This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft File: xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json) Hash identifier: OpJ6fHnuETqiaqJwBbpPpzd+MbzT4Wr1DHlybeQaKE8= Subject key identifier: 6A:CD:D1:9E:ED:25:FA:13:94:0D:4F:CC:FD:C9:F4:D7:43:32:A9:66 Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f Certificate serial: 019AF20914D01B42061BE82A8AF0FFAD00F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=) 2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: uOhefkVn4rqDzd2fDU2+A69Jhsd2hh3Nw6jvBBJ+scs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:14:d0:1b:42:06:1b:e8:2a:8a:f0:ff:ad:00:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=6acdd19eed25fa13940d4fccfdc9f4d74332a966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1d:ce:a0:dc:9b:c6:e2:18:41:ae:4a:34:c4: af:d4:1b:f5:03:1f:fc:51:82:8d:42:3b:0e:92:37: e2:16:09:96:eb:a6:41:21:3a:b2:f1:bb:5a:ac:49: 50:12:eb:dd:2b:5d:01:56:b7:5f:7b:cf:e5:79:2c: 6b:35:79:03:be:8e:e7:ca:c0:bf:31:10:e0:cb:f6: 13:47:10:37:73:9a:af:89:3b:13:7a:a4:d0:70:41: 3a:01:35:1a:21:30:8a:78:87:bd:a2:4b:16:98:b1: 52:05:a3:8f:f1:bd:b8:0a:8f:7c:49:cf:46:8e:3d: 69:5e:62:7e:44:87:76:50:5f:4e:16:33:81:85:f5: 63:d7:42:09:9a:25:b6:83:be:e6:51:88:a8:1a:d0: 71:de:a2:75:c8:59:f5:fa:1f:fa:f1:25:be:48:75: 28:bc:04:56:f7:18:d7:a9:68:b7:a7:da:1c:3e:ac: b8:9e:34:8d:5b:fa:68:18:69:3f:72:9e:b9:46:d5: 8b:ec:a5:b6:b6:a5:bf:0b:66:32:99:05:e5:21:43: 3f:79:b8:bf:6d:c2:41:e6:da:10:66:9f:76:6b:df: bb:ea:3b:1a:39:ef:7e:bf:b5:ae:5a:75:1c:17:73: 44:74:09:26:42:19:98:84:ca:1f:92:4c:50:19:95: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CD:D1:9E:ED:25:FA:13:94:0D:4F:CC:FD:C9:F4:D7:43:32:A9:66 X509v3 Authority Key Identifier: keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8b:b9:49:78:16:df:e2:8b:ce:74:70:4b:7d:09:65:24:70: 73:a5:89:98:73:d0:7b:47:c9:1b:db:ba:cf:0c:8c:f8:0b:72: dc:43:02:45:0a:f4:33:1b:96:8a:f5:8c:d1:c9:64:74:d2:e8: a7:68:34:d0:48:6b:c8:bb:dc:a5:c9:e3:ac:36:61:59:6f:ef: 1c:d6:90:42:25:e2:21:19:77:95:f9:5c:10:11:07:18:00:08: 98:0e:36:43:79:be:d2:8f:bf:ed:13:94:cd:bb:c7:d7:c3:6c: ec:2b:78:27:52:b9:6e:91:5d:c4:8a:86:53:7e:65:b7:97:a9: f4:42:0d:9f:96:83:ab:72:b6:00:42:e3:a0:19:e9:bb:15:cf: 3f:b9:53:6a:91:a7:c9:66:16:5b:d3:0b:7b:f9:69:46:e9:63: d4:22:a7:08:96:6d:19:eb:c2:25:9b:d6:ef:5e:65:a6:c6:bc: ef:93:3c:bc:b3:01:45:47:f5:1f:b7:4c:b8:1e:01:47:ba:2e: f6:cc:ac:6e:c4:0e:da:2f:d1:23:4f:6f:3c:1e:dc:33:27:01: 15:6c:29:1a:c6:a7:c8:69:78:7a:70:78:0b:bd:21:5a:02:2e: 6a:46:5e:b1:eb:ca:01:ea:aa:26:00:3d:b6:8b:f8:40:26:13: 38:5f:c5:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRTQG0IGG+gqivD/rQD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDFhZTI2MTJkMjUyNzE2N2M4M2Y3YWZjMTZmNWU2NzRk ODhiMGYwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD Eyg2YWNkZDE5ZWVkMjVmYTEzOTQwZDRmY2NmZGM5ZjRkNzQzMzJhOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x3OoNybxuIYQa5KNMSv1Bv1Ax/8 UYKNQjsOkjfiFgmW66ZBITqy8btarElQEuvdK10BVrdfe8/leSxrNXkDvo7nysC/ MRDgy/YTRxA3c5qviTsTeqTQcEE6ATUaITCKeIe9oksWmLFSBaOP8b24Co98Sc9G jj1pXmJ+RId2UF9OFjOBhfVj10IJmiW2g77mUYioGtBx3qJ1yFn1+h/68SW+SHUo vARW9xjXqWi3p9ocPqy4njSNW/poGGk/cp65RtWL7KW2tqW/C2YymQXlIUM/ebi/ bcJB5toQZp92a9+76jsaOe9+v7WuWnUcF3NEdAkmQhmYhMofkkxQGZU1iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrN0Z7tJfoTlA1PzP3J9NdDMqlmMB8GA1UdIwQY MBaAFMRBriYS0lJxZ8g/evwW9eZ02IsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjkt MjRlN2U2YWRhMWUyLzEveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjktMjRlN2U2YWRhMWUy LzEveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYu5SXgW 3+KLznRwS30JZSRwc6WJmHPQe0fJG9u6zwyM+Aty3EMCRQr0MxuWivWM0clkdNLo p2g00EhryLvcpcnjrDZhWW/vHNaQQiXiIRl3lflcEBEHGAAImA42Q3m+0o+/7ROU zbvH18Ns7Ct4J1K5bpFdxIqGU35lt5ep9EINn5aDq3K2AELjoBnpuxXPP7lTapGn yWYWW9MLe/lpRulj1CKnCJZtGevCJZvW715lpsa875M8vLMBRUf1H7dMuB4BR7ou 9sysbsQO2i/RI09vPB7cMycBFWwpGsanyGl4enB4C70hWgIuakZesevKAeqqJgA9 tov4QCYTOF/FkA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:10 2025 by rpki-client