This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json) Hash identifier: 2ZjCx8sdB12jrv5/DpujQAoHAYa27Kql8CFIdD9AVl8= Subject key identifier: 77:22:36:10:2D:F3:1C:EE:60:BC:24:4C:DD:EB:52:15:5D:B1:64:16 Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Certificate serial: 019AF19B1FBBDF90A77C0E4B13D5F148475E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft Manifest number: 025F Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: JaIH9JI1QzF4ps/FLVodIzeCZN4+55iR86SuPJn63LY=) 2: Zwspllzg46eGGBAmk75fKGUNIMs.roa (hash: SP7acjr2fc/Seb508pgEvQAcmNKQjk7dz5FLGa5z8Eg=) 3: lWrjnOhkdLngH_rNw8_j4YqaRQo.roa (hash: K4bxS+l7j2oByKFzgDdI5RTjLvC4BrOSJXUtlpmQdfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1f:bb:df:90:a7:7c:0e:4b:13:d5:f1:48:47:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=772236102df31cee60bc244cddeb52155db16416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:4a:8b:8b:c7:cc:b7:fd:c1:1e:6b:62:c7: 9f:dc:68:ac:23:8f:c5:64:d8:1a:1d:ec:3b:e3:9c: 92:35:69:36:4f:8a:54:ac:55:5b:d1:d5:b0:b5:9f: f8:dd:2b:a0:88:7e:c8:a9:6b:4f:20:3e:2e:05:95: 2b:74:e3:95:3b:62:1e:85:d4:22:ec:13:e5:73:c2: 32:4c:bb:f9:91:92:07:e1:28:32:3d:86:99:8f:2d: 6b:55:d8:6c:1e:1f:16:14:71:29:6d:31:67:03:d9: 48:d6:20:b5:c5:e2:3a:93:52:20:9f:2a:c8:2a:e1: ca:eb:f6:2d:f7:ba:29:a8:8f:8e:b7:92:d1:95:68: f4:b9:32:4a:ad:c3:9b:a5:b6:97:61:0c:f7:06:df: 37:04:39:e2:57:bc:e2:38:e2:c8:06:15:e3:4f:78: 91:2f:38:2b:cd:d9:0e:60:b7:53:03:2e:14:b2:f2: 1a:8c:c7:06:73:05:1a:17:7c:18:d4:c5:ea:e7:93: 32:0f:34:00:9c:e1:f0:4a:5e:b2:b3:70:12:bb:ad: 36:29:e7:07:cd:1a:99:6d:a8:be:00:84:57:03:f5: 08:c6:3f:b4:61:dd:0c:8a:54:00:b2:78:c4:9b:86: 49:81:d5:d2:5c:a7:86:d6:b3:a8:1b:7e:76:c4:9e: d4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:22:36:10:2D:F3:1C:EE:60:BC:24:4C:DD:EB:52:15:5D:B1:64:16 X509v3 Authority Key Identifier: keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ea:d5:98:d1:35:44:12:95:ab:00:e6:3f:e3:37:7d:32:4a: bf:b7:03:9e:52:55:a4:6f:8b:9b:f4:ca:54:72:77:a6:a6:e9: c3:a6:17:97:02:56:b8:ca:4e:94:e3:c6:1d:c0:e6:91:7d:f9: 11:a1:9c:6a:2e:00:c6:3f:e9:e0:c7:76:8f:24:c6:29:9a:98: 0a:a3:30:15:48:b6:65:36:26:81:b8:0e:d2:ed:3c:11:88:c5: cc:c5:2d:22:e5:1f:d2:8b:2e:00:4e:6f:62:87:f8:16:3d:8f: 3f:7f:94:9e:01:b4:f0:73:b5:f6:85:aa:97:80:0c:c6:b3:94: 4f:56:e2:45:b7:7f:1b:7e:cc:be:16:9f:2d:02:1d:50:8f:8d: 53:11:14:a2:32:82:d0:d5:a0:39:86:04:53:8b:3f:3c:ca:e3: 45:c3:c4:a6:69:24:e1:62:e7:9a:fd:73:58:b5:5e:d7:c1:f9: a3:9c:03:f7:4f:54:c0:f6:3d:f7:ab:a6:b6:7d:c7:3a:c7:19: ee:70:e3:b1:81:f9:f0:ee:88:c2:4e:ad:f3:14:9a:ab:da:c9: db:25:2d:21:e4:d5:af:4a:40:c2:1a:7c:c0:8e:12:87:c8:a4: 81:53:b2:59:6a:6a:ca:e9:c1:6a:c8:b4:c9:56:bf:2f:14:b8: c4:66:0c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx+735CnfA5LE9XxSEdeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi ZmQyNDkwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD Eyg3NzIyMzYxMDJkZjMxY2VlNjBiYzI0NGNkZGViNTIxNTVkYjE2NDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC9Ki4vHzLf9wR5rYsef3GisI4/F ZNgaHew745ySNWk2T4pUrFVb0dWwtZ/43SugiH7IqWtPID4uBZUrdOOVO2IehdQi 7BPlc8IyTLv5kZIH4SgyPYaZjy1rVdhsHh8WFHEpbTFnA9lI1iC1xeI6k1IgnyrI KuHK6/Yt97opqI+Ot5LRlWj0uTJKrcObpbaXYQz3Bt83BDniV7ziOOLIBhXjT3iR LzgrzdkOYLdTAy4UsvIajMcGcwUaF3wY1MXq55MyDzQAnOHwSl6ys3ASu602KecH zRqZbai+AIRXA/UIxj+0Yd0MilQAsnjEm4ZJgdXSXKeG1rOoG352xJ7UqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHciNhAt8xzuYLwkTN3rUhVdsWQWMB8GA1UdIwQY MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt MjFmZDM1Y2Y0YmI5LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5 LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+rVmNE1 RBKVqwDmP+M3fTJKv7cDnlJVpG+Lm/TKVHJ3pqbpw6YXlwJWuMpOlOPGHcDmkX35 EaGcai4Axj/p4Md2jyTGKZqYCqMwFUi2ZTYmgbgO0u08EYjFzMUtIuUf0osuAE5v Yof4Fj2PP3+UngG08HO19oWql4AMxrOUT1biRbd/G37MvhafLQIdUI+NUxEUojKC 0NWgOYYEU4s/PMrjRcPEpmkk4WLnmv1zWLVe18H5o5wD909UwPY996umtn3HOscZ 7nDjsYH58O6Iwk6t8xSaq9rJ2yUtIeTVr0pAwhp8wI4Sh8ikgVOyWWpqyunBasi0 yVa/LxS4xGYMUA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:47 2025 by rpki-client