This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json) Hash identifier: Nj7LmnYwu5M7PRrqnp+xA/883EMrC0HOQPEbtzFCsJY= Subject key identifier: 3A:B5:88:D2:2A:1E:AC:97:59:33:AC:78:BB:37:35:42:53:06:3C:5E Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Certificate serial: 019AF31B9A059BDB262220FDAA32CF8756AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=) 2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=) 3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=) 4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=) 5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=) 6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=) 7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=) 8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: YroSPfaKqyKoxe0mkn3riqM6hLZ6U+L21Gu1SDhP4J4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9a:05:9b:db:26:22:20:fd:aa:32:cf:87:56:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=3ab588d22a1eac975933ac78bb37354253063c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:73:9f:61:aa:3c:3d:60:24:09:ca:f7:87: 1c:31:56:b0:2e:1f:9e:4d:4e:ca:a2:e4:f3:5a:be: 6e:7c:d0:91:a8:4a:82:6d:9e:fc:96:55:20:a4:68: 5c:07:73:5b:18:48:90:e9:0b:2d:b8:2f:f2:44:4e: d6:24:f4:7e:f9:a4:c1:4e:be:e1:54:f8:8a:ce:39: 8b:80:41:91:82:46:2e:f8:3b:f1:24:81:88:57:51: ab:0d:f1:a9:f2:2e:72:1a:76:e1:c3:f9:e2:16:32: 2a:68:10:c2:6e:a3:f1:36:77:68:80:bd:10:25:1e: 22:0a:48:3f:da:0c:e2:0a:5c:84:84:91:3b:bc:0b: c4:08:85:6f:47:dd:5f:d2:2e:33:fa:7b:56:40:42: a2:18:a0:81:bb:3c:c6:63:e5:9c:5e:ef:90:b0:37: 10:55:f4:f0:60:11:2a:92:9b:b3:22:5b:b2:05:cc: 7c:aa:95:c8:64:b7:62:6d:50:56:09:e3:c6:84:6f: 05:5c:0e:48:f3:05:df:df:96:08:a0:78:1a:2a:d5: 85:80:c8:70:88:c5:a8:14:d9:c6:af:c6:f9:90:af: 69:c6:05:ae:40:2a:0e:71:4f:d5:cf:b3:95:e1:5a: a1:1c:48:cf:ef:87:96:dd:7f:a3:1a:f3:91:20:26: f2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:88:D2:2A:1E:AC:97:59:33:AC:78:BB:37:35:42:53:06:3C:5E X509v3 Authority Key Identifier: keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b5:3e:cb:fc:7e:31:fe:5b:b3:8d:fb:28:e2:3d:20:38:a5: 72:48:5a:3b:f0:cb:ec:a1:aa:5f:b4:51:d7:6d:05:13:68:70: 18:78:08:66:81:27:df:58:60:e7:c8:b3:c1:7e:cc:36:61:4c: 41:da:f3:9f:06:cd:46:87:59:b2:61:b7:b1:dd:33:58:4e:69: c7:a4:3d:57:a3:b0:ca:90:96:e6:5d:9f:bf:19:a3:ec:12:fc: fe:35:39:37:b1:38:5b:33:52:23:c4:17:ff:4f:f9:27:80:45: 52:e7:82:00:fc:4a:ff:30:8a:63:dc:af:51:e5:a2:96:82:67: ec:0b:fa:0e:3e:3d:b8:81:83:d3:28:ca:86:ef:3d:84:29:fa: 33:1d:d3:a6:4c:af:cf:0a:77:17:32:59:ec:25:8d:56:18:58: 4d:ec:71:64:5b:ed:f8:4c:62:7b:85:ab:43:c4:b2:63:e0:14: d8:ca:6e:db:83:67:2e:87:54:ba:39:c3:a0:12:3d:14:7f:e3: 99:a0:6d:43:cb:8c:02:7c:fe:b5:0e:f5:55:34:13:a6:38:bb: 01:23:3c:4f:7c:10:c7:1d:d3:ba:34:49:15:52:1d:be:5d:4f: b1:0c:2a:61:f2:a7:22:f4:49:1a:03:20:a9:85:a6:2f:6d:e0: b8:6b:13:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5oFm9smIiD9qjLPh1atMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm MGY2NzEwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD EygzYWI1ODhkMjJhMWVhYzk3NTkzM2FjNzhiYjM3MzU0MjUzMDYzYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZJzn2GqPD1gJAnK94ccMVawLh+e TU7KouTzWr5ufNCRqEqCbZ78llUgpGhcB3NbGEiQ6QstuC/yRE7WJPR++aTBTr7h VPiKzjmLgEGRgkYu+DvxJIGIV1GrDfGp8i5yGnbhw/niFjIqaBDCbqPxNndogL0Q JR4iCkg/2gziClyEhJE7vAvECIVvR91f0i4z+ntWQEKiGKCBuzzGY+WcXu+QsDcQ VfTwYBEqkpuzIluyBcx8qpXIZLdibVBWCePGhG8FXA5I8wXf35YIoHgaKtWFgMhw iMWoFNnGr8b5kK9pxgWuQCoOcU/Vz7OV4VqhHEjP74eW3X+jGvORICbyiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq1iNIqHqyXWTOseLs3NUJTBjxeMB8GA1UdIwQY MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt NGM5OGQ5YTUxNDA1LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1 LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7U+y/x+ Mf5bs437KOI9IDilckhaO/DL7KGqX7RR120FE2hwGHgIZoEn31hg58izwX7MNmFM QdrznwbNRodZsmG3sd0zWE5px6Q9V6OwypCW5l2fvxmj7BL8/jU5N7E4WzNSI8QX /0/5J4BFUueCAPxK/zCKY9yvUeWiloJn7Av6Dj49uIGD0yjKhu89hCn6Mx3Tpkyv zwp3FzJZ7CWNVhhYTexxZFvt+Exie4WrQ8SyY+AU2Mpu24NnLodUujnDoBI9FH/j maBtQ8uMAnz+tQ71VTQTpji7ASM8T3wQxx3TujRJFVIdvl1PsQwqYfKnIvRJGgMg qYWmL23guGsTMg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:40 2025 by rpki-client