This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft File: xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json) Hash identifier: /3uRk8fiYuN4klpZ8SNmUd7RVFTS2w3UnAatiWhdBJM= Subject key identifier: 30:8C:0D:FB:E1:83:F3:78:13:91:DE:1C:5C:AE:DA:84:53:69:95:FA Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9 Certificate issuer: /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9 Certificate serial: 019AF1D1FCE17A9CCCD97BA8AB7C14122356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft Manifest number: 092E Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: 6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa (hash: USfZBKBFKPqpoZ4/RnsmCkjU4lbPXZn+7Zop6eU1524=) 2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: CTqi2yMogdwh9UyRrrN+9bf7TQN3d6b2ARWYC3jsAqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fc:e1:7a:9c:cc:d9:7b:a8:ab:7c:14:12:23:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9 Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=308c0dfbe183f3781391de1c5caeda84536995fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:87:0f:a3:74:c1:4f:d0:ad:0c:6f:61:61: 4c:68:7d:d3:94:16:01:0d:97:ab:60:1e:4c:c8:be: aa:58:7d:5d:c6:b6:4c:f7:6d:06:09:cc:cc:a8:10: 19:74:4c:4d:ea:40:d1:17:60:50:9b:3b:53:f1:9a: 30:63:57:13:27:5b:c9:c9:fc:99:61:10:18:26:4d: be:3a:f1:db:d4:25:7a:98:4d:d0:ff:ba:fd:06:fa: 01:02:c2:f6:2a:73:3c:94:20:a0:c1:6b:df:34:06: 58:fe:ec:d1:81:ac:8a:55:bc:cb:23:66:f9:eb:3c: b2:b3:0f:af:f8:33:3c:ae:5e:e4:56:3f:56:df:24: 7c:23:7f:ba:1e:fc:ea:3d:f3:1a:05:81:76:46:9f: 22:de:9f:0f:76:12:20:7b:cb:af:60:15:0c:92:1f: 84:41:c9:5c:27:c4:b5:50:dc:05:af:4a:e9:e9:c9: e2:5f:b1:0e:fb:e0:77:2e:10:0f:46:68:29:8a:a0: 22:d0:86:26:a9:c3:f2:bb:d9:a1:f8:2a:6d:5e:46: 8d:78:ed:ea:8e:06:b0:b4:b9:e1:e1:81:3f:1e:d8: 40:e5:ce:83:2d:51:8b:28:60:85:97:65:7d:a5:89: 76:12:a9:f7:6b:b7:c7:e3:e2:c6:3b:47:8b:42:4d: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8C:0D:FB:E1:83:F3:78:13:91:DE:1C:5C:AE:DA:84:53:69:95:FA X509v3 Authority Key Identifier: keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:92:1d:11:99:1d:ae:c4:04:d1:83:e6:b2:ee:96:f2:28:d4: f6:5a:c8:5f:38:30:47:10:db:d7:a4:49:5b:5f:e8:9a:38:c4: b1:54:e7:cb:6b:2c:b8:89:d3:aa:16:3d:19:8b:ce:25:f3:59: 22:13:83:a7:79:e1:cb:78:83:76:f3:91:0c:52:da:4f:67:10: ee:ee:6c:ba:82:86:a7:87:2d:23:a9:b4:71:b8:53:0a:14:d7: 57:2d:3c:92:64:d5:80:f3:62:04:2c:f9:c5:3f:e6:f5:b2:9f: 4c:35:5b:32:fb:b5:e4:72:35:22:bd:f3:89:da:64:a6:c9:18: d5:21:7c:60:bf:72:5f:d9:8f:1f:f1:b5:c2:c6:75:03:df:bc: 7a:c1:ba:b6:d4:d1:6e:29:77:92:f5:e3:a6:4d:a6:6e:46:ad: 21:df:8e:25:ee:a5:41:d0:3d:6c:83:62:ed:60:cd:54:a0:52: 61:98:ca:11:ce:c8:85:03:5a:a8:c7:74:4d:77:58:f8:26:ac: 7d:8d:f9:89:2c:50:58:dd:46:d2:16:45:ca:19:64:f1:a8:e5: 2d:b6:bc:8a:c9:76:0e:ce:44:47:01:f9:87:31:59:35:56:5d: 08:37:76:98:9b:02:ec:d6:ce:83:66:cb:1d:1b:2b:f0:7b:07: 0b:8e:43:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fzhepzM2Xuoq3wUEiNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDcxMzk3Y2Y1ZWMzOTlhYTBlZWM1YzMxNzNiMWYzMDQw NzIzYTkwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD EygzMDhjMGRmYmUxODNmMzc4MTM5MWRlMWM1Y2FlZGE4NDUzNjk5NWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJqHD6N0wU/QrQxvYWFMaH3TlBYB DZerYB5MyL6qWH1dxrZM920GCczMqBAZdExN6kDRF2BQmztT8ZowY1cTJ1vJyfyZ YRAYJk2+OvHb1CV6mE3Q/7r9BvoBAsL2KnM8lCCgwWvfNAZY/uzRgayKVbzLI2b5 6zyysw+v+DM8rl7kVj9W3yR8I3+6HvzqPfMaBYF2Rp8i3p8PdhIge8uvYBUMkh+E QclcJ8S1UNwFr0rp6cniX7EO++B3LhAPRmgpiqAi0IYmqcPyu9mh+CptXkaNeO3q jgawtLnh4YE/HthA5c6DLVGLKGCFl2V9pYl2Eqn3a7fH4+LGO0eLQk3LdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCMDfvhg/N4E5HeHFyu2oRTaZX6MB8GA1UdIwQY MBaAFMVHE5fPXsOZqg7sXDFzsfMEByOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVjVGw4OWV3NW1xRHV4Y01YT3g4d1FISTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83NzdhNjAtNmRlMS00ZGZiLWI5NjUt MjYyMjJmMDk1NWFlLzEveFVjVGw4OWV3NW1xRHV4Y01YT3g4d1FISTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS83NzdhNjAtNmRlMS00ZGZiLWI5NjUtMjYyMjJmMDk1NWFl LzEveFVjVGw4OWV3NW1xRHV4Y01YT3g4d1FISTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJIdEZkd rsQE0YPmsu6W8ijU9lrIXzgwRxDb16RJW1/omjjEsVTny2ssuInTqhY9GYvOJfNZ IhODp3nhy3iDdvORDFLaT2cQ7u5suoKGp4ctI6m0cbhTChTXVy08kmTVgPNiBCz5 xT/m9bKfTDVbMvu15HI1Ir3zidpkpskY1SF8YL9yX9mPH/G1wsZ1A9+8esG6ttTR bil3kvXjpk2mbkatId+OJe6lQdA9bINi7WDNVKBSYZjKEc7IhQNaqMd0TXdY+Cas fY35iSxQWN1G0hZFyhlk8ajlLba8isl2Ds5ERwH5hzFZNVZdCDd2mJsC7NbOg2bL HRsr8HsHC45DSw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:08 2025 by rpki-client