This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json) Hash identifier: MHZaQ0knYRFKlkVKkFDKxD9UuzfYN9kEFgVbptgDc18= Subject key identifier: 48:23:08:D1:73:9A:D4:55:1B:31:5C:26:62:2E:DD:B0:24:75:B0:8D Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa Certificate serial: 019AF12E31A06D20B54683A655F443C677EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:07 +0000 Manifest this update: Sat 06 Dec 2025 01:02:07 +0000 Manifest next update: Sun 07 Dec 2025 01:02:07 +0000 Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: Q3Y20erGDkfjCtVrUY3QrLUNt2+v69EDLY2CTrwi3fA=) 2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:31:a0:6d:20:b5:46:83:a6:55:f4:43:c6:77:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa Validity Not Before: Dec 6 01:02:07 2025 GMT Not After : Dec 7 01:02:07 2025 GMT Subject: CN=482308d1739ad4551b315c26622eddb02475b08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:45:dc:67:56:b1:fd:e1:87:f2:d9:5a:e3: e1:69:56:08:c4:89:a9:54:91:06:c7:cc:cf:c3:65: 11:be:9c:fa:3f:f1:f1:c5:6c:7b:ac:a7:8e:42:77: b5:89:5b:4e:a3:d3:83:97:bd:fa:bb:95:86:2c:38: f4:4d:00:cf:71:df:7b:12:46:8b:a7:b1:3f:46:86: 07:e5:29:a8:b7:31:a2:d1:9f:e3:93:98:00:9c:82: 22:3d:df:6f:5a:80:fe:94:10:09:2c:bf:c0:ad:64: 95:da:d5:f5:60:38:f3:7f:d4:db:ea:0d:ae:2a:82: 71:10:4d:42:d4:81:48:c1:ba:37:ef:7f:cd:8a:01: 53:e2:4c:71:1a:1c:91:31:a2:89:4f:13:c6:7b:1c: 22:4e:04:66:76:8b:95:68:89:7b:4b:d2:64:f1:11: c4:16:83:ff:56:05:ac:b5:40:85:f1:3d:12:7b:34: 41:ce:d7:e1:30:da:dc:5c:0d:8a:8d:69:8a:01:ae: 3b:9d:07:07:59:56:13:a2:e3:c7:0c:a3:ab:33:b3: 57:54:c8:93:d9:d6:58:d9:cb:93:e1:ba:3a:b3:0c: af:56:10:2f:79:f0:51:ce:6f:5d:d7:81:cf:0e:73: 10:d2:f7:1c:1e:39:e7:a0:69:08:f7:e5:de:a4:6f: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:23:08:D1:73:9A:D4:55:1B:31:5C:26:62:2E:DD:B0:24:75:B0:8D X509v3 Authority Key Identifier: keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:56:04:ef:7e:f3:50:ca:92:4d:45:57:ae:72:3e:3f:b9:18: b7:f1:06:dd:89:05:2f:78:e8:c4:c0:fa:19:e7:e8:6a:29:9f: 02:b5:29:da:b4:02:7b:74:ee:18:61:cb:12:77:5a:25:4f:1e: 02:c0:6d:22:f9:30:22:d2:f1:0c:5c:a4:cd:68:6e:bd:e7:18: 0d:15:86:f0:3e:e7:c0:8a:df:a4:5e:cf:b7:0c:2b:49:33:00: d1:47:19:f7:e0:1a:c5:97:8a:9e:79:5c:16:08:ce:49:87:df: 97:0a:1f:78:bd:e0:21:7d:60:b7:e0:30:b9:f5:1f:f1:97:16: 7c:5f:b0:09:c7:dc:3c:b1:f9:4b:c0:bc:af:5f:87:0b:a5:06: b9:04:cb:1f:98:18:1d:8c:9b:a3:f8:f5:4e:19:28:9c:9b:2f: 5f:5d:9a:6d:71:1a:01:4d:b1:e4:d6:84:ef:b9:03:2a:b3:3f: d3:39:aa:ac:22:11:38:2c:59:4c:e9:a0:66:68:ab:28:ad:c4: bd:95:99:c0:ee:2e:23:cc:bd:d2:d9:ec:51:ac:d1:99:bf:48: 2e:fa:51:8b:d4:c3:4e:2e:77:0a:1b:02:5b:84:07:28:b9:5e: c4:db:97:e5:93:a0:02:c4:97:dd:3b:0b:ad:d4:ac:bd:53:ea: a8:ac:b2:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjGgbSC1RoOmVfRDxnfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGEwZGQyZjk2NGU4NjBmNmJhNGMxNzYxMTJhNWQ3MTJi YTkzYWEwHhcNMjUxMjA2MDEwMjA3WhcNMjUxMjA3MDEwMjA3WjAzMTEwLwYDVQQD Eyg0ODIzMDhkMTczOWFkNDU1MWIzMTVjMjY2MjJlZGRiMDI0NzViMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VhF3GdWsf3hh/LZWuPhaVYIxImp VJEGx8zPw2URvpz6P/HxxWx7rKeOQne1iVtOo9ODl736u5WGLDj0TQDPcd97EkaL p7E/RoYH5SmotzGi0Z/jk5gAnIIiPd9vWoD+lBAJLL/ArWSV2tX1YDjzf9Tb6g2u KoJxEE1C1IFIwbo373/NigFT4kxxGhyRMaKJTxPGexwiTgRmdouVaIl7S9Jk8RHE FoP/VgWstUCF8T0SezRBztfhMNrcXA2KjWmKAa47nQcHWVYTouPHDKOrM7NXVMiT 2dZY2cuT4bo6swyvVhAvefBRzm9d14HPDnMQ0vccHjnnoGkI9+XepG+3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgjCNFzmtRVGzFcJmIu3bAkdbCNMB8GA1UdIwQY MBaAFF8KDdL5ZOhg9rpMF2ESpdcSupOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mZTNiNTYtOTRjYS00Mjk1LWIwY2Mt MTBiZWQyN2Q3NjZlLzEvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mZTNiNTYtOTRjYS00Mjk1LWIwY2MtMTBiZWQyN2Q3NjZl LzEvWHdvTjB2bGs2R0QydWt3WFlSS2wxeEs2azZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlYE737z UMqSTUVXrnI+P7kYt/EG3YkFL3joxMD6GefoaimfArUp2rQCe3TuGGHLEndaJU8e AsBtIvkwItLxDFykzWhuvecYDRWG8D7nwIrfpF7PtwwrSTMA0UcZ9+AaxZeKnnlc FgjOSYfflwofeL3gIX1gt+AwufUf8ZcWfF+wCcfcPLH5S8C8r1+HC6UGuQTLH5gY HYybo/j1ThkonJsvX12abXEaAU2x5NaE77kDKrM/0zmqrCIROCxZTOmgZmirKK3E vZWZwO4uI8y90tnsUazRmb9ILvpRi9TDTi53ChsCW4QHKLlexNuX5ZOgAsSX3TsL rdSsvVPqqKyyjw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:42 2025 by rpki-client