This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json) Hash identifier: 3CG97f5p7oKzvgWu7N1Mj8GwCWfbruU+LyWVyeDWVOA= Subject key identifier: C5:8A:37:EF:4C:BC:73:E6:30:86:30:97:B0:CB:40:47:F4:9A:1F:62 Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Certificate serial: 019AF50B351A754BB36FC02126DC90EE4E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 19:02:23 +0000 Manifest this update: Sat 06 Dec 2025 19:02:23 +0000 Manifest next update: Sun 07 Dec 2025 19:02:23 +0000 Files and hashes: 1: 1Pr3Rju9xHQPfWV31auS4t6_JKs.roa (hash: U6YPngmDoN0L1hanOZmXAZn1QKdSvL9NB2XC3NylzBI=) 2: EH68L41xD3pAELgVd86O10m8MkI.roa (hash: kVF4w9/67ztXyrHF78GW0MvfXrSQ0p5+COw2F7wfCkg=) 3: JCElWnpyHCGRVw4kJTI2wPhKalo.roa (hash: rPdh51cCsDaaE54oeGhrfMuu194frpT1l20RBDB0eJs=) 4: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: hGTxUT1iGZ1Xfa7DyjR9/8ZUg8SqOUURrIRuBmdShWs=) 5: fZauZUiMq7QzdDKqVQAM0BTNdqg.roa (hash: 7Avl6IIjQaZ1np/4jtmkn7cQrYx+SSD6VScCgiCbrdk=) 6: mQw87omeSTSQ0GNmmy4NZ7MZg5c.roa (hash: nOiR+/wPsaUWm0acT8TdN25G4tHF28XiNptSgXF2Czo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:35:1a:75:4b:b3:6f:c0:21:26:dc:90:ee:4e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Validity Not Before: Dec 6 19:02:23 2025 GMT Not After : Dec 7 19:02:23 2025 GMT Subject: CN=c58a37ef4cbc73e630863097b0cb4047f49a1f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:00:98:9e:a4:47:4f:86:03:f9:ef:3b:d5: a3:83:ca:58:52:cd:f2:61:a9:4f:fe:3a:fa:80:24: 88:6b:a2:93:d1:cf:d5:62:5c:93:04:59:c1:fa:cc: 2d:f3:b1:04:db:fe:f2:a2:93:4c:44:c7:6b:2e:ef: 58:df:b1:d8:37:43:f8:82:86:20:86:23:89:74:db: e5:98:e2:21:a8:9a:4c:72:a5:c1:0f:cd:5f:0d:87: 9b:2e:ea:a6:e0:fe:1d:e3:5f:51:85:68:14:e2:dc: 7d:70:1b:7f:e5:6b:74:a7:47:a6:8f:62:25:94:ef: e7:17:a0:aa:8f:da:4b:79:a2:ad:2b:42:33:1e:32: 31:92:1f:81:16:d0:ff:42:80:7e:33:bc:3c:88:00: 34:0e:f4:9e:4b:06:a9:c5:70:95:fb:b9:13:ef:f4: 09:4d:33:cd:f2:ca:89:cc:0f:46:15:83:e7:59:4d: 64:a5:d0:91:c5:b6:4d:b4:ec:cb:e5:11:cf:7f:34: 1a:9f:e3:ae:5e:4c:c4:ee:93:ef:51:00:6e:30:8a: ca:6d:0c:01:27:bb:09:87:27:a2:95:08:ee:71:a9: 99:e2:2e:98:1f:e3:88:0d:ca:e7:f1:e2:29:78:fb: 3d:17:45:a3:42:34:d3:1e:90:89:a5:d8:6c:b5:a9: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8A:37:EF:4C:BC:73:E6:30:86:30:97:B0:CB:40:47:F4:9A:1F:62 X509v3 Authority Key Identifier: keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6e:ca:6e:db:b3:68:92:bb:f8:7b:96:81:1a:bc:8e:91:b8: 94:68:80:aa:3d:98:63:e4:d2:be:cb:10:a1:02:99:de:a1:15: 12:2e:40:5e:66:74:13:39:7d:a8:08:90:be:12:20:dd:d1:cf: f3:64:f5:41:e7:bf:97:49:7c:68:ed:fb:7d:93:1e:13:f3:9b: ca:ee:45:c5:59:c4:d4:a6:6c:51:fc:92:91:14:ae:6c:77:fd: 07:1c:35:a1:e9:f2:fe:20:1e:a4:c6:2f:5c:8f:c0:f3:5a:81: 42:d9:49:30:2f:85:b8:66:aa:46:71:c1:0b:11:d0:e4:07:84: 16:6e:7d:9b:a3:8b:9a:15:dc:ff:4f:6b:ef:a1:9f:a8:f4:7d: 9c:7d:0d:95:66:9f:78:68:67:5d:89:72:d4:c5:af:ed:aa:41: a6:04:d5:18:52:00:55:ff:bd:9d:cc:0c:98:0a:78:b1:5c:17: 36:5f:ee:97:ab:42:ff:a0:3e:0c:5e:ac:5a:b2:af:ed:ac:43: 56:87:a7:71:2c:3b:60:cb:9f:e4:af:93:66:b5:ad:e4:2c:2f: 80:7f:1e:9c:7a:7c:a7:2e:f0:7d:3b:4d:d0:b8:a6:d7:cb:f3: 5d:38:77:10:7e:a8:a7:76:db:97:8b:82:d5:45:3e:dc:e5:12: e9:f7:b8:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzUadUuzb8AhJtyQ7k5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz NTAzMzYwHhcNMjUxMjA2MTkwMjIzWhcNMjUxMjA3MTkwMjIzWjAzMTEwLwYDVQQD EyhjNThhMzdlZjRjYmM3M2U2MzA4NjMwOTdiMGNiNDA0N2Y0OWExZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5EAmJ6kR0+GA/nvO9Wjg8pYUs3y YalP/jr6gCSIa6KT0c/VYlyTBFnB+swt87EE2/7yopNMRMdrLu9Y37HYN0P4goYg hiOJdNvlmOIhqJpMcqXBD81fDYebLuqm4P4d419RhWgU4tx9cBt/5Wt0p0emj2Il lO/nF6Cqj9pLeaKtK0IzHjIxkh+BFtD/QoB+M7w8iAA0DvSeSwapxXCV+7kT7/QJ TTPN8sqJzA9GFYPnWU1kpdCRxbZNtOzL5RHPfzQan+OuXkzE7pPvUQBuMIrKbQwB J7sJhyeilQjucamZ4i6YH+OIDcrn8eIpePs9F0WjQjTTHpCJpdhstalHTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWKN+9MvHPmMIYwl7DLQEf0mh9iMB8GA1UdIwQY MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIG7Kbtuz aJK7+HuWgRq8jpG4lGiAqj2YY+TSvssQoQKZ3qEVEi5AXmZ0Ezl9qAiQvhIg3dHP 82T1Qee/l0l8aO37fZMeE/Obyu5FxVnE1KZsUfySkRSubHf9Bxw1oeny/iAepMYv XI/A81qBQtlJMC+FuGaqRnHBCxHQ5AeEFm59m6OLmhXc/09r76GfqPR9nH0NlWaf eGhnXYly1MWv7apBpgTVGFIAVf+9ncwMmAp4sVwXNl/ul6tC/6A+DF6sWrKv7axD VoencSw7YMuf5K+TZrWt5CwvgH8enHp8py7wfTtN0Lim18vzXTh3EH6op3bbl4uC 1UU+3OUS6fe4VA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:55 2025 by rpki-client