This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft File: Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json) Hash identifier: 8kR+ujEfZdfRKs91GMlyBuhS/+3LSesYZ+IMFQ25n/g= Subject key identifier: 97:F0:C6:7D:B4:34:1D:0D:1C:90:4E:F5:25:EF:22:45:F0:8E:0A:80 Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A Certificate issuer: /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a Certificate serial: 019AF2766A932E5BE0BB08F439258AE6B69D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft Manifest number: 0ABB Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: 05UqSuwLBRqPCroKa-NSlHo3suk.roa (hash: rVUvpxf5/0qhzBCE7eXYV4m07Wn+wX0M/lyBozQz/Xs=) 2: 5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa (hash: E3lbfmXYIuXSBdLAP3yH+RdxLJCz+3LRF0JUsGgut1Q=) 3: ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa (hash: LjPhXG/jk9vLP7Tlf0sh6p1Ib2Ym30X7fvGZjIomxZg=) 4: PXKLJWRK5JT5xqHPiU1wVHkKhag.roa (hash: f7UVVCkNNrYtkhi2nz2OzhGEpHRkcJKbi1gQjPZ3lQk=) 5: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: AddgOqqizmaeiJrriRXvK/63ICoehVnKwS7Es+5IS54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6a:93:2e:5b:e0:bb:08:f4:39:25:8a:e6:b6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=97f0c67db4341d0d1c904ef525ef2245f08e0a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:6b:52:96:af:79:a9:9c:06:1d:44:15:e0: 4f:a5:f6:bc:e2:f7:86:ca:b0:37:ef:d2:60:13:92: dd:10:67:9a:ff:6f:cd:fe:6e:c7:01:2c:0b:dc:da: d8:25:91:fb:00:af:95:73:22:f5:19:5c:97:21:87: a3:41:e2:d9:49:0b:63:50:50:ed:62:31:8d:d3:56: 6a:a4:84:b0:5e:09:02:d0:e7:73:db:c3:4f:9d:9a: 72:53:9f:b7:cb:12:e2:d1:33:52:12:a5:22:f8:8f: ed:db:52:0d:2b:cb:65:73:4a:f3:a4:1d:b0:5c:6d: c5:17:a8:be:92:7b:ea:ff:74:71:70:42:6c:41:61: 3c:dc:5f:45:35:2d:26:e2:9f:23:41:e5:30:89:5b: cb:e0:4b:fb:c4:98:b5:1b:01:d9:ef:33:b3:c3:85: 0d:a5:f4:78:89:f0:08:de:1d:97:29:22:b4:87:08: 14:66:ea:d1:02:be:e8:bd:80:ef:9d:45:89:8b:96: d2:90:6d:6a:fd:d7:db:f2:6f:9e:2d:ce:0e:ed:27: 56:9f:b5:0e:65:c8:6f:b4:87:90:16:54:96:bc:f2: 36:1c:2a:29:e2:fe:cc:77:3c:26:e4:15:f7:3e:c7: a2:4d:72:50:8d:c7:39:11:81:20:29:3b:7f:c8:ad: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F0:C6:7D:B4:34:1D:0D:1C:90:4E:F5:25:EF:22:45:F0:8E:0A:80 X509v3 Authority Key Identifier: keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0d:f3:15:cf:22:3a:99:36:c9:e0:64:12:b0:32:35:9b:6c: db:0f:11:49:4a:b6:38:a1:72:be:a0:51:9c:11:8d:93:80:19: a6:d1:74:e4:0d:df:4a:bf:9b:c8:92:5d:0a:b4:a9:a1:6a:bd: 9a:b8:d2:c1:c4:85:26:3d:53:c5:2f:19:3c:66:b5:1a:a6:ee: d5:53:b2:62:8a:95:cf:1c:d8:0b:d7:f9:e9:cd:98:86:d4:12: 2b:ee:32:cc:1f:cf:1a:04:0c:31:05:30:d7:66:b1:ff:af:95: 21:38:44:bc:7e:bf:db:4a:25:c9:c6:3a:7c:d0:56:ce:b6:87: 6e:e8:c2:c8:77:99:d9:97:a6:69:b2:40:e3:79:89:2a:79:81: 4f:8d:ce:75:d7:08:85:23:14:c1:bc:c7:97:e4:8b:c9:52:8a: 99:ab:d0:c4:1e:f2:c9:ad:53:92:c8:64:bb:fb:7e:ba:33:04: 0d:6f:8d:1f:b1:a8:a6:d4:ca:13:b1:6a:8d:d6:9a:ad:d5:b9: eb:e7:c6:8c:ed:2d:06:cc:bf:b4:6e:ef:92:9e:21:01:d0:d2: 9e:a4:ee:e9:43:23:1e:e0:0a:f3:07:e4:7e:8e:a9:b9:e1:75: 23:d3:bc:d5:b1:b2:0b:fb:d9:fa:92:c5:97:b6:08:b5:d7:6f: 98:c8:e7:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmqTLlvguwj0OSWK5radMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGZkOTBkOTg3Mjk3Y2I1ZGQ0ZTA3YmU4NDBkMjgwZDFl MmNjNGEwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD Eyg5N2YwYzY3ZGI0MzQxZDBkMWM5MDRlZjUyNWVmMjI0NWYwOGUwYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAhrUpaveamcBh1EFeBPpfa84veG yrA379JgE5LdEGea/2/N/m7HASwL3NrYJZH7AK+VcyL1GVyXIYejQeLZSQtjUFDt YjGN01ZqpISwXgkC0Odz28NPnZpyU5+3yxLi0TNSEqUi+I/t21INK8tlc0rzpB2w XG3FF6i+knvq/3RxcEJsQWE83F9FNS0m4p8jQeUwiVvL4Ev7xJi1GwHZ7zOzw4UN pfR4ifAI3h2XKSK0hwgUZurRAr7ovYDvnUWJi5bSkG1q/dfb8m+eLc4O7SdWn7UO ZchvtIeQFlSWvPI2HCop4v7Mdzwm5BX3PseiTXJQjcc5EYEgKTt/yK01UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfwxn20NB0NHJBO9SXvIkXwjgqAMB8GA1UdIwQY MBaAFF8P2Q2YcpfLXdTge+hA0oDR4sxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjIt N2JjZWZhOWY1OWU4LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjItN2JjZWZhOWY1OWU4 LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQ3zFc8i Opk2yeBkErAyNZts2w8RSUq2OKFyvqBRnBGNk4AZptF05A3fSr+byJJdCrSpoWq9 mrjSwcSFJj1TxS8ZPGa1Gqbu1VOyYoqVzxzYC9f56c2YhtQSK+4yzB/PGgQMMQUw 12ax/6+VIThEvH6/20olycY6fNBWzraHbujCyHeZ2ZemabJA43mJKnmBT43OddcI hSMUwbzHl+SLyVKKmavQxB7yya1Tkshku/t+ujMEDW+NH7GoptTKE7FqjdaardW5 6+fGjO0tBsy/tG7vkp4hAdDSnqTu6UMjHuAK8wfkfo6pueF1I9O81bGyC/vZ+pLF l7YItddvmMjnww== -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:08 2025 by rpki-client