This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json) Hash identifier: WgIzbTwdtSvOUQTCSOfYqImV3IqXCkBYLP977HWRaS4= Subject key identifier: 2F:AF:73:7E:95:10:FD:65:D9:49:F6:06:27:7D:C8:05:A8:58:D9:F1 Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c Certificate serial: 019AF38A1599C2F67F4A9D96F0BA6CF414B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft Manifest number: 02F0 Signing time: Sat 06 Dec 2025 12:01:44 +0000 Manifest this update: Sat 06 Dec 2025 12:01:44 +0000 Manifest next update: Sun 07 Dec 2025 12:01:44 +0000 Files and hashes: 1: pPDQg5f5kGuSR2hkeIKBHPaAVhU.roa (hash: boloPLWJ4z64JM9lq0HxvkObLTMsuc1bJU2GdWq92GM=) 2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: Pg8CmmAD/xGKQgCnOq1fKGHYamqLEa3omzkG3PsHavE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:15:99:c2:f6:7f:4a:9d:96:f0:ba:6c:f4:14:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c Validity Not Before: Dec 6 12:01:44 2025 GMT Not After : Dec 7 12:01:44 2025 GMT Subject: CN=2faf737e9510fd65d949f606277dc805a858d9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:bf:06:12:b4:60:36:c3:b8:e9:13:d5:68: 54:44:93:95:b3:87:17:e5:65:04:9f:18:97:f6:2e: 49:f9:cd:c8:d7:1c:65:a2:b8:68:bc:7e:36:13:63: 55:82:04:2a:7a:50:8e:47:5a:46:5c:74:c8:02:93: 9c:82:8a:19:03:b2:04:94:4d:48:b7:9a:be:f8:85: 59:25:97:04:1a:82:78:4a:34:d6:89:76:3e:bf:ff: f1:84:a5:76:79:d1:e4:68:76:07:71:b3:b8:d1:44: 61:be:8a:26:fc:fa:6d:77:d8:5e:45:c4:7a:44:50: 73:f6:11:c4:2f:d8:ef:5e:9a:c2:8d:07:23:f6:95: 7a:34:cb:33:8a:9a:ec:4e:e3:72:cb:ae:1b:a5:07: 29:bc:78:ad:18:6e:2d:93:22:dd:ba:58:01:4a:2b: 90:42:b4:b9:a0:26:4c:c7:17:bc:12:2c:20:f4:47: f8:d0:64:a0:47:b1:f1:e8:3c:7f:da:85:46:bc:a6: e3:3e:72:0a:06:44:b7:71:55:26:bb:d6:cd:f9:5c: 97:d8:95:88:1b:df:0d:60:fb:c8:7c:f4:72:11:69: fe:01:fa:3f:f1:16:01:8e:ca:93:ae:2c:01:06:c4: 5d:61:4f:be:a5:4e:0a:39:88:b7:3a:82:57:92:c6: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AF:73:7E:95:10:FD:65:D9:49:F6:06:27:7D:C8:05:A8:58:D9:F1 X509v3 Authority Key Identifier: keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a2:82:57:15:94:30:6f:7d:c4:26:33:3a:88:5e:d7:4e:ed: 4b:e7:cd:c8:08:f1:1d:2c:79:88:1b:1e:e8:c1:65:86:ac:d1: 0b:05:7f:c1:7f:35:a5:83:71:4f:c2:39:28:56:94:57:38:3c: a6:dd:82:6c:05:66:3e:05:ee:b8:9a:ff:6f:d3:d6:98:d2:ec: c0:f2:7c:fa:4a:eb:63:a8:a3:48:48:fa:fa:77:1b:82:83:78: f0:9f:72:f2:c6:a5:5c:36:30:58:04:f1:60:66:f7:ab:d5:ec: 3f:bd:12:85:07:1c:10:0b:a1:88:c6:ca:4b:04:23:89:8a:50: 20:2a:9b:8d:64:0e:35:fb:5c:60:bb:8a:33:f7:ab:0c:c5:5e: b6:55:72:f2:65:e5:44:1a:89:3e:48:a1:ec:90:4f:cc:bd:0f: a4:90:9c:c8:af:92:fa:57:56:98:8f:de:58:57:21:3e:03:4a: 04:80:4e:77:09:f0:dc:ac:81:6b:77:5b:48:3d:47:28:cd:75: 13:b4:37:c6:c6:4a:75:63:ea:1c:00:73:d9:9b:37:27:89:88: 75:53:b6:e1:56:96:f4:4b:ca:e6:5d:32:33:4c:3f:1d:b9:d9: 39:29:01:89:0f:28:83:d7:0e:eb:5a:04:7b:9b:f1:92:19:a1: a7:d3:e3:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihWZwvZ/Sp2W8Lps9BS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTdjMTViZGVlY2U3YjBhMWI0NzdlMWUwZWU4YmZmNTNm YWZlMGMwHhcNMjUxMjA2MTIwMTQ0WhcNMjUxMjA3MTIwMTQ0WjAzMTEwLwYDVQQD EygyZmFmNzM3ZTk1MTBmZDY1ZDk0OWY2MDYyNzdkYzgwNWE4NThkOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwe/BhK0YDbDuOkT1WhURJOVs4cX 5WUEnxiX9i5J+c3I1xxlorhovH42E2NVggQqelCOR1pGXHTIApOcgooZA7IElE1I t5q++IVZJZcEGoJ4SjTWiXY+v//xhKV2edHkaHYHcbO40URhvoom/Pptd9heRcR6 RFBz9hHEL9jvXprCjQcj9pV6NMsziprsTuNyy64bpQcpvHitGG4tkyLdulgBSiuQ QrS5oCZMxxe8Eiwg9Ef40GSgR7Hx6Dx/2oVGvKbjPnIKBkS3cVUmu9bN+VyX2JWI G98NYPvIfPRyEWn+Afo/8RYBjsqTriwBBsRdYU++pU4KOYi3OoJXksaTFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+vc36VEP1l2Un2Bid9yAWoWNnxMB8GA1UdIwQY MBaAFMVXwVve7OewobR34eDui/9T+v4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQt ZGJkYmUxOTNjOTc0LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQtZGJkYmUxOTNjOTc0 LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqKCVxWU MG99xCYzOohe107tS+fNyAjxHSx5iBse6MFlhqzRCwV/wX81pYNxT8I5KFaUVzg8 pt2CbAVmPgXuuJr/b9PWmNLswPJ8+krrY6ijSEj6+ncbgoN48J9y8salXDYwWATx YGb3q9XsP70ShQccEAuhiMbKSwQjiYpQICqbjWQONftcYLuKM/erDMVetlVy8mXl RBqJPkih7JBPzL0PpJCcyK+S+ldWmI/eWFchPgNKBIBOdwnw3KyBa3dbSD1HKM11 E7Q3xsZKdWPqHABz2Zs3J4mIdVO24VaW9EvK5l0yM0w/HbnZOSkBiQ8og9cO61oE e5vxkhmhp9PjLA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:53 2025 by rpki-client