This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json) Hash identifier: IKBe3o7hoyLd0AvXCSh/6O9jlJALlxCR5vPU2+ShOIM= Subject key identifier: 3B:2C:F1:2D:96:30:E0:44:FA:47:29:10:10:75:AB:82:56:A5:C0:7C Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17 Certificate serial: 019AF6FA1AA2CBEC8D44150F9324EE00EED6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft Manifest number: 0341 Signing time: Sun 07 Dec 2025 04:02:57 +0000 Manifest this update: Sun 07 Dec 2025 04:02:57 +0000 Manifest next update: Mon 08 Dec 2025 04:02:57 +0000 Files and hashes: 1: X7HkSzc73grEKj4u4ebonuY_N3k.roa (hash: OyEQG3xPXjnpnin1BNjI7sPjB8DI9jWlTT019Ki3K7k=) 2: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: B39qA8VFPK1KWh4hAslkUM0gKCHf6puFKbbM6OXXy+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:fa:1a:a2:cb:ec:8d:44:15:0f:93:24:ee:00:ee:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17 Validity Not Before: Dec 7 04:02:57 2025 GMT Not After : Dec 8 04:02:57 2025 GMT Subject: CN=3b2cf12d9630e044fa4729101075ab8256a5c07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:41:30:49:84:d2:b7:4c:81:60:c0:66:a6: c7:d2:f9:e4:13:67:55:ef:b3:99:97:e8:05:aa:f8: 46:cf:48:8d:3b:ae:9b:90:31:e7:07:30:fc:37:9d: 1f:3e:88:ee:94:b7:a0:08:2e:81:58:5b:eb:46:61: 58:ff:7a:f8:ef:78:ef:fa:b1:da:69:11:90:8f:a5: 90:3b:72:f3:7d:10:f4:f8:3b:24:77:31:5c:9f:89: 33:23:50:6f:ad:cd:21:88:64:c0:24:3a:81:84:0a: 5f:88:c7:3a:4e:b6:38:86:6b:46:d7:07:8e:57:6b: 2b:70:67:a2:32:f5:34:d4:9c:0c:98:05:cf:e0:5e: be:0f:8d:41:66:79:e4:2c:fd:8a:6c:37:5b:2e:f3: f7:23:59:fc:c7:d9:56:9b:a1:e1:5a:03:9e:40:94: ed:95:2a:e0:a7:64:85:8e:8e:4d:0b:cd:95:49:03: d1:73:0e:cc:70:27:16:b6:76:ab:1e:8f:68:d0:5e: 4e:2c:1e:1c:35:3d:6b:72:21:7b:3f:30:9b:7d:4e: 3b:74:e4:db:7a:c8:2f:41:ae:01:02:2d:9d:73:c4: 6e:8b:a5:dc:ef:4d:0c:02:85:94:16:c6:10:6a:b3: 30:d0:a1:4c:d6:24:75:c9:f2:4f:e7:04:95:37:72: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:F1:2D:96:30:E0:44:FA:47:29:10:10:75:AB:82:56:A5:C0:7C X509v3 Authority Key Identifier: keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:14:79:db:11:37:93:c3:e6:b0:ec:e1:d5:ea:4b:32:ad:15: a1:b3:af:31:da:12:d1:7b:f2:28:81:5d:64:8c:43:4c:9d:65: cb:10:5c:68:da:fb:68:e0:41:28:0c:68:38:4e:a3:19:41:d4: 4f:5c:b2:f3:2e:b1:0c:d0:3c:b2:a9:c2:27:e8:b2:03:e7:8a: 82:99:2a:e8:6c:80:4e:e1:04:33:2b:ac:89:cf:80:b2:22:74: f3:54:65:66:ed:cb:37:38:06:84:41:ee:61:e0:6b:d9:14:be: 5f:dd:89:26:fb:1d:ed:06:84:fd:94:a1:15:e2:e4:07:17:0e: f7:81:c0:d1:71:b5:2f:5a:20:e4:18:12:3f:bd:70:f3:10:03: 13:d4:a2:2a:a7:f6:f6:9e:f7:85:cd:7a:93:1b:07:48:af:dc: e4:b8:c1:30:91:bc:bc:59:3d:81:76:21:e1:8e:33:cc:38:6c: 70:7b:c6:71:15:1f:1d:f0:0a:d8:4a:4b:7d:f8:8f:8e:33:d7: 5d:89:d5:39:96:bd:b0:c7:da:aa:80:71:de:2b:43:af:84:1d: 8a:a5:49:07:1d:52:6c:9a:f8:03:f1:78:ae:27:53:cb:aa:e5: 61:8b:fb:45:3c:06:7b:22:fb:59:22:cb:e8:4a:31:e8:fe:4e: 63:1c:ed:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+hqiy+yNRBUPkyTuAO7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjllODU2ZjA0OTVjODQ5MGQ1MTI0ZThjZmJhZjA4ZDcw ZGZiMTcwHhcNMjUxMjA3MDQwMjU3WhcNMjUxMjA4MDQwMjU3WjAzMTEwLwYDVQQD EygzYjJjZjEyZDk2MzBlMDQ0ZmE0NzI5MTAxMDc1YWI4MjU2YTVjMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBhBMEmE0rdMgWDAZqbH0vnkE2dV 77OZl+gFqvhGz0iNO66bkDHnBzD8N50fPojulLegCC6BWFvrRmFY/3r473jv+rHa aRGQj6WQO3LzfRD0+DskdzFcn4kzI1Bvrc0hiGTAJDqBhApfiMc6TrY4hmtG1weO V2srcGeiMvU01JwMmAXP4F6+D41BZnnkLP2KbDdbLvP3I1n8x9lWm6HhWgOeQJTt lSrgp2SFjo5NC82VSQPRcw7McCcWtnarHo9o0F5OLB4cNT1rciF7PzCbfU47dOTb esgvQa4BAi2dc8Rui6Xc700MAoWUFsYQarMw0KFM1iR1yfJP5wSVN3IVvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDss8S2WMOBE+kcpEBB1q4JWpcB8MB8GA1UdIwQY MBaAFF356FbwSVyEkNUSToz7rwjXDfsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAt ZTFlYTQ1M2M1MjU3LzEvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAtZTFlYTQ1M2M1MjU3 LzEvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBR52xE3 k8PmsOzh1epLMq0VobOvMdoS0XvyKIFdZIxDTJ1lyxBcaNr7aOBBKAxoOE6jGUHU T1yy8y6xDNA8sqnCJ+iyA+eKgpkq6GyATuEEMyusic+AsiJ081RlZu3LNzgGhEHu YeBr2RS+X92JJvsd7QaE/ZShFeLkBxcO94HA0XG1L1og5BgSP71w8xADE9SiKqf2 9p73hc16kxsHSK/c5LjBMJG8vFk9gXYh4Y4zzDhscHvGcRUfHfAK2EpLffiPjjPX XYnVOZa9sMfaqoBx3itDr4QdiqVJBx1SbJr4A/F4ridTy6rlYYv7RTwGeyL7WSLL 6Eox6P5OYxztFA== -----END CERTIFICATE-----Generated at Sun Dec 7 09:01:44 2025 by rpki-client