This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft File: xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft (raw, json) Hash identifier: mpMrI9jgYqViWRKK31vJ608eN8ya1rpDR2ku0bP521c= Subject key identifier: AE:A6:E7:1B:71:05:C8:08:1F:61:E0:CC:AB:0C:F0:73:AC:FF:B3:A4 Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24 Certificate issuer: /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324 Certificate serial: 019AF42DCF524D4CFB34C2A1536713E335C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft Manifest number: 0837 Signing time: Sat 06 Dec 2025 15:00:34 +0000 Manifest this update: Sat 06 Dec 2025 15:00:34 +0000 Manifest next update: Sun 07 Dec 2025 15:00:34 +0000 Files and hashes: 1: Ej1aJMtEaUsf31r33a8meVTKaMM.roa (hash: Gz1wbyymYY+RBy8aeMOwOe+QM7WHCcn8raUIMs60hhM=) 2: xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl (hash: pHu2AO40ixiX1awgky8J3Ln7ellL2GvsDwywmcuO0ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:cf:52:4d:4c:fb:34:c2:a1:53:67:13:e3:35:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324 Validity Not Before: Dec 6 15:00:34 2025 GMT Not After : Dec 7 15:00:34 2025 GMT Subject: CN=aea6e71b7105c8081f61e0ccab0cf073acffb3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:48:f5:84:7a:16:f6:52:ab:0e:b1:48:94:e8: 97:c4:ab:46:cd:c0:2f:ca:bc:8c:71:27:51:40:2c: 08:5c:a8:68:40:8e:84:6d:05:e2:ac:0e:38:be:20: 2d:3b:94:2b:af:e1:7c:f7:f3:3f:bb:c7:64:03:61: 2c:10:4a:39:83:48:45:e9:bb:f0:28:af:63:d9:a1: 1c:25:d3:95:62:99:6c:7d:35:ea:53:7b:15:f2:8f: 36:6e:5a:f6:eb:2e:8b:15:0c:6d:5d:9a:00:2d:54: 84:b8:3a:23:23:5f:05:c9:d8:64:e7:6b:dc:a2:d7: a6:a5:d8:a6:5c:9c:d9:ef:cc:74:5f:1c:4f:21:5b: 20:6b:54:96:e3:00:b8:8e:6e:29:5c:7e:c6:c3:71: 13:11:83:b1:08:a8:88:0f:21:fe:70:1d:44:95:49: 9d:a2:32:5d:53:a6:85:a8:7d:8a:4f:22:59:8e:ab: e3:c6:95:ea:1d:79:49:20:3e:20:6e:b3:f4:e9:13: bf:c1:fa:5a:de:4b:dd:7c:ad:a9:db:0b:30:f0:ae: 1e:94:da:7e:e1:7f:7d:3d:c8:58:46:44:b2:3a:1a: d6:71:bb:60:ea:1c:b2:7f:3c:25:35:fc:8a:fa:7c: df:c5:fb:eb:09:88:3a:20:4e:9f:5e:6e:e5:45:dc: f5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A6:E7:1B:71:05:C8:08:1F:61:E0:CC:AB:0C:F0:73:AC:FF:B3:A4 X509v3 Authority Key Identifier: keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e3:93:bd:8c:36:b0:36:a1:93:28:17:f2:03:15:ea:91:08: 91:f6:f1:37:e9:8d:7f:c5:4b:77:38:bb:e1:3e:73:8c:ac:f8: f3:62:3a:f4:15:a0:12:d4:6b:44:56:76:39:cf:f2:bc:a4:54: 0d:9c:8d:77:37:9f:af:92:24:3f:68:ff:8d:92:4e:d5:71:ac: 0d:dc:4e:30:b9:5d:20:23:60:87:d0:6f:2a:40:c7:00:43:b0: 13:86:00:8f:ea:cb:8c:72:4a:78:7d:4a:1a:b0:01:fa:42:5e: e7:a8:67:82:06:a9:e2:42:7c:53:bc:bb:56:05:f4:2d:4f:e5: 76:ce:6f:e6:9e:97:b4:fd:e8:37:ba:63:21:66:6d:b1:7d:d1: a2:f4:30:c4:31:5f:e9:bd:68:78:12:01:ec:ec:3e:32:ce:c7: cd:70:58:5d:50:55:d5:5e:ed:0f:fe:b6:b4:7d:cf:af:e1:df: b1:c4:6e:dd:52:33:6e:98:ce:96:87:3d:f1:d4:26:90:88:bf: d2:c8:96:8f:4e:bf:ba:32:9b:66:78:9f:dd:ba:83:a9:0e:7c: 11:6e:5f:2e:84:06:b4:4d:f8:85:07:a4:fe:7d:48:11:0c:8e: 36:62:51:ba:19:04:06:c8:18:f3:ba:a7:c7:06:61:d7:26:f1: 3b:6f:1e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lc9STUz7NMKhU2cT4zXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTM1ZTRhY2Y5NjEzOWNlNWZmMmNmZGQ5NWY1NWE4MTc2 ZDczMjQwHhcNMjUxMjA2MTUwMDM0WhcNMjUxMjA3MTUwMDM0WjAzMTEwLwYDVQQD EyhhZWE2ZTcxYjcxMDVjODA4MWY2MWUwY2NhYjBjZjA3M2FjZmZiM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60j1hHoW9lKrDrFIlOiXxKtGzcAv yryMcSdRQCwIXKhoQI6EbQXirA44viAtO5Qrr+F89/M/u8dkA2EsEEo5g0hF6bvw KK9j2aEcJdOVYplsfTXqU3sV8o82blr26y6LFQxtXZoALVSEuDojI18Fydhk52vc otempdimXJzZ78x0XxxPIVsga1SW4wC4jm4pXH7Gw3ETEYOxCKiIDyH+cB1ElUmd ojJdU6aFqH2KTyJZjqvjxpXqHXlJID4gbrP06RO/wfpa3kvdfK2p2wsw8K4elNp+ 4X99PchYRkSyOhrWcbtg6hyyfzwlNfyK+nzfxfvrCYg6IE6fXm7lRdz1tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6m5xtxBcgIH2HgzKsM8HOs/7OkMB8GA1UdIwQY MBaAFMYTXkrPlhOc5f8s/dlfVagXbXMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhOZVNzLVdFNXpsX3l6OTJWOVZxQmR0Y3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZjZmMGQtZTZkZi00ZjJiLTgwZGYt NDY2YjBjZDhiNzVhLzEveGhOZVNzLVdFNXpsX3l6OTJWOVZxQmR0Y3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82ZjZmMGQtZTZkZi00ZjJiLTgwZGYtNDY2YjBjZDhiNzVh LzEveGhOZVNzLVdFNXpsX3l6OTJWOVZxQmR0Y3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeOTvYw2 sDahkygX8gMV6pEIkfbxN+mNf8VLdzi74T5zjKz482I69BWgEtRrRFZ2Oc/yvKRU DZyNdzefr5IkP2j/jZJO1XGsDdxOMLldICNgh9BvKkDHAEOwE4YAj+rLjHJKeH1K GrAB+kJe56hnggap4kJ8U7y7VgX0LU/lds5v5p6XtP3oN7pjIWZtsX3RovQwxDFf 6b1oeBIB7Ow+Ms7HzXBYXVBV1V7tD/62tH3Pr+HfscRu3VIzbpjOloc98dQmkIi/ 0siWj06/ujKbZnif3bqDqQ58EW5fLoQGtE34hQek/n1IEQyONmJRuhkEBsgY87qn xwZh1ybxO28eDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:20 2025 by rpki-client