This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json) Hash identifier: J4lcwe1HhWud59i9aDOaIWcLNj0p9OyXN3LB3I8T9cU= Subject key identifier: 86:9F:7B:A4:77:CF:5A:CA:F8:B4:0F:D8:7E:5D:BD:A3:BE:B0:93:BF Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Certificate serial: 019AF12E27DDEED420CD801D558C71BA9FA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft Manifest number: 0AF7 Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=) 2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=) 3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=) 4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: VB6TH0eQdtlX5lnjEU0AlSkv0YM7HBJ3hqZNv75Hfcs=) 5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=) 6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=) 7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=) 8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:27:dd:ee:d4:20:cd:80:1d:55:8c:71:ba:9f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=869f7ba477cf5acaf8b40fd87e5dbda3beb093bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:ef:ed:82:9c:c0:f7:36:0b:00:02:cd:3d: 40:48:ec:7e:bc:eb:d9:ba:18:82:1d:3c:92:95:2b: a5:c7:85:68:22:f1:1f:db:97:44:d6:3a:1d:1a:0c: cb:82:be:36:ed:0a:d9:bb:0c:68:ce:da:b9:14:e4: 1b:37:9b:6b:8f:b9:33:e9:58:dc:a7:6e:7a:b6:c6: 7d:20:00:d0:cd:61:c4:37:b6:c2:4e:6c:7f:94:af: 75:52:5f:7e:9f:9e:6c:36:9a:99:9f:03:f2:fb:d5: ea:34:04:d1:54:ec:4b:f2:3a:52:f9:db:74:dd:37: 71:fa:0e:5e:92:5e:0c:d3:42:6d:da:43:54:d5:ae: ab:5f:ce:bb:bd:fb:fd:dd:eb:8b:80:98:c8:61:54: fd:16:fe:93:8e:d2:8b:b5:49:e2:24:a9:5f:7a:b5: bf:56:0d:81:0e:1d:94:0d:0f:80:89:49:1e:a8:99: ea:2c:f5:fc:57:6d:e6:8c:65:89:db:f9:22:77:45: 8b:ad:40:3b:5b:54:47:e8:7a:f6:cb:da:d9:cd:24: 4c:c9:36:71:8b:2d:86:d5:a0:51:8b:41:00:ee:0e: ef:73:67:e5:17:d4:b1:68:be:8a:3e:d6:43:5c:a1: 1b:b9:82:dc:c6:c8:8d:b9:cd:35:c2:c3:a3:4e:41: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:7B:A4:77:CF:5A:CA:F8:B4:0F:D8:7E:5D:BD:A3:BE:B0:93:BF X509v3 Authority Key Identifier: keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:af:06:f6:5b:f9:81:c1:c9:c8:62:11:c1:bd:4d:95:50:7f: 41:2c:6a:a4:f3:f2:16:00:38:0f:36:87:dd:bd:00:9a:35:38: 9b:83:d5:57:79:32:f3:d5:27:65:ac:fa:ef:0a:25:7d:de:16: 71:95:e9:e2:76:09:53:c8:91:fd:eb:b1:d6:42:c9:71:23:9b: 66:2a:d3:a2:ae:7e:cc:51:0e:a8:25:3f:50:01:c7:b8:20:20: 5e:21:57:ed:be:ea:fd:dd:ef:58:4e:0b:51:26:ee:67:68:a8: 16:9a:32:d7:3d:55:a1:45:5e:31:8c:9e:a0:b4:2e:bc:ee:c6: a3:85:35:31:e7:4e:00:19:90:2e:dd:f7:19:9e:12:ce:a0:d7: 23:80:70:e2:7a:30:7a:f2:3c:fb:2e:07:81:6d:ac:21:c6:f3: fa:4b:25:2d:4f:dd:50:58:ae:9d:06:c7:5d:31:6a:6e:e8:c1: f6:65:b7:2c:34:84:c2:b0:23:e1:a4:71:54:0c:a0:9c:ae:0b: 2c:89:a4:3a:78:70:28:b8:d2:79:90:da:9d:42:41:fc:1b:77: a3:56:2f:61:94:77:58:96:5c:3e:13:03:c7:7f:57:c2:97:62: 0c:91:6b:dd:5d:a2:c3:13:f0:fb:13:31:6a:0f:79:88:8f:01: 86:f4:60:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLifd7tQgzYAdVYxxup+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl NmRiMGUwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD Eyg4NjlmN2JhNDc3Y2Y1YWNhZjhiNDBmZDg3ZTVkYmRhM2JlYjA5M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ7v7YKcwPc2CwACzT1ASOx+vOvZ uhiCHTySlSulx4VoIvEf25dE1jodGgzLgr427QrZuwxoztq5FOQbN5trj7kz6Vjc p256tsZ9IADQzWHEN7bCTmx/lK91Ul9+n55sNpqZnwPy+9XqNATRVOxL8jpS+dt0 3Tdx+g5ekl4M00Jt2kNU1a6rX867vfv93euLgJjIYVT9Fv6TjtKLtUniJKlferW/ Vg2BDh2UDQ+AiUkeqJnqLPX8V23mjGWJ2/kid0WLrUA7W1RH6Hr2y9rZzSRMyTZx iy2G1aBRi0EA7g7vc2flF9SxaL6KPtZDXKEbuYLcxsiNuc01wsOjTkG6QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIafe6R3z1rK+LQP2H5dvaO+sJO/MB8GA1UdIwQY MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGa8G9lv5 gcHJyGIRwb1NlVB/QSxqpPPyFgA4DzaH3b0AmjU4m4PVV3ky89UnZaz67wolfd4W cZXp4nYJU8iR/eux1kLJcSObZirToq5+zFEOqCU/UAHHuCAgXiFX7b7q/d3vWE4L USbuZ2ioFpoy1z1VoUVeMYyeoLQuvO7Go4U1MedOABmQLt33GZ4SzqDXI4Bw4now evI8+y4HgW2sIcbz+kslLU/dUFiunQbHXTFqbujB9mW3LDSEwrAj4aRxVAygnK4L LImkOnhwKLjSeZDanUJB/Bt3o1YvYZR3WJZcPhMDx39XwpdiDJFr3V2iwxPw+xMx ag95iI8BhvRgBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:14 2025 by rpki-client