This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json) Hash identifier: OnLEdto+jOrHvBtiET0CZ5RY1Yl9st2CMqyFLQRpdDA= Subject key identifier: 39:53:88:C6:FA:62:42:4B:BA:0F:D4:17:F1:CE:40:52:49:81:52:5B Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a Certificate serial: 019AF31CE5193E11B6D391E0DD205EDBE8C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft Manifest number: 0A2C Signing time: Sat 06 Dec 2025 10:02:28 +0000 Manifest this update: Sat 06 Dec 2025 10:02:28 +0000 Manifest next update: Sun 07 Dec 2025 10:02:28 +0000 Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=) 2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: UPdmjFHBFm4fUp4yXnTfWRJkc1YOQ1LSdqKWdu44mHE=) 3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e5:19:3e:11:b6:d3:91:e0:dd:20:5e:db:e8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a Validity Not Before: Dec 6 10:02:28 2025 GMT Not After : Dec 7 10:02:28 2025 GMT Subject: CN=395388c6fa62424bba0fd417f1ce40524981525b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:41:e6:e7:82:fd:8b:8a:fb:65:51:3f:1e: 6a:fa:70:45:04:15:13:61:d4:ca:33:65:8e:c2:4b: 17:be:81:cb:81:20:27:e8:6e:ba:ab:30:39:3e:8f: 6b:8e:91:ba:32:7f:5a:eb:e6:52:5a:93:1c:da:d5: 38:2c:18:f6:53:bd:b8:06:0f:c8:12:71:7a:ca:32: bb:ba:55:eb:1a:8a:f5:81:d2:1a:8a:2c:f5:74:3a: 59:df:30:3e:5b:fb:20:96:e8:e6:0b:1a:4e:80:42: 8c:59:30:64:1a:64:46:c9:d7:e3:a2:78:93:ea:c2: 7c:5a:65:78:fb:7b:c5:d2:d3:84:38:c8:f1:e9:60: 98:54:40:30:61:9a:17:61:81:3c:cd:16:cf:e9:48: e2:14:d6:d3:96:66:75:34:1a:0a:08:fa:a0:2b:e7: fc:73:25:9b:ae:ae:9c:64:03:c2:26:c6:13:e2:c0: 33:b5:5f:c9:9e:b7:5f:64:42:06:73:cc:b7:fa:27: e4:b9:71:68:6d:bb:1a:c0:f2:3b:8a:1e:87:9b:2d: d6:b5:29:9f:10:8a:fc:cc:57:96:01:3c:7e:37:59: f6:10:2a:0d:12:22:12:8f:75:b3:df:a3:1d:ce:be: 12:38:98:0e:6b:51:23:1c:65:ee:ce:b2:00:db:01: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:53:88:C6:FA:62:42:4B:BA:0F:D4:17:F1:CE:40:52:49:81:52:5B X509v3 Authority Key Identifier: keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fd:4a:02:bd:cf:f5:fc:5e:d4:e3:27:96:23:8e:35:40:17: 73:fc:73:58:7e:5d:53:b8:d0:56:84:29:21:90:0e:7d:2b:fb: aa:59:46:e6:38:e5:4d:25:53:54:6e:c1:cb:ab:3a:8c:1f:6e: c8:9e:c4:60:04:f4:30:de:96:18:c4:9d:ba:71:18:69:2c:de: 8a:ac:ef:b2:2f:60:c8:52:36:aa:50:55:d4:d4:fb:15:56:af: 1c:fb:a6:c5:de:5b:52:4b:ca:cd:89:f4:5a:0b:f1:f1:bd:ba: 98:cc:75:46:3d:28:87:ea:9c:fa:c2:24:03:d6:69:c2:2d:cd: d9:19:ee:ee:3e:85:c5:73:96:9c:91:40:19:51:53:74:85:8c: 67:86:c7:82:5b:44:76:09:69:d8:4b:e9:99:0a:5a:ce:91:76: cc:d9:bb:1e:6e:74:95:3e:3d:8b:0c:56:2b:89:3b:b7:e2:af: cc:39:15:5c:cb:29:06:ef:e3:b8:ac:a7:cf:aa:36:c7:be:eb: 6f:49:b4:f0:7a:c0:37:96:1b:fb:ee:32:53:52:78:24:58:bb: 95:2b:c9:d8:86:8a:ca:3d:1d:70:10:15:1f:c0:51:03:18:d9: 28:4c:ae:28:04:87:60:0b:0b:db:f8:ef:61:1b:6a:cf:aa:47: e7:57:13:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOUZPhG205Hg3SBe2+jDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl NzkzNWEwHhcNMjUxMjA2MTAwMjI4WhcNMjUxMjA3MTAwMjI4WjAzMTEwLwYDVQQD EygzOTUzODhjNmZhNjI0MjRiYmEwZmQ0MTdmMWNlNDA1MjQ5ODE1MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3NB5ueC/YuK+2VRPx5q+nBFBBUT YdTKM2WOwksXvoHLgSAn6G66qzA5Po9rjpG6Mn9a6+ZSWpMc2tU4LBj2U724Bg/I EnF6yjK7ulXrGor1gdIaiiz1dDpZ3zA+W/sglujmCxpOgEKMWTBkGmRGydfjoniT 6sJ8WmV4+3vF0tOEOMjx6WCYVEAwYZoXYYE8zRbP6UjiFNbTlmZ1NBoKCPqgK+f8 cyWbrq6cZAPCJsYT4sAztV/JnrdfZEIGc8y3+ifkuXFobbsawPI7ih6Hmy3WtSmf EIr8zFeWATx+N1n2ECoNEiISj3Wz36Mdzr4SOJgOa1EjHGXuzrIA2wGA3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlTiMb6YkJLug/UF/HOQFJJgVJbMB8GA1UdIwQY MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt MGQzOGRkZGIwNzgwLzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqf1KAr3P 9fxe1OMnliOONUAXc/xzWH5dU7jQVoQpIZAOfSv7qllG5jjlTSVTVG7By6s6jB9u yJ7EYAT0MN6WGMSdunEYaSzeiqzvsi9gyFI2qlBV1NT7FVavHPumxd5bUkvKzYn0 Wgvx8b26mMx1Rj0oh+qc+sIkA9Zpwi3N2Rnu7j6FxXOWnJFAGVFTdIWMZ4bHgltE dglp2EvpmQpazpF2zNm7Hm50lT49iwxWK4k7t+KvzDkVXMspBu/juKynz6o2x77r b0m08HrAN5Yb++4yU1J4JFi7lSvJ2IaKyj0dcBAVH8BRAxjZKEyuKASHYAsL2/jv YRtqz6pH51cTyA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:32:22 2025 by rpki-client