This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json) Hash identifier: qwWU3bppANEMIcFCDxNSvLOaGZpwmFOPHDRqeDo0svk= Subject key identifier: 2F:CF:43:40:78:1D:6B:30:A8:85:9A:0B:8A:AD:4F:F5:F8:52:1B:98 Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702 Certificate serial: 019AF3C071CACE4CBE4844A5AB1BD36235BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft Manifest number: 0C4B Signing time: Sat 06 Dec 2025 13:01:06 +0000 Manifest this update: Sat 06 Dec 2025 13:01:06 +0000 Manifest next update: Sun 07 Dec 2025 13:01:06 +0000 Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=) 2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=) 3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: A25Dpv+z4tYrQDOUgw+vlwryFPvhQhPFAgALPb8xdyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:71:ca:ce:4c:be:48:44:a5:ab:1b:d3:62:35:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702 Validity Not Before: Dec 6 13:01:06 2025 GMT Not After : Dec 7 13:01:06 2025 GMT Subject: CN=2fcf4340781d6b30a8859a0b8aad4ff5f8521b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bd:82:0c:98:f8:b1:ec:0e:8e:44:5b:d5:06: e8:4b:24:90:32:de:da:01:fd:80:8a:67:ab:38:ee: f9:9a:87:74:39:94:95:ab:f0:86:66:c1:ca:0f:92: f9:63:7b:1d:96:9f:3b:61:64:7a:f7:42:3b:fb:10: 8d:06:1e:b7:4f:87:77:09:27:5a:ab:bf:1a:33:f2: e5:1f:05:72:d8:25:ef:b8:b0:c2:76:36:73:f4:5a: f0:e5:ec:24:ae:22:09:32:24:b5:e8:2b:71:81:6c: e6:9c:78:62:e4:3a:d5:09:21:23:ca:23:84:fa:d7: b2:14:f2:95:fd:8e:ae:bf:8a:b4:f8:99:f6:48:fd: da:c9:b5:46:33:2c:3e:46:af:4e:34:7c:9a:1f:f2: be:15:fe:cc:a4:28:ab:c5:8c:ce:9e:37:bb:b7:62: 46:f0:8c:c2:fe:4d:b7:9f:4e:8e:bb:7b:9d:fd:4a: 99:6d:18:fd:21:d5:16:34:4b:78:01:b9:d8:b2:e5: 94:3c:f8:70:76:58:79:f7:04:02:90:a0:78:79:07: c9:ad:e0:72:dd:1b:ed:e8:d6:54:c4:68:e3:ca:45: 49:29:0d:e8:1e:69:f2:80:ad:08:70:5b:ef:18:6c: 20:17:73:e6:5d:c8:66:59:2e:5e:33:9b:1a:80:7d: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CF:43:40:78:1D:6B:30:A8:85:9A:0B:8A:AD:4F:F5:F8:52:1B:98 X509v3 Authority Key Identifier: keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6d:f5:15:bf:4d:cf:97:ca:87:c3:af:af:53:0c:85:f2:4f: 84:26:e8:eb:40:49:fb:1c:4c:0e:82:df:32:db:c2:e3:20:88: ab:5b:d6:cf:32:7c:6a:8e:4d:9b:0d:a8:ca:3e:77:20:56:ae: d3:e5:30:8a:42:26:e7:3c:68:2b:17:96:42:9d:ab:2a:a6:c9: 46:17:61:65:24:dc:61:ba:06:85:83:af:a6:c4:fd:0b:31:1f: fa:a8:24:0c:90:bf:bc:80:b4:c7:b0:33:30:1b:71:cf:3f:3e: 27:c1:19:30:67:04:54:20:22:5b:b7:0e:78:ed:70:cc:bc:ef: af:e8:6e:3a:be:e7:18:b6:23:21:27:d7:8d:4a:4e:e9:9c:cf: ab:b7:22:4c:be:3b:61:05:c8:33:74:d7:85:fb:1c:b1:f1:58: 24:b6:37:44:6d:67:61:1a:44:25:f7:a9:9f:6e:6d:0c:a5:57: e8:3b:d3:20:88:21:ed:69:57:08:5d:b1:f9:da:78:a3:e0:33: 04:8c:5f:3b:3f:47:8d:81:6b:16:b8:5b:7f:c0:3f:64:ae:65: 82:9b:41:58:95:98:55:08:48:ed:0a:8c:5d:f8:25:5d:ea:76: cf:5a:a6:af:dc:c5:fc:00:cf:7e:c2:5a:12:2c:b7:39:8e:31: 31:3a:70:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHHKzky+SESlqxvTYjW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2 MWE3MDIwHhcNMjUxMjA2MTMwMTA2WhcNMjUxMjA3MTMwMTA2WjAzMTEwLwYDVQQD EygyZmNmNDM0MDc4MWQ2YjMwYTg4NTlhMGI4YWFkNGZmNWY4NTIxYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r2CDJj4sewOjkRb1QboSySQMt7a Af2AimerOO75mod0OZSVq/CGZsHKD5L5Y3sdlp87YWR690I7+xCNBh63T4d3CSda q78aM/LlHwVy2CXvuLDCdjZz9Frw5ewkriIJMiS16CtxgWzmnHhi5DrVCSEjyiOE +teyFPKV/Y6uv4q0+Jn2SP3aybVGMyw+Rq9ONHyaH/K+Ff7MpCirxYzOnje7t2JG 8IzC/k23n06Ou3ud/UqZbRj9IdUWNEt4AbnYsuWUPPhwdlh59wQCkKB4eQfJreBy 3Rvt6NZUxGjjykVJKQ3oHmnygK0IcFvvGGwgF3PmXchmWS5eM5sagH1RUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/PQ0B4HWswqIWaC4qtT/X4UhuYMB8GA1UdIwQY MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt MGRiY2JhMjc1NDE3LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3 LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL231Fb9N z5fKh8Ovr1MMhfJPhCbo60BJ+xxMDoLfMtvC4yCIq1vWzzJ8ao5Nmw2oyj53IFau 0+UwikIm5zxoKxeWQp2rKqbJRhdhZSTcYboGhYOvpsT9CzEf+qgkDJC/vIC0x7Az MBtxzz8+J8EZMGcEVCAiW7cOeO1wzLzvr+huOr7nGLYjISfXjUpO6ZzPq7ciTL47 YQXIM3TXhfscsfFYJLY3RG1nYRpEJfepn25tDKVX6DvTIIgh7WlXCF2x+dp4o+Az BIxfOz9HjYFrFrhbf8A/ZK5lgptBWJWYVQhI7QqMXfglXep2z1qmr9zF/ADPfsJa Eiy3OY4xMTpweQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:05 2025 by rpki-client