This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft File: xvYePrPLRHrKbZpDVs11cXp7fGg.mft (raw, json) Hash identifier: FgEsxNwcwfboyDWQW6BTQfKpQvFrjsw+YvvMMAL8NPw= Subject key identifier: 54:38:11:AA:D7:F0:B4:50:96:AC:29:7B:AD:52:AC:B1:A0:9D:26:2C Authority key identifier: C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68 Certificate issuer: /CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68 Certificate serial: 019AF42E3EE7CA1E5C42CD8EE3CEED1C9CAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft Manifest number: 0113 Signing time: Sat 06 Dec 2025 15:01:02 +0000 Manifest this update: Sat 06 Dec 2025 15:01:02 +0000 Manifest next update: Sun 07 Dec 2025 15:01:02 +0000 Files and hashes: 1: o4QGe1oVFAvlinc81nAuNrtMaoE.roa (hash: gIUvO01SqzkXQhjCsB61bL9/pNHUHKOGVQndKRDnyOA=) 2: xvYePrPLRHrKbZpDVs11cXp7fGg.crl (hash: QuD0laAXsQ6OQZROmgncf04A9yYrynaQed0sd+48GWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:3e:e7:ca:1e:5c:42:cd:8e:e3:ce:ed:1c:9c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68 Validity Not Before: Dec 6 15:01:02 2025 GMT Not After : Dec 7 15:01:02 2025 GMT Subject: CN=543811aad7f0b45096ac297bad52acb1a09d262c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:18:68:73:bd:8a:d0:c0:93:10:77:c3:3c:a7: 34:ec:42:38:42:b5:e7:16:2e:82:92:87:1b:ce:f0: 88:20:a7:b6:52:ed:cc:a0:8d:ba:ec:91:8d:f2:bf: 7b:4b:4e:17:b3:73:64:1e:a1:68:00:0c:1b:3e:56: 8b:0c:f3:8c:3f:cc:3f:c2:f7:a8:10:4f:26:fd:3a: 96:2f:5f:b5:5d:ba:1f:a3:70:ae:6b:06:50:69:a5: 60:2d:a2:7f:68:7a:c6:78:5f:83:52:d7:70:bf:e6: bb:9b:ea:38:b1:5e:9b:6c:e5:5c:62:c9:a1:48:e1: bd:9c:5e:a7:1d:3a:a5:68:fa:fb:20:06:a7:5b:9b: 03:e4:36:4b:34:0b:0e:0d:93:03:e2:a5:db:7b:51: 49:18:c1:49:33:6d:a5:e2:55:e0:c2:35:5c:12:55: 5e:bd:18:c6:9f:81:b2:89:a6:c2:52:14:50:45:89: 27:76:fd:ce:21:cc:3f:39:f3:42:b5:e3:e5:2d:7c: 5a:86:f4:34:fe:f2:1a:9f:a9:ef:a1:0e:b8:39:10: 28:fc:6e:b7:e7:41:b0:4b:49:54:81:50:1f:45:47: b1:e8:1b:9e:f8:c4:aa:d7:c6:55:1f:0e:33:1b:3e: 2d:2c:3f:03:7d:f6:2a:27:2a:e7:f1:b9:4d:93:d9: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:38:11:AA:D7:F0:B4:50:96:AC:29:7B:AD:52:AC:B1:A0:9D:26:2C X509v3 Authority Key Identifier: keyid:C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ba:5a:68:9b:80:58:c3:59:63:02:93:55:8b:c4:50:6c:c2: 00:5f:57:6f:8f:e4:2a:0d:fd:df:02:c4:d4:40:97:27:b2:25: e2:d9:d3:fb:aa:71:ee:32:a6:36:af:38:39:ff:c0:59:d4:15: 61:da:88:13:f7:3f:2d:2a:cb:c3:be:79:39:b2:28:1d:5e:48: 13:a2:db:3a:45:ea:6b:21:55:b7:33:8f:9c:5f:79:72:32:77: 00:55:a2:f3:6a:bf:db:37:e7:47:0f:e0:4e:ef:e7:a6:f0:c0: e3:b7:66:69:ae:fd:e4:b4:2c:c7:2c:b7:c5:3e:ff:d3:7a:c0: fc:81:cb:e6:2a:85:18:13:80:1b:20:83:37:bb:5e:31:af:73: 85:09:99:6d:31:65:d0:b6:e0:17:90:72:34:2b:2d:8a:7d:63: 3b:0c:a2:ed:34:17:3b:a8:5c:53:24:c0:51:02:e0:3e:c6:30: fd:55:c2:d4:79:d8:d6:59:5b:d9:48:0e:6e:9e:cd:18:79:ba: 29:fb:be:e7:74:94:a8:2b:69:8c:df:07:e7:ef:28:f8:04:1b: 1a:f2:88:7e:06:42:d9:62:a8:18:2e:21:7f:ed:a4:99:6f:c3: 0d:d4:24:44:3e:af:0b:19:4b:57:87:df:99:59:00:ba:ed:5a: 3c:63:5f:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lj7nyh5cQs2O487tHJyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZjYxZTNlYjNjYjQ0N2FjYTZkOWE0MzU2Y2Q3NTcxN2E3 YjdjNjgwHhcNMjUxMjA2MTUwMTAyWhcNMjUxMjA3MTUwMTAyWjAzMTEwLwYDVQQD Eyg1NDM4MTFhYWQ3ZjBiNDUwOTZhYzI5N2JhZDUyYWNiMWEwOWQyNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Bhoc72K0MCTEHfDPKc07EI4QrXn Fi6CkocbzvCIIKe2Uu3MoI267JGN8r97S04Xs3NkHqFoAAwbPlaLDPOMP8w/wveo EE8m/TqWL1+1Xbofo3CuawZQaaVgLaJ/aHrGeF+DUtdwv+a7m+o4sV6bbOVcYsmh SOG9nF6nHTqlaPr7IAanW5sD5DZLNAsODZMD4qXbe1FJGMFJM22l4lXgwjVcElVe vRjGn4GyiabCUhRQRYkndv3OIcw/OfNCtePlLXxahvQ0/vIan6nvoQ64ORAo/G63 50GwS0lUgVAfRUex6Bue+MSq18ZVHw4zGz4tLD8DffYqJyrn8blNk9lsYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQ4EarX8LRQlqwpe61SrLGgnSYsMB8GA1UdIwQY MBaAFMb2Hj6zy0R6ym2aQ1bNdXF6e3xoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZZZVByUExSSHJLYlpwRFZzMTFjWHA3ZkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NTRmMDMtMDg3Ny00NDVkLWJmYjEt NzcwMzI1MGJmYmFiLzEveHZZZVByUExSSHJLYlpwRFZzMTFjWHA3ZkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny80NTRmMDMtMDg3Ny00NDVkLWJmYjEtNzcwMzI1MGJmYmFi LzEveHZZZVByUExSSHJLYlpwRFZzMTFjWHA3ZkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrpaaJuA WMNZYwKTVYvEUGzCAF9Xb4/kKg393wLE1ECXJ7Il4tnT+6px7jKmNq84Of/AWdQV YdqIE/c/LSrLw755ObIoHV5IE6LbOkXqayFVtzOPnF95cjJ3AFWi82q/2zfnRw/g Tu/npvDA47dmaa795LQsxyy3xT7/03rA/IHL5iqFGBOAGyCDN7teMa9zhQmZbTFl 0LbgF5ByNCstin1jOwyi7TQXO6hcUyTAUQLgPsYw/VXC1HnY1llb2UgObp7NGHm6 Kfu+53SUqCtpjN8H5+8o+AQbGvKIfgZC2WKoGC4hf+2kmW/DDdQkRD6vCxlLV4ff mVkAuu1aPGNfaA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:24 2025 by rpki-client