This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft File: XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft (raw, json) Hash identifier: SjRY3LY/wFysAVTCci5TMwP63PBvyR71n4055hxCGW8= Subject key identifier: D2:6A:0D:CB:01:F9:5B:D9:6D:98:5C:64:ED:CF:80:E0:16:7A:34:5F Authority key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03 Certificate issuer: /CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03 Certificate serial: 019AF2092D8CE9B0352CF63F76B3FD32B247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft Manifest number: 0EDE Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: 1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa (hash: ZLnUsrTQcRzljBuufN+eacOU/oxAjJXf2wRzESRepgg=) 2: XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl (hash: aANqtPvqiE/aADSaMGawdLdZBwQUz2hsttxo+IW4IDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2d:8c:e9:b0:35:2c:f6:3f:76:b3:fd:32:b2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03 Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=d26a0dcb01f95bd96d985c64edcf80e0167a345f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a1:6f:27:7e:fb:19:8b:1b:9e:37:00:b2:28: a2:36:9f:33:70:2b:6e:ac:c0:e4:67:75:24:5a:e9: 64:4d:4c:5c:78:51:6e:92:b5:6e:20:ae:ee:8d:bb: f3:8e:24:4c:e4:cd:77:41:74:7e:9b:78:66:fb:5b: 4f:59:a2:72:dd:c6:9d:00:ff:ec:05:e3:9d:72:52: 2e:6d:69:c2:96:7d:f1:9d:19:7b:ff:71:c8:2a:70: 6c:e2:0e:1b:9d:90:7e:92:a4:cb:5c:1f:98:ef:f9: 74:d1:79:09:af:01:14:57:df:44:f3:10:6f:40:10: d2:90:4e:7c:bd:27:8a:07:00:75:60:31:d4:23:ee: 65:78:af:60:db:cc:f4:5f:c3:f6:09:92:f3:3f:9d: 54:e7:28:c9:39:08:32:c2:d6:29:50:83:47:99:27: 12:22:17:95:92:3b:07:43:82:97:b3:5f:16:31:7f: 40:28:60:ed:4c:9b:28:18:ae:d6:7c:7f:fa:a2:71: 9c:71:e3:70:1a:16:55:8e:84:3e:8b:5b:e7:8a:a6: 66:a5:51:6b:1b:5a:8d:29:43:ff:08:fd:41:42:7e: 6b:c1:19:71:91:af:86:ac:28:b5:18:29:dc:5c:8e: f5:ab:24:66:9b:fd:1c:68:61:25:2e:21:cb:23:fb: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6A:0D:CB:01:F9:5B:D9:6D:98:5C:64:ED:CF:80:E0:16:7A:34:5F X509v3 Authority Key Identifier: keyid:5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:36:24:39:12:17:3d:ea:55:bb:17:e1:7a:63:b6:98:5f:af: 40:66:7f:92:31:72:44:97:31:02:64:44:2c:58:e6:a7:0a:6d: 55:ac:c0:00:49:30:8f:6a:50:ec:3a:fb:8f:f8:24:be:a5:ad: ba:02:7a:38:5e:6b:08:29:50:ab:7e:dd:94:b1:cf:84:40:3f: f4:39:ce:1c:d2:46:84:b1:3c:4c:e5:9b:3f:25:a7:cc:0a:35: 34:43:45:27:21:08:cd:72:4a:11:85:af:d7:83:4a:4d:8c:7c: a9:c6:2e:d9:2b:29:de:2c:3e:7b:d1:d5:c9:7f:cf:b3:22:37: 77:d7:38:4e:99:41:c1:62:68:87:ed:d9:9d:01:8f:a2:93:04: db:f7:90:0f:ea:26:5a:8a:67:cd:df:43:7d:d2:f9:da:42:3d: 63:7b:d0:15:ab:ad:78:87:a7:69:6b:7c:15:c9:a1:d1:73:e1: 53:a6:51:ce:89:99:b1:ef:b2:fe:c8:b0:b4:3c:cb:9e:54:67: 77:3d:64:6b:43:1a:a5:ec:db:d5:f5:18:fa:06:60:d0:96:d8: a8:19:6a:bf:a5:f1:ce:b8:f4:75:11:44:50:e5:a3:9d:4c:e4: c6:2c:05:6b:c3:2f:1e:04:4b:c6:2e:ae:11:40:94:2d:c3:b2: 2e:b7:eb:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS2M6bA1LPY/drP9MrJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZDM3OWNlZGNkYzIwZjA4NzVjNGIwOGI5NGI0MTE2MWIz ZThjMDMwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD EyhkMjZhMGRjYjAxZjk1YmQ5NmQ5ODVjNjRlZGNmODBlMDE2N2EzNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aFvJ377GYsbnjcAsiiiNp8zcCtu rMDkZ3UkWulkTUxceFFukrVuIK7ujbvzjiRM5M13QXR+m3hm+1tPWaJy3cadAP/s BeOdclIubWnCln3xnRl7/3HIKnBs4g4bnZB+kqTLXB+Y7/l00XkJrwEUV99E8xBv QBDSkE58vSeKBwB1YDHUI+5leK9g28z0X8P2CZLzP51U5yjJOQgywtYpUINHmScS IheVkjsHQ4KXs18WMX9AKGDtTJsoGK7WfH/6onGcceNwGhZVjoQ+i1vniqZmpVFr G1qNKUP/CP1BQn5rwRlxka+GrCi1GCncXI71qyRmm/0caGElLiHLI/vKQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJqDcsB+VvZbZhcZO3PgOAWejRfMB8GA1UdIwQY MBaAFFzTec7c3CDwh1xLCLlLQRYbPowDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQt MDk2NDQ2NGMxNzUxLzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQtMDk2NDQ2NGMxNzUx LzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDYkORIX PepVuxfhemO2mF+vQGZ/kjFyRJcxAmRELFjmpwptVazAAEkwj2pQ7Dr7j/gkvqWt ugJ6OF5rCClQq37dlLHPhEA/9DnOHNJGhLE8TOWbPyWnzAo1NENFJyEIzXJKEYWv 14NKTYx8qcYu2Ssp3iw+e9HVyX/PsyI3d9c4TplBwWJoh+3ZnQGPopME2/eQD+om Wopnzd9DfdL52kI9Y3vQFauteIenaWt8Fcmh0XPhU6ZRzomZse+y/siwtDzLnlRn dz1ka0Mapezb1fUY+gZg0JbYqBlqv6Xxzrj0dRFEUOWjnUzkxiwFa8MvHgRLxi6u EUCULcOyLrfrLA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:56 2025 by rpki-client