This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json) Hash identifier: JbAvWrVGGPeHepv7wQE2BVEAfbzlWjy2rRbBQY+ciek= Subject key identifier: 81:F9:20:01:34:DC:AD:C8:2A:20:74:4A:87:55:7C:8D:CF:E3:C1:8A Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e Certificate serial: 019AF31C4A5601F0747FF33D8611FDCB6732 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft Manifest number: 06B7 Signing time: Sat 06 Dec 2025 10:01:48 +0000 Manifest this update: Sat 06 Dec 2025 10:01:48 +0000 Manifest next update: Sun 07 Dec 2025 10:01:48 +0000 Files and hashes: 1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=) 2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: yOmFM5UysDJrKl2zgSwfo1eSHkQGrTSZJ5zaKUwLDM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4a:56:01:f0:74:7f:f3:3d:86:11:fd:cb:67:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e Validity Not Before: Dec 6 10:01:48 2025 GMT Not After : Dec 7 10:01:48 2025 GMT Subject: CN=81f9200134dcadc82a20744a87557c8dcfe3c18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:0a:41:b0:c8:2d:2c:96:dd:aa:47:91:dd: 35:3c:df:39:fa:e6:61:5f:8f:8b:bc:d5:35:83:53: 8f:69:fa:e3:f4:29:9f:73:b8:ea:bb:f3:7b:26:7b: 48:94:e8:9d:99:a9:e3:f2:6d:a2:5e:c1:ac:a8:3b: a5:d5:4f:57:ae:c9:74:3c:46:af:8f:78:7d:3b:8f: 58:76:4e:5b:2a:7f:dc:10:27:29:8a:d9:70:7f:99: e8:2c:58:37:34:31:82:60:6a:9d:d0:a8:37:99:bd: 06:c7:90:a6:c1:65:06:d5:4a:d4:96:61:e0:11:ac: 1f:d3:27:1b:75:51:e2:c3:de:70:b4:57:fa:a2:70: a6:a3:9c:e7:3e:85:8c:f8:aa:47:27:02:dd:01:f0: 6d:9d:1a:12:47:7c:75:7b:ed:d3:82:50:49:bc:14: 3e:0d:8a:97:d2:0c:74:82:36:3e:62:60:2c:af:04: ab:98:69:75:ba:86:5f:7e:07:00:25:28:b2:ff:3d: 4a:96:72:37:b6:a3:82:05:3f:52:e6:96:7e:19:3f: 08:b3:f8:a8:fe:d1:19:4c:95:aa:76:5c:2e:88:f2: cb:07:d7:69:68:fd:a3:8f:78:32:13:13:0c:b8:48: ba:2c:96:a0:20:0c:2e:dd:90:05:22:3a:dd:cf:fc: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F9:20:01:34:DC:AD:C8:2A:20:74:4A:87:55:7C:8D:CF:E3:C1:8A X509v3 Authority Key Identifier: keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:93:e6:b9:51:05:6a:ec:f7:c7:dd:cb:a6:77:02:ba:e4:43: 55:78:12:8a:37:c3:75:15:b4:d7:83:07:4d:a7:a1:a2:7f:14: ff:6a:60:15:1c:ac:9a:fe:f8:3e:57:ee:3f:94:55:73:e6:3b: ff:40:dc:ba:84:85:be:c3:e0:19:b7:1c:b8:82:bf:c4:7f:c2: a8:67:0a:2d:16:c0:91:a9:74:7d:70:1e:e3:e4:fe:e6:30:85: 5f:42:17:55:51:85:90:0a:18:a5:56:50:77:b3:e4:d3:e8:8d: f0:58:c4:3e:ad:98:17:03:e3:c0:2a:5e:b4:7a:8b:ad:3c:6d: 8e:d0:07:83:8a:d9:70:6c:b1:bc:6e:b6:f6:3b:67:65:3c:dc: 8b:3f:26:6d:4d:bf:95:f3:27:0c:9a:ad:68:e3:71:99:93:f7: 7b:38:4b:a4:f3:73:93:26:17:39:e4:da:52:c2:c4:ec:7c:1f: 3a:a1:0e:a6:9c:bc:d3:15:f0:60:06:fe:38:a6:f7:20:54:86: ec:b1:2f:64:6b:cd:3a:50:30:07:ca:a8:16:bb:11:95:4c:02: 62:5e:ca:74:fe:db:96:59:b9:c8:59:89:bc:b7:0e:97:83:20: 09:a4:f1:82:27:46:6d:a2:28:fe:ce:0b:b5:9d:36:47:5e:c9: af:84:2b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEpWAfB0f/M9hhH9y2cyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Yzc4Njc1OTEyMDBjMWY1ZjlmZDBjYzNkZTk5NTRkYzEz OTg2MmUwHhcNMjUxMjA2MTAwMTQ4WhcNMjUxMjA3MTAwMTQ4WjAzMTEwLwYDVQQD Eyg4MWY5MjAwMTM0ZGNhZGM4MmEyMDc0NGE4NzU1N2M4ZGNmZTNjMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYcKQbDILSyW3apHkd01PN85+uZh X4+LvNU1g1OPafrj9Cmfc7jqu/N7JntIlOidmanj8m2iXsGsqDul1U9Xrsl0PEav j3h9O49Ydk5bKn/cECcpitlwf5noLFg3NDGCYGqd0Kg3mb0Gx5CmwWUG1UrUlmHg Eawf0ycbdVHiw95wtFf6onCmo5znPoWM+KpHJwLdAfBtnRoSR3x1e+3TglBJvBQ+ DYqX0gx0gjY+YmAsrwSrmGl1uoZffgcAJSiy/z1KlnI3tqOCBT9S5pZ+GT8Is/io /tEZTJWqdlwuiPLLB9dpaP2jj3gyExMMuEi6LJagIAwu3ZAFIjrdz/wI/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIH5IAE03K3IKiB0SodVfI3P48GKMB8GA1UdIwQY MBaAFMbHhnWRIAwfX5/QzD3plU3BOYYuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hNWFkNTAtNzFmZC00MThmLWE0MzUt ODAzYzliNDFiOGU5LzEveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9hNWFkNTAtNzFmZC00MThmLWE0MzUtODAzYzliNDFiOGU5 LzEveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpPmuVEF auz3x93LpncCuuRDVXgSijfDdRW014MHTaehon8U/2pgFRysmv74PlfuP5RVc+Y7 /0DcuoSFvsPgGbccuIK/xH/CqGcKLRbAkal0fXAe4+T+5jCFX0IXVVGFkAoYpVZQ d7Pk0+iN8FjEPq2YFwPjwCpetHqLrTxtjtAHg4rZcGyxvG629jtnZTzciz8mbU2/ lfMnDJqtaONxmZP3ezhLpPNzkyYXOeTaUsLE7HwfOqEOppy80xXwYAb+OKb3IFSG 7LEvZGvNOlAwB8qoFrsRlUwCYl7KdP7bllm5yFmJvLcOl4MgCaTxgidGbaIo/s4L tZ02R17Jr4Qrfg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:27 2025 by rpki-client