This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json) Hash identifier: LlbBuy0iZnKzt6JPmCz3vmEpA8nKFFWknlEHZn2jdko= Subject key identifier: BF:16:90:0B:17:89:56:9D:06:5D:11:57:30:42:BE:77:6D:DF:D7:87 Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e Certificate serial: 019AF3BFFCFCE78F22D99F68A81440EB6A8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft Manifest number: 1694 Signing time: Sat 06 Dec 2025 13:00:36 +0000 Manifest this update: Sat 06 Dec 2025 13:00:36 +0000 Manifest next update: Sun 07 Dec 2025 13:00:36 +0000 Files and hashes: 1: ZYp7OzB0VDkonl-vqvogoEtvvrU.roa (hash: XLDH0R2aZzMq1kqL7QSYAm+5jtX2I1Y+ljQvrGChpiQ=) 2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=) 3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: SInMW/BspMt84VqDaD8sIr0qcOu7UAbuJVCkhgg9DRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:fc:fc:e7:8f:22:d9:9f:68:a8:14:40:eb:6a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e Validity Not Before: Dec 6 13:00:36 2025 GMT Not After : Dec 7 13:00:36 2025 GMT Subject: CN=bf16900b1789569d065d11573042be776ddfd787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:0a:9b:a7:68:c3:ce:56:c1:ae:30:02:27: f8:5a:98:fa:f6:28:ae:d9:63:fa:f7:c1:4e:29:45: ae:09:16:39:a0:17:98:0f:04:cd:56:ec:88:73:e6: 49:b2:c8:10:0f:6f:90:fa:87:5e:da:78:ef:c6:96: 44:9c:99:58:72:a0:32:21:64:5d:bf:17:60:4d:81: 60:e2:44:0f:7a:1e:dd:d8:88:58:36:66:c0:86:21: 8f:42:f9:bd:a2:d0:60:ea:00:35:b9:9b:41:d9:73: eb:ea:e6:b6:97:fd:36:43:c0:dd:6d:0b:72:1e:e9: ba:27:0e:15:c3:2e:d3:1d:12:08:ab:23:76:1d:0b: 0a:26:40:7f:69:9c:3d:f3:a0:3a:cf:2b:a1:bf:07: 60:02:a6:ab:9e:8b:f7:16:3e:15:f5:05:00:da:cc: cb:30:d7:9f:34:41:8d:d2:27:21:82:b0:e7:b4:4c: 0a:ef:e4:3e:8b:be:cb:e2:38:cd:74:de:c2:a7:b4: e7:c6:48:5c:55:6f:5f:11:97:8d:3d:c3:86:62:c7: 01:a5:50:97:7b:87:58:f9:ce:51:61:fc:32:34:91: 1e:d9:43:d2:e0:1f:a8:eb:f9:eb:b5:ac:c9:03:3f: a4:93:9d:b8:8d:ee:5e:10:3b:5b:ee:f8:c2:09:79: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:16:90:0B:17:89:56:9D:06:5D:11:57:30:42:BE:77:6D:DF:D7:87 X509v3 Authority Key Identifier: keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5f:61:d5:4d:65:59:7e:50:85:59:ec:46:68:f0:6e:88:59: ce:7b:25:df:da:06:59:af:ee:45:a8:72:07:7e:f1:16:15:5a: ea:95:0f:27:13:50:db:a3:9e:dc:7e:c7:c7:95:29:a2:f3:2d: 21:32:d7:20:9f:2f:b4:06:7c:49:a3:ab:d6:76:7e:c8:53:34: c5:f1:75:b5:b7:5e:37:8d:8a:6d:49:3d:72:80:eb:a3:f8:47: c9:14:dd:30:81:81:93:55:0f:04:45:86:63:48:0c:5a:6f:ef: e2:0c:c7:20:51:33:b1:71:6f:b0:de:a5:52:ca:50:c1:3f:21: 61:1a:71:e8:79:e4:e8:77:82:f7:59:fd:69:f7:98:a1:cf:76: cc:01:b8:0b:b9:9b:02:4e:0a:69:3a:fd:b4:72:62:39:08:09: 65:53:a3:9a:62:c3:84:c6:1e:c7:10:c6:9b:d3:2e:61:ac:dc: ba:36:a0:60:90:bc:30:08:cf:19:de:4f:a5:50:41:6b:dc:7a: 07:cf:ea:92:e2:4e:f6:75:43:47:b9:26:58:5b:19:61:a5:32: 27:96:d7:ad:6e:b4:a0:f7:03:f4:b9:97:cf:8b:79:6c:f5:1a: bd:24:f7:b2:b2:9f:99:7b:92:1c:0e:9f:e0:dc:e2:fe:71:da: 02:e0:bd:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/z8548i2Z9oqBRA62qNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx YThkMGUwHhcNMjUxMjA2MTMwMDM2WhcNMjUxMjA3MTMwMDM2WjAzMTEwLwYDVQQD EyhiZjE2OTAwYjE3ODk1NjlkMDY1ZDExNTczMDQyYmU3NzZkZGZkNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjkKm6dow85Wwa4wAif4Wpj69iiu 2WP698FOKUWuCRY5oBeYDwTNVuyIc+ZJssgQD2+Q+ode2njvxpZEnJlYcqAyIWRd vxdgTYFg4kQPeh7d2IhYNmbAhiGPQvm9otBg6gA1uZtB2XPr6ua2l/02Q8DdbQty Hum6Jw4Vwy7THRIIqyN2HQsKJkB/aZw986A6zyuhvwdgAqarnov3Fj4V9QUA2szL MNefNEGN0ichgrDntEwK7+Q+i77L4jjNdN7Cp7TnxkhcVW9fEZeNPcOGYscBpVCX e4dY+c5RYfwyNJEe2UPS4B+o6/nrtazJAz+kk524je5eEDtb7vjCCXnS7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8WkAsXiVadBl0RVzBCvndt39eHMB8GA1UdIwQY MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb19h1U1l WX5QhVnsRmjwbohZznsl39oGWa/uRahyB37xFhVa6pUPJxNQ26Oe3H7Hx5UpovMt ITLXIJ8vtAZ8SaOr1nZ+yFM0xfF1tbdeN42KbUk9coDro/hHyRTdMIGBk1UPBEWG Y0gMWm/v4gzHIFEzsXFvsN6lUspQwT8hYRpx6Hnk6HeC91n9afeYoc92zAG4C7mb Ak4KaTr9tHJiOQgJZVOjmmLDhMYexxDGm9MuYazcujagYJC8MAjPGd5PpVBBa9x6 B8/qkuJO9nVDR7kmWFsZYaUyJ5bXrW60oPcD9LmXz4t5bPUavST3srKfmXuSHA6f 4Nzi/nHaAuC9ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:04:02 2025 by rpki-client