This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json) Hash identifier: hj3dorEpSQH/Xnm3Daxi1Mc3vF/Rq+Waf4Gx/icifj0= Subject key identifier: A5:45:0B:51:A8:01:C9:D2:2C:26:19:DB:DF:21:E1:24:CC:09:13:D8 Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0 Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0 Certificate serial: 019AF42E17E98ED76EE0230CA69E420B4488 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft Manifest number: 16BA Signing time: Sat 06 Dec 2025 15:00:52 +0000 Manifest this update: Sat 06 Dec 2025 15:00:52 +0000 Manifest next update: Sun 07 Dec 2025 15:00:52 +0000 Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=) 2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: 0WwUqTSYP8464R368QIXIFtjpbAW9pLWZdSDgeIFq04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:17:e9:8e:d7:6e:e0:23:0c:a6:9e:42:0b:44:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0 Validity Not Before: Dec 6 15:00:52 2025 GMT Not After : Dec 7 15:00:52 2025 GMT Subject: CN=a5450b51a801c9d22c2619dbdf21e124cc0913d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:a2:56:d5:89:e7:95:74:e0:71:f9:b0:d1: 1b:de:8f:16:ce:e4:1a:0d:91:d1:3f:a2:21:1e:51: 27:06:60:34:e3:15:99:95:b5:0f:34:e1:bb:5d:f4: 7c:c2:68:2d:34:c4:3d:d7:89:2d:70:7d:a3:46:27: ee:f6:c3:ad:c7:d7:c4:18:c6:a6:ca:c7:16:06:f1: 19:b9:e1:7c:3d:47:e6:20:db:d9:35:ee:60:51:98: 57:c0:c6:82:89:d1:42:47:23:27:8e:0c:76:90:3d: bf:2a:57:85:92:47:c8:14:27:2d:8e:bf:4c:f1:00: c0:4f:90:27:89:53:f4:9f:d0:b7:9f:8d:f7:22:75: 7b:ca:5d:29:12:b1:20:e5:6e:73:b8:e2:01:37:33: 71:49:b7:b7:e8:64:62:dd:94:e0:b2:fb:a7:c7:e9: bf:c0:64:99:73:30:bb:03:67:3f:1b:8b:5d:a6:fa: ee:1e:bf:15:17:f0:99:d2:22:30:69:52:e2:7c:54: ad:15:fe:70:62:66:51:40:09:25:b5:d9:c4:ed:3c: 61:7d:bf:43:2b:3f:05:c9:f7:75:7d:82:3e:af:8f: 96:bd:eb:dc:41:16:d6:0c:dd:5f:b4:0e:7e:62:dd: 46:1a:d6:da:63:33:f9:8d:59:4e:4c:c5:89:b7:b7: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:45:0B:51:A8:01:C9:D2:2C:26:19:DB:DF:21:E1:24:CC:09:13:D8 X509v3 Authority Key Identifier: keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:e0:34:2c:d1:f5:27:6d:53:ce:30:db:8e:9d:a4:8d:21:6d: 95:a3:52:2d:d7:c7:53:24:99:f2:79:aa:5d:9d:c2:31:12:07: 37:6e:bf:12:ab:8b:3f:43:dd:3b:6b:22:92:a5:bf:fe:ee:73: fe:a0:33:5f:cf:0f:94:94:19:a4:ff:87:c8:c7:3f:21:04:d9: b2:12:6a:01:57:60:cc:b8:c0:16:cc:eb:f8:9d:ab:f4:6c:49: f5:3f:d8:19:4d:3c:be:b7:57:aa:49:be:d2:ef:97:16:97:42: d4:dc:40:4f:c9:ab:27:60:83:6d:67:17:98:e6:f8:1d:dd:3f: 56:70:88:f7:44:d2:99:95:e4:f9:18:af:ae:3c:64:9a:21:8d: a7:91:bf:7a:d6:e9:a9:91:79:9e:e8:95:a3:27:f6:f3:92:4b: 47:4a:ce:ae:48:03:67:26:60:d1:f5:4a:a3:1c:6e:15:12:14: b3:47:21:b7:61:25:32:10:b8:f0:ae:14:a2:16:e1:1a:bd:59: af:78:76:18:f0:44:96:32:c1:d7:6b:76:85:34:e4:b4:b9:8b: 28:6b:cf:4c:c2:65:63:00:7c:e6:39:10:33:76:c4:38:3b:c2: 7d:0f:b2:4c:be:35:1a:0a:90:73:be:1b:5b:ab:b6:28:23:a7: bc:55:71:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lhfpjtdu4CMMpp5CC0SIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MjVhZmI5Y2UzMzVlZWQzZTUzMTI4YjRhOWViMjVmYzQ5 NWQ2ZTAwHhcNMjUxMjA2MTUwMDUyWhcNMjUxMjA3MTUwMDUyWjAzMTEwLwYDVQQD EyhhNTQ1MGI1MWE4MDFjOWQyMmMyNjE5ZGJkZjIxZTEyNGNjMDkxM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySWiVtWJ55V04HH5sNEb3o8WzuQa DZHRP6IhHlEnBmA04xWZlbUPNOG7XfR8wmgtNMQ914ktcH2jRifu9sOtx9fEGMam yscWBvEZueF8PUfmINvZNe5gUZhXwMaCidFCRyMnjgx2kD2/KleFkkfIFCctjr9M 8QDAT5AniVP0n9C3n433InV7yl0pErEg5W5zuOIBNzNxSbe36GRi3ZTgsvunx+m/ wGSZczC7A2c/G4tdpvruHr8VF/CZ0iIwaVLifFStFf5wYmZRQAkltdnE7Txhfb9D Kz8Fyfd1fYI+r4+WvevcQRbWDN1ftA5+Yt1GGtbaYzP5jVlOTMWJt7dw9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVFC1GoAcnSLCYZ298h4STMCRPYMB8GA1UdIwQY MBaAFMYlr7nOM17tPlMSi0qesl/EldbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wZjliNTAtNDY4OS00Y2Q4LWFlNmQt MTAwYzNlMWJlM2EyLzEveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wZjliNTAtNDY4OS00Y2Q4LWFlNmQtMTAwYzNlMWJlM2Ey LzEveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4uA0LNH1 J21TzjDbjp2kjSFtlaNSLdfHUySZ8nmqXZ3CMRIHN26/EquLP0PdO2sikqW//u5z /qAzX88PlJQZpP+HyMc/IQTZshJqAVdgzLjAFszr+J2r9GxJ9T/YGU08vrdXqkm+ 0u+XFpdC1NxAT8mrJ2CDbWcXmOb4Hd0/VnCI90TSmZXk+RivrjxkmiGNp5G/etbp qZF5nuiVoyf285JLR0rOrkgDZyZg0fVKoxxuFRIUs0cht2ElMhC48K4UohbhGr1Z r3h2GPBEljLB12t2hTTktLmLKGvPTMJlYwB85jkQM3bEODvCfQ+yTL41GgqQc74b W6u2KCOnvFVxCg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:28:57 2025 by rpki-client