This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft File: X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json) Hash identifier: akYnDrTYj3m1/tk4D4Kd8iIWXSN7zk+lkrRo1ahDMck= Subject key identifier: 05:BB:69:75:3F:67:84:3B:18:99:C8:62:33:99:37:43:44:35:D1:3D Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019AF465798710955BB8C5CED6E40C369BBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft Manifest number: 1789 Signing time: Sat 06 Dec 2025 16:01:22 +0000 Manifest this update: Sat 06 Dec 2025 16:01:22 +0000 Manifest next update: Sun 07 Dec 2025 16:01:22 +0000 Files and hashes: 1: 9FUNdfnNIDDZflpkRTwpDb09HNU.roa (hash: BpM0SiFtPH/not4o5YIAAEEr6LX2KF5gaATgLFRqNII=) 2: SSI8dwqI7dLLZnkKofdbeqIpwAw.roa (hash: V8oFtPPMMVJpjeo0/zsMg1Km+/3IdAD2gZnS6mgf8pA=) 3: STf9L7OysAzVA3auf6efELGrMic.roa (hash: jJ0UrRjneJTBVHBAK5geL+DCza4MUB+Pz9cDqbQqG1Q=) 4: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: MJF7hnlpwqQlArJfWskej5gh4fD3Xmfkq47Zfy71XD8=) 5: ffaMH-0hGgHTMNCXX78L-h1LWAo.roa (hash: GyPeNrQVWNT93bYYebXS2jRf00/jNRqVqCrgj4gVPMY=) 6: r0N3U-zrvFhTjBVltikszWwNgAQ.roa (hash: xF4Koy+yFEXplhuyQLut02ooRfs85dFGHYb0KhnfzS4=) 7: rDF0yCBE4X8q41x2l6Nt4nfaFYs.roa (hash: xb5ZEXJ0QV1z7XXKAlC/1y6Tcd7ByFjDX9SUb7O///E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:79:87:10:95:5b:b8:c5:ce:d6:e4:0c:36:9b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Dec 6 16:01:22 2025 GMT Not After : Dec 7 16:01:22 2025 GMT Subject: CN=05bb69753f67843b1899c862339937434435d13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:55:57:87:8c:2e:ae:da:22:67:80:ff:55: 03:ad:b9:54:f5:59:ee:fc:6b:d8:e6:11:c6:2b:5b: 38:77:aa:44:ec:92:72:6c:e0:ce:23:92:14:c4:0d: a0:e5:44:08:76:e4:a0:3e:24:be:99:81:61:3d:06: af:e7:cd:24:17:7a:38:07:0f:b6:70:86:8d:65:6d: 0e:f3:f7:40:b5:46:45:fb:b1:38:6f:62:98:e1:da: 76:3f:31:0e:7c:80:b6:d2:b1:8d:85:2a:13:62:aa: e7:7a:e7:61:9d:09:bd:57:d2:b0:8f:aa:be:1b:c4: f2:10:3b:ef:6f:1a:b8:d0:05:17:1b:dd:5b:79:cf: 03:e6:1b:74:44:55:da:96:d1:fb:d3:94:96:ee:0d: 2a:3d:a3:1d:88:a9:93:2b:72:9e:9b:00:b0:3d:80: 2a:f9:39:18:18:29:fe:4d:92:09:57:f3:39:ba:21: e5:fc:65:2b:77:24:2b:ef:0c:29:8a:5f:7d:de:5c: 03:77:9e:2b:63:dc:3d:73:a9:2e:62:ab:5f:47:b9: 8e:2d:18:b8:19:f8:a6:46:0d:0a:a9:67:58:3e:e0: af:8c:0a:d8:f2:d3:28:da:79:87:5e:09:d7:f9:86: 5d:91:2e:97:78:82:77:c6:4a:66:70:5a:2e:aa:70: 65:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BB:69:75:3F:67:84:3B:18:99:C8:62:33:99:37:43:44:35:D1:3D X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:87:7a:35:74:3e:22:52:03:d9:f0:31:e9:23:5f:b5:bd:21: bd:c1:94:2f:5d:19:50:af:0d:bd:fc:ac:52:4f:97:60:f3:58: 20:a0:28:02:df:c9:ab:3c:ac:9a:ee:93:c9:3d:f2:ad:26:7d: 3d:24:ee:f5:f1:41:33:be:6b:e1:7d:b6:ab:90:5b:b0:44:a8: 8c:d9:24:ed:c4:08:96:4b:32:55:2c:b5:27:04:e1:68:be:0e: e1:f5:af:e3:ce:83:8d:62:53:3d:53:c6:4c:58:a5:c4:00:7b: f9:71:10:5a:f1:f7:1f:b9:41:72:bd:44:fe:9f:31:0c:6e:f9: 41:d6:96:31:69:0f:f1:42:63:83:d0:a2:7a:ef:69:8d:02:01: 7a:ca:9a:b2:61:61:ee:f3:54:d7:a9:e5:70:31:b2:25:f8:47: a6:d0:bf:69:8f:2d:47:8c:97:f2:e4:46:88:3a:81:e3:1e:38: 51:6c:39:f6:71:59:c1:cb:63:d0:d8:51:65:46:24:cf:a0:92: 13:09:ad:41:41:76:5b:36:59:95:f9:b3:0c:a5:ef:0a:cb:4d: 8b:33:88:d6:b1:85:50:e0:a3:7e:aa:83:95:82:59:f1:72:3d: e1:c6:7e:ac:bd:f9:7c:e4:3a:f2:66:c5:57:18:69:ce:2f:94: 1b:c7:10:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZXmHEJVbuMXO1uQMNpu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjUxMjA2MTYwMTIyWhcNMjUxMjA3MTYwMTIyWjAzMTEwLwYDVQQD EygwNWJiNjk3NTNmNjc4NDNiMTg5OWM4NjIzMzk5Mzc0MzQ0MzVkMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FZVV4eMLq7aImeA/1UDrblU9Vnu /GvY5hHGK1s4d6pE7JJybODOI5IUxA2g5UQIduSgPiS+mYFhPQav580kF3o4Bw+2 cIaNZW0O8/dAtUZF+7E4b2KY4dp2PzEOfIC20rGNhSoTYqrneudhnQm9V9Kwj6q+ G8TyEDvvbxq40AUXG91bec8D5ht0RFXaltH705SW7g0qPaMdiKmTK3KemwCwPYAq +TkYGCn+TZIJV/M5uiHl/GUrdyQr7wwpil993lwDd54rY9w9c6kuYqtfR7mOLRi4 GfimRg0KqWdYPuCvjArY8tMo2nmHXgnX+YZdkS6XeIJ3xkpmcFouqnBlkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAW7aXU/Z4Q7GJnIYjOZN0NENdE9MB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYd6NXQ+ IlID2fAx6SNftb0hvcGUL10ZUK8NvfysUk+XYPNYIKAoAt/Jqzysmu6TyT3yrSZ9 PSTu9fFBM75r4X22q5BbsESojNkk7cQIlksyVSy1JwThaL4O4fWv486DjWJTPVPG TFilxAB7+XEQWvH3H7lBcr1E/p8xDG75QdaWMWkP8UJjg9Cieu9pjQIBesqasmFh 7vNU16nlcDGyJfhHptC/aY8tR4yX8uRGiDqB4x44UWw59nFZwctj0NhRZUYkz6CS EwmtQUF2WzZZlfmzDKXvCstNizOI1rGFUOCjfqqDlYJZ8XI94cZ+rL35fOQ68mbF Vxhpzi+UG8cQpg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:16 2025 by rpki-client