This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json) Hash identifier: ivDnPUn4EVxh4stXTo3QJJCmh1WRS+vy+sXBi67q+tg= Subject key identifier: 3D:2B:C7:C0:86:48:3F:DF:25:3B:D9:D9:D7:E1:44:72:43:60:C4:D8 Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33 Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733 Certificate serial: 019AF19B21C2DA612A80155849A8C06C6396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft Manifest number: 0FE5 Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: 3cKiOm3cqL9AuF9PS6f53tN4Gdg.roa (hash: HiF4cbbVkgMNvvCZGg36cGuMWinu6Z8X1/cmYfYlH0w=) 2: 7dlaDlkKgi4dAirWDUWBZGBGqcU.roa (hash: p1fbv33BP/4U3m5pS2Ws4rI2vfUa3r6QuSWQWQR+Iw4=) 3: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: Uy+0oxZpTFCnoqiha1p8XIOMl23CLfhMPGxXpw5+W3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:21:c2:da:61:2a:80:15:58:49:a8:c0:6c:63:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=3d2bc7c086483fdf253bd9d9d7e144724360c4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:5e:56:1a:eb:d1:d3:0e:b8:f0:d6:6d:02: 66:ed:e9:16:1a:2c:84:07:0a:f3:ee:05:da:b2:a4: 38:48:00:5f:ba:29:dc:23:06:1a:9c:c3:dc:63:de: b2:6a:26:b3:6f:42:d3:b2:7b:44:9c:5d:fe:3d:ec: 60:42:43:a2:44:d8:ba:68:b9:20:41:82:ff:2b:4d: 24:7b:69:b8:e5:8b:78:ec:21:20:34:b0:dd:e3:eb: 6c:9e:d5:8e:d3:6d:86:e6:1b:cc:77:97:1a:d1:0e: e6:9c:ab:c6:ef:51:25:ab:7a:56:b9:60:7f:eb:61: d5:44:88:20:c6:d3:b9:fe:ea:60:16:36:a3:60:7b: c4:15:69:d6:4c:17:92:da:94:5a:ab:61:64:c3:2f: 78:b4:bb:bb:d9:2a:1c:47:2a:9a:d7:2e:ac:bc:9f: 14:c3:2a:34:8d:68:8a:29:ba:33:ca:3b:b5:f0:72: df:df:71:6f:d7:88:b2:b6:3b:36:b5:31:6f:a9:c6: 24:6d:e4:cf:49:ac:71:d2:72:fd:43:f2:07:a0:f2: ad:29:1e:73:14:1e:c0:5b:cf:04:f3:b7:fc:ea:4b: 23:0c:4b:49:04:15:e0:9f:51:e7:53:4d:94:cc:d6: c8:ce:4e:6c:3d:9a:47:a0:e6:9b:13:9b:61:fb:4b: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:C7:C0:86:48:3F:DF:25:3B:D9:D9:D7:E1:44:72:43:60:C4:D8 X509v3 Authority Key Identifier: keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ee:f4:55:6d:1e:e4:12:2f:b0:6d:b8:33:ca:8c:c3:77:94: 29:6b:ce:09:d4:e3:fc:9a:70:22:f2:ca:3f:63:07:1e:a9:63: 0f:83:0e:d2:09:7e:97:7f:c6:b3:fa:2c:5f:e6:d8:2e:32:7c: 75:4f:61:27:30:07:5e:c3:f0:e1:81:70:a2:5c:40:7e:62:65: f9:52:8e:f3:38:a9:32:7e:a3:1c:e0:db:71:00:9d:6c:19:db: 2b:a0:fd:49:86:6a:b9:2d:99:c0:25:0f:a3:d4:e7:a0:34:a4: 1a:93:48:df:fe:9c:1e:9f:d5:75:67:b1:a6:b9:c3:4e:15:09: df:56:02:e4:dc:b5:06:55:14:25:aa:a6:e7:e7:fc:0c:22:39: 07:7e:a8:c4:11:69:80:91:9e:06:b3:69:db:43:29:4d:b8:8c: 34:26:de:21:c6:44:38:dc:78:ce:69:39:69:c3:63:4c:ff:3e: c2:3a:ff:55:c0:0e:40:01:f2:38:ff:31:bd:0a:d4:55:c4:6e: 07:5d:7f:d0:0d:3b:b6:7b:72:5b:07:e2:6e:57:58:bd:7f:07: cc:0a:e9:54:67:74:ba:06:01:e9:e6:c2:2d:98:1e:3f:0b:3a: 43:bd:79:41:a3:ca:91:69:a1:5c:30:6f:36:af:d6:57:f0:72: 0d:67:84:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyHC2mEqgBVYSajAbGOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzFiNjNkMTFhNmNjMmQxY2U2OWUxMzExYzg3YWMxYTZh NzA3MzMwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EygzZDJiYzdjMDg2NDgzZmRmMjUzYmQ5ZDlkN2UxNDQ3MjQzNjBjNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSdeVhrr0dMOuPDWbQJm7ekWGiyE Bwrz7gXasqQ4SABfuincIwYanMPcY96yaiazb0LTsntEnF3+PexgQkOiRNi6aLkg QYL/K00ke2m45Yt47CEgNLDd4+tsntWO022G5hvMd5ca0Q7mnKvG71Elq3pWuWB/ 62HVRIggxtO5/upgFjajYHvEFWnWTBeS2pRaq2Fkwy94tLu72SocRyqa1y6svJ8U wyo0jWiKKbozyju18HLf33Fv14iytjs2tTFvqcYkbeTPSaxx0nL9Q/IHoPKtKR5z FB7AW88E87f86ksjDEtJBBXgn1HnU02UzNbIzk5sPZpHoOabE5th+0u9swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0rx8CGSD/fJTvZ2dfhRHJDYMTYMB8GA1UdIwQY MBaAFMUxtj0RpswtHOaeExHIesGmpwczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEt ZGI4Y2FiY2VlMjFlLzEveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEtZGI4Y2FiY2VlMjFl LzEveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaO70VW0e 5BIvsG24M8qMw3eUKWvOCdTj/JpwIvLKP2MHHqljD4MO0gl+l3/Gs/osX+bYLjJ8 dU9hJzAHXsPw4YFwolxAfmJl+VKO8zipMn6jHODbcQCdbBnbK6D9SYZquS2ZwCUP o9TnoDSkGpNI3/6cHp/VdWexprnDThUJ31YC5Ny1BlUUJaqm5+f8DCI5B36oxBFp gJGeBrNp20MpTbiMNCbeIcZEONx4zmk5acNjTP8+wjr/VcAOQAHyOP8xvQrUVcRu B11/0A07tntyWwfibldYvX8HzArpVGd0ugYB6ebCLZgePws6Q715QaPKkWmhXDBv Nq/WV/ByDWeEvw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:42 2025 by rpki-client