This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json) Hash identifier: yMubUnYQZPRm9ICNA+iE4gP2rVVkXxUUU/OY1x7W0YI= Subject key identifier: E3:37:8C:FA:61:CA:28:DC:B8:C1:60:90:E9:37:4D:4D:AC:F4:89:8C Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7 Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7 Certificate serial: 019AF12DBE5F9860638256C5440A9515BC52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:38 +0000 Manifest this update: Sat 06 Dec 2025 01:01:38 +0000 Manifest next update: Sun 07 Dec 2025 01:01:38 +0000 Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=) 2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=) 3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: LdcfhT6QYnWbtcyNW28NpnOMV4IzN7NVck/xiHKHsCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:be:5f:98:60:63:82:56:c5:44:0a:95:15:bc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7 Validity Not Before: Dec 6 01:01:38 2025 GMT Not After : Dec 7 01:01:38 2025 GMT Subject: CN=e3378cfa61ca28dcb8c16090e9374d4dacf4898c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:53:46:c7:85:8f:59:7b:3e:2e:f9:7d:76:13: 47:70:2b:d6:d1:3e:42:1a:78:3e:8e:47:e5:db:74: ab:59:ff:f5:5a:b3:5e:9e:ee:ef:78:35:be:e7:7d: 55:db:32:2b:f5:39:3f:7d:cd:37:e1:a2:64:8d:1c: ac:42:9a:75:63:4e:08:98:40:3b:41:2d:45:57:3f: d5:4e:51:42:ce:2b:ff:45:d1:22:16:36:fb:97:42: 37:2c:92:9b:22:cc:65:1f:f2:5b:7e:e5:1b:15:a1: 97:4e:50:3c:95:5c:5f:8c:1b:a7:65:77:c2:9b:90: a7:bb:f8:8d:c5:95:a3:9b:72:6c:1b:3d:52:bb:46: 02:93:2a:f5:ff:ab:c3:2d:33:0a:61:0e:07:05:a5: c5:7d:b7:6d:0b:d6:be:b4:6f:b0:5d:41:16:f5:e2: d5:95:87:db:9d:3a:21:06:9f:9f:ee:6d:cf:fe:53: 65:ce:aa:e1:53:a0:a3:1f:a5:9c:3b:61:85:6f:c2: ca:7a:3b:1b:61:40:46:22:3d:0a:9e:fb:e8:38:f4: 93:5f:68:6a:a6:ba:c7:67:e9:6c:df:48:5a:59:7d: 5f:f5:5a:b2:fd:f0:d0:f3:02:4e:34:67:73:5d:db: dd:2b:89:8b:75:8e:6f:50:ef:77:b8:cc:f5:7f:b4: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:37:8C:FA:61:CA:28:DC:B8:C1:60:90:E9:37:4D:4D:AC:F4:89:8C X509v3 Authority Key Identifier: keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:74:e3:a7:02:0f:3e:7f:79:10:f7:4a:6a:4c:42:1b:ce:34: c3:97:ef:a9:33:c9:77:59:58:de:64:b2:db:b1:20:00:42:7c: 9e:42:57:19:5e:70:1d:c3:44:f9:a2:e6:66:58:0b:11:bc:6b: bd:94:4f:0b:3e:2e:c4:d6:07:80:33:dc:f2:df:b8:a0:81:83: e0:d0:0b:f7:f0:46:56:5a:18:07:d2:25:a4:76:3c:c4:8e:fb: 62:ff:ed:0d:b0:b3:83:8b:9c:d6:83:d8:65:2f:a8:62:e4:c5: 87:1b:d7:57:2e:b7:a3:6e:af:21:a0:5f:a1:c9:c2:4e:a1:d2: 43:10:6d:68:10:76:9a:9f:ba:0e:86:58:52:ca:40:2f:4e:05: bb:c5:16:ec:21:33:5a:9d:74:d9:cc:a2:f2:7b:81:5c:cb:ad: 0b:f4:35:6c:50:fa:9c:d1:a6:87:27:1d:79:3d:b8:40:9c:92: bb:cc:d4:93:be:77:3a:a4:89:1f:ae:1e:16:db:15:73:f1:e6: 9a:02:1d:60:82:6d:4b:7c:dd:ad:41:cf:af:6c:93:87:13:dd: 8b:70:f1:b4:a1:88:fb:da:ab:ff:5b:44:86:a6:19:ee:53:da: 5e:3d:8a:19:50:c0:33:64:b5:05:9c:f2:cc:ca:f3:1b:08:1c: 4c:5c:7e:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLb5fmGBjglbFRAqVFbxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YWJkMzczY2M1OTUwNjBmMWEzMzA3NmI1M2UxMTYyNTEy YzNjZDcwHhcNMjUxMjA2MDEwMTM4WhcNMjUxMjA3MDEwMTM4WjAzMTEwLwYDVQQD EyhlMzM3OGNmYTYxY2EyOGRjYjhjMTYwOTBlOTM3NGQ0ZGFjZjQ4OThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VNGx4WPWXs+Lvl9dhNHcCvW0T5C Gng+jkfl23SrWf/1WrNenu7veDW+531V2zIr9Tk/fc034aJkjRysQpp1Y04ImEA7 QS1FVz/VTlFCziv/RdEiFjb7l0I3LJKbIsxlH/JbfuUbFaGXTlA8lVxfjBunZXfC m5Cnu/iNxZWjm3JsGz1Su0YCkyr1/6vDLTMKYQ4HBaXFfbdtC9a+tG+wXUEW9eLV lYfbnTohBp+f7m3P/lNlzqrhU6CjH6WcO2GFb8LKejsbYUBGIj0KnvvoOPSTX2hq prrHZ+ls30haWX1f9Vqy/fDQ8wJONGdzXdvdK4mLdY5vUO93uMz1f7SKBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM3jPphyijcuMFgkOk3TU2s9ImMMB8GA1UdIwQY MBaAFMar03PMWVBg8aMwdrU+EWJRLDzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUt OWYxNTBjOGVhOTcxLzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUtOWYxNTBjOGVhOTcx LzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnTjpwIP Pn95EPdKakxCG840w5fvqTPJd1lY3mSy27EgAEJ8nkJXGV5wHcNE+aLmZlgLEbxr vZRPCz4uxNYHgDPc8t+4oIGD4NAL9/BGVloYB9IlpHY8xI77Yv/tDbCzg4uc1oPY ZS+oYuTFhxvXVy63o26vIaBfocnCTqHSQxBtaBB2mp+6DoZYUspAL04Fu8UW7CEz Wp102cyi8nuBXMutC/Q1bFD6nNGmhycdeT24QJySu8zUk753OqSJH64eFtsVc/Hm mgIdYIJtS3zdrUHPr2yThxPdi3DxtKGI+9qr/1tEhqYZ7lPaXj2KGVDAM2S1BZzy zMrzGwgcTFx+nA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:33 2025 by rpki-client