This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: jXXHFZXAwsZ8522ikPTbFM+WTv753SWI5OEmoYtV8PA= Subject key identifier: 02:1D:F5:16:1B:C8:90:17:08:1B:5C:58:25:1F:AF:9A:91:07:69:DA Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019AF2AD7D965044EB9E886A44F243E9AF70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 101E Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 7: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: FXETt2d2zBiDeFg+iqIo9czVKWlocQ6slNR2Kykg8IM=) 8: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 9: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 10: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) 11: l7iZbiV7r6tXyFTfuUPxFcrsM4M.roa (hash: G7fwAbhY4dToat2MKtWl3kp+QqFAqtJoJEL3kRG4KEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7d:96:50:44:eb:9e:88:6a:44:f2:43:e9:af:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=021df5161bc89017081b5c58251faf9a910769da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:40:00:7e:15:e1:09:d3:0f:ce:82:03:38: 63:3e:66:95:a3:a6:15:ba:f4:2d:92:32:97:a0:49: 52:4f:b6:86:f2:0c:6b:89:d3:ce:d2:ac:e2:78:b8: 70:8d:75:1e:89:16:04:f5:0f:51:bb:18:a8:37:c1: bd:0e:dd:ed:d4:cb:5f:b7:dd:8f:5d:5b:f2:22:d1: 7b:d6:1f:78:32:27:46:4c:9a:ce:85:71:e3:d6:bc: 16:1b:13:47:4a:98:a3:03:51:17:b5:39:1b:d5:c6: 8b:ce:9a:be:00:44:e0:a7:1f:de:73:a7:d0:ac:78: 5b:5e:ac:7b:78:b5:47:62:ea:98:c3:8e:d7:61:24: e1:33:33:9a:25:8e:1d:31:35:99:ac:ac:27:19:86: 2a:f2:49:b4:7d:75:c9:7b:47:44:d8:ae:88:3d:38: 13:52:01:db:18:a6:eb:17:7c:09:fd:85:12:e9:5a: 8f:fd:78:5a:67:92:7b:a2:80:48:e7:2f:08:f7:d4: 68:e9:c5:75:f0:98:d4:60:1e:1c:d7:aa:ae:9a:1e: c2:df:a5:9a:55:72:a6:df:f4:11:72:bc:ba:fd:8f: b0:0e:c1:8d:ef:2b:11:8e:2c:32:1d:b0:ae:fc:0e: b2:3b:40:26:99:8d:b3:0e:96:9a:02:03:b9:2a:c7: 98:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1D:F5:16:1B:C8:90:17:08:1B:5C:58:25:1F:AF:9A:91:07:69:DA X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:58:ca:2c:de:76:16:f2:b8:6f:57:bd:16:69:9f:66:5e:73: 9e:8f:5d:43:7b:bd:88:fc:e8:09:11:2b:af:db:05:26:3f:3e: 2f:c0:9b:6b:dd:c7:76:24:31:e0:87:07:00:b8:a4:40:36:d4: 57:b5:e5:11:c2:2a:7f:80:52:ba:d8:18:73:50:90:c8:e1:da: 52:69:b8:2c:81:b5:c0:d2:12:18:7f:58:e8:a8:98:b8:3b:e7: 62:d4:b6:21:4c:04:55:38:06:70:be:cf:4c:86:a2:fb:20:04: 1f:95:5e:7b:ca:1d:f4:de:75:28:6b:54:13:24:81:c0:1a:8e: fc:24:f8:86:9f:90:96:43:5c:d1:d6:d2:7e:8c:28:a9:ac:c4: 91:44:90:21:c2:94:d6:39:b7:bb:a5:1d:d2:ef:8c:34:29:23: 35:1b:34:0f:1d:b5:e1:5c:d1:e2:1b:f3:09:78:93:63:a8:70: 57:8b:04:70:b7:2b:ab:58:62:fb:ec:3c:70:3b:40:a4:e7:78: 40:c1:b4:f6:31:f8:1c:da:e2:25:93:0b:da:5a:61:5a:ec:94: 48:a4:5b:60:7e:89:a9:7a:42:e2:3a:d2:4b:73:4b:1a:5c:30: 52:86:22:1e:4a:11:6f:68:85:74:ab:a0:b8:70:7d:91:7e:66: 56:22:39:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX2WUETrnohqRPJD6a9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EygwMjFkZjUxNjFiYzg5MDE3MDgxYjVjNTgyNTFmYWY5YTkxMDc2OWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVlAAH4V4QnTD86CAzhjPmaVo6YV uvQtkjKXoElST7aG8gxridPO0qzieLhwjXUeiRYE9Q9RuxioN8G9Dt3t1Mtft92P XVvyItF71h94MidGTJrOhXHj1rwWGxNHSpijA1EXtTkb1caLzpq+AETgpx/ec6fQ rHhbXqx7eLVHYuqYw47XYSThMzOaJY4dMTWZrKwnGYYq8km0fXXJe0dE2K6IPTgT UgHbGKbrF3wJ/YUS6VqP/XhaZ5J7ooBI5y8I99Ro6cV18JjUYB4c16qumh7C36Wa VXKm3/QRcry6/Y+wDsGN7ysRjiwyHbCu/A6yO0AmmY2zDpaaAgO5KseYqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAId9RYbyJAXCBtcWCUfr5qRB2naMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQljKLN52 FvK4b1e9FmmfZl5zno9dQ3u9iPzoCRErr9sFJj8+L8Cba93HdiQx4IcHALikQDbU V7XlEcIqf4BSutgYc1CQyOHaUmm4LIG1wNISGH9Y6KiYuDvnYtS2IUwEVTgGcL7P TIai+yAEH5Vee8od9N51KGtUEySBwBqO/CT4hp+QlkNc0dbSfowoqazEkUSQIcKU 1jm3u6Ud0u+MNCkjNRs0Dx214VzR4hvzCXiTY6hwV4sEcLcrq1hi++w8cDtApOd4 QMG09jH4HNriJZML2lphWuyUSKRbYH6JqXpC4jrSS3NLGlwwUoYiHkoRb2iFdKug uHB9kX5mViI5uA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:23 2025 by rpki-client