This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json) Hash identifier: qOlWSzDPiDliwEZho3dT6Zhg+kI+Jneq3e4KXNF0B+E= Subject key identifier: A3:79:44:3A:DE:AE:28:17:0D:7F:AC:E7:4D:0B:5C:FC:70:79:D1:80 Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18 Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718 Certificate serial: 019AF50A3040F2541A0D5908FA6876317DDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft Manifest number: 0C58 Signing time: Sat 06 Dec 2025 19:01:16 +0000 Manifest this update: Sat 06 Dec 2025 19:01:16 +0000 Manifest next update: Sun 07 Dec 2025 19:01:16 +0000 Files and hashes: 1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=) 2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: 3480ZLK5SvJXvOKX62XYutGBUksJdjqIpGTjA7cw+Pw=) 3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=) 4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:30:40:f2:54:1a:0d:59:08:fa:68:76:31:7d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718 Validity Not Before: Dec 6 19:01:16 2025 GMT Not After : Dec 7 19:01:16 2025 GMT Subject: CN=a379443adeae28170d7face74d0b5cfc7079d180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:31:70:79:d8:6b:90:39:25:7f:73:81:bf: 8f:a8:1b:c1:2e:9b:6a:79:02:b1:ab:67:ca:54:33: 75:d4:b9:e6:82:9b:dc:bf:e2:1e:f2:6a:42:a4:88: 54:8e:61:db:59:68:46:db:64:bd:3b:9b:78:43:93: da:9e:f5:37:5c:ed:70:75:2a:30:b0:89:7d:25:89: e1:93:44:38:d3:f1:78:86:f7:e9:f6:6f:22:49:3b: 6d:c2:14:8b:a6:05:62:57:79:f6:84:b9:78:d8:46: 34:d9:c1:61:f4:61:56:ee:9c:68:fe:46:50:27:7a: 9f:4d:c6:02:28:0f:f8:12:8c:5c:fa:15:99:82:2d: 16:f7:54:c8:8b:8b:4d:a2:0c:94:c4:69:55:57:61: 06:e0:35:93:50:df:32:21:b2:d9:72:c5:5a:0f:80: 76:59:8a:c1:47:c1:db:7b:42:3a:5f:c2:6e:3b:47: 8f:51:b0:0f:75:ae:20:09:18:be:50:1e:ad:3f:bc: 8e:70:bf:ca:14:36:03:90:7b:d0:48:6f:26:4e:66: e0:90:ae:95:97:f7:1d:0d:2a:a3:d5:3a:38:49:26: 34:0c:a7:98:5c:b5:ba:f9:59:cd:44:d5:ad:2f:4e: bc:8a:4c:62:47:41:4c:31:bb:fa:70:ea:e6:f8:f2: c2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:79:44:3A:DE:AE:28:17:0D:7F:AC:E7:4D:0B:5C:FC:70:79:D1:80 X509v3 Authority Key Identifier: keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e9:4d:f8:eb:5f:e0:06:09:eb:db:0e:5f:88:ee:64:48:50: 3d:db:db:a6:12:35:d9:3d:4f:59:e5:0f:84:be:ac:29:40:99: 33:84:b4:9f:c6:58:d4:39:62:79:80:a5:da:b3:3b:93:4e:ca: 0c:f6:c4:6f:5e:56:8f:2a:c3:5d:c0:15:5c:a4:c6:bb:21:88: 70:2c:fa:23:fa:81:8a:08:73:8e:18:f8:20:13:3c:7e:11:16: 41:a6:a9:f8:7a:41:59:40:91:0b:00:92:75:d7:73:ba:d4:c2: 0a:0e:02:c7:f5:6f:d5:54:9c:ae:d3:91:ed:da:a3:28:a8:f6: f3:02:1a:20:fc:54:f7:a7:72:10:9b:2e:ec:bf:63:f6:2a:7e: 65:b7:19:95:90:d3:2a:5d:c1:c6:f8:fd:bf:d2:23:3f:12:f1: 17:26:0d:dc:1e:f5:c5:92:0e:85:1c:54:87:64:64:09:cf:ae: 16:9a:61:f6:32:b1:2d:d1:84:70:48:fa:67:fc:23:75:68:4b: a7:2d:69:bd:fc:c1:24:27:bf:08:da:cc:db:58:56:6f:31:a8: 63:99:b0:e3:d7:b7:69:37:ff:72:3a:b1:d2:7e:c8:76:df:54: fb:93:5b:24:d3:2f:cd:ce:a2:30:4a:35:3d:53:95:e1:c0:60: af:72:4e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjBA8lQaDVkI+mh2MX3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmE2MjU1ZGVkYWExYTFiNmIxN2NiOGVhOTFlMDJkNDEy Yjg3MTgwHhcNMjUxMjA2MTkwMTE2WhcNMjUxMjA3MTkwMTE2WjAzMTEwLwYDVQQD EyhhMzc5NDQzYWRlYWUyODE3MGQ3ZmFjZTc0ZDBiNWNmYzcwNzlkMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiosxcHnYa5A5JX9zgb+PqBvBLptq eQKxq2fKVDN11Lnmgpvcv+Ie8mpCpIhUjmHbWWhG22S9O5t4Q5PanvU3XO1wdSow sIl9JYnhk0Q40/F4hvfp9m8iSTttwhSLpgViV3n2hLl42EY02cFh9GFW7pxo/kZQ J3qfTcYCKA/4Eoxc+hWZgi0W91TIi4tNogyUxGlVV2EG4DWTUN8yIbLZcsVaD4B2 WYrBR8Hbe0I6X8JuO0ePUbAPda4gCRi+UB6tP7yOcL/KFDYDkHvQSG8mTmbgkK6V l/cdDSqj1To4SSY0DKeYXLW6+VnNRNWtL068ikxiR0FMMbv6cOrm+PLCIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN5RDrerigXDX+s500LXPxwedGAMB8GA1UdIwQY MBaAFF+6YlXe2qGhtrF8uOqR4C1BK4cYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEt NjFlNTEyYmEyNWI3LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEtNjFlNTEyYmEyNWI3 LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOlN+Otf 4AYJ69sOX4juZEhQPdvbphI12T1PWeUPhL6sKUCZM4S0n8ZY1DlieYCl2rM7k07K DPbEb15WjyrDXcAVXKTGuyGIcCz6I/qBighzjhj4IBM8fhEWQaap+HpBWUCRCwCS dddzutTCCg4Cx/Vv1VScrtOR7dqjKKj28wIaIPxU96dyEJsu7L9j9ip+ZbcZlZDT Kl3Bxvj9v9IjPxLxFyYN3B71xZIOhRxUh2RkCc+uFpph9jKxLdGEcEj6Z/wjdWhL py1pvfzBJCe/CNrM21hWbzGoY5mw49e3aTf/cjqx0n7Idt9U+5NbJNMvzc6iMEo1 PVOV4cBgr3JOpg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:27 2025 by rpki-client