This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json) Hash identifier: omutN0iXmrhyifsHG25m3hLJzy9Bl4UwdRWB+wluJDw= Subject key identifier: 88:A0:F9:E6:1F:F2:21:04:08:F0:92:B4:A0:3A:2E:98:1C:3F:58:23 Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df Certificate serial: 019AF2090CBE9D46516D0106CED3AC9FE826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft Manifest number: 0EC1 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=) 2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: caAOtFvfER96TTZDYJ35WppuZSd38rcLiRU5WkE1fXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0c:be:9d:46:51:6d:01:06:ce:d3:ac:9f:e8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=88a0f9e61ff2210408f092b4a03a2e981c3f5823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:8a:e5:c9:d5:b7:8e:77:3b:95:f0:50:96: 60:13:dc:d6:fb:d3:ac:62:32:e0:eb:b7:7e:cb:82: cd:85:06:7a:fa:f5:a6:b7:34:7e:e4:28:c7:47:c7: d0:65:e5:68:e1:76:b7:40:28:42:0d:48:22:66:d9: b0:e3:69:f1:b4:0b:5f:8a:29:09:e3:a9:fa:9c:f3: 75:61:17:12:39:a8:1e:93:ad:76:38:52:e7:b1:cf: ee:0f:7c:ee:d8:25:23:43:b3:1b:9d:18:e1:42:85: 77:43:0e:f6:f4:f6:5e:9d:f6:54:7d:04:fc:03:6e: cc:f9:8c:3b:60:5b:d8:72:c0:e2:32:9e:25:59:be: 9f:60:bb:c4:f8:42:43:50:a9:d4:33:ff:c4:8f:64: 03:61:d7:b6:e3:15:33:33:b3:65:1e:d9:91:f3:46: 6c:b0:a4:cf:8f:71:87:57:40:17:03:e0:f2:ca:d6: 9d:2f:86:5a:47:d8:a2:97:de:5b:0a:69:76:c3:71: dc:ee:55:9d:e5:be:01:20:33:0b:f9:e2:be:d8:d9: 48:b6:e4:87:77:78:ed:ea:12:6a:ec:21:5c:ee:b2: 85:c2:65:ad:b0:c1:af:30:1f:63:91:24:ef:40:1a: 66:0d:32:9f:c9:a5:d9:89:0f:66:f3:ff:b3:cc:3c: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A0:F9:E6:1F:F2:21:04:08:F0:92:B4:A0:3A:2E:98:1C:3F:58:23 X509v3 Authority Key Identifier: keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d2:49:e5:bf:3b:8f:85:4e:ca:ae:37:bb:c1:e2:87:28:f8: e7:db:ff:e2:36:ce:a0:22:6f:e7:11:80:c8:e5:4f:e3:7c:39: 56:a9:74:43:53:97:94:04:e8:cb:24:83:ea:a4:13:9a:b8:3d: 64:82:3e:5c:9c:5e:f2:92:f9:a0:9b:12:ec:fa:c2:98:56:29: ba:58:ba:18:2d:c9:b9:0a:20:9b:94:c0:81:43:32:f8:24:0f: b5:08:6c:0a:c8:0f:7c:ea:92:69:c1:b0:f1:5d:8f:6b:4d:97: df:a6:9b:ae:f0:76:47:e3:11:7f:d9:50:3a:34:5b:db:af:74: d9:0c:30:44:21:ab:0b:c1:49:f3:9e:2c:47:b9:8f:9d:82:86: a6:f2:d4:47:0e:5d:a1:79:02:a7:ac:8e:cb:03:ff:ca:91:92: bf:19:6b:a1:a9:7b:53:82:bf:3a:d6:2e:c5:6e:37:41:c4:a8: 35:39:05:e0:bb:e3:9c:91:3c:a1:ec:4e:ff:ea:20:16:60:7b: 83:b2:d8:aa:a3:fd:b0:b2:71:05:91:67:d7:4b:4e:48:55:88: 19:ee:9a:b9:31:e8:17:85:11:fa:8f:e4:dc:26:3f:86:a5:1f: 56:44:fd:4e:32:44:6c:7a:6d:f9:7e:ca:d4:8d:6a:64:f4:1f: f9:9e:f9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQy+nUZRbQEGztOsn+gmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2NiN2Q5ODJjN2Y5ZWRiYzkzZDRjYjQyYjk0ZmEwMjlj MzgyZGYwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD Eyg4OGEwZjllNjFmZjIyMTA0MDhmMDkyYjRhMDNhMmU5ODFjM2Y1ODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N+K5cnVt453O5XwUJZgE9zW+9Os YjLg67d+y4LNhQZ6+vWmtzR+5CjHR8fQZeVo4Xa3QChCDUgiZtmw42nxtAtfiikJ 46n6nPN1YRcSOagek612OFLnsc/uD3zu2CUjQ7MbnRjhQoV3Qw729PZenfZUfQT8 A27M+Yw7YFvYcsDiMp4lWb6fYLvE+EJDUKnUM//Ej2QDYde24xUzM7NlHtmR80Zs sKTPj3GHV0AXA+DyytadL4ZaR9iil95bCml2w3Hc7lWd5b4BIDML+eK+2NlItuSH d3jt6hJq7CFc7rKFwmWtsMGvMB9jkSTvQBpmDTKfyaXZiQ9m8/+zzDxnswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIig+eYf8iEECPCStKA6LpgcP1gjMB8GA1UdIwQY MBaAFF48t9mCx/ntvJPUy0K5T6Apw4LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYt OWYyY2M2NGUwNzQ1LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYtOWYyY2M2NGUwNzQ1 LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNJJ5b87 j4VOyq43u8Hihyj459v/4jbOoCJv5xGAyOVP43w5Vql0Q1OXlAToyySD6qQTmrg9 ZII+XJxe8pL5oJsS7PrCmFYpuli6GC3JuQogm5TAgUMy+CQPtQhsCsgPfOqSacGw 8V2Pa02X36abrvB2R+MRf9lQOjRb26902QwwRCGrC8FJ854sR7mPnYKGpvLURw5d oXkCp6yOywP/ypGSvxlroal7U4K/OtYuxW43QcSoNTkF4LvjnJE8oexO/+ogFmB7 g7LYqqP9sLJxBZFn10tOSFWIGe6auTHoF4UR+o/k3CY/hqUfVkT9TjJEbHpt+X7K 1I1qZPQf+Z75WA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:19 2025 by rpki-client