This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json) Hash identifier: fPD9ez50PPSPtKNi5iRkMgQKd4V6MGKGvUMNOHl2r2Q= Subject key identifier: FC:21:BB:CB:FA:B9:FF:7F:B5:31:08:D0:30:49:FB:5F:9E:9A:47:AF Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09 Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09 Certificate serial: 019AF42E49214837A10CBDE4C6AD49D434D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft Manifest number: 037E Signing time: Sat 06 Dec 2025 15:01:05 +0000 Manifest this update: Sat 06 Dec 2025 15:01:05 +0000 Manifest next update: Sun 07 Dec 2025 15:01:05 +0000 Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=) 2: qfkl4ugDwVER8WWCfmspxbN_99Q.roa (hash: Hk6Dp+LsA1AjgFfnUQPOphNg3N7O/mK1D22CLXcTXWU=) 3: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: Lm4w0TL1x9PoXGkTKm9CF0sSFG/Btize+1dOM/RQe3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:49:21:48:37:a1:0c:bd:e4:c6:ad:49:d4:34:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09 Validity Not Before: Dec 6 15:01:05 2025 GMT Not After : Dec 7 15:01:05 2025 GMT Subject: CN=fc21bbcbfab9ff7fb53108d03049fb5f9e9a47af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:2b:99:e6:ea:8b:4c:73:5d:79:71:aa:2f: d7:11:4f:de:e5:37:e4:6c:63:b4:b4:e4:fb:5d:91: f6:86:90:76:be:4d:4d:18:5b:5b:b1:68:d5:f3:27: bd:41:c3:a8:70:44:a9:f7:ca:1f:a2:9c:70:e7:09: 55:b8:a4:7b:ae:a8:7c:b8:84:11:b9:2f:b9:63:f3: ac:f3:9c:8a:e6:cb:eb:a8:c1:eb:36:76:4c:35:53: 67:69:80:b3:3f:c2:61:c1:f0:51:a9:71:b9:1a:0d: b9:75:be:8d:aa:cf:37:de:e0:3c:a7:e4:1c:04:8f: a6:39:af:e3:b4:98:ca:17:cf:8c:e2:c4:9a:c0:ad: d6:fa:a9:b9:92:c5:eb:dd:e0:d4:8f:0e:8e:76:ae: 22:e8:d4:cf:ac:01:81:ec:0e:92:6e:11:fd:f5:d6: 2f:08:5c:3d:00:b5:dd:14:da:f2:33:95:c2:b2:ee: 83:06:2d:8c:27:e7:b1:f8:e9:bf:b1:b1:50:1c:9d: f2:ac:d2:5b:00:44:fe:8f:df:92:27:56:2b:16:55: 6f:02:0c:9a:fd:07:3b:c7:4d:6f:93:54:b9:ac:0c: cc:c9:b2:72:88:fe:13:d1:92:22:8c:93:81:2f:ea: 12:31:15:28:58:c8:ba:61:66:b0:a1:a3:c8:84:42: ab:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:21:BB:CB:FA:B9:FF:7F:B5:31:08:D0:30:49:FB:5F:9E:9A:47:AF X509v3 Authority Key Identifier: keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:95:ee:9e:f9:ef:ee:42:19:d4:49:c5:fc:d4:20:46:e9:be: 35:4d:b7:fb:45:8e:6e:3d:1f:c5:42:39:7d:74:f0:26:f9:fd: 86:f2:91:be:f6:93:3f:a3:76:45:96:8a:e2:bf:96:29:76:98: 37:de:c0:49:d6:99:59:d5:67:31:d4:92:f2:e0:c6:73:6e:43: 7e:02:53:7d:77:3c:91:7f:03:ac:80:62:e7:3f:c3:07:a6:db: 72:af:05:e1:49:8a:06:17:67:77:f9:4e:a7:88:57:d6:9a:e5: 22:a1:4e:b0:f2:4d:64:58:62:4a:07:d5:af:25:3e:02:d1:25: 2c:e8:a0:01:d0:1f:52:fc:52:7e:04:49:88:03:cc:c4:e5:92: ba:2c:be:96:f6:88:ba:e7:48:0f:de:5b:a8:1e:36:63:f2:68: 99:9a:fd:fe:ca:8e:69:33:fc:ff:52:71:75:29:ec:ef:74:a1: 99:0d:6c:8b:47:0a:50:45:ad:c3:99:5a:f5:0f:e4:d2:0d:12: 02:a4:1e:f5:3b:d3:35:dc:9f:be:57:48:64:b7:8c:9b:f4:52: 93:3b:7e:2d:3a:e5:28:58:cb:9d:fd:b7:58:0e:02:99:a3:b5: ff:3f:0e:ff:2c:8a:12:47:3e:45:00:12:24:b5:b2:fd:e4:b9: 17:3f:d9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkkhSDehDL3kxq1J1DTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NTYxM2Q1OTk5ZjM2MzI5ODVlZDg5YTAyZWZhYWJkMTg5 MGJhMDkwHhcNMjUxMjA2MTUwMTA1WhcNMjUxMjA3MTUwMTA1WjAzMTEwLwYDVQQD EyhmYzIxYmJjYmZhYjlmZjdmYjUzMTA4ZDAzMDQ5ZmI1ZjllOWE0N2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXkrmebqi0xzXXlxqi/XEU/e5Tfk bGO0tOT7XZH2hpB2vk1NGFtbsWjV8ye9QcOocESp98ofopxw5wlVuKR7rqh8uIQR uS+5Y/Os85yK5svrqMHrNnZMNVNnaYCzP8JhwfBRqXG5Gg25db6Nqs833uA8p+Qc BI+mOa/jtJjKF8+M4sSawK3W+qm5ksXr3eDUjw6Odq4i6NTPrAGB7A6SbhH99dYv CFw9ALXdFNryM5XCsu6DBi2MJ+ex+Om/sbFQHJ3yrNJbAET+j9+SJ1YrFlVvAgya /Qc7x01vk1S5rAzMybJyiP4T0ZIijJOBL+oSMRUoWMi6YWawoaPIhEKrUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwhu8v6uf9/tTEI0DBJ+1+emkevMB8GA1UdIwQY MBaAFMZWE9WZnzYymF7YmgLvqr0YkLoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2Ut NjUwOTkyZjJhMTc0LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2UtNjUwOTkyZjJhMTc0 LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpXunvnv 7kIZ1EnF/NQgRum+NU23+0WObj0fxUI5fXTwJvn9hvKRvvaTP6N2RZaK4r+WKXaY N97ASdaZWdVnMdSS8uDGc25DfgJTfXc8kX8DrIBi5z/DB6bbcq8F4UmKBhdnd/lO p4hX1prlIqFOsPJNZFhiSgfVryU+AtElLOigAdAfUvxSfgRJiAPMxOWSuiy+lvaI uudID95bqB42Y/JomZr9/sqOaTP8/1JxdSns73ShmQ1si0cKUEWtw5la9Q/k0g0S AqQe9TvTNdyfvldIZLeMm/RSkzt+LTrlKFjLnf23WA4CmaO1/z8O/yyKEkc+RQAS JLWy/eS5Fz/Zwg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:43:33 2025 by rpki-client