This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json) Hash identifier: WDKf4M/aqQ4VY4yEetJMkqCjYkb8zBIl+h4mq6Cq60I= Subject key identifier: EB:4A:73:C1:F2:E1:AD:A8:3A:56:B0:7B:D5:7F:62:D4:CB:7A:CC:83 Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9 Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9 Certificate serial: 019AF2ADCBE8DF2E1ED735B321BFFBCC0F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=) 2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=) 3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: eVFdqeaVrn0DH0v3/YIu9si+uBGgNj5uF7UERhn3cCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cb:e8:df:2e:1e:d7:35:b3:21:bf:fb:cc:0f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=eb4a73c1f2e1ada83a56b07bd57f62d4cb7acc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:5b:90:20:34:37:b1:8a:c2:8d:eb:69:03: 7e:07:5a:9c:c3:c5:72:1f:cb:de:2d:0b:f3:f0:cb: 48:a6:28:e8:cf:90:f0:02:fe:cb:8e:08:dd:b6:b6: 3e:1e:9c:a2:63:df:46:06:05:71:de:9d:02:ee:b5: c6:ad:3a:6c:45:c8:fe:96:73:99:30:62:68:1f:3e: 3a:81:81:cb:75:52:2a:f5:f5:df:24:0e:dc:26:91: a4:bc:b6:64:8f:08:4c:a7:29:11:74:89:3a:b1:8e: df:2e:5f:b7:b6:c0:49:00:89:7a:31:f3:c3:ac:4d: b4:eb:f8:9c:af:d0:35:de:1a:00:9b:fe:de:ec:76: 1a:2b:dd:79:96:fe:1b:ca:e8:98:77:9a:0d:e8:3e: 9e:a7:49:d5:7a:8a:37:c2:49:33:6e:f0:9a:ab:b0: eb:fe:93:6d:89:ce:32:a2:b0:e4:d7:dc:7f:fa:44: e9:5f:d9:04:8e:55:f4:a7:19:bf:88:cd:e1:ec:96: a1:99:00:35:3a:85:c6:98:95:62:77:52:ca:87:05: 95:1c:bd:1c:8c:c5:96:68:eb:49:5d:99:d9:84:17: 73:36:e1:66:4a:2b:77:a2:51:a4:ef:b2:b2:3e:14: 0d:e7:3b:d1:eb:48:45:ce:3f:a4:05:65:78:a8:b9: 4a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4A:73:C1:F2:E1:AD:A8:3A:56:B0:7B:D5:7F:62:D4:CB:7A:CC:83 X509v3 Authority Key Identifier: keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:69:8a:27:e7:1e:7a:7d:33:74:c3:c9:25:be:b3:03:01:44: b2:7d:08:8e:80:af:6e:fe:0d:a4:69:27:21:6a:04:c9:1b:a0: ed:18:98:d1:70:66:02:65:ec:3c:94:ce:d7:4d:96:35:f6:dd: cd:84:3d:ae:cb:25:74:de:7d:80:9e:cb:0a:19:68:a0:fc:a4: 2f:22:99:cb:fb:6e:2f:23:07:16:fc:66:9b:bb:ce:01:cd:48: 30:d0:bf:a9:b0:25:a2:47:a2:a7:37:e6:cf:e4:cd:c7:6c:e7: aa:5d:a8:ea:b5:59:0d:9d:6b:64:09:34:b7:be:a4:fc:e7:e5: b2:4f:88:86:04:97:3d:95:e3:a3:c9:50:dc:3b:69:bc:02:e2: a9:3a:6b:bc:6e:dd:9d:f7:5f:71:42:c9:a4:a5:a3:1f:af:ac: ec:11:68:21:e5:f3:c5:c6:5b:27:0e:cf:36:41:56:4e:fa:1e: c3:55:08:a6:a7:b5:7b:01:78:ba:57:20:d0:5c:a3:b6:66:58: e5:8d:45:a0:eb:21:3d:4e:ce:9b:1f:11:53:d6:1b:d7:a8:d0: d9:e8:6e:6c:1a:d8:0d:da:79:55:07:3b:de:6b:d3:8d:68:40: 9f:1e:6e:f1:22:36:de:20:da:5d:fc:69:aa:13:1b:19:56:fc: 7b:f6:f6:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcvo3y4e1zWzIb/7zA8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOTllOGQ1NzEzYTVlNjM4MmMwZDEzODlkNjI0MjgxNmY5 ZDZmYjkwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EyhlYjRhNzNjMWYyZTFhZGE4M2E1NmIwN2JkNTdmNjJkNGNiN2FjYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZpbkCA0N7GKwo3raQN+B1qcw8Vy H8veLQvz8MtIpijoz5DwAv7LjgjdtrY+HpyiY99GBgVx3p0C7rXGrTpsRcj+lnOZ MGJoHz46gYHLdVIq9fXfJA7cJpGkvLZkjwhMpykRdIk6sY7fLl+3tsBJAIl6MfPD rE206/icr9A13hoAm/7e7HYaK915lv4byuiYd5oN6D6ep0nVeoo3wkkzbvCaq7Dr /pNtic4yorDk19x/+kTpX9kEjlX0pxm/iM3h7JahmQA1OoXGmJVid1LKhwWVHL0c jMWWaOtJXZnZhBdzNuFmSit3olGk77KyPhQN5zvR60hFzj+kBWV4qLlKEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtKc8Hy4a2oOlawe9V/YtTLesyDMB8GA1UdIwQY MBaAFF2Z6NVxOl5jgsDROJ1iQoFvnW+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMt OWNhOGVhOTBlNjE3LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMtOWNhOGVhOTBlNjE3 LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWmKJ+ce en0zdMPJJb6zAwFEsn0IjoCvbv4NpGknIWoEyRug7RiY0XBmAmXsPJTO102WNfbd zYQ9rssldN59gJ7LChlooPykLyKZy/tuLyMHFvxmm7vOAc1IMNC/qbAlokeipzfm z+TNx2znql2o6rVZDZ1rZAk0t76k/Oflsk+IhgSXPZXjo8lQ3DtpvALiqTprvG7d nfdfcULJpKWjH6+s7BFoIeXzxcZbJw7PNkFWTvoew1UIpqe1ewF4ulcg0FyjtmZY 5Y1FoOshPU7Omx8RU9Yb16jQ2ehubBrYDdp5VQc73mvTjWhAnx5u8SI23iDaXfxp qhMbGVb8e/b2Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:29 2025 by rpki-client