This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json) Hash identifier: 3WJsPoLioqm0qi12ml6sMOZCXvCAMqwkUAr5TnZQ/eo= Subject key identifier: A0:D8:8E:3E:C1:62:DC:74:FA:10:44:5B:04:85:21:3B:CE:D2:67:90 Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c Certificate serial: 019AF23F858268D2314F306991DDD1CB2522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:40 +0000 Manifest this update: Sat 06 Dec 2025 06:00:40 +0000 Manifest next update: Sun 07 Dec 2025 06:00:40 +0000 Files and hashes: 1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: tdJ+dJKOEfO0E7Wt5GR8c/rkz/HRcsP+J0WBW7ra3jU=) 2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:85:82:68:d2:31:4f:30:69:91:dd:d1:cb:25:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c Validity Not Before: Dec 6 06:00:40 2025 GMT Not After : Dec 7 06:00:40 2025 GMT Subject: CN=a0d88e3ec162dc74fa10445b0485213bced26790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:45:cc:df:c6:92:6f:fb:45:61:5b:2d:75: 97:95:eb:10:2d:87:67:4c:ce:30:19:e2:60:ce:dc: 75:e6:47:66:97:5f:69:d9:3c:13:a2:85:53:4b:57: ba:e3:8f:9a:06:25:17:d6:58:b5:9f:52:d2:20:81: 38:b2:51:50:32:dd:0c:9c:08:52:60:6b:bb:d2:75: 00:6f:9b:9c:6e:1c:0a:62:aa:f0:d8:58:48:72:8f: 38:83:ef:69:89:d6:09:9d:e3:3d:66:c2:28:35:5b: ca:a1:0d:3a:07:a6:eb:59:bf:68:ea:95:bc:88:d5: eb:88:6f:bd:e3:4d:5f:35:94:fa:ef:52:85:ed:a2: 7c:0b:58:a0:d2:2e:5a:2f:bc:ad:2e:ab:c3:85:fe: 61:c7:6a:16:45:2c:cb:fe:0e:98:6c:83:40:5d:39: 6b:67:62:c5:49:55:b5:82:43:bb:bf:33:c3:7b:2f: 29:e7:9f:ff:1f:89:b4:a4:88:2d:29:40:2b:ce:f5: 2d:a4:d7:e2:dd:8f:cf:ba:b8:e0:20:14:e6:23:67: 4a:3b:25:fb:c3:1a:fd:06:02:1a:5c:be:b4:0b:64: 44:04:ed:ac:63:3c:e0:ca:4b:53:df:b8:47:e5:f9: e1:16:75:a6:a4:40:d2:62:d4:da:7e:a4:f7:b8:4d: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D8:8E:3E:C1:62:DC:74:FA:10:44:5B:04:85:21:3B:CE:D2:67:90 X509v3 Authority Key Identifier: keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9b:d0:97:64:95:31:b5:4c:7c:40:82:10:03:51:55:47:67: 8f:ef:48:3b:b9:1d:11:3d:95:13:5d:f1:5f:bf:0b:a9:9e:06: 28:3a:18:45:2a:7c:73:2a:f4:a0:7b:bf:e8:05:a9:35:c4:6d: 10:f9:95:96:8e:9e:59:31:c8:f9:3a:b8:e8:54:10:43:08:10: 73:97:df:41:41:cb:cb:c3:e2:bc:54:01:a5:d0:b1:8e:f1:15: d6:61:d5:ae:9b:1f:a8:4b:4c:ee:3c:f3:b1:b3:c6:4e:1d:b5: ef:33:19:c2:4f:d4:78:32:b6:c6:2b:84:06:8a:40:2a:2b:1f: 8b:75:f6:f0:83:6e:32:19:81:6e:32:82:49:df:33:d3:d7:03: a5:5c:ae:d3:50:ac:61:0f:2d:b0:e4:66:c2:f2:94:43:42:a6: 26:a3:52:72:ac:42:fe:5a:31:4e:ba:e6:3b:3a:9d:d5:97:5d: 77:74:66:c3:2d:f1:7b:ec:d0:b4:c0:11:d6:51:0c:6e:4c:f1: 60:20:90:b5:e5:fe:fa:5c:53:f1:e7:03:50:a4:94:f9:6e:7d: 60:18:f6:ef:de:0d:90:fc:32:f3:94:33:25:16:81:20:fc:8e: 49:d5:2f:79:02:45:b8:aa:3a:28:a3:8b:c6:7b:f7:e0:0a:79: 2d:c1:f0:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4WCaNIxTzBpkd3RyyUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2E2MmYxMzQ3YzE3NDJlNWI2ZTM3NDAyNDRkMzk4YjUz YTUxM2MwHhcNMjUxMjA2MDYwMDQwWhcNMjUxMjA3MDYwMDQwWjAzMTEwLwYDVQQD EyhhMGQ4OGUzZWMxNjJkYzc0ZmExMDQ0NWIwNDg1MjEzYmNlZDI2NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhhFzN/Gkm/7RWFbLXWXlesQLYdn TM4wGeJgztx15kdml19p2TwTooVTS1e644+aBiUX1li1n1LSIIE4slFQMt0MnAhS YGu70nUAb5ucbhwKYqrw2FhIco84g+9pidYJneM9ZsIoNVvKoQ06B6brWb9o6pW8 iNXriG+9401fNZT671KF7aJ8C1ig0i5aL7ytLqvDhf5hx2oWRSzL/g6YbINAXTlr Z2LFSVW1gkO7vzPDey8p55//H4m0pIgtKUArzvUtpNfi3Y/PurjgIBTmI2dKOyX7 wxr9BgIaXL60C2REBO2sYzzgyktT37hH5fnhFnWmpEDSYtTafqT3uE32rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDYjj7BYtx0+hBEWwSFITvO0meQMB8GA1UdIwQY MBaAFF46YvE0fBdC5bbjdAJE05i1OlE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWIt MDI1NTQwYWZmMTVkLzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWItMDI1NTQwYWZmMTVk LzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZvQl2SV MbVMfECCEANRVUdnj+9IO7kdET2VE13xX78LqZ4GKDoYRSp8cyr0oHu/6AWpNcRt EPmVlo6eWTHI+Tq46FQQQwgQc5ffQUHLy8PivFQBpdCxjvEV1mHVrpsfqEtM7jzz sbPGTh217zMZwk/UeDK2xiuEBopAKisfi3X28INuMhmBbjKCSd8z09cDpVyu01Cs YQ8tsORmwvKUQ0KmJqNScqxC/loxTrrmOzqd1Zddd3Rmwy3xe+zQtMAR1lEMbkzx YCCQteX++lxT8ecDUKSU+W59YBj2794NkPwy85QzJRaBIPyOSdUveQJFuKo6KKOL xnv34Ap5LcHw6w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:29 2025 by rpki-client