This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft File: XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json) Hash identifier: uVtU/MEENxlF3yT9alD1EpTbGfX8TMngEn7OewEdb4E= Subject key identifier: 24:98:FD:C8:E4:FD:62:A4:69:A7:C6:0B:C3:D9:3D:0C:F1:43:70:F0 Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59 Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459 Certificate serial: 019AF12E659C06D701CB57B4CBB9EA92E321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft Manifest number: 0D16 Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: 7VePb56Lb2mDp_DoHqAJOVOs_T8.roa (hash: V7IpcMoqQADg7SX3r725vYH2jPknDmi+ikdfBjQyP5c=) 2: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: W5NDluyv7TgGJia1i5vC+KoNL5ut4P+yYp/1KUqXSHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:65:9c:06:d7:01:cb:57:b4:cb:b9:ea:92:e3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459 Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=2498fdc8e4fd62a469a7c60bc3d93d0cf14370f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:63:32:9f:27:57:73:95:61:e1:f5:9f:a9: 4d:f2:93:f5:22:87:cd:4f:7f:39:a6:59:02:73:dd: c1:5f:23:b7:bb:13:53:19:df:f5:9a:cf:a6:b0:f6: 95:b3:2d:4f:0b:33:b4:e0:06:a3:85:ba:e1:f1:7e: 6b:ec:9a:56:00:02:bc:c7:64:5c:dc:bf:eb:93:45: d2:f5:21:19:d1:df:bd:2f:14:e2:ad:4f:6f:79:5e: f4:63:24:ea:11:3a:9a:39:6d:fd:71:6f:e9:79:35: f3:e3:ec:54:4f:3a:0a:bb:6d:c0:40:0e:af:e5:42: 5b:d8:28:aa:52:4f:6a:f3:d6:25:12:eb:9e:6b:2c: 1a:4e:04:81:ed:74:82:b0:4f:fb:ba:59:0b:f8:72: aa:0e:bf:63:e4:af:91:9d:8b:a4:b3:ad:3d:6e:e7: 2f:82:7f:2c:7e:d9:d0:e2:c8:e8:e6:51:70:1e:7f: 07:b8:2f:2f:a7:e8:99:78:f5:a0:84:7b:4f:93:74: 49:4d:93:26:4f:49:a8:4b:85:95:29:50:fc:34:99: aa:34:53:b4:fe:b4:9b:21:68:f1:af:f7:c6:3a:91: 61:f8:63:c7:8a:c8:84:61:c5:77:e4:6b:5f:64:08: 1c:94:0f:b6:47:af:f8:72:b0:55:c1:2f:17:ac:2e: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:98:FD:C8:E4:FD:62:A4:69:A7:C6:0B:C3:D9:3D:0C:F1:43:70:F0 X509v3 Authority Key Identifier: keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:30:56:ee:9a:3e:8d:4d:f9:08:0e:22:01:4e:ff:b7:2d:07: 92:1b:09:ef:9c:1b:e6:d8:3f:21:7d:e4:ac:d5:e8:27:7e:69: ae:27:4a:12:1a:e4:1d:07:4d:e8:20:36:0c:e9:cf:84:80:b2: dc:d0:63:31:23:66:af:e1:33:ec:3d:9a:ac:fb:e1:23:ef:4e: e3:3c:9c:c4:ef:bf:35:c1:20:2c:66:38:2e:b7:d8:18:12:92: 2d:45:6b:80:ea:65:b2:54:e2:e3:43:f2:f5:93:ac:ae:3e:20: d5:f1:42:49:f4:09:7c:6e:37:d8:9e:73:b5:e7:cc:69:55:12: 56:56:d4:c6:af:57:2a:f1:b9:77:9a:ff:3e:e5:44:e5:87:3a: c4:98:5c:0a:3b:1e:77:5c:7f:cb:8d:4b:e1:6b:8c:d7:71:fd: ef:2d:a0:3e:d0:da:9d:86:fa:39:3e:9a:54:9f:06:db:9b:96: 8c:3c:d5:49:b1:7d:68:eb:d6:e7:89:c2:55:7c:eb:db:49:94: 95:26:77:4d:a8:37:cc:5a:73:28:57:7e:08:b1:36:2e:16:de: 2c:06:59:64:19:72:ac:aa:c5:9b:4f:97:65:2b:69:20:87:50: 11:8c:c6:90:51:fc:fe:cd:7f:4c:89:95:a1:ed:7a:02:8d:00: c5:9d:77:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmWcBtcBy1e0y7nqkuMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMzFkOTc5YjcxMGVkZTIwNjg4MjM4ODFhYTYxMWFkMTNh ZjU0NTkwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD EygyNDk4ZmRjOGU0ZmQ2MmE0NjlhN2M2MGJjM2Q5M2QwY2YxNDM3MGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLNjMp8nV3OVYeH1n6lN8pP1IofN T385plkCc93BXyO3uxNTGd/1ms+msPaVsy1PCzO04Aajhbrh8X5r7JpWAAK8x2Rc 3L/rk0XS9SEZ0d+9LxTirU9veV70YyTqETqaOW39cW/peTXz4+xUTzoKu23AQA6v 5UJb2CiqUk9q89YlEuueaywaTgSB7XSCsE/7ulkL+HKqDr9j5K+RnYuks609bucv gn8sftnQ4sjo5lFwHn8HuC8vp+iZePWghHtPk3RJTZMmT0moS4WVKVD8NJmqNFO0 /rSbIWjxr/fGOpFh+GPHisiEYcV35GtfZAgclA+2R6/4crBVwS8XrC7JBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSY/cjk/WKkaafGC8PZPQzxQ3DwMB8GA1UdIwQY MBaAFF8x2Xm3EO3iBogjiBqmEa0Tr1RZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZGUyOGQtMzc0OS00ZDAyLWJlOWMt NDFjNjY0NThkZDczLzEvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZGUyOGQtMzc0OS00ZDAyLWJlOWMtNDFjNjY0NThkZDcz LzEvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDBW7po+ jU35CA4iAU7/ty0HkhsJ75wb5tg/IX3krNXoJ35pridKEhrkHQdN6CA2DOnPhICy 3NBjMSNmr+Ez7D2arPvhI+9O4zycxO+/NcEgLGY4LrfYGBKSLUVrgOplslTi40Py 9ZOsrj4g1fFCSfQJfG432J5ztefMaVUSVlbUxq9XKvG5d5r/PuVE5Yc6xJhcCjse d1x/y41L4WuM13H97y2gPtDanYb6OT6aVJ8G25uWjDzVSbF9aOvW54nCVXzr20mU lSZ3Tag3zFpzKFd+CLE2LhbeLAZZZBlyrKrFm0+XZStpIIdQEYzGkFH8/s1/TImV oe16Ao0AxZ13zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:45 2025 by rpki-client