This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json) Hash identifier: 0jpk3lcxkn3Fe1UJ/gmRwHLrbzVOhlSKCS/dBMp/x68= Subject key identifier: 90:39:70:4B:89:ED:73:F6:A9:B3:5B:5B:AD:6A:3F:9F:32:42:28:BA Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03 Certificate serial: 019AF49BBC8FF0A406EE50891C4917295C3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft Manifest number: 0331 Signing time: Sat 06 Dec 2025 17:00:38 +0000 Manifest this update: Sat 06 Dec 2025 17:00:38 +0000 Manifest next update: Sun 07 Dec 2025 17:00:38 +0000 Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=) 2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: kZ1/MugxmNatJwFCP9bCSOm9ncWhpKiALi7ZdGTi5ic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:bc:8f:f0:a4:06:ee:50:89:1c:49:17:29:5c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03 Validity Not Before: Dec 6 17:00:38 2025 GMT Not After : Dec 7 17:00:38 2025 GMT Subject: CN=9039704b89ed73f6a9b35b5bad6a3f9f324228ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:84:6a:37:74:ae:99:0e:cc:b5:25:f4:fc:fd: f0:c5:4b:e3:df:51:d3:9c:9d:bb:c8:e7:a2:93:31: 5f:e0:fe:8b:52:55:fc:43:ad:7a:9a:e6:1c:ad:46: 93:29:6b:cb:9e:58:82:9b:1f:69:0f:dc:bc:58:a8: 45:90:ee:2f:9e:1a:48:ea:64:85:c0:4d:8e:7b:ed: 20:ae:b0:f8:bb:39:db:e4:1b:74:c0:ad:69:88:fc: d1:c1:d6:f9:15:32:bf:ce:85:dc:97:a6:14:ca:d8: 66:a4:88:9d:e2:90:3b:f3:bd:f3:59:b6:90:f1:1a: 8f:3a:ba:94:98:71:11:a6:8c:7a:1a:0f:c6:e6:ad: 75:29:79:91:1c:3a:db:c0:95:ce:71:ef:45:f3:5e: fe:eb:74:ed:8c:91:cf:0a:23:59:cd:e0:60:d7:9e: 44:47:76:c5:11:0a:bd:8e:10:b4:92:6f:ca:fe:da: fc:15:cd:73:58:f0:4b:1e:a4:4e:e6:49:dc:e4:24: e1:bd:47:f5:04:36:c8:40:f5:6e:ff:78:f5:c3:1f: 98:78:6e:5a:d2:e1:05:ee:1e:e1:9c:fb:1b:26:b0: 7c:15:e0:34:61:d2:42:a1:bd:04:4a:22:82:72:dd: 44:1c:62:8f:ed:8a:b6:05:eb:34:33:9f:68:c8:a8: c1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:39:70:4B:89:ED:73:F6:A9:B3:5B:5B:AD:6A:3F:9F:32:42:28:BA X509v3 Authority Key Identifier: keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:47:68:82:cd:67:bb:d4:54:ab:62:35:35:df:69:c5:18:cb: b2:80:e2:6f:4e:d9:99:b4:d1:43:a9:30:92:82:3c:96:70:8b: fe:22:39:e6:0c:b3:fd:61:5c:06:a3:b5:df:df:75:0f:31:e2: 42:36:2c:10:f1:3c:4f:8f:42:fc:9d:62:98:25:1b:d7:e6:41: 31:19:63:45:d3:a3:fa:84:04:9e:34:36:7b:96:35:e4:51:c9: b3:43:41:03:e5:3d:59:9b:16:85:3a:91:ed:3e:4d:d2:f4:c9: 02:76:a9:63:f5:5e:2e:6f:7e:60:bd:e2:01:8f:6f:c0:40:b5: 6a:81:47:3b:08:b9:42:f4:4f:99:13:11:ad:07:24:6f:84:bb: 87:d7:2b:6f:98:d8:45:a5:d0:d9:28:f5:7d:46:96:b0:7c:89: 43:88:c1:ab:d6:3b:3c:83:f0:f1:cc:3b:b9:a7:9a:3d:8e:b4: c7:39:f1:ff:cd:f7:e4:24:0f:69:6e:9f:c5:a8:7d:2b:d5:6b: 5d:46:02:00:21:b7:e7:67:9e:d5:69:42:ff:d0:7e:6c:22:14: 41:c9:04:66:db:4f:da:17:48:68:9d:86:6e:6a:17:28:35:57: 21:6e:92:70:cd:76:55:7a:a6:e0:f8:1e:31:7f:50:9e:b5:11: 11:32:c6:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7yP8KQG7lCJHEkXKVw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTE1ZTk1OGExMTQyNmE1NTYyODVlMjhhZTM0MGYwYTI1 ZDJhMDMwHhcNMjUxMjA2MTcwMDM4WhcNMjUxMjA3MTcwMDM4WjAzMTEwLwYDVQQD Eyg5MDM5NzA0Yjg5ZWQ3M2Y2YTliMzViNWJhZDZhM2Y5ZjMyNDIyOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIRqN3SumQ7MtSX0/P3wxUvj31HT nJ27yOeikzFf4P6LUlX8Q616muYcrUaTKWvLnliCmx9pD9y8WKhFkO4vnhpI6mSF wE2Oe+0grrD4uznb5Bt0wK1piPzRwdb5FTK/zoXcl6YUythmpIid4pA7873zWbaQ 8RqPOrqUmHERpox6Gg/G5q11KXmRHDrbwJXOce9F817+63TtjJHPCiNZzeBg155E R3bFEQq9jhC0km/K/tr8Fc1zWPBLHqRO5knc5CThvUf1BDbIQPVu/3j1wx+YeG5a 0uEF7h7hnPsbJrB8FeA0YdJCob0ESiKCct1EHGKP7Yq2Bes0M59oyKjBlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA5cEuJ7XP2qbNbW61qP58yQii6MB8GA1UdIwQY MBaAFF3hXpWKEUJqVWKF4orjQPCiXSoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEt ODJlZWJkYzQ1OGZlLzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEtODJlZWJkYzQ1OGZl LzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUdogs1n u9RUq2I1Nd9pxRjLsoDib07ZmbTRQ6kwkoI8lnCL/iI55gyz/WFcBqO13991DzHi QjYsEPE8T49C/J1imCUb1+ZBMRljRdOj+oQEnjQ2e5Y15FHJs0NBA+U9WZsWhTqR 7T5N0vTJAnapY/VeLm9+YL3iAY9vwEC1aoFHOwi5QvRPmRMRrQckb4S7h9crb5jY RaXQ2Sj1fUaWsHyJQ4jBq9Y7PIPw8cw7uaeaPY60xznx/8335CQPaW6fxah9K9Vr XUYCACG352ee1WlC/9B+bCIUQckEZttP2hdIaJ2GbmoXKDVXIW6ScM12VXqm4Pge MX9QnrURETLGPA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:15 2025 by rpki-client