:6e:bb:2b:4b:d7:3c:0d:d9:b9: db:18:ad:6e:3b:de:28:c3:0a:0e:e8:14:24:01:87: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:27:58:55:BD:67:E3:6C:CE:12:29:BE:86:95:5F:ED:A3:E5:E7:5E X509v3 Authority Key Identifier: keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c5:bc:38:d9:f6:6c:ed:4c:3d:a1:97:ca:ec:70:dd:46:34: 31:4e:5a:f9:49:9e:ad:29:42:fa:21:fb:b8:97:4b:3b:6d:ff: 8c:91:cd:2c:cd:e7:01:c7:71:37:10:f7:e7:71:40:ad:f3:3a: 08:96:49:bb:5e:64:d2:a3:10:a8:00:10:e4:e5:6a:ac:ec:01: fa:42:30:aa:5b:64:bf:b6:41:c0:2f:0f:34:df:0b:7b:f5:40: 60:b6:25:4a:ff:5f:55:49:73:7d:9d:c4:b7:1c:1d:51:2f:a1: 99:ef:51:b9:a0:b3:a9:97:29:fd:6f:42:94:dc:a0:5c:f5:80: 2e:0b:a2:79:3a:00:97:4f:6e:ef:4f:20:d1:58:32:1c:a3:ca: 4c:48:3f:bd:42:9a:7e:6e:36:f7:b0:86:1f:4c:86:aa:82:02: a1:01:1e:e7:9d:51:c5:bc:12:ed:2f:9a:3f:8a:af:5d:a1:76: 75:b6:3e:ad:aa:2c:fe:92:bc:88:75:53:27:81:be:db:ad:ae: 59:a7:ba:a5:79:44:5c:1c:cf:e7:b4:5c:6b:68:51:93:9b:51: a4:bc:56:25:50:89:e0:0a:fb:2e:1b:cc:01:80:e0:63:57:38: a6:6c:c5:26:13:8d:c8:9d:52:9a:c7:dc:90:a9:b7:70:df:41: 16:95:28:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydl0H5VtOKgfwQnLClAn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTdiMDUwNTUzYzhlZTllMDVhYjRjMzdmZDk3ZDI4MjEy MTZiNDEwHhcNMjUxMjA2MDcwMDM0WhcNMjUxMjA3MDcwMDM0WjAzMTEwLwYDVQQD EygyZTI3NTg1NWJkNjdlMzZjY2UxMjI5YmU4Njk1NWZlZGEzZTVlNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eZNjZOaXBd93LMWRvLUi31m99AP 1ckDP8+r5RHpCuY9fGPTDg/C2pgpSiW8IGCcKiLCdz4iyy5SmkK858fMd67RoZou UG0Wnq8M3q3xoEz3MLFhxTuNgd4MVXSnzt9tEfrO0c/Ve7SO8cmMdFLuaNGfbkZD m3Fp/02du1l+8CUv7H9OfyjMzb1XXzxogXURCqQQof68vy9Q9wfcuSzHnmk/AhK7 pqHnU37fKB0Pdm23VbXTI4h8IQihM+4O0Lqjr4QGz8NunUu0cZM9loL0MR+TQ1Il ds9SPjiXR72NrptcK/2Nh4tuuytL1zwN2bnbGK1uO94owwoO6BQkAYeWCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4nWFW9Z+NszhIpvoaVX+2j5edeMB8GA1UdIwQY MBaAFF2nsFBVPI7p4Fq0w3/ZfSghIWtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDct ZjJjNmFjOTY4YzgwLzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDctZjJjNmFjOTY4Yzgw LzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8W8ONn2 bO1MPaGXyuxw3UY0MU5a+UmerSlC+iH7uJdLO23/jJHNLM3nAcdxNxD353FArfM6 CJZJu15k0qMQqAAQ5OVqrOwB+kIwqltkv7ZBwC8PNN8Le/VAYLYlSv9fVUlzfZ3E txwdUS+hme9RuaCzqZcp/W9ClNygXPWALguieToAl09u708g0VgyHKPKTEg/vUKa fm4297CGH0yGqoICoQEe551RxbwS7S+aP4qvXaF2dbY+raos/pK8iHVTJ4G+262u Wae6pXlEXBzP57Rca2hRk5tRpLxWJVCJ4Ar7LhvMAYDgY1c4pmzFJhONyJ1Smsfc kKm3cN9BFpUolQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:23 2025 by rpki-client