This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json) Hash identifier: ORi0eizX6s2BXI6kpkVIu37rJGqYmu+bIIlN7nJdOC4= Subject key identifier: 21:5C:7A:6F:0F:87:33:D0:CD:B4:4C:9F:D1:7D:F3:68:4B:8B:92:A6 Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29 Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729 Certificate serial: 019AF2AD9EAA4C67D9E7D865B898E9AEEC0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft Manifest number: 0FC8 Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: B5IPw2to02EUzOiZAkDMZAMJU40.roa (hash: SqPGfdHaKQmJHjb0Md5WPKQZqfqDkbS8MZiJDiQQgE0=) 2: QhPm8U1brOIqGs2lZ2LGdcxBiLA.roa (hash: b6IzZ0v53J6OJOZBPLixdFrIPoMrdc5UH4inFHWFRvM=) 3: kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa (hash: g3QlMNFCFIgPt5yC/cat7+5gVwDPl1ap/dvIpROnsyw=) 4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: kZ7fSGSImIiaFt7jja2gTNeypUFBc8tdWxEJMtYhTZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9e:aa:4c:67:d9:e7:d8:65:b8:98:e9:ae:ec:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729 Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=215c7a6f0f8733d0cdb44c9fd17df3684b8b92a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cf:9f:e1:a4:b6:38:27:2e:3b:5e:7a:f0:70: 73:7d:e1:69:03:15:45:04:87:ac:51:e9:5a:ee:da: 87:64:e7:a2:ac:74:9e:d3:0a:ac:77:39:9f:7b:a9: e2:64:5f:93:80:e8:b1:8c:1c:22:cc:3f:0e:04:d3: 46:19:ea:b9:95:e0:3f:0c:70:35:94:00:9a:49:01: 12:e4:38:95:73:6d:b9:e6:73:66:1b:47:19:08:44: ef:71:ce:45:f0:b9:28:b5:20:71:ab:47:bb:aa:51: 97:9e:bd:21:f5:3a:fa:3f:42:89:55:19:a6:e2:af: 39:cd:ff:4b:dd:91:23:b5:35:a1:2e:3e:91:9c:c0: 0b:a2:b9:41:29:83:7f:50:c8:be:21:94:7f:44:7d: 63:88:8d:b2:6e:ef:f0:21:c8:3b:1e:36:b8:2a:09: 01:6a:c4:9c:ae:69:d0:b0:78:b2:4f:e3:4a:82:d4: e2:dc:4a:7c:9a:f5:e6:8c:c7:77:fe:42:44:1d:5c: b2:5b:4a:7e:c6:84:60:41:95:d3:db:01:aa:50:14: 25:5a:a1:25:0b:36:1a:f9:94:b0:84:56:66:ed:c3: df:56:51:6a:e0:49:ff:45:df:12:bd:09:7a:bb:06: 54:8b:58:71:6d:e7:9a:8d:0b:a6:b2:e8:1d:73:4d: a6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5C:7A:6F:0F:87:33:D0:CD:B4:4C:9F:D1:7D:F3:68:4B:8B:92:A6 X509v3 Authority Key Identifier: keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9f:eb:ab:70:9f:af:41:56:c4:e7:9d:ea:57:64:d7:01:a6: 38:13:3b:4d:e6:ad:c9:bc:9d:28:99:79:8e:68:f2:ab:c8:69: 51:19:8b:05:fc:9f:58:f1:89:c4:bd:bf:00:ac:9a:3e:47:bc: 7c:80:fd:a9:34:1d:06:2c:73:c2:42:03:3a:85:50:d5:95:e3: c8:2f:5f:e9:56:3d:fb:25:e6:d2:b5:b7:9a:84:48:82:3b:44: 55:f2:02:fb:04:1f:c4:99:3b:1e:e8:ec:13:15:42:40:67:84: b0:34:ae:97:58:af:1d:40:2a:4b:64:c9:bd:cd:fd:b4:eb:ca: af:a7:00:a5:aa:5f:49:53:fa:fc:74:0e:b2:93:ef:22:90:16: a5:a1:94:33:91:ad:d7:08:87:51:5e:01:d8:5d:93:ea:a9:bc: 06:22:c9:58:cf:41:e9:8c:92:ab:11:ef:6b:d8:c2:3e:e0:27: 5f:8b:bf:0b:ca:2a:ee:3c:95:54:32:07:61:71:26:d4:e9:f7: cd:20:9c:22:50:82:c5:ac:6e:2b:40:98:86:c5:55:0a:0c:2a: ce:1f:30:b4:ee:d5:95:a5:5d:02:08:33:51:ee:6f:b5:91:72: 6d:cc:7c:e6:bf:d5:17:35:00:30:b7:4d:32:aa:5b:4f:c7:6b: 79:b9:2d:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZ6qTGfZ59hluJjpruwNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MmE1MjRmOWIxYjM4MDFkYmQ3Yzg5YTE2MGFlYzA3NmI1 N2U3MjkwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD EygyMTVjN2E2ZjBmODczM2QwY2RiNDRjOWZkMTdkZjM2ODRiOGI5MmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8+f4aS2OCcuO1568HBzfeFpAxVF BIesUela7tqHZOeirHSe0wqsdzmfe6niZF+TgOixjBwizD8OBNNGGeq5leA/DHA1 lACaSQES5DiVc2255nNmG0cZCETvcc5F8LkotSBxq0e7qlGXnr0h9Tr6P0KJVRmm 4q85zf9L3ZEjtTWhLj6RnMALorlBKYN/UMi+IZR/RH1jiI2ybu/wIcg7Hja4KgkB asScrmnQsHiyT+NKgtTi3Ep8mvXmjMd3/kJEHVyyW0p+xoRgQZXT2wGqUBQlWqEl CzYa+ZSwhFZm7cPfVlFq4En/Rd8SvQl6uwZUi1hxbeeajQumsugdc02m7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFcem8PhzPQzbRMn9F982hLi5KmMB8GA1UdIwQY MBaAFMcqUk+bGzgB29fImhYK7AdrV+cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYt ZDdhNjg0YTU3YjE5LzEveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My80ZTNjYzItMWEzMy00OTVhLTk5OWYtZDdhNjg0YTU3YjE5 LzEveHlwU1Q1c2JPQUhiMThpYUZncnNCMnRYNXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOp/rq3Cf r0FWxOed6ldk1wGmOBM7TeatybydKJl5jmjyq8hpURmLBfyfWPGJxL2/AKyaPke8 fID9qTQdBixzwkIDOoVQ1ZXjyC9f6VY9+yXm0rW3moRIgjtEVfIC+wQfxJk7Hujs ExVCQGeEsDSul1ivHUAqS2TJvc39tOvKr6cApapfSVP6/HQOspPvIpAWpaGUM5Gt 1wiHUV4B2F2T6qm8BiLJWM9B6YySqxHva9jCPuAnX4u/C8oq7jyVVDIHYXEm1On3 zSCcIlCCxaxuK0CYhsVVCgwqzh8wtO7VlaVdAggzUe5vtZFybcx85r/VFzUAMLdN MqpbT8drebktTw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:03 2025 by rpki-client