This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json) Hash identifier: jOuhna0SMMULWqaaTz4ODjEUtj/Neuu8UTfoFHpGelg= Subject key identifier: F1:65:AB:DC:C7:35:9B:9B:CE:17:9C:A0:E3:0A:EE:17:4B:AC:DF:51 Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Certificate serial: 019AF464D92D42AB762E54B47447DCA2BEB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 16:00:41 +0000 Manifest this update: Sat 06 Dec 2025 16:00:41 +0000 Manifest next update: Sun 07 Dec 2025 16:00:41 +0000 Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=) 2: EyJebdgN_fWVOlchPG_q8jVIsTI.roa (hash: pQpIAFQ+yM9up9856kTHZ8z3CJ8nyC04WtkTgvAhl0g=) 3: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=) 4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: KT/SRzh/ctp1l4Der8DYSjph7gYkaQsbtjKUYdE79sM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d9:2d:42:ab:76:2e:54:b4:74:47:dc:a2:be:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Validity Not Before: Dec 6 16:00:41 2025 GMT Not After : Dec 7 16:00:41 2025 GMT Subject: CN=f165abdcc7359b9bce179ca0e30aee174bacdf51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:b9:80:f8:2d:28:9a:76:5a:09:2e:f6:99: 9f:a4:aa:80:64:62:38:87:4a:f9:86:f2:29:0a:2d: ab:09:06:ba:71:53:77:5a:88:d6:a9:22:cd:73:80: 8d:cf:19:7b:38:78:b2:f2:d8:20:bf:4f:a4:92:3b: bc:7e:7c:03:68:ea:f3:2d:bf:6b:bf:67:4f:96:12: 9b:64:f6:31:33:a9:39:92:85:7a:ba:4b:a5:6a:e0: 60:13:ae:bf:02:a0:9e:51:3a:0f:62:c7:c5:72:56: d2:eb:a9:b1:5e:df:82:6a:0b:46:0f:60:18:fc:33: 5d:d0:d5:86:a1:4c:e9:cf:6e:bf:97:8a:d4:84:54: 63:ec:8d:48:ef:46:e9:b7:c1:84:b3:54:1f:95:4d: 3e:76:b1:18:e1:01:f2:64:0c:89:37:31:f9:5f:c2: 24:a8:82:d0:fd:62:58:4d:0d:0d:2c:ac:40:08:80: 35:c8:92:84:35:e9:1b:92:cd:ca:ba:c6:85:81:b4: fd:d0:7a:9b:a4:7d:c2:9e:0f:24:c7:0c:7d:9f:50: f6:82:31:e7:b7:38:6c:0a:65:84:de:ac:20:2f:e9: ba:b5:8d:23:94:10:32:19:89:3a:c9:b4:82:ea:6b: 40:20:b1:67:5c:83:20:c8:2f:f6:a1:fd:99:dc:a9: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:AB:DC:C7:35:9B:9B:CE:17:9C:A0:E3:0A:EE:17:4B:AC:DF:51 X509v3 Authority Key Identifier: keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c0:de:cf:1b:f8:f8:c3:e3:aa:11:5f:48:e5:f4:13:c6:1b: 2b:dd:dd:c2:e0:2c:f4:19:26:99:f9:ef:5c:8b:55:9f:d9:bc: bb:16:5f:70:06:95:d6:66:75:b7:66:fd:61:e7:72:2a:1c:c3: 0e:4d:84:8c:3f:24:d0:da:22:ec:c4:8b:e9:61:75:55:6b:19: bd:e2:8b:9f:bf:aa:6d:aa:1e:e3:59:8d:0e:06:ea:11:76:e6: b8:77:79:c7:7f:eb:0a:fd:6c:fc:38:fc:e9:32:7d:61:f9:0b: 8b:ca:68:27:f6:1c:79:a4:1a:e2:57:2a:68:4e:ba:4c:8a:f8: 6c:d4:03:d4:4c:15:25:09:f1:cb:02:56:9b:fe:24:74:5a:91: c7:fc:ed:f3:27:e3:0b:95:6e:e7:18:ca:85:ce:66:51:86:6b: 56:08:e2:98:0c:b7:82:17:64:44:be:45:0f:57:b8:af:4f:5a: 45:b3:d4:63:94:a5:c6:74:c3:be:29:e1:21:d0:e6:1c:5b:01: 5a:92:37:ca:da:01:00:07:19:3a:da:0d:48:d7:c6:e4:be:af: ed:4e:91:21:d9:77:77:de:f1:b1:ca:ca:07:0c:8b:77:d5:aa: 31:6f:5b:69:21:e8:4a:79:3f:f8:ad:da:ec:60:c4:6c:a2:8d: a9:d6:07:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNktQqt2LlS0dEfcor6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy NDkxYzUwHhcNMjUxMjA2MTYwMDQxWhcNMjUxMjA3MTYwMDQxWjAzMTEwLwYDVQQD EyhmMTY1YWJkY2M3MzU5YjliY2UxNzljYTBlMzBhZWUxNzRiYWNkZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPa5gPgtKJp2Wgku9pmfpKqAZGI4 h0r5hvIpCi2rCQa6cVN3WojWqSLNc4CNzxl7OHiy8tggv0+kkju8fnwDaOrzLb9r v2dPlhKbZPYxM6k5koV6ukulauBgE66/AqCeUToPYsfFclbS66mxXt+CagtGD2AY /DNd0NWGoUzpz26/l4rUhFRj7I1I70bpt8GEs1QflU0+drEY4QHyZAyJNzH5X8Ik qILQ/WJYTQ0NLKxACIA1yJKENekbks3KusaFgbT90HqbpH3Cng8kxwx9n1D2gjHn tzhsCmWE3qwgL+m6tY0jlBAyGYk6ybSC6mtAILFnXIMgyC/2of2Z3KluQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFlq9zHNZubzhecoOMK7hdLrN9RMB8GA1UdIwQY MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt MWM4YWZkMTlmZGJiLzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncDezxv4 +MPjqhFfSOX0E8YbK93dwuAs9BkmmfnvXItVn9m8uxZfcAaV1mZ1t2b9YedyKhzD Dk2EjD8k0Noi7MSL6WF1VWsZveKLn7+qbaoe41mNDgbqEXbmuHd5x3/rCv1s/Dj8 6TJ9YfkLi8poJ/YceaQa4lcqaE66TIr4bNQD1EwVJQnxywJWm/4kdFqRx/zt8yfj C5Vu5xjKhc5mUYZrVgjimAy3ghdkRL5FD1e4r09aRbPUY5SlxnTDvinhIdDmHFsB WpI3ytoBAAcZOtoNSNfG5L6v7U6RIdl3d97xscrKBwyLd9WqMW9baSHoSnk/+K3a 7GDEbKKNqdYHkA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:13 2025 by rpki-client