This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json) Hash identifier: U6Iys9lzGyN2F8ULOZxCJmTcfiPoJ2HPgZsgD5jCnn4= Subject key identifier: C1:E7:FA:0E:5D:44:50:54:B3:4C:39:9C:D1:39:47:41:E9:07:95:05 Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d Certificate serial: 019AF163D7F095B66EB50BFE6E2237275C16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft Manifest number: 11BB Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: a7Kyb819G1my9vv1qL1RuS7JLrclmLjtE6kT4SrNabY=) 2: wqBO6BWlzfH_2H8niSBLpjOhxuU.roa (hash: 5SSaQkHwuEWAOjr3+WUmjpF1re5YywGBgiTcg/L5BcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d7:f0:95:b6:6e:b5:0b:fe:6e:22:37:27:5c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=c1e7fa0e5d445054b34c399cd1394741e9079505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:a6:e7:2a:0b:32:4a:f7:74:2a:22:41:5c: aa:d1:bd:b6:e4:93:a3:81:76:61:e4:9e:1c:4e:0f: 1e:93:e3:2d:fb:be:41:b8:ce:b9:df:83:3a:49:2d: d1:fa:c8:0c:2b:87:30:c3:fd:7b:bf:83:cb:46:1c: b2:9d:78:74:7b:ed:fd:81:71:6e:a6:37:88:12:4c: f6:0e:6b:4a:0e:79:f7:81:a9:b3:45:f5:ed:e6:58: 79:66:17:45:cb:4f:90:bb:68:85:a4:f8:b2:6e:73: 71:e3:a6:70:52:e8:af:61:4b:13:9c:2e:dc:55:b2: 9f:88:18:2c:bd:a4:69:b2:16:63:ff:69:ed:16:65: 03:dc:ac:bd:2a:0d:e2:12:a0:c0:95:98:eb:bf:2e: ee:e8:86:cb:b4:eb:f9:6f:69:2d:f3:2f:94:a4:c8: 49:35:bf:13:69:23:65:1b:b3:cc:b0:6a:39:39:9c: 42:a5:b0:d4:5c:1f:60:b3:92:eb:7b:9f:4b:7b:93: fd:67:15:2a:69:cf:0a:c0:3a:1a:48:69:41:fa:56: 44:6e:d8:2f:57:e3:52:21:c0:5e:3b:9a:26:36:9e: 7f:09:b3:63:83:f9:c6:d6:44:f4:9d:7c:49:30:61: 31:b3:5a:7a:aa:e2:4f:ab:d4:bd:35:0b:e4:ae:e8: 30:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E7:FA:0E:5D:44:50:54:B3:4C:39:9C:D1:39:47:41:E9:07:95:05 X509v3 Authority Key Identifier: keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:a3:a8:c3:25:73:a5:7d:6d:ce:46:64:22:7b:bd:b9:eb: 6e:15:f1:a6:17:c6:8f:f1:f8:be:5e:f2:8a:a0:0f:56:4a:ca: 6b:9e:21:d3:65:40:8d:77:b5:25:52:2b:e0:a2:74:ca:7b:ad: 4c:39:24:6e:83:36:4e:5c:8b:65:ba:ba:73:f6:a3:4d:12:20: 29:a2:14:0b:0b:c4:b6:92:c9:23:67:38:3f:61:15:28:d1:40: de:aa:b0:7d:80:5d:f3:be:ba:c1:8b:2b:4c:ab:8c:84:8e:66: 80:54:15:73:dc:49:22:46:cb:ee:e9:bd:d3:f5:49:b3:39:f8: d0:06:79:1e:68:02:ed:12:5e:a4:6e:93:7d:8f:fd:46:a8:6f: cf:8a:8b:f4:be:cd:c8:77:d0:e6:c6:d5:22:83:c7:57:4c:ca: 78:c2:77:d2:52:5f:31:31:6c:91:e5:fc:ca:24:05:da:9f:6f: 98:7f:b4:9f:2d:d9:4b:22:18:e9:49:5b:da:b7:85:24:95:63: a2:9a:d3:0d:8f:8f:c4:bd:75:e4:b8:60:99:f2:c7:33:eb:64: 04:6a:08:dd:a2:60:55:fe:8a:89:9a:da:0a:83:9e:77:f3:0e: c6:a0:5e:2a:2c:f4:8d:6d:c6:69:fd:23:74:6a:b1:55:12:5e: 8e:0a:7c:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9fwlbZutQv+biI3J1wWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTVhYzNiYmEyNjA1MzhjMzMzZTZjODYwZjIzNjAxMmM5 ODY3NWQwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD EyhjMWU3ZmEwZTVkNDQ1MDU0YjM0YzM5OWNkMTM5NDc0MWU5MDc5NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc2m5yoLMkr3dCoiQVyq0b225JOj gXZh5J4cTg8ek+Mt+75BuM6534M6SS3R+sgMK4cww/17v4PLRhyynXh0e+39gXFu pjeIEkz2DmtKDnn3gamzRfXt5lh5ZhdFy0+Qu2iFpPiybnNx46ZwUuivYUsTnC7c VbKfiBgsvaRpshZj/2ntFmUD3Ky9Kg3iEqDAlZjrvy7u6IbLtOv5b2kt8y+UpMhJ Nb8TaSNlG7PMsGo5OZxCpbDUXB9gs5Lre59Le5P9ZxUqac8KwDoaSGlB+lZEbtgv V+NSIcBeO5omNp5/CbNjg/nG1kT0nXxJMGExs1p6quJPq9S9NQvkrugwjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHn+g5dRFBUs0w5nNE5R0HpB5UFMB8GA1UdIwQY MBaAFF2lrDu6JgU4wzPmyGDyNgEsmGddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFXc083b21CVGpETS1iSVlQSTJBU3lZWjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kYWZlZjgtZTIyNy00MmQzLTgwN2Yt YmU4MTBhMDUwOTQ0LzEvWGFXc083b21CVGpETS1iSVlQSTJBU3lZWjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9kYWZlZjgtZTIyNy00MmQzLTgwN2YtYmU4MTBhMDUwOTQ0 LzEvWGFXc083b21CVGpETS1iSVlQSTJBU3lZWjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckGjqMMl c6V9bc5GZCJ7vbnrbhXxphfGj/H4vl7yiqAPVkrKa54h02VAjXe1JVIr4KJ0ynut TDkkboM2TlyLZbq6c/ajTRIgKaIUCwvEtpLJI2c4P2EVKNFA3qqwfYBd8766wYsr TKuMhI5mgFQVc9xJIkbL7um90/VJszn40AZ5HmgC7RJepG6TfY/9Rqhvz4qL9L7N yHfQ5sbVIoPHV0zKeMJ30lJfMTFskeX8yiQF2p9vmH+0ny3ZSyIY6Ulb2reFJJVj oprTDY+PxL115LhgmfLHM+tkBGoI3aJgVf6KiZraCoOed/MOxqBeKiz0jW3Gaf0j dGqxVRJejgp8/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:01 2025 by rpki-client