This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: hpePL5JWb1nBmADB6kg3As02jWi9hLLINC1/u3imIDM= Subject key identifier: 98:2B:E6:51:5F:86:DE:4F:B8:09:88:F3:54:73:E2:42:20:9C:AA:71 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019AF209ACA99C0FB210DB0BD1C6EBCF6DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 1778 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: 0LO0qT2-0L6mWDwJ3dVrGvaEEOA.roa (hash: m3gjbEV2ZPpf1SrIWWEpb/lM9m2SeM9EF+s0bK96n04=) 2: 3TSrnVPCjyw6LodRykSs6RR28tA.roa (hash: zGSnutgCi7aRhsrnKssjXI5Z238+gDkkfWPc6h8G0+I=) 3: CXLJsfdv2mQYEw_nRCBRyHgGrls.roa (hash: gIlLTUkZL/5+bXwsRESHghLIgWvhwbD5U5vB0n4lI0k=) 4: GZyq4JhiMN6IbDxHDi387ilVO3Q.roa (hash: RAmDxoFTdOQGRBWibMySEyO1+N/egEhlrBt73Hj0G1U=) 5: LjHQRUqe4fLfiS_M0uR2yHkIVsY.roa (hash: jHwF+Ucs9Egx9vRvgHwI9YrO/JhN5R4twljmxbgKN5c=) 6: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: sUAZ0Txyat9IYo0flj9wsf+7GaTd+QLmQ7c9qvWgPiM=) 7: XsnL58BowN54P94Hq8ZFELardLk.roa (hash: HNbFuOKPa1T82T8LpW7Qm3FZ0tR+dmMImgYgvtx3m4g=) 8: Zz42OKsTm8e7N4-UL7iAE7WQUo8.roa (hash: 5tp1DE1mgaUL43CN7zGdBuvgS2VFLrFuAK++O/dGYog=) 9: aCmXnOhdIWHZjR6YD1Rod6YvGNc.roa (hash: iW+Z/yl7UOD6yvlgUZgO+TZmSZwkPpW3YOaIuSe/RJg=) 10: xuDTDMEslqKPlZ2emXhAqCHpZwk.roa (hash: jcyM9LWTAAxEKRGaAJaeFS8iGlw9gblRVA2IJcUw/E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ac:a9:9c:0f:b2:10:db:0b:d1:c6:eb:cf:6d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=982be6515f86de4fb80988f35473e242209caa71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:f4:7c:eb:f5:7d:0a:b9:d9:47:7b:66:2e: 5d:7e:6a:c3:f7:0b:36:44:31:23:20:e1:b7:ae:0f: 27:57:0c:ab:91:d1:f1:83:71:38:b2:91:91:fe:57: ef:54:14:5d:b3:4c:97:76:ea:40:2d:a9:41:e8:b9: e8:27:10:a3:5a:25:40:00:7b:94:5d:39:15:5d:50: 0a:a5:10:fe:04:c7:09:e9:c7:6b:f6:83:71:c1:2a: ab:dd:b2:ed:c6:f3:41:f4:c2:5a:95:e0:18:79:7c: d3:b9:33:76:ea:d7:91:f6:1b:94:7b:0d:4f:e2:1d: 44:15:4c:5f:f3:a4:1d:f4:d0:6d:a3:73:43:5e:dd: 64:64:d9:05:21:da:84:77:5b:0a:9c:e0:eb:50:d2: 79:c2:e2:63:c3:29:e2:08:5f:83:e8:ae:1e:08:1c: cd:75:46:8f:73:52:20:66:50:83:88:c4:20:98:76: a2:45:96:5b:f9:67:e6:12:2e:ab:f8:76:75:c9:b8: 61:73:e0:12:ee:72:3c:34:67:0c:d8:73:20:c1:af: d7:ac:62:f4:a1:be:bd:85:6a:6b:e1:98:72:d8:7e: 9a:b0:2b:b1:54:99:85:06:07:c7:ea:1a:f4:6f:b4: 3c:41:84:4e:77:6c:59:10:f1:8b:a2:9f:e4:aa:8c: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2B:E6:51:5F:86:DE:4F:B8:09:88:F3:54:73:E2:42:20:9C:AA:71 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ec:2e:03:50:98:df:b6:de:f7:8b:13:41:f7:01:ae:bd:28: 54:23:76:77:bd:9a:11:af:09:63:65:64:64:5d:c9:5d:d3:b3: 7b:da:6d:02:bb:6d:b2:3c:50:00:b5:be:93:d8:30:eb:b2:d6: 7c:df:45:66:a5:ec:4a:25:28:e5:7b:d0:06:2b:cf:81:f9:03: 57:0a:aa:a9:69:c6:7f:5b:0f:10:0a:12:ba:ec:0e:23:e5:04: 9e:b3:31:c7:c8:29:f0:1a:0f:ff:0c:12:74:e0:78:78:54:25: 72:cd:dd:35:60:7c:00:6f:91:7f:62:8b:55:21:43:5f:0b:5e: f7:8b:56:5a:55:79:a1:86:12:f3:62:b8:2d:8a:a9:81:52:d5: 1d:60:3d:39:75:bb:7f:f8:48:8e:d2:e8:34:7d:de:0d:62:71: 81:e8:1f:4b:8a:ba:ca:e9:54:40:2d:5d:c4:93:88:03:55:34: 46:eb:bd:04:3e:19:94:c2:d4:c8:30:ae:78:51:f2:4e:45:36: b0:70:c8:17:80:32:6f:85:50:60:18:55:78:0f:ff:f4:86:6c: 55:0e:d9:ea:ca:b6:b3:b9:1d:bb:9e:0a:da:ef:b4:10:87:12: a8:29:62:a6:3b:98:e8:97:ef:67:76:a0:2f:e2:ce:93:a7:ca: de:3a:e3:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaypnA+yENsL0cbrz22uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD Eyg5ODJiZTY1MTVmODZkZTRmYjgwOTg4ZjM1NDczZTI0MjIwOWNhYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdH0fOv1fQq52Ud7Zi5dfmrD9ws2 RDEjIOG3rg8nVwyrkdHxg3E4spGR/lfvVBRds0yXdupALalB6LnoJxCjWiVAAHuU XTkVXVAKpRD+BMcJ6cdr9oNxwSqr3bLtxvNB9MJaleAYeXzTuTN26teR9huUew1P 4h1EFUxf86Qd9NBto3NDXt1kZNkFIdqEd1sKnODrUNJ5wuJjwyniCF+D6K4eCBzN dUaPc1IgZlCDiMQgmHaiRZZb+WfmEi6r+HZ1ybhhc+AS7nI8NGcM2HMgwa/XrGL0 ob69hWpr4Zhy2H6asCuxVJmFBgfH6hr0b7Q8QYROd2xZEPGLop/kqow4uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgr5lFfht5PuAmI81Rz4kIgnKpxMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+wuA1CY 37be94sTQfcBrr0oVCN2d72aEa8JY2VkZF3JXdOze9ptArttsjxQALW+k9gw67LW fN9FZqXsSiUo5XvQBivPgfkDVwqqqWnGf1sPEAoSuuwOI+UEnrMxx8gp8BoP/wwS dOB4eFQlcs3dNWB8AG+Rf2KLVSFDXwte94tWWlV5oYYS82K4LYqpgVLVHWA9OXW7 f/hIjtLoNH3eDWJxgegfS4q6yulUQC1dxJOIA1U0Ruu9BD4ZlMLUyDCueFHyTkU2 sHDIF4Ayb4VQYBhVeA//9IZsVQ7Z6sq2s7kdu54K2u+0EIcSqClipjuY6JfvZ3ag L+LOk6fK3jrjlA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:41 2025 by rpki-client