This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json) Hash identifier: Wlj7euSxTwzwTH5wStNkV/IFyif5w5U7tJkcbX7FA4Y= Subject key identifier: 9C:1A:B9:43:5B:01:F2:4D:60:4B:8D:85:65:2C:B4:4E:3C:55:19:F2 Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147 Certificate serial: 019AF12D16ADF206C9231CE43F50F695F6C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft Manifest number: 0FAD Signing time: Sat 06 Dec 2025 01:00:55 +0000 Manifest this update: Sat 06 Dec 2025 01:00:55 +0000 Manifest next update: Sun 07 Dec 2025 01:00:55 +0000 Files and hashes: 1: i4OTVeCSPxgmFusN2MGQeEwphSs.roa (hash: swOQwwO4f3RtKfp1taiB7zCxN/mO3jgsarXonpS2zBQ=) 2: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: O9xWtKxt8EBXFjp7u5KIij2WwyO9oCM+81WD5cfyono=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:16:ad:f2:06:c9:23:1c:e4:3f:50:f6:95:f6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147 Validity Not Before: Dec 6 01:00:55 2025 GMT Not After : Dec 7 01:00:55 2025 GMT Subject: CN=9c1ab9435b01f24d604b8d85652cb44e3c5519f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:87:9f:af:da:7f:66:20:bd:16:54:11:97: 18:0a:e2:ca:c3:48:c0:cd:77:63:f9:74:bc:fb:8f: f6:7e:c6:c0:aa:dc:da:0a:d6:6b:1c:5a:af:c5:e6: 8a:1a:38:05:ea:82:4a:85:9a:0d:3b:94:85:a1:a8: 0e:15:98:40:ec:a0:aa:6b:b0:73:0e:c9:ce:b3:5d: 59:05:c8:eb:60:3d:ac:58:53:1a:7a:30:f5:a8:d2: a3:ab:04:98:52:b6:27:24:df:b2:c3:de:76:f2:e8: 7d:7e:2e:db:1c:96:a2:a4:b6:31:e8:a5:02:99:3f: 16:a6:aa:f7:14:f7:70:ae:a7:c3:e6:3b:cd:7d:25: e1:05:e0:27:54:8e:d9:e9:03:74:5d:83:c6:d1:18: 67:26:ce:b5:9d:91:88:57:60:1d:c2:bb:f6:b3:50: cc:db:ac:ec:06:92:64:c2:bc:f5:ba:cd:18:c5:fc: 6a:2c:8c:16:1b:2a:fc:dc:e6:34:db:47:9f:13:70: fa:a5:74:0c:ca:a8:d2:ae:80:df:89:e5:a2:af:04: 7e:37:96:6b:16:bd:2a:c3:7c:7b:61:d8:ff:c1:cf: 79:69:e6:36:60:8c:32:d5:22:cf:16:2a:52:e0:88: 39:a7:3d:01:80:d7:03:fc:c9:fe:ed:36:50:97:c6: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1A:B9:43:5B:01:F2:4D:60:4B:8D:85:65:2C:B4:4E:3C:55:19:F2 X509v3 Authority Key Identifier: keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:34:a5:c3:1e:0f:6c:e4:2e:4a:f5:5d:f3:3b:62:65:fa:cf: ed:fb:02:ff:e7:ec:4f:c2:94:22:4f:b0:5e:c1:b9:c8:5a:ff: ed:00:28:c7:d3:9f:7c:b8:60:86:42:fc:0f:8c:11:a4:b3:bd: 4e:e9:33:60:17:b9:5e:49:13:be:32:2e:c1:c0:1c:a4:47:ca: 1a:03:e7:d9:e2:b0:67:2a:bb:f3:de:e2:fc:07:82:13:55:41: 5f:45:91:be:43:db:b7:c3:63:8b:72:b4:7f:72:0a:36:cb:aa: 79:c6:1f:5d:2c:25:dc:7f:69:c3:59:73:30:9f:cd:6b:20:95: 1b:1b:34:c3:c1:a3:4b:46:b2:7f:5d:92:78:de:12:00:3d:fa: 20:56:a1:3b:b0:a4:f5:c5:f7:f6:1b:ec:67:75:c1:ab:4f:bf: fa:1e:99:55:f4:cd:8e:29:0d:b5:95:fb:ed:51:5d:67:06:65: 46:83:33:31:a6:ab:4e:4f:bf:20:bc:db:a5:f2:0d:c6:03:e4: ed:61:41:f6:5c:63:a4:3c:aa:d6:67:9e:be:42:08:60:14:da: 50:1b:3e:3f:01:3c:51:26:bf:b1:7b:b3:ff:d1:7f:d7:a7:94: 35:d2:6f:aa:25:32:e8:58:84:b0:d4:36:ce:0b:57:23:b2:7a: 43:f2:a0:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRat8gbJIxzkP1D2lfbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3 NGYxNDcwHhcNMjUxMjA2MDEwMDU1WhcNMjUxMjA3MDEwMDU1WjAzMTEwLwYDVQQD Eyg5YzFhYjk0MzViMDFmMjRkNjA0YjhkODU2NTJjYjQ0ZTNjNTUxOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAaHn6/af2YgvRZUEZcYCuLKw0jA zXdj+XS8+4/2fsbAqtzaCtZrHFqvxeaKGjgF6oJKhZoNO5SFoagOFZhA7KCqa7Bz DsnOs11ZBcjrYD2sWFMaejD1qNKjqwSYUrYnJN+yw9528uh9fi7bHJaipLYx6KUC mT8Wpqr3FPdwrqfD5jvNfSXhBeAnVI7Z6QN0XYPG0RhnJs61nZGIV2Adwrv2s1DM 26zsBpJkwrz1us0YxfxqLIwWGyr83OY020efE3D6pXQMyqjSroDfieWirwR+N5Zr Fr0qw3x7Ydj/wc95aeY2YIwy1SLPFipS4Ig5pz0BgNcD/Mn+7TZQl8ZnowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwauUNbAfJNYEuNhWUstE48VRnyMB8GA1UdIwQY MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt ZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3 LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzSlwx4P bOQuSvVd8ztiZfrP7fsC/+fsT8KUIk+wXsG5yFr/7QAox9OffLhghkL8D4wRpLO9 TukzYBe5XkkTvjIuwcAcpEfKGgPn2eKwZyq7897i/AeCE1VBX0WRvkPbt8Nji3K0 f3IKNsuqecYfXSwl3H9pw1lzMJ/NayCVGxs0w8GjS0ayf12SeN4SAD36IFahO7Ck 9cX39hvsZ3XBq0+/+h6ZVfTNjikNtZX77VFdZwZlRoMzMaarTk+/ILzbpfINxgPk 7WFB9lxjpDyq1meevkIIYBTaUBs+PwE8USa/sXuz/9F/16eUNdJvqiUy6FiEsNQ2 zgtXI7J6Q/Kg0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:01 2025 by rpki-client