This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json) Hash identifier: vQoh3UgUy50GKkUhmmKMDUSna+weZ2YYxbrfLh8duZ0= Subject key identifier: FE:C4:D6:03:77:CE:9B:BC:7F:1A:87:A3:5F:F6:A5:0F:50:A5:4E:81 Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac Certificate serial: 019AF541310B38EA83EDA1F024619768F576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:01:21 +0000 Manifest this update: Sat 06 Dec 2025 20:01:21 +0000 Manifest next update: Sun 07 Dec 2025 20:01:21 +0000 Files and hashes: 1: TWq28Ae0YWlnL9QMmIL7aFBiUGw.roa (hash: +h8RDHE7R4Fi6gqXkHnd/C2ymQ77DKFkbRcxLwhFxSk=) 2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: JMH55OXswguv+K/pXGekalllk5Gvlh5Oq8jdfs6CA80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:31:0b:38:ea:83:ed:a1:f0:24:61:97:68:f5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac Validity Not Before: Dec 6 20:01:21 2025 GMT Not After : Dec 7 20:01:21 2025 GMT Subject: CN=fec4d60377ce9bbc7f1a87a35ff6a50f50a54e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:95:d2:02:f3:69:66:ed:93:c2:70:fc:0d: 79:4f:47:86:8e:54:dd:07:3a:7c:78:77:77:4e:0b: 57:6f:ff:b1:b2:ab:08:c2:4c:f3:52:d4:58:ca:f2: 8a:37:a2:35:20:50:31:7c:4d:7b:36:1b:8a:fd:fb: 05:47:b6:77:6a:d8:ae:69:ce:91:30:9d:75:25:ea: df:40:f7:f3:ab:47:fb:17:46:f3:6f:61:47:79:01: a0:a9:a5:f2:26:c4:12:14:38:b4:5d:91:e6:f3:14: 3e:7a:44:b1:20:92:fa:6e:68:86:03:16:4f:f6:33: 00:5c:19:9e:b9:25:0c:a7:29:1d:c0:e8:af:c1:74: fc:54:31:4f:8b:1b:81:72:2f:34:b7:ec:65:25:ad: 9c:db:b2:f3:2c:ce:81:be:5b:2b:cb:b4:27:fe:b2: 17:a6:39:2b:bb:8a:6d:23:79:a9:bb:ee:c4:e8:58: b6:60:e1:bf:56:b0:54:75:e1:5c:68:96:b7:ee:71: 86:eb:22:b6:7f:57:75:e2:93:da:dd:12:e7:40:4b: b4:e7:58:26:6f:c4:a4:26:ef:7e:7f:91:95:da:17: 1b:8f:83:47:07:c1:01:5b:b0:ff:c3:b7:3b:00:f7: 7a:36:11:9a:fe:40:ac:bc:2c:a9:73:94:49:b9:85: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C4:D6:03:77:CE:9B:BC:7F:1A:87:A3:5F:F6:A5:0F:50:A5:4E:81 X509v3 Authority Key Identifier: keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:02:db:73:3e:fb:66:ee:74:59:2e:e7:8b:28:68:9b:ce:26: f2:d5:93:86:06:b2:f5:98:f5:1b:36:66:01:80:aa:c9:3c:e2: 10:53:bc:71:59:b2:1f:d6:4a:7b:01:b1:c5:6b:af:af:00:a9: 15:10:6a:81:fc:04:c9:a1:e9:6d:6a:a9:91:75:9f:bf:58:3c: 88:4e:a2:4f:71:07:1b:9e:92:4a:1c:02:01:d9:1f:05:57:af: 72:d2:57:b9:f5:cb:88:8b:e5:62:f7:46:97:a0:27:ec:69:70: ae:17:94:5c:6d:a9:4c:69:54:f4:2a:ab:ba:1c:5c:09:90:e5: 86:77:4f:08:e6:6d:ac:5a:4b:87:e9:4c:a4:7e:62:a4:7c:4a: 22:01:e3:1d:ca:f8:a8:e0:f4:30:23:87:6a:ef:68:36:f6:3d: d8:ba:a4:96:49:65:9f:3a:94:32:29:f6:69:83:7d:c4:60:f2: b4:79:4e:6b:b2:0c:7e:d4:f0:87:55:8e:4f:7e:42:a9:f3:0c: f2:5a:82:c1:5c:fc:2d:2b:e1:09:02:4e:fc:b1:74:53:c6:ad: 20:47:ac:0a:cc:6c:ae:68:79:1c:51:5a:71:98:bf:10:7e:d0: bb:41:fd:80:73:d4:d5:e1:7e:f7:42:7f:13:1f:a5:af:45:92: 25:f6:69:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QTELOOqD7aHwJGGXaPV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmE1ZjJiNDY4ZGIzNWViNTYyYmQzN2UxZjM2ZWNlYTgx M2NjYWMwHhcNMjUxMjA2MjAwMTIxWhcNMjUxMjA3MjAwMTIxWjAzMTEwLwYDVQQD EyhmZWM0ZDYwMzc3Y2U5YmJjN2YxYTg3YTM1ZmY2YTUwZjUwYTU0ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO6V0gLzaWbtk8Jw/A15T0eGjlTd Bzp8eHd3TgtXb/+xsqsIwkzzUtRYyvKKN6I1IFAxfE17NhuK/fsFR7Z3atiuac6R MJ11JerfQPfzq0f7F0bzb2FHeQGgqaXyJsQSFDi0XZHm8xQ+ekSxIJL6bmiGAxZP 9jMAXBmeuSUMpykdwOivwXT8VDFPixuBci80t+xlJa2c27LzLM6Bvlsry7Qn/rIX pjkru4ptI3mpu+7E6Fi2YOG/VrBUdeFcaJa37nGG6yK2f1d14pPa3RLnQEu051gm b8SkJu9+f5GV2hcbj4NHB8EBW7D/w7c7APd6NhGa/kCsvCypc5RJuYVc7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7E1gN3zpu8fxqHo1/2pQ9QpU6BMB8GA1UdIwQY MBaAFMZqXytGjbNetWK9N+Hzbs6oE8ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81MzFhNGMtNjUyMS00ZWY5LTg4Nzgt MzFmNGNjMTJkNjIwLzEveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81MzFhNGMtNjUyMS00ZWY5LTg4NzgtMzFmNGNjMTJkNjIw LzEveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwLbcz77 Zu50WS7niyhom84m8tWThgay9Zj1GzZmAYCqyTziEFO8cVmyH9ZKewGxxWuvrwCp FRBqgfwEyaHpbWqpkXWfv1g8iE6iT3EHG56SShwCAdkfBVevctJXufXLiIvlYvdG l6An7GlwrheUXG2pTGlU9CqruhxcCZDlhndPCOZtrFpLh+lMpH5ipHxKIgHjHcr4 qOD0MCOHau9oNvY92LqklkllnzqUMin2aYN9xGDytHlOa7IMftTwh1WOT35CqfMM 8lqCwVz8LSvhCQJO/LF0U8atIEesCsxsrmh5HFFacZi/EH7Qu0H9gHPU1eF+90J/ Ex+lr0WSJfZp8A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:13 2025 by rpki-client