This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json) Hash identifier: w87+0eZiF3zsYHbrbWC6uW2nWZO7RxxCIRBSOvUjYho= Subject key identifier: 0E:78:21:F8:E8:84:0F:6A:4E:22:C3:1D:62:87:79:88:41:D3:E9:B6 Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Certificate serial: 019AF23FE3D3051F5A932B295E8E462C5FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft Manifest number: 16FE Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=) 2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: uSmH7itxbpy44ZuZoKYlwg+RXKAJ5kFB7ve8855/9wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e3:d3:05:1f:5a:93:2b:29:5e:8e:46:2c:5f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=0e7821f8e8840f6a4e22c31d6287798841d3e9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:6c:84:3f:8f:6c:60:2a:b4:d8:56:c4:8d: ef:77:a3:93:88:68:1f:7d:d4:2a:31:aa:45:1c:33: cd:0a:48:6f:07:8b:e4:52:55:ea:06:07:a5:5b:fb: 7a:46:ec:4a:8b:af:8c:c2:96:58:bc:b2:74:7f:67: 1c:ce:ad:ad:65:a0:fa:96:3e:3f:1e:e7:14:ca:66: 2f:dd:60:73:72:4b:e0:87:32:5c:85:05:e4:ba:f7: 57:45:ec:65:09:01:f3:54:38:b3:ca:87:47:27:43: 91:d1:d3:49:d0:3b:62:8b:6d:6c:9a:b6:d5:f6:6e: e7:07:3f:ba:77:94:8d:71:ba:a1:40:5d:7c:cd:c3: 23:b8:81:a1:e1:08:69:82:85:c0:2d:db:fb:01:c2: 7f:f7:00:21:da:8c:e1:a7:78:e7:22:ba:fa:df:1f: 73:74:d4:f8:49:c7:f7:51:8b:f2:c6:c5:ad:83:35: c4:6d:c3:c2:7c:7d:f4:37:4a:48:b8:ff:8f:fc:3c: 94:9e:db:a0:9d:e6:f2:30:ab:8c:55:07:09:a3:67: ac:3a:8f:c8:81:47:e8:19:a4:15:03:86:7a:02:94: bc:38:99:10:43:5e:63:e6:4e:b0:5e:9e:ad:ad:2f: 9f:8f:e3:a6:b3:3d:f0:d1:aa:b0:2d:59:4c:ac:a4: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:78:21:F8:E8:84:0F:6A:4E:22:C3:1D:62:87:79:88:41:D3:E9:B6 X509v3 Authority Key Identifier: keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:54:e8:c3:be:28:f4:85:5a:e7:00:18:55:03:53:24:e8:51: b5:74:6f:0a:8b:97:c7:d5:e2:d7:69:84:85:5e:df:4b:03:6d: b5:50:e5:2b:40:d6:eb:35:51:d5:03:f6:40:be:0c:b2:9f:83: 8c:d1:46:50:78:b0:48:e9:26:18:87:3b:a7:05:2c:e0:4a:62: b6:64:f2:6d:a9:4a:f0:8e:bc:a3:f4:4c:65:fe:ef:ee:a5:a4: 24:d5:b2:1c:84:fd:5a:19:2a:da:5d:ca:f0:23:66:24:1d:6e: 63:4f:5d:3d:00:a9:21:33:b4:d2:1f:23:44:50:f8:57:5d:31: f4:f5:38:1e:14:8c:c9:63:3d:c2:69:bd:4c:33:2f:25:ca:ce: fa:ec:15:2f:f4:1f:15:b2:6f:12:67:74:40:0e:5e:fe:e1:ad: 83:f5:e6:4f:63:f9:40:55:a9:f5:36:d3:8e:f1:1d:0a:fb:b9: 86:79:d8:45:22:b7:98:82:2d:fe:3c:63:ba:51:be:45:f8:97: 2b:99:c4:29:dd:78:bd:be:9a:65:0b:99:94:c5:27:26:b5:98: a4:e6:2f:65:e6:78:a4:a1:3a:f2:14:bc:b1:3b:55:c7:10:e1: cf:ff:e7:44:0f:87:1f:ae:70:45:2d:cc:7d:d0:dc:2e:24:ce: 7f:81:79:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+PTBR9akyspXo5GLF+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw YjdlZjgwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EygwZTc4MjFmOGU4ODQwZjZhNGUyMmMzMWQ2Mjg3Nzk4ODQxZDNlOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArudshD+PbGAqtNhWxI3vd6OTiGgf fdQqMapFHDPNCkhvB4vkUlXqBgelW/t6RuxKi6+MwpZYvLJ0f2cczq2tZaD6lj4/ HucUymYv3WBzckvghzJchQXkuvdXRexlCQHzVDizyodHJ0OR0dNJ0Dtii21smrbV 9m7nBz+6d5SNcbqhQF18zcMjuIGh4QhpgoXALdv7AcJ/9wAh2ozhp3jnIrr63x9z dNT4Scf3UYvyxsWtgzXEbcPCfH30N0pIuP+P/DyUntugnebyMKuMVQcJo2esOo/I gUfoGaQVA4Z6ApS8OJkQQ15j5k6wXp6trS+fj+Omsz3w0aqwLVlMrKRLhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA54IfjohA9qTiLDHWKHeYhB0+m2MB8GA1UdIwQY MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1 LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVTow74o 9IVa5wAYVQNTJOhRtXRvCouXx9Xi12mEhV7fSwNttVDlK0DW6zVR1QP2QL4Msp+D jNFGUHiwSOkmGIc7pwUs4EpitmTybalK8I68o/RMZf7v7qWkJNWyHIT9Whkq2l3K 8CNmJB1uY09dPQCpITO00h8jRFD4V10x9PU4HhSMyWM9wmm9TDMvJcrO+uwVL/Qf FbJvEmd0QA5e/uGtg/XmT2P5QFWp9TbTjvEdCvu5hnnYRSK3mIIt/jxjulG+RfiX K5nEKd14vb6aZQuZlMUnJrWYpOYvZeZ4pKE68hS8sTtVxxDhz//nRA+HH65wRS3M fdDcLiTOf4F5LA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:59 2025 by rpki-client