This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json) Hash identifier: gKNyuB9dDHcq0qBo2ndyuFUNzKNtn3Ywjbb/aZQ7MQs= Subject key identifier: 2C:17:16:D0:C9:10:E2:44:99:61:A1:DA:26:F9:0C:DF:6A:42:FF:83 Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6 Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6 Certificate serial: 019AF49C54A9ED64C9C8B2B5F2A3DF58E775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 17:01:17 +0000 Manifest this update: Sat 06 Dec 2025 17:01:17 +0000 Manifest next update: Sun 07 Dec 2025 17:01:17 +0000 Files and hashes: 1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=) 2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=) 3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=) 4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: 4U769gmetRsb6G0DbXYBxHXZlzBwIzGX3D6AtLBtbfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:54:a9:ed:64:c9:c8:b2:b5:f2:a3:df:58:e7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6 Validity Not Before: Dec 6 17:01:17 2025 GMT Not After : Dec 7 17:01:17 2025 GMT Subject: CN=2c1716d0c910e2449961a1da26f90cdf6a42ff83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:c8:30:69:0c:88:25:ad:3d:17:d5:ab:ee: 42:5b:32:57:f2:d3:7d:18:6e:e8:f4:f4:c7:c1:23: cf:b1:0e:83:5d:51:59:79:a4:85:7e:48:a3:a4:de: 28:ab:d5:b6:c8:04:ae:48:87:a9:eb:34:f9:18:9c: aa:c9:e9:66:18:be:39:4a:0f:75:c9:a3:52:63:0d: e4:67:1a:1a:7b:91:15:b6:55:0b:b9:50:df:5a:b4: f6:75:90:e9:77:6b:53:66:b8:5b:f2:82:ed:83:46: 12:98:c8:1f:98:15:68:6c:af:61:ae:31:a7:46:75: 3b:57:3e:f9:56:4d:98:60:e6:f7:46:3f:e9:60:ff: ae:44:eb:30:7c:d7:bf:a5:28:eb:fe:a2:47:da:ce: 6a:f8:55:8f:26:f4:f7:3f:29:32:b1:54:e1:0a:d8: 55:6d:75:a7:4d:0e:6f:2d:db:81:97:1b:99:30:2b: f7:ba:c1:d6:dd:de:cb:55:22:cf:6a:8c:0e:e7:16: 54:df:7a:71:97:29:0c:06:82:a8:5e:cc:0d:ee:28: d3:51:34:c7:e3:65:b9:c2:bf:32:f2:01:bc:c6:4c: be:75:7a:f8:3c:f2:0d:63:f8:5f:98:dd:e3:8d:66: e3:f0:dc:46:2e:6a:d0:3b:d1:e4:ab:1c:a7:16:25: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:17:16:D0:C9:10:E2:44:99:61:A1:DA:26:F9:0C:DF:6A:42:FF:83 X509v3 Authority Key Identifier: keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e0:3f:61:df:65:3b:9d:5e:7f:62:87:ab:36:28:03:68:a0: 73:0c:40:90:97:69:e1:a1:29:fc:f7:c5:b2:a9:a2:b9:63:c0: df:a9:0a:e8:d1:a4:3d:38:73:58:e4:f5:69:75:b6:a6:48:d9: b1:06:dc:37:11:c0:cb:49:63:36:ca:90:ff:b7:d3:8f:9a:2a: eb:f9:9e:6a:08:fa:21:6e:22:eb:3c:48:58:7e:bc:ed:60:f5: 3a:0e:70:da:45:de:1b:fa:e4:c0:39:67:3c:03:99:aa:35:40: 6d:4b:54:61:0a:76:43:44:14:7e:3f:8a:ab:ac:1d:7c:44:3e: b9:75:f5:48:69:2d:cf:00:8d:d1:b2:1e:5c:f3:75:bb:7e:7c: 36:82:dc:32:a4:7f:b6:c2:a8:3b:1d:d2:cd:02:81:1e:b7:53: 03:12:e8:64:35:99:d5:76:77:54:b7:05:6d:7e:89:fd:9e:8a: 23:4f:46:be:f6:01:26:f2:14:ae:e7:69:2d:0c:fa:00:ad:f0: 9a:45:d4:50:e5:35:d4:5d:2a:03:de:2b:fd:c1:54:9b:31:0e: 12:fe:60:d8:00:d8:e3:ab:e8:ed:95:25:35:be:98:ba:d8:c6: 42:6b:6f:df:3a:9c:c8:c0:7b:50:5e:2d:2d:cd:64:31:db:60: f2:78:69:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFSp7WTJyLK18qPfWOd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZDhjMTk4NWM1MGM3ZWFkNGNmZDhkM2E5M2Q2M2U1NjEx ZjZmYjYwHhcNMjUxMjA2MTcwMTE3WhcNMjUxMjA3MTcwMTE3WjAzMTEwLwYDVQQD EygyYzE3MTZkMGM5MTBlMjQ0OTk2MWExZGEyNmY5MGNkZjZhNDJmZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8XIMGkMiCWtPRfVq+5CWzJX8tN9 GG7o9PTHwSPPsQ6DXVFZeaSFfkijpN4oq9W2yASuSIep6zT5GJyqyelmGL45Sg91 yaNSYw3kZxoae5EVtlULuVDfWrT2dZDpd2tTZrhb8oLtg0YSmMgfmBVobK9hrjGn RnU7Vz75Vk2YYOb3Rj/pYP+uROswfNe/pSjr/qJH2s5q+FWPJvT3PykysVThCthV bXWnTQ5vLduBlxuZMCv3usHW3d7LVSLPaowO5xZU33pxlykMBoKoXswN7ijTUTTH 42W5wr8y8gG8xky+dXr4PPINY/hfmN3jjWbj8NxGLmrQO9HkqxynFiU+TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwXFtDJEOJEmWGh2ib5DN9qQv+DMB8GA1UdIwQY MBaAFMTYwZhcUMfq1M/Y06k9Y+VhH2+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjct MmZkYTk3MDc5YzAxLzEveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83N2Q2MDctN2Q3Yy00NTg5LWFmZjctMmZkYTk3MDc5YzAx LzEveE5qQm1GeFF4LXJVejlqVHFUMWo1V0VmYjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuA/Yd9l O51ef2KHqzYoA2igcwxAkJdp4aEp/PfFsqmiuWPA36kK6NGkPThzWOT1aXW2pkjZ sQbcNxHAy0ljNsqQ/7fTj5oq6/meagj6IW4i6zxIWH687WD1Og5w2kXeG/rkwDln PAOZqjVAbUtUYQp2Q0QUfj+Kq6wdfEQ+uXX1SGktzwCN0bIeXPN1u358NoLcMqR/ tsKoOx3SzQKBHrdTAxLoZDWZ1XZ3VLcFbX6J/Z6KI09GvvYBJvIUrudpLQz6AK3w mkXUUOU11F0qA94r/cFUmzEOEv5g2ADY46vo7ZUlNb6YutjGQmtv3zqcyMB7UF4t Lc1kMdtg8nhpCA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:53:59 2025 by rpki-client