This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json) Hash identifier: lzmXaisAhkJTH1pyYQj/WkCdJtP29OSW+s9xmy7cFKE= Subject key identifier: 9F:53:B7:58:B6:6E:8A:DF:67:FA:BB:FF:76:4E:A8:DC:C1:16:ED:5F Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da Certificate serial: 019AF19AF3CFA77BF3C7550FA4BA7D75B57D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=) 2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: 8+HDDaOCDftp8jz3dOAaQlOrbUjfPxCYFO7JqpW/Pgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f3:cf:a7:7b:f3:c7:55:0f:a4:ba:7d:75:b5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=9f53b758b66e8adf67fabbff764ea8dcc116ed5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:55:e8:74:69:9c:00:02:83:5f:21:91:32:63: 40:73:1b:03:56:65:52:16:e6:d3:a0:b1:da:d8:b3: d6:16:27:9c:f6:27:0c:4a:d5:13:33:17:4d:2a:c1: f9:10:cf:74:4a:5d:46:39:09:47:87:86:10:e6:9c: c9:9a:b9:7a:e0:4c:d2:53:67:2b:3d:27:f4:40:8c: 5a:de:f1:5b:78:48:7f:c3:1b:76:a2:79:40:e2:f4: 0d:c0:50:96:be:17:d2:bb:21:f1:56:2c:88:a6:e3: 40:09:89:8c:90:09:00:22:06:c7:7f:4c:bd:17:81: 5e:40:50:d5:2a:49:40:c6:7b:d7:cb:3d:27:e0:bb: 9f:08:dd:de:9b:05:1b:94:72:52:2f:48:61:eb:b1: 31:d4:c0:0f:af:6d:b2:a4:d5:48:18:29:1b:61:5c: 25:7d:73:53:40:c8:16:b9:ae:27:83:7b:6f:98:47: 34:0a:35:a2:dd:64:fd:56:bf:e9:18:dd:cc:7a:9d: df:c5:8a:24:07:21:f2:ad:f7:94:4a:2e:d8:ee:10: 9f:9b:f7:df:28:c4:9e:f3:63:2c:65:3a:02:d1:34: 35:df:57:de:d3:c1:9e:98:a9:3f:16:47:81:82:99: 19:ac:33:a2:3d:02:b8:24:f8:e8:2e:c6:b4:97:3e: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:53:B7:58:B6:6E:8A:DF:67:FA:BB:FF:76:4E:A8:DC:C1:16:ED:5F X509v3 Authority Key Identifier: keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4d:20:f6:65:32:ed:b1:23:7d:3e:69:a4:2c:60:8b:d1:7c: ce:62:c7:3b:2e:de:cd:5c:7c:68:c2:4f:87:cb:d2:fa:ad:73: 2d:49:74:33:98:1b:0b:ce:ec:ac:68:1a:c7:d4:9d:53:33:f9: 61:c4:aa:bb:82:b1:0e:3b:6e:02:76:7f:6e:28:c8:0c:c1:d1: 60:dd:cc:de:db:2d:77:b8:8e:04:af:6a:a3:45:3e:63:95:6d: e1:2e:06:1d:74:93:e4:5d:2c:79:0d:7c:e7:b3:e4:15:46:a6: bf:6c:dd:6b:11:7b:64:32:be:09:28:dd:b0:98:80:30:07:62: 6c:10:6e:51:d7:ba:f7:f3:36:0f:37:61:90:11:56:b1:af:76: c6:f1:6e:58:a4:ca:66:f3:ca:88:88:c3:6a:2f:2c:62:d8:31: f9:2a:76:17:fa:14:88:56:c0:5b:8f:73:cb:f2:aa:d8:a4:6f: cd:8e:f8:b3:65:68:c4:41:6b:20:f0:4a:25:59:dd:76:a9:21: b4:00:67:e1:d3:0f:74:b6:43:e0:5c:c5:41:df:77:53:bc:b4: 04:70:2d:b0:02:3d:82:d4:37:b0:b1:02:3c:cc:9c:1f:ce:01: f4:5f:d4:41:b2:c2:89:53:e1:38:c9:68:ed:5f:f1:2c:99:25: e2:ef:df:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvPPp3vzx1UPpLp9dbV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MWVmMGFkNDNjN2I4ZTI2YzE3NWZkYzFmMTY5NmQwMDgx ZGM0ZGEwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD Eyg5ZjUzYjc1OGI2NmU4YWRmNjdmYWJiZmY3NjRlYThkY2MxMTZlZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21XodGmcAAKDXyGRMmNAcxsDVmVS FubToLHa2LPWFiec9icMStUTMxdNKsH5EM90Sl1GOQlHh4YQ5pzJmrl64EzSU2cr PSf0QIxa3vFbeEh/wxt2onlA4vQNwFCWvhfSuyHxViyIpuNACYmMkAkAIgbHf0y9 F4FeQFDVKklAxnvXyz0n4LufCN3emwUblHJSL0hh67Ex1MAPr22ypNVIGCkbYVwl fXNTQMgWua4ng3tvmEc0CjWi3WT9Vr/pGN3Mep3fxYokByHyrfeUSi7Y7hCfm/ff KMSe82MsZToC0TQ131fe08GemKk/FkeBgpkZrDOiPQK4JPjoLsa0lz4c5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9Tt1i2borfZ/q7/3ZOqNzBFu1fMB8GA1UdIwQY MBaAFMce8K1Dx7jibBdf3B8WltAIHcTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMWMzYWEtYTJhNy00MmU3LTgwNDYt MjI0M2UzNjk4M2UzLzEveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMWMzYWEtYTJhNy00MmU3LTgwNDYtMjI0M2UzNjk4M2Uz LzEveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACk0g9mUy 7bEjfT5ppCxgi9F8zmLHOy7ezVx8aMJPh8vS+q1zLUl0M5gbC87srGgax9SdUzP5 YcSqu4KxDjtuAnZ/bijIDMHRYN3M3tstd7iOBK9qo0U+Y5Vt4S4GHXST5F0seQ18 57PkFUamv2zdaxF7ZDK+CSjdsJiAMAdibBBuUde69/M2DzdhkBFWsa92xvFuWKTK ZvPKiIjDai8sYtgx+Sp2F/oUiFbAW49zy/Kq2KRvzY74s2VoxEFrIPBKJVnddqkh tABn4dMPdLZD4FzFQd93U7y0BHAtsAI9gtQ3sLECPMycH84B9F/UQbLCiVPhOMlo 7V/xLJkl4u/flQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:37 2025 by rpki-client