This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json) Hash identifier: aMMyWg0copZTpT0hS8niNkRDf/ayuoKwZhqg++nlvO8= Subject key identifier: 5D:C8:31:FB:AB:41:2D:7C:DD:C6:4A:34:3B:CE:0F:A9:42:C3:8C:50 Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99 Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99 Certificate serial: 019AF68A39723C4A6E6B731CD9F5FB69368C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft Manifest number: 1682 Signing time: Sun 07 Dec 2025 02:00:45 +0000 Manifest this update: Sun 07 Dec 2025 02:00:45 +0000 Manifest next update: Mon 08 Dec 2025 02:00:45 +0000 Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=) 2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: 1Zf+RWUokwNh4S2RZ11oC5SZtgTMg8b+w6mpNzjJPB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:39:72:3c:4a:6e:6b:73:1c:d9:f5:fb:69:36:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99 Validity Not Before: Dec 7 02:00:45 2025 GMT Not After : Dec 8 02:00:45 2025 GMT Subject: CN=5dc831fbab412d7cddc64a343bce0fa942c38c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:3f:fc:65:a5:3c:26:da:0d:2a:63:c2:5b: d6:24:8c:b0:b5:17:7e:0a:8e:e3:f3:19:0a:11:54: 54:35:20:48:65:bc:e0:74:ab:75:c7:e0:cc:20:ba: fe:16:5a:2f:15:31:52:8b:fd:ae:21:72:e7:b4:67: bd:f8:01:d9:f5:cf:ea:dd:a3:fe:2b:2b:a3:17:23: 27:78:60:23:b2:d6:76:ef:24:a4:7c:47:b8:02:d7: 15:d0:69:90:0a:f2:df:b7:4a:f8:3e:d5:f0:aa:97: a2:f0:11:c9:6c:ab:54:4f:ff:da:c8:ab:2b:62:2a: 47:c5:90:ee:04:32:5f:c9:26:f6:e0:26:8e:ba:8c: 59:0d:8d:c1:ca:a8:2f:d3:82:50:84:1f:7f:07:63: f9:be:a4:06:10:a8:e4:d2:bb:e0:93:ae:51:9d:45: 60:8d:84:de:35:29:69:fc:af:c1:2f:fd:6b:b9:f9: d7:ab:e0:4e:5f:09:7c:99:00:ca:6f:dc:e3:5e:97: 59:cc:d8:e3:07:36:4a:7d:36:98:79:06:8f:b2:a7: 35:ef:09:23:4c:f7:0a:02:af:1e:19:ab:ac:2b:e2: 0f:0c:c9:9b:89:57:2e:4c:77:9e:e5:91:82:41:53: dc:b5:76:e4:6e:87:1b:5e:b8:08:16:aa:fc:7d:c9: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C8:31:FB:AB:41:2D:7C:DD:C6:4A:34:3B:CE:0F:A9:42:C3:8C:50 X509v3 Authority Key Identifier: keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2e:4b:21:97:b1:c4:61:1e:59:b8:9f:9d:b9:21:5d:f0:1b: 08:56:bb:cb:36:6d:d2:dd:85:b2:5e:5a:9d:41:52:62:5b:b1: 05:f4:7d:b8:19:8d:da:3e:65:1d:14:1a:bc:d1:8a:94:85:a9: 3f:66:a2:ba:d4:01:a9:88:dd:ea:15:db:67:85:72:c4:94:b2: 2b:ef:05:99:7d:80:de:84:e2:46:f1:db:54:c0:b0:ed:15:c2: 93:80:73:5d:a3:8e:58:7a:bb:69:c9:e9:1e:53:cd:3e:eb:72: 4e:2e:37:d0:0e:71:0f:cc:2c:a9:91:00:95:ef:36:6c:6e:7a: 16:1e:6a:a1:ee:f8:db:72:81:51:d1:29:17:e4:bf:b0:83:6c: 07:84:bd:f7:1f:52:e2:e0:dd:78:09:60:90:b2:30:5d:a2:09: 49:0f:9f:6a:f7:54:ea:e7:51:2a:86:87:2d:6c:81:dc:39:25: 76:71:33:c3:f8:98:ed:1e:f1:ef:69:ac:71:f4:64:bc:73:f9: 3e:d1:16:0d:70:4c:8c:18:a4:77:51:9e:eb:ed:f6:a8:e8:1a: 01:d0:9a:8d:62:a9:86:b3:82:75:00:fc:a5:42:da:8d:f3:af: 6c:f3:e4:8b:6d:0d:0f:6b:3a:9d:d1:c8:9c:c5:c1:72:d4:c9: 10:f6:c8:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ijlyPEpua3Mc2fX7aTaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2I0Y2YwYTc0NzFmMDAwZjhhNTZhMDQ5YjE2Mzk2N2Nj M2JkOTkwHhcNMjUxMjA3MDIwMDQ1WhcNMjUxMjA4MDIwMDQ1WjAzMTEwLwYDVQQD Eyg1ZGM4MzFmYmFiNDEyZDdjZGRjNjRhMzQzYmNlMGZhOTQyYzM4YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPQ//GWlPCbaDSpjwlvWJIywtRd+ Co7j8xkKEVRUNSBIZbzgdKt1x+DMILr+FlovFTFSi/2uIXLntGe9+AHZ9c/q3aP+ KyujFyMneGAjstZ27ySkfEe4AtcV0GmQCvLft0r4PtXwqpei8BHJbKtUT//ayKsr YipHxZDuBDJfySb24CaOuoxZDY3Byqgv04JQhB9/B2P5vqQGEKjk0rvgk65RnUVg jYTeNSlp/K/BL/1rufnXq+BOXwl8mQDKb9zjXpdZzNjjBzZKfTaYeQaPsqc17wkj TPcKAq8eGausK+IPDMmbiVcuTHee5ZGCQVPctXbkbocbXrgIFqr8fcm+3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3IMfurQS183cZKNDvOD6lCw4xQMB8GA1UdIwQY MBaAFMU7TPCnRx8AD4pWoEmxY5Z8w72ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFR0TThLZEhId0FQaWxhZ1NiRmpsbnpEdlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iYjJiNzUtYmMwMi00YTZiLTk4ZDYt ZDg0ZTZkM2FmOTc1LzEveFR0TThLZEhId0FQaWxhZ1NiRmpsbnpEdlprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iYjJiNzUtYmMwMi00YTZiLTk4ZDYtZDg0ZTZkM2FmOTc1 LzEveFR0TThLZEhId0FQaWxhZ1NiRmpsbnpEdlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi5LIZex xGEeWbifnbkhXfAbCFa7yzZt0t2Fsl5anUFSYluxBfR9uBmN2j5lHRQavNGKlIWp P2aiutQBqYjd6hXbZ4VyxJSyK+8FmX2A3oTiRvHbVMCw7RXCk4BzXaOOWHq7acnp HlPNPutyTi430A5xD8wsqZEAle82bG56Fh5qoe7423KBUdEpF+S/sINsB4S99x9S 4uDdeAlgkLIwXaIJSQ+favdU6udRKoaHLWyB3DkldnEzw/iY7R7x72mscfRkvHP5 PtEWDXBMjBikd1Ge6+32qOgaAdCajWKphrOCdQD8pULajfOvbPPki20ND2s6ndHI nMXBctTJEPbIxA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:33 2025 by rpki-client