This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json) Hash identifier: ym0jnj974TYPoEe53xetqCPaX5eOZgt6aWcLJPN6Uus= Subject key identifier: F6:22:7E:8E:B5:E0:46:00:68:56:01:66:05:95:91:8F:F4:D4:73:D4 Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0 Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0 Certificate serial: 019AF352CFC1DC89B67F2D4E074C22C12C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 11:01:21 +0000 Manifest this update: Sat 06 Dec 2025 11:01:21 +0000 Manifest next update: Sun 07 Dec 2025 11:01:21 +0000 Files and hashes: 1: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (hash: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=) 2: mWhSvkUBXsFafV4R5CtF1RFCi98.roa (hash: SLf4YYuqQC736cXUt3YUMZMsShhNwZceRr+OVNF0Bxc=) 3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: PjnpCj/HO9xehmiKM0PeBPgzOkzXRInJHYKmdGf551s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:cf:c1:dc:89:b6:7f:2d:4e:07:4c:22:c1:2c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0 Validity Not Before: Dec 6 11:01:21 2025 GMT Not After : Dec 7 11:01:21 2025 GMT Subject: CN=f6227e8eb5e04600685601660595918ff4d473d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:2c:63:d0:21:f0:ee:56:81:3e:92:54:31: 37:53:2b:24:c7:e2:40:84:73:cb:51:0c:a8:f6:ea: 76:d1:0c:11:44:d4:8d:14:93:48:bf:25:46:e0:b3: 30:65:eb:66:83:e8:35:7c:81:ba:27:0e:b5:6f:c4: 4b:73:63:77:08:08:76:9f:2a:d1:a0:d9:66:fe:77: 94:e3:99:e3:a4:d1:6c:ff:08:e1:c4:68:e9:09:56: 6b:16:b1:67:af:fb:c5:b2:1e:e8:bb:d4:d4:a8:5d: b3:62:72:28:ed:69:c9:63:75:ea:ed:49:4f:dc:b3: ff:84:4f:27:02:31:83:a1:e9:64:42:2f:3e:4c:f5: 7d:04:12:af:01:49:ba:0a:22:32:17:dc:9f:fb:86: 85:6a:3b:f9:eb:3c:0a:3c:61:5e:e5:c8:d8:00:e5: 3e:48:f8:cd:5d:f4:bd:b3:9a:1e:86:74:05:09:95: 1e:e4:b1:45:96:e9:29:cd:09:d8:c7:20:a4:9c:ba: 05:e9:85:82:3c:78:66:79:30:e9:53:80:77:0c:71: 84:9e:96:24:89:23:83:cf:ee:2d:3c:d3:c3:c5:36: b0:3f:67:31:71:30:e0:05:1d:11:57:59:10:fd:e1: 3b:99:bb:71:9f:2d:b0:6f:1b:1c:58:5e:13:ef:b9: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:22:7E:8E:B5:E0:46:00:68:56:01:66:05:95:91:8F:F4:D4:73:D4 X509v3 Authority Key Identifier: keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d6:72:2d:14:3f:80:4f:47:6b:05:00:8e:63:0f:8c:a2:fc: f2:32:5c:43:c9:69:f2:32:52:cc:30:a4:1e:49:05:72:12:a3: d7:b1:1d:dc:ef:7b:f9:ff:27:d1:54:dd:55:d6:22:d3:7f:84: 00:12:37:19:81:73:5e:1c:ad:6a:d7:c2:f3:22:53:a0:37:04: 02:fb:a0:08:54:cc:c4:45:16:cb:1f:2a:5e:4a:da:fb:bf:d9: 39:76:96:ec:0f:2c:7c:18:04:9e:db:31:cf:b0:2a:6d:47:16: 8a:3c:00:6c:67:b4:60:30:ab:18:9c:1d:58:3c:25:12:58:1f: bc:be:80:6a:fb:9a:ee:0e:cf:1e:db:b5:fc:27:74:5e:46:97: 58:5a:08:ec:a6:5e:a2:36:23:73:a0:ed:23:93:26:b9:60:5c: bf:ee:c7:61:6c:c8:73:4a:5b:25:21:5f:ce:bc:16:e2:3e:85: fa:69:5a:3d:07:9b:0b:9e:16:9f:8b:fe:57:8a:05:75:4a:8c: ea:ef:6f:47:28:d0:31:27:d0:e2:4f:e8:f0:10:4b:5b:ee:a0: fc:9a:b0:b6:9e:ab:50:93:b8:97:df:66:1d:57:0f:97:4a:ce: 24:aa:c5:f7:d4:ca:42:35:39:d4:74:6b:4b:35:50:5a:42:f6: 4c:61:91:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUs/B3Im2fy1OB0wiwSyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MjIxZTQwMjk5OGFiYzFmMDM1NDc1ZTE1OGI3NGU4Yzc2 OTIwYzAwHhcNMjUxMjA2MTEwMTIxWhcNMjUxMjA3MTEwMTIxWjAzMTEwLwYDVQQD EyhmNjIyN2U4ZWI1ZTA0NjAwNjg1NjAxNjYwNTk1OTE4ZmY0ZDQ3M2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLEsY9Ah8O5WgT6SVDE3Uyskx+JA hHPLUQyo9up20QwRRNSNFJNIvyVG4LMwZetmg+g1fIG6Jw61b8RLc2N3CAh2nyrR oNlm/neU45njpNFs/wjhxGjpCVZrFrFnr/vFsh7ou9TUqF2zYnIo7WnJY3Xq7UlP 3LP/hE8nAjGDoelkQi8+TPV9BBKvAUm6CiIyF9yf+4aFajv56zwKPGFe5cjYAOU+ SPjNXfS9s5oehnQFCZUe5LFFlukpzQnYxyCknLoF6YWCPHhmeTDpU4B3DHGEnpYk iSODz+4tPNPDxTawP2cxcTDgBR0RV1kQ/eE7mbtxny2wbxscWF4T77kwLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYifo614EYAaFYBZgWVkY/01HPUMB8GA1UdIwQY MBaAFMciHkApmKvB8DVHXhWLdOjHaSDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOWNhN2EtNDExYy00M2E4LTk1MmYt Y2M1NDA2MDhjNDFkLzEveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lOWNhN2EtNDExYy00M2E4LTk1MmYtY2M1NDA2MDhjNDFk LzEveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9ZyLRQ/ gE9HawUAjmMPjKL88jJcQ8lp8jJSzDCkHkkFchKj17Ed3O97+f8n0VTdVdYi03+E ABI3GYFzXhytatfC8yJToDcEAvugCFTMxEUWyx8qXkra+7/ZOXaW7A8sfBgEntsx z7AqbUcWijwAbGe0YDCrGJwdWDwlElgfvL6Aavua7g7PHtu1/Cd0XkaXWFoI7KZe ojYjc6DtI5MmuWBcv+7HYWzIc0pbJSFfzrwW4j6F+mlaPQebC54Wn4v+V4oFdUqM 6u9vRyjQMSfQ4k/o8BBLW+6g/Jqwtp6rUJO4l99mHVcPl0rOJKrF99TKQjU51HRr SzVQWkL2TGGRzw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:53:15 2025 by rpki-client