This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json) Hash identifier: StEP3FsnDaG7i4JKx10HFpbpMSTXOmy7QgzJMiE5yGw= Subject key identifier: F3:54:37:38:BA:B6:30:C6:27:CF:14:FD:D9:4E:BD:D8:8D:81:85:DE Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5 Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5 Certificate serial: 019AF5AE59CACD8979E8C2D3312B68A41D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft Manifest number: 0FE4 Signing time: Sat 06 Dec 2025 22:00:35 +0000 Manifest this update: Sat 06 Dec 2025 22:00:35 +0000 Manifest next update: Sun 07 Dec 2025 22:00:35 +0000 Files and hashes: 1: BxG4JwAN57vo6NBlUISw9RdW7m0.roa (hash: roJixiQowuB4avbvI55JLdOWJ/KjfR6U+Yu2VKUFfoA=) 2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: qaGvz8PtfnS8mfdW93OH1VphChUaCY3sCcxZz+8PZjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:59:ca:cd:89:79:e8:c2:d3:31:2b:68:a4:1d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5 Validity Not Before: Dec 6 22:00:35 2025 GMT Not After : Dec 7 22:00:35 2025 GMT Subject: CN=f3543738bab630c627cf14fdd94ebdd88d8185de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:4d:d8:57:12:d5:ef:90:a5:a6:d1:f7:63: 14:1b:ee:07:6a:ad:6d:91:76:63:d7:83:cd:e1:42: 0a:36:fb:31:95:32:42:06:3d:76:56:92:97:2b:ab: b2:32:cd:2c:16:7c:bf:a5:c6:75:54:57:16:99:83: 07:e5:9c:73:02:71:58:6f:b2:a5:b7:b7:cf:62:e1: 6c:39:5f:e2:fc:a9:b9:3a:33:42:15:53:0f:74:2e: 0a:55:b0:f7:a6:75:5f:dd:5e:61:28:03:ac:e3:c8: 22:d6:62:e3:73:7a:f0:10:9a:c5:1e:48:c5:1d:04: d9:c6:a2:5c:63:fd:1d:ea:0e:36:4a:f8:e1:a2:b8: 11:9d:5a:e9:fc:f2:b7:dd:9f:1a:1a:e4:ec:e6:cb: 32:0e:0b:73:99:d3:79:6d:ff:23:a0:d0:c6:d8:e0: 5b:b4:28:ca:f2:1f:33:c8:78:00:ac:2e:27:2e:ca: 6e:63:7f:b2:de:b9:4a:1b:36:68:91:33:26:10:a0: 23:34:72:01:f3:d6:79:68:19:74:1c:d8:39:d5:5e: 47:e5:c1:d7:13:68:2e:5c:0a:52:36:50:c5:58:4c: 23:ab:80:6a:c0:8a:34:ff:a4:f7:2a:cc:63:49:e9: 6e:70:ae:9a:31:a9:2f:1f:0d:20:39:4c:60:60:4a: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:54:37:38:BA:B6:30:C6:27:CF:14:FD:D9:4E:BD:D8:8D:81:85:DE X509v3 Authority Key Identifier: keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:98:26:ab:49:b1:06:61:45:59:4a:d4:05:de:df:e0:6e:1f: 50:ee:aa:f7:6f:52:e1:04:16:d2:a7:70:ca:ef:7f:26:a2:f8: e4:9b:98:e6:0a:d4:af:6b:02:ac:fd:8b:18:b0:02:67:a3:38: 20:ca:30:69:83:59:56:9a:02:6c:1b:25:97:c1:6b:41:2c:f8: 4a:36:25:ca:af:e5:ac:47:aa:19:94:15:7e:8e:ec:31:28:27: e9:b7:c0:3e:85:4c:56:34:3f:f9:20:b5:b5:0a:5a:ea:2e:f0: f3:e4:74:4b:7c:01:fa:bd:25:0f:1e:72:41:1b:e3:fc:07:87: bb:2c:dd:9f:18:cb:6d:a1:3e:bf:46:73:9f:8e:58:a0:8b:cf: 05:7f:d6:3c:27:a2:d4:ef:77:33:23:fb:1e:14:26:52:51:ed: 7f:e3:1e:b8:e1:c5:b4:9d:bc:e6:02:09:3e:9c:39:2b:2c:eb: ad:cd:31:6b:ae:2b:bf:0b:d7:69:07:ce:36:da:7f:8d:ea:e2: 81:c1:a9:f1:19:fa:04:80:2a:98:2f:a4:23:5b:17:20:d6:4d: cd:3d:c2:e1:7f:9b:c7:da:b6:69:38:a4:0d:75:ae:5b:1f:2d: 47:38:4f:28:6f:aa:03:13:5e:85:ef:82:fe:b3:b9:ff:c0:98: 2b:d6:b2:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rlnKzYl56MLTMStopB0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2MyMjJmYWQyYzI3Y2E2MTJjOThjMjczZDRmMTY1MDZl MWIyZTUwHhcNMjUxMjA2MjIwMDM1WhcNMjUxMjA3MjIwMDM1WjAzMTEwLwYDVQQD EyhmMzU0MzczOGJhYjYzMGM2MjdjZjE0ZmRkOTRlYmRkODhkODE4NWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmtN2FcS1e+QpabR92MUG+4Haq1t kXZj14PN4UIKNvsxlTJCBj12VpKXK6uyMs0sFny/pcZ1VFcWmYMH5ZxzAnFYb7Kl t7fPYuFsOV/i/Km5OjNCFVMPdC4KVbD3pnVf3V5hKAOs48gi1mLjc3rwEJrFHkjF HQTZxqJcY/0d6g42SvjhorgRnVrp/PK33Z8aGuTs5ssyDgtzmdN5bf8joNDG2OBb tCjK8h8zyHgArC4nLspuY3+y3rlKGzZokTMmEKAjNHIB89Z5aBl0HNg51V5H5cHX E2guXApSNlDFWEwjq4BqwIo0/6T3KsxjSelucK6aMakvHw0gOUxgYErR8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNUNzi6tjDGJ88U/dlOvdiNgYXeMB8GA1UdIwQY MBaAFMQ8Ii+tLCfKYSyYwnPU8WUG4bLlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82OGE3ZWEtZDUwYS00YTMwLTk1MTMt ZTkwOWE3N2NkYTk4LzEveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82OGE3ZWEtZDUwYS00YTMwLTk1MTMtZTkwOWE3N2NkYTk4 LzEveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5gmq0mx BmFFWUrUBd7f4G4fUO6q929S4QQW0qdwyu9/JqL45JuY5grUr2sCrP2LGLACZ6M4 IMowaYNZVpoCbBsll8FrQSz4SjYlyq/lrEeqGZQVfo7sMSgn6bfAPoVMVjQ/+SC1 tQpa6i7w8+R0S3wB+r0lDx5yQRvj/AeHuyzdnxjLbaE+v0Zzn45YoIvPBX/WPCei 1O93MyP7HhQmUlHtf+MeuOHFtJ285gIJPpw5Kyzrrc0xa64rvwvXaQfONtp/jeri gcGp8Rn6BIAqmC+kI1sXINZNzT3C4X+bx9q2aTikDXWuWx8tRzhPKG+qAxNehe+C /rO5/8CYK9ay6Q== -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:20 2025 by rpki-client