This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json) Hash identifier: wCe0Hlb0d3wSmNOsx3BO0CTH3Ey6FLiHB1l87rn2zlc= Subject key identifier: B1:93:7D:BB:45:92:69:D9:72:E2:EB:48:92:65:49:AE:4B:AA:3A:9F Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1 Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1 Certificate serial: 019AF2767A356A0EB3AD3F3628FAC768BACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft Manifest number: 0B4A Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: mhhB+UDq2veywTxJdkjHHhrP7hWIy3H+fGZ1HDlNXdo=) 2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7a:35:6a:0e:b3:ad:3f:36:28:fa:c7:68:ba:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1 Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=b1937dbb459269d972e2eb48926549ae4baa3a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:ce:8a:c9:45:58:68:e9:46:8c:f2:7f:04: d2:f3:42:d7:c8:fd:3c:78:1b:38:67:5f:7c:ce:41: c4:34:2e:41:82:5f:b8:84:bd:12:98:2f:b4:a6:72: 1f:76:eb:1f:af:a1:7f:a1:59:36:ec:92:fa:61:da: e6:91:fa:5a:6e:26:1e:2c:cd:e9:59:b3:b4:23:c5: df:a6:d1:69:92:fd:48:53:e0:b7:30:59:c4:b4:0a: a6:62:7b:d2:08:fc:e9:19:3e:26:00:d1:c8:49:ef: 92:4b:25:90:ad:5d:95:fa:d9:97:f0:2e:00:e8:ac: 5b:03:a7:c4:5d:bf:83:d8:03:f5:91:f5:33:84:06: 6e:1c:c1:db:95:55:7b:8c:5f:f3:b8:a1:ed:fd:e6: ab:e6:c1:fe:bc:d2:af:f4:24:1b:c8:e7:29:a7:92: 4b:04:8b:80:6b:74:1b:8e:e9:33:a3:c2:0d:85:72: 4f:1b:55:da:00:ca:31:b5:b4:a6:21:65:1d:ef:ee: c6:1c:eb:32:8e:30:2d:8c:15:5b:a7:26:41:bb:78: d8:3f:a5:d3:eb:ff:00:29:48:77:19:2d:a4:c9:14: d9:46:dd:42:38:8b:48:96:ee:89:69:11:1f:a0:b5: 47:5b:47:f5:7f:04:ff:a0:4f:05:90:da:10:72:ce: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:7D:BB:45:92:69:D9:72:E2:EB:48:92:65:49:AE:4B:AA:3A:9F X509v3 Authority Key Identifier: keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fc:61:e6:12:7d:7c:14:86:27:59:d9:dd:33:d9:50:6a:45: 84:4d:ba:da:49:ff:59:4a:50:85:10:05:d9:74:fb:ae:a9:2d: cf:c9:96:cb:d5:60:45:7f:fd:55:83:7c:62:84:47:f9:22:12: af:69:83:fd:df:aa:76:e5:96:78:b2:d4:6d:75:ea:92:db:b1: d1:b1:97:2f:d8:16:3a:23:dc:70:9c:8f:6a:dc:93:e4:3e:78: a6:44:48:cc:3c:54:2c:a9:8f:68:21:4a:bf:fe:47:9e:ad:38: ba:d9:cd:57:dc:79:1b:72:16:0f:8e:f8:c2:db:b2:5e:63:09: 80:dc:45:6e:e2:ee:c4:58:c6:36:05:df:25:e3:1a:2a:3f:dd: 02:ef:40:1a:d6:b1:43:87:e9:c5:5f:a3:ff:dc:51:d7:62:c7: 53:ac:cc:39:06:af:c3:a0:d3:9a:67:d7:6d:09:19:8e:23:14: c7:f3:71:0f:7e:6a:6b:02:21:aa:44:b9:f1:66:b2:eb:58:a2: 84:b2:bf:81:24:54:34:9c:e7:a8:86:64:d0:c5:70:94:21:38: 07:5a:30:18:79:51:f2:f8:3e:3a:a9:24:8c:64:59:9f:eb:55: 72:fe:3f:9e:17:40:d0:ac:71:a4:c9:c1:14:ce:68:cb:c9:a4: 37:ed:67:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydno1ag6zrT82KPrHaLrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2MxM2Y1ZmYxNjlhZmVkODI1Yjc1ZDhmYzA3N2FmY2E1 MGQ2YTEwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD EyhiMTkzN2RiYjQ1OTI2OWQ5NzJlMmViNDg5MjY1NDlhZTRiYWEzYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjHOislFWGjpRozyfwTS80LXyP08 eBs4Z198zkHENC5Bgl+4hL0SmC+0pnIfdusfr6F/oVk27JL6YdrmkfpabiYeLM3p WbO0I8XfptFpkv1IU+C3MFnEtAqmYnvSCPzpGT4mANHISe+SSyWQrV2V+tmX8C4A 6KxbA6fEXb+D2AP1kfUzhAZuHMHblVV7jF/zuKHt/ear5sH+vNKv9CQbyOcpp5JL BIuAa3Qbjukzo8INhXJPG1XaAMoxtbSmIWUd7+7GHOsyjjAtjBVbpyZBu3jYP6XT 6/8AKUh3GS2kyRTZRt1COItIlu6JaREfoLVHW0f1fwT/oE8FkNoQcs6z3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGTfbtFkmnZcuLrSJJlSa5LqjqfMB8GA1UdIwQY MBaAFF58E/X/Fpr+2CW3XY/Ad6/KUNahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQt OWU1OWMxMTFhYTM4LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQtOWU1OWMxMTFhYTM4 LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPxh5hJ9 fBSGJ1nZ3TPZUGpFhE262kn/WUpQhRAF2XT7rqktz8mWy9VgRX/9VYN8YoRH+SIS r2mD/d+qduWWeLLUbXXqktux0bGXL9gWOiPccJyPatyT5D54pkRIzDxULKmPaCFK v/5Hnq04utnNV9x5G3IWD474wtuyXmMJgNxFbuLuxFjGNgXfJeMaKj/dAu9AGtax Q4fpxV+j/9xR12LHU6zMOQavw6DTmmfXbQkZjiMUx/NxD35qawIhqkS58Way61ii hLK/gSRUNJznqIZk0MVwlCE4B1owGHlR8vg+OqkkjGRZn+tVcv4/nhdA0KxxpMnB FM5oy8mkN+1n8A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:25 2025 by rpki-client