This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json) Hash identifier: pQJ2yIYR2McIWH2FtUIQeVqb+3wf2DbiKltduITSVEo= Subject key identifier: 49:BD:3F:F3:59:AE:7E:61:DC:31:38:53:24:33:56:48:07:ED:F9:A5 Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03 Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403 Certificate serial: 019AF3C06F77CE2B800E11264729BC9ACA28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft Manifest number: 108F Signing time: Sat 06 Dec 2025 13:01:06 +0000 Manifest this update: Sat 06 Dec 2025 13:01:06 +0000 Manifest next update: Sun 07 Dec 2025 13:01:06 +0000 Files and hashes: 1: 2bRBlMS8mkEOsT7iLZp1HMc84Xo.roa (hash: CRan8iZGqQIXvLKVDuE31EVqd8lIF+Eg5+VWJIeFz/I=) 2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: qxmBZD3TkzTmDiczJUgQui9onwTgqsVBg3GVBPTJH74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6f:77:ce:2b:80:0e:11:26:47:29:bc:9a:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403 Validity Not Before: Dec 6 13:01:06 2025 GMT Not After : Dec 7 13:01:06 2025 GMT Subject: CN=49bd3ff359ae7e61dc3138532433564807edf9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:7b:56:32:3d:1b:e4:39:9c:75:fb:d8:ed: 33:ea:f8:f7:38:91:97:21:41:80:9e:0f:bb:fc:cd: 86:00:f9:48:2b:2e:97:20:45:a4:21:c5:d4:3e:ba: a0:1b:3e:53:59:3d:cb:c4:c9:ed:57:12:46:c8:17: cb:d6:3d:bb:60:cf:d1:a1:c0:d6:90:08:b4:31:45: 42:de:ee:2a:52:09:f9:98:90:d8:4e:73:2d:ac:da: 33:d4:83:9e:30:41:34:43:5f:f0:1f:2d:1e:eb:12: 75:08:3e:07:70:4f:f7:1a:93:6d:08:5f:03:9e:2d: 0c:25:d0:d8:90:da:ff:48:89:62:d9:f4:13:bd:8d: 6b:b3:84:7c:ce:d4:97:2b:56:3c:29:a1:8f:ae:b7: 48:3b:b2:76:cc:1e:6e:d0:1a:41:51:e4:33:3e:29: b2:4e:44:62:e8:d4:7d:76:9c:36:db:07:42:20:74: f1:cc:a7:88:2d:40:90:b3:4d:68:6b:70:c0:01:90: 30:9b:f7:ef:64:6d:15:17:1c:29:9f:02:2d:00:89: fc:2b:c6:14:aa:a0:9a:66:3e:0d:0e:fd:81:71:c2: 72:bb:21:2d:34:81:67:88:1d:c9:f8:ae:55:0d:ec: ce:e8:10:ef:76:ad:2e:68:47:0d:c7:f5:72:bb:f0: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BD:3F:F3:59:AE:7E:61:DC:31:38:53:24:33:56:48:07:ED:F9:A5 X509v3 Authority Key Identifier: keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:bd:f8:ce:79:60:21:4b:4e:57:b3:46:a7:a4:70:a2:28:2d: a5:94:3b:4f:22:a6:9a:99:f9:96:5a:d2:ab:a9:a2:f1:91:fc: 58:bb:0a:b8:2b:d4:54:f1:76:2c:74:96:9b:d0:ed:38:76:cf: 59:54:3c:90:1c:bc:2b:5f:5e:ba:b4:78:d8:c2:56:12:26:d8: d5:2d:74:02:e5:ad:57:46:b6:0e:4a:ba:fb:01:37:6c:06:2e: b0:c3:ce:a8:c2:eb:2d:96:8d:65:9c:20:b8:93:6b:7c:23:2f: 7f:0a:f9:a1:27:4c:01:4c:af:5d:cd:02:08:8d:0b:0c:ce:ed: 4b:af:41:84:58:53:57:a1:2c:1e:7f:d5:82:6f:d9:87:a0:a0: 78:ef:da:c4:e6:de:3a:66:d7:10:2f:3e:51:49:89:c3:6b:04: 87:3f:a3:3d:32:63:be:07:f4:6d:28:69:1e:93:2b:ea:e1:88: aa:d0:87:2e:d0:ae:5f:3d:7b:e3:17:55:40:5e:6e:1b:6a:50: e3:bb:68:5f:67:22:8f:ea:9f:37:fe:cc:5b:25:ac:80:0e:cf: 8e:56:ac:bb:a8:7d:53:7e:7d:c0:3e:06:18:e0:f9:36:1c:4b: 70:93:e6:08:55:c9:6a:94:64:af:9a:55:69:08:e7:72:8d:b0: 6b:fb:3d:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwG93ziuADhEmRym8msooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ODdiOWNkYTc1NjAzZWIwZDllMzc3MTY3YmY3ZTBjOGU0 NDA0MDMwHhcNMjUxMjA2MTMwMTA2WhcNMjUxMjA3MTMwMTA2WjAzMTEwLwYDVQQD Eyg0OWJkM2ZmMzU5YWU3ZTYxZGMzMTM4NTMyNDMzNTY0ODA3ZWRmOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lR7VjI9G+Q5nHX72O0z6vj3OJGX IUGAng+7/M2GAPlIKy6XIEWkIcXUPrqgGz5TWT3LxMntVxJGyBfL1j27YM/RocDW kAi0MUVC3u4qUgn5mJDYTnMtrNoz1IOeMEE0Q1/wHy0e6xJ1CD4HcE/3GpNtCF8D ni0MJdDYkNr/SIli2fQTvY1rs4R8ztSXK1Y8KaGPrrdIO7J2zB5u0BpBUeQzPimy TkRi6NR9dpw22wdCIHTxzKeILUCQs01oa3DAAZAwm/fvZG0VFxwpnwItAIn8K8YU qqCaZj4NDv2BccJyuyEtNIFniB3J+K5VDezO6BDvdq0uaEcNx/Vyu/Cu6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEm9P/NZrn5h3DE4UyQzVkgH7fmlMB8GA1UdIwQY MBaAFMWHuc2nVgPrDZ43cWe/fgyORAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81MGQ0OGUtNDk0Zi00ZDE0LTlmMDUt ZTc1M2NmNzY4YzE0LzEveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81MGQ0OGUtNDk0Zi00ZDE0LTlmMDUtZTc1M2NmNzY4YzE0 LzEveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk734znlg IUtOV7NGp6RwoigtpZQ7TyKmmpn5llrSq6mi8ZH8WLsKuCvUVPF2LHSWm9DtOHbP WVQ8kBy8K19eurR42MJWEibY1S10AuWtV0a2Dkq6+wE3bAYusMPOqMLrLZaNZZwg uJNrfCMvfwr5oSdMAUyvXc0CCI0LDM7tS69BhFhTV6EsHn/Vgm/Zh6CgeO/axObe OmbXEC8+UUmJw2sEhz+jPTJjvgf0bShpHpMr6uGIqtCHLtCuXz174xdVQF5uG2pQ 47toX2cij+qfN/7MWyWsgA7Pjlasu6h9U359wD4GGOD5NhxLcJPmCFXJapRkr5pV aQjnco2wa/s9bg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:55:45 2025 by rpki-client