This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json) Hash identifier: sWHluPlbz3IqHX8N0ElfMWr/ReNljMyNa6wjdsYsJsc= Subject key identifier: B0:AF:E0:59:3B:DE:A4:56:50:70:1A:31:96:1C:F8:BD:71:41:CF:AF Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa Certificate serial: 019AF163DD3D1DF84F890AC56F9B768258E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft Manifest number: 0447 Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=) 2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: P8zTmmqEmj8P4iMn7h4T0eeWS3rGZ+NcxQ+gDZHNzn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dd:3d:1d:f8:4f:89:0a:c5:6f:9b:76:82:58:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=b0afe0593bdea45650701a31961cf8bd7141cfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:fd:b7:a7:04:52:57:cb:a8:89:28:4c:d7: db:e0:1a:56:95:27:20:87:37:02:df:19:43:ae:94: e0:fd:c9:47:f9:58:fb:8b:51:79:f8:2c:3f:80:99: fa:f0:62:9d:b2:82:d2:a8:c7:04:3e:98:70:65:cd: ad:80:b0:fb:4e:09:d3:eb:69:c3:17:63:e1:23:79: 73:b6:f4:7d:fc:63:e8:0c:37:65:18:c2:58:39:e1: 2b:fa:0b:c9:69:7d:59:c5:b0:f4:17:df:fa:9a:db: 92:45:a1:0d:30:5b:35:81:34:d7:b4:32:aa:54:47: e5:ad:48:5c:71:5f:f1:25:aa:c3:b2:54:7b:24:20: 8d:a0:a7:f5:bd:27:20:7d:d2:b2:95:4a:e7:38:b6: 22:d0:25:2e:9e:d4:72:ba:dc:19:fd:11:6b:b7:de: bb:ca:75:15:cd:ad:32:9e:10:19:b0:60:81:c9:75: db:a5:b0:d2:0e:27:e2:74:39:38:b6:4e:c1:25:ae: d6:65:e7:9e:f1:f8:cb:5b:74:e6:87:fc:68:20:e6: c5:ae:11:d1:8e:e6:62:c6:38:0a:4a:cd:87:f7:ab: c3:9c:98:5c:3d:87:da:45:57:05:df:92:d6:16:b0: dd:96:7d:68:f6:02:18:f3:13:73:7f:e3:ba:4c:2a: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AF:E0:59:3B:DE:A4:56:50:70:1A:31:96:1C:F8:BD:71:41:CF:AF X509v3 Authority Key Identifier: keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:58:24:b6:18:81:a2:5e:98:2c:67:00:b1:7e:b4:76:be:05: f6:45:b5:bf:c7:7b:2c:61:ce:d6:97:34:c7:5d:ab:1b:38:47: 40:b0:a8:1e:77:87:3b:a3:cb:ae:d5:4c:80:46:eb:c0:fc:df: e2:c7:a3:94:b2:83:20:f8:58:ca:fb:19:18:ca:82:d9:ac:c3: d2:ab:9f:25:99:1c:4d:2b:45:9b:4e:cc:3d:02:dd:52:4a:64: b2:3e:66:31:99:88:2e:e9:c6:56:27:52:91:ef:11:fd:41:c8: 46:e2:4a:5c:7e:a3:86:db:0b:1b:43:01:37:dc:8f:62:1b:ec: 03:24:9e:d2:ac:aa:06:66:a9:02:7a:b0:38:af:2b:c8:47:f0: 17:6c:79:b5:35:93:82:fc:87:76:cf:8d:11:fe:6e:3d:dc:a8: 19:fb:65:01:2d:10:1a:ae:d1:db:3b:a4:93:41:18:36:87:e3: b6:98:87:39:f4:1a:1a:90:6b:30:88:2e:ba:3f:29:54:be:9c: 6a:8b:8a:84:2d:c1:da:5a:3c:6d:76:f8:eb:55:0d:09:d2:e7: 65:9b:16:11:dd:0b:1a:26:b0:75:41:b8:71:dc:9d:f7:7a:62: f9:f4:f5:38:1b:c3:3d:f4:47:aa:af:d0:2d:3b:d6:d6:f5:79: 1a:21:cd:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY909HfhPiQrFb5t2gljjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGNkOGQwYTJhYmFlOGMyNTM5MWYyMzA1MWNjM2YwZjI0 NzkzYWEwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EyhiMGFmZTA1OTNiZGVhNDU2NTA3MDFhMzE5NjFjZjhiZDcxNDFjZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04n9t6cEUlfLqIkoTNfb4BpWlScg hzcC3xlDrpTg/clH+Vj7i1F5+Cw/gJn68GKdsoLSqMcEPphwZc2tgLD7TgnT62nD F2PhI3lztvR9/GPoDDdlGMJYOeEr+gvJaX1ZxbD0F9/6mtuSRaENMFs1gTTXtDKq VEflrUhccV/xJarDslR7JCCNoKf1vScgfdKylUrnOLYi0CUuntRyutwZ/RFrt967 ynUVza0ynhAZsGCByXXbpbDSDifidDk4tk7BJa7WZeee8fjLW3Tmh/xoIObFrhHR juZixjgKSs2H96vDnJhcPYfaRVcF35LWFrDdln1o9gIY8xNzf+O6TCqSPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCv4Fk73qRWUHAaMZYc+L1xQc+vMB8GA1UdIwQY MBaAFMXc2NCiq66MJTkfIwUcw/DyR5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQt Yzc5ZDQ2YTkyMzliLzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQtYzc5ZDQ2YTkyMzli LzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVgkthiB ol6YLGcAsX60dr4F9kW1v8d7LGHO1pc0x12rGzhHQLCoHneHO6PLrtVMgEbrwPzf 4sejlLKDIPhYyvsZGMqC2azD0qufJZkcTStFm07MPQLdUkpksj5mMZmILunGVidS ke8R/UHIRuJKXH6jhtsLG0MBN9yPYhvsAySe0qyqBmapAnqwOK8ryEfwF2x5tTWT gvyHds+NEf5uPdyoGftlAS0QGq7R2zukk0EYNofjtpiHOfQaGpBrMIguuj8pVL6c aouKhC3B2lo8bXb461UNCdLnZZsWEd0LGiawdUG4cdyd93pi+fT1OBvDPfRHqq/Q LTvW1vV5GiHNBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:04 2025 by rpki-client