This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft File: xAGmSD3G9mt4p6QRLVhz3FZkehk.mft (raw, json) Hash identifier: bn72jScWdpsQYJqwrfD+I0+q6zb6C8eP54Zc67DuRbA= Subject key identifier: 8E:E1:33:53:19:17:E7:EB:20:82:FE:C5:50:77:45:4F:F8:31:EC:D4 Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19 Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19 Certificate serial: 019AF208C4A3564BEC675236ED9196C0F802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft Manifest number: 0528 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: Vu1Wz44tBW3Recvb-qbKbp0p19Y.roa (hash: tPI+cxeowqV5RgJALeFjFG5FAryHW0I6Zz9wqBq7kIA=) 2: xAGmSD3G9mt4p6QRLVhz3FZkehk.crl (hash: OMl2IJFmKnzH+GoyKWsYEBbom9IrdoXT4+FdVplGvsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c4:a3:56:4b:ec:67:52:36:ed:91:96:c0:f8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=8ee133531917e7eb2082fec55077454ff831ecd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:91:a3:d3:9f:8f:d2:28:09:95:95:a1:c7: a7:ad:f7:88:38:3c:de:30:3a:7f:12:db:2b:cd:46: 35:74:59:23:2a:61:f7:c3:eb:b7:a7:0f:66:a8:5b: be:31:81:1b:a2:f7:25:f8:18:dc:de:df:c2:fa:db: 16:0a:3d:e7:d6:31:f7:0d:e3:af:6b:5f:a6:4a:13: 90:c5:b1:42:4c:fc:a0:3c:7a:be:11:98:63:19:01: b2:56:38:2d:22:61:99:a2:a7:6f:6e:98:80:e0:f5: ee:88:e4:5d:81:56:7a:c7:32:ad:3e:db:22:ec:36: 75:4e:b8:73:47:ac:07:c9:f8:c9:96:52:f0:68:5f: 46:f0:fd:45:ef:e4:c6:7b:cb:9d:2f:22:da:71:86: eb:e5:71:a6:d0:ef:c7:5f:a2:e5:6c:ed:92:4a:fb: a5:62:23:e0:67:67:6b:fe:78:7b:12:47:00:1b:b7: 8b:c1:73:13:c3:0c:bb:a8:49:18:b9:14:b1:01:a7: c2:41:20:c0:77:56:6a:53:17:90:0f:81:33:d5:d1: 21:f0:b0:1e:b1:d7:0a:41:14:1d:43:58:95:64:6f: 33:c2:29:cc:8e:84:33:d6:4c:90:7b:bc:73:e1:b1: 00:bd:95:49:af:67:fb:fe:86:29:7e:52:83:d8:76: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E1:33:53:19:17:E7:EB:20:82:FE:C5:50:77:45:4F:F8:31:EC:D4 X509v3 Authority Key Identifier: keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:60:6f:63:f7:ad:1d:38:40:88:c7:7f:81:42:c6:77:04:b7: 17:56:85:d1:4e:94:b3:d6:47:cd:47:66:91:17:7e:0d:88:58: b4:4b:d1:96:97:ca:5a:d2:59:8b:11:e1:db:4c:a5:12:b4:29: 68:1a:5e:66:3c:02:71:4a:1f:5d:c6:34:ec:e9:ac:9b:f9:33: a9:8d:4f:35:78:fd:4e:2b:57:65:57:db:97:09:e3:8b:16:fe: 51:f6:81:f8:7a:c9:fb:83:44:37:75:6f:19:61:f5:fa:5c:97: 27:75:8c:86:6c:d3:70:52:ce:34:56:16:31:e9:8d:e1:c0:1c: 57:86:6b:45:a1:fc:10:a4:a6:ef:d8:7b:96:86:4f:23:84:a6: 55:63:1d:b7:00:a8:59:b5:d1:07:05:4c:a1:c0:21:eb:79:0b: 8f:85:1b:d2:0b:f0:02:65:93:02:3c:2d:8e:2d:5f:85:51:28: 85:8f:96:78:fa:02:cb:63:a9:15:c9:fe:cd:6f:95:17:34:26: 6e:95:5b:b7:c5:71:3c:76:a2:46:52:f6:d8:7a:16:84:ed:98: 43:1b:49:1a:80:83:52:0b:a6:11:cf:57:93:a3:43:f3:f3:a9: fc:61:3a:66:eb:fc:7d:ef:a5:b1:9d:de:45:2d:8d:c0:2b:93: d1:a6:20:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMSjVkvsZ1I27ZGWwPgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDFhNjQ4M2RjNmY2NmI3OGE3YTQxMTJkNTg3M2RjNTY2 NDdhMTkwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD Eyg4ZWUxMzM1MzE5MTdlN2ViMjA4MmZlYzU1MDc3NDU0ZmY4MzFlY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RyRo9Ofj9IoCZWVocenrfeIODze MDp/EtsrzUY1dFkjKmH3w+u3pw9mqFu+MYEbovcl+Bjc3t/C+tsWCj3n1jH3DeOv a1+mShOQxbFCTPygPHq+EZhjGQGyVjgtImGZoqdvbpiA4PXuiORdgVZ6xzKtPtsi 7DZ1TrhzR6wHyfjJllLwaF9G8P1F7+TGe8udLyLacYbr5XGm0O/HX6LlbO2SSvul YiPgZ2dr/nh7EkcAG7eLwXMTwwy7qEkYuRSxAafCQSDAd1ZqUxeQD4Ez1dEh8LAe sdcKQRQdQ1iVZG8zwinMjoQz1kyQe7xz4bEAvZVJr2f7/oYpflKD2HZb2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7hM1MZF+frIIL+xVB3RU/4MezUMB8GA1UdIwQY MBaAFMQBpkg9xvZreKekES1Yc9xWZHoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YThhNjItZjU0YS00MTUwLWFkZGUt MTlkMzNlMDU1ODU3LzEveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82YThhNjItZjU0YS00MTUwLWFkZGUtMTlkMzNlMDU1ODU3 LzEveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWBvY/et HThAiMd/gULGdwS3F1aF0U6Us9ZHzUdmkRd+DYhYtEvRlpfKWtJZixHh20ylErQp aBpeZjwCcUofXcY07Omsm/kzqY1PNXj9TitXZVfblwnjixb+UfaB+HrJ+4NEN3Vv GWH1+lyXJ3WMhmzTcFLONFYWMemN4cAcV4ZrRaH8EKSm79h7loZPI4SmVWMdtwCo WbXRBwVMocAh63kLj4Ub0gvwAmWTAjwtji1fhVEohY+WePoCy2OpFcn+zW+VFzQm bpVbt8VxPHaiRlL22HoWhO2YQxtJGoCDUgumEc9Xk6ND8/Op/GE6Zuv8fe+lsZ3e RS2NwCuT0aYgkg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:05 2025 by rpki-client