This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft File: xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json) Hash identifier: WGEmv/mkzoB3pINKvE9ItXcFs8N67i8KyMjRmZH/fGA= Subject key identifier: 43:D0:99:88:C0:58:78:AF:07:DD:A2:87:92:C3:DC:7E:01:90:A2:F2 Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8 Certificate issuer: /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8 Certificate serial: 019AF50B4537C3EC22E65419C481323E4FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft Manifest number: 1180 Signing time: Sat 06 Dec 2025 19:02:27 +0000 Manifest this update: Sat 06 Dec 2025 19:02:27 +0000 Manifest next update: Sun 07 Dec 2025 19:02:27 +0000 Files and hashes: 1: setwbHKxCPa52Elr9rNK2rsq568.roa (hash: 02SvDqNnAJ5dRMEAMQRIAHSYXYUFEMZjO5nV2nUJjV0=) 2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: gWadPyW5cg3IiF5pAPLrPJ+r9Ta+HDI40AcHKZuqw+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:45:37:c3:ec:22:e6:54:19:c4:81:32:3e:4f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8 Validity Not Before: Dec 6 19:02:27 2025 GMT Not After : Dec 7 19:02:27 2025 GMT Subject: CN=43d09988c05878af07dda28792c3dc7e0190a2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:00:14:76:22:d1:c4:9b:72:a3:9b:e8:f1: ab:b5:30:6d:b8:1a:c7:e0:6b:4f:4a:5b:0e:a3:7f: 45:0c:95:c5:0c:48:8d:fe:6c:eb:8f:5f:98:08:0a: ce:35:59:31:40:d5:2a:02:ba:13:43:86:bd:03:c9: 80:f5:9f:07:40:99:f0:c4:8b:45:21:ce:11:2c:18: a8:90:15:29:ca:d6:73:35:cb:3e:d5:17:09:be:81: 88:60:e9:a1:de:ad:8d:5b:8f:cb:fd:4b:4b:a3:71: 15:7b:83:4c:21:6b:59:48:3f:00:1b:c2:9e:5d:9c: 74:ed:47:b1:6c:da:68:50:d1:84:b0:1d:16:44:c1: c0:56:2c:45:f8:39:8d:87:cc:f9:c3:41:65:d9:ed: 1b:a2:03:6b:78:90:46:9a:66:f0:b1:1b:02:0c:b8: f8:0f:99:a7:22:99:86:8e:7c:60:54:ce:e0:4e:db: d8:bc:3e:4a:4b:72:01:7a:32:54:e9:a4:ba:36:33: 19:98:51:95:ac:65:34:ea:31:c3:7c:af:9a:9d:af: f9:c3:99:fd:ec:f7:fd:1d:ed:85:1c:e7:8f:3d:7d: 59:cf:6b:da:3b:b3:ab:2a:4d:32:6f:00:30:5d:8a: 76:c0:2d:a0:22:af:56:6d:1e:0e:cc:6a:9c:e7:af: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D0:99:88:C0:58:78:AF:07:DD:A2:87:92:C3:DC:7E:01:90:A2:F2 X509v3 Authority Key Identifier: keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:39:2c:69:c0:6d:b5:0f:31:7c:c5:13:7b:32:95:7e:b5:72: d9:55:08:98:85:90:e8:84:1e:d7:d8:88:7a:36:05:fb:f0:3e: d2:39:b7:44:cc:79:ca:99:91:d5:3c:8b:4e:ff:5f:d2:7b:bd: b7:5b:87:c7:5f:ec:54:33:28:eb:39:89:88:24:ea:6f:46:58: 37:36:09:94:2e:33:65:f9:35:a9:85:69:3e:d7:92:15:4f:d8: e4:9b:fe:9a:4a:6b:29:a1:e6:dd:25:a7:aa:88:c2:82:55:29: 9c:75:ef:be:72:d7:46:3d:ac:92:71:1a:f6:0a:ea:47:a6:f5: 25:d6:86:a7:22:91:34:4d:8c:c1:a2:49:f0:93:ee:c1:04:61: 2b:cb:6d:07:72:98:94:69:f6:0e:6e:ff:50:5c:c4:71:00:bf: 7b:b3:4e:9d:8b:eb:cd:ed:a9:47:1e:66:75:79:73:22:f9:94: 22:3c:7e:94:0c:8b:37:80:63:d2:dd:60:41:27:a7:77:30:22: 99:88:a1:54:40:fe:d7:1d:05:c2:df:55:d8:86:bc:75:73:15: d7:4f:65:5a:d9:dd:83:e3:1c:aa:9a:ce:b7:c6:aa:ca:56:ff: 6b:50:05:34:2d:ca:c6:d2:1a:b2:c0:f6:15:73:5f:cd:b6:8c: ce:29:5a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0U3w+wi5lQZxIEyPk/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MzdjY2NkNWNkYTAxODk1YjE4OWNjYTk1ZjI5NmI1Y2Iz MGM3YzgwHhcNMjUxMjA2MTkwMjI3WhcNMjUxMjA3MTkwMjI3WjAzMTEwLwYDVQQD Eyg0M2QwOTk4OGMwNTg3OGFmMDdkZGEyODc5MmMzZGM3ZTAxOTBhMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv0AFHYi0cSbcqOb6PGrtTBtuBrH 4GtPSlsOo39FDJXFDEiN/mzrj1+YCArONVkxQNUqAroTQ4a9A8mA9Z8HQJnwxItF Ic4RLBiokBUpytZzNcs+1RcJvoGIYOmh3q2NW4/L/UtLo3EVe4NMIWtZSD8AG8Ke XZx07UexbNpoUNGEsB0WRMHAVixF+DmNh8z5w0Fl2e0bogNreJBGmmbwsRsCDLj4 D5mnIpmGjnxgVM7gTtvYvD5KS3IBejJU6aS6NjMZmFGVrGU06jHDfK+ana/5w5n9 7Pf9He2FHOePPX1Zz2vaO7OrKk0ybwAwXYp2wC2gIq9WbR4OzGqc569SIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPQmYjAWHivB92ih5LD3H4BkKLyMB8GA1UdIwQY MBaAFMY3zM1c2gGJWxicypXylrXLMMfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGpmTXpWemFBWWxiR0p6S2xmS1d0Y3N3eDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xZTA1MWUtM2NmOC00NzYzLWIzY2Yt YTc0NmE4MTIwZTliLzEveGpmTXpWemFBWWxiR0p6S2xmS1d0Y3N3eDhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8xZTA1MWUtM2NmOC00NzYzLWIzY2YtYTc0NmE4MTIwZTli LzEveGpmTXpWemFBWWxiR0p6S2xmS1d0Y3N3eDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzksacBt tQ8xfMUTezKVfrVy2VUImIWQ6IQe19iIejYF+/A+0jm3RMx5ypmR1TyLTv9f0nu9 t1uHx1/sVDMo6zmJiCTqb0ZYNzYJlC4zZfk1qYVpPteSFU/Y5Jv+mkprKaHm3SWn qojCglUpnHXvvnLXRj2sknEa9grqR6b1JdaGpyKRNE2MwaJJ8JPuwQRhK8ttB3KY lGn2Dm7/UFzEcQC/e7NOnYvrze2pRx5mdXlzIvmUIjx+lAyLN4Bj0t1gQSendzAi mYihVED+1x0Fwt9V2Ia8dXMV109lWtndg+McqprOt8aqylb/a1AFNC3KxtIassD2 FXNfzbaMzilaHA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:24 2025 by rpki-client