This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft File: XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json) Hash identifier: yLKHVTdFwSCnjaf3rkf4rxVK7cNjpGcyaubuZrY24/8= Subject key identifier: 34:1F:47:E3:6F:B5:42:32:9B:7F:48:61:FC:E8:2B:93:E7:2B:10:13 Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be Certificate serial: 019AF0BF21DD4133DBC86F2DBF7EBEE995F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft Manifest number: 0FBF Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: P2NRYwvD64-ChL8WHsL3n2VNc0o.roa (hash: ieevRAfzDccOVGuN3ZGz3jBO2k67pRtiKtsN5CR5hf4=) 2: WePWXi4BVJvCbK70G_Bl8LvCy1A.roa (hash: KcxOlT86bPrqOuZYUTgExqyOPNUmMSnB0pr0K4kluRk=) 3: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: bqpPWNJdO9jEbOAiftFYPuajcr9ZmVtb4h50c9xzW90=) 4: ZN7LHZSqu6VYidqfpIPOfCxL2L4.roa (hash: HOkUkg1LrwSaHvSseUfJQzAJzpgcTNuaZCYPqCnldN0=) 5: fm5A4Lmh3Dyoqm8phCUbdJ-SJ50.roa (hash: y1l9jzGOcVZ0GENozcALgbMdp6ZfPx8sRn42vZfb0eg=) 6: mOQsXh6W-nguYweUEP-GggtQ8co.roa (hash: BRX6qGv8sEq7HbLRmf+hKda82RdBa8GI6j+263A+qA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:21:dd:41:33:db:c8:6f:2d:bf:7e:be:e9:95:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=341f47e36fb542329b7f4861fce82b93e72b1013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:0a:4e:03:8a:a1:ba:21:3a:6e:31:95:4a: a4:8d:18:45:8d:66:ab:93:50:68:c4:95:6f:ef:1d: a1:9d:2d:85:5d:85:b1:2b:11:bd:dc:92:6e:27:4d: 3a:c3:40:39:22:d2:22:8c:2b:1b:70:94:a0:c5:70: dc:07:39:24:64:79:49:85:4d:2b:18:b6:1c:e7:d8: 13:84:90:23:b0:1c:76:7f:60:4d:c6:7e:52:c3:1b: 8d:38:5b:75:59:52:0f:4d:7f:ec:69:2e:bc:cd:b1: 00:c6:ea:27:48:71:af:1c:55:5a:89:46:2d:8d:7f: a5:84:83:00:14:0b:84:03:fe:a6:34:7d:e4:75:15: fb:ea:cd:5e:48:80:a7:fd:dd:78:57:a3:72:b5:82: 32:6d:d3:5d:2b:59:33:dc:d5:f3:18:69:a5:e3:f9: 73:8b:ac:62:41:9a:91:55:ef:3f:c9:55:27:91:05: 69:ac:95:85:c7:b6:6a:ee:e5:5a:2d:ca:96:5a:0f: 70:20:3a:b3:25:f2:b3:41:f3:b3:e8:c9:4b:c3:29: 56:19:7d:c8:da:e7:fe:5e:24:9d:43:b2:37:ca:c0: f8:55:e3:c3:c7:ee:e1:73:f5:c1:93:d2:07:e8:e3: 5b:c8:4f:3a:d9:05:b8:9b:97:e0:d3:13:6b:bd:1b: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1F:47:E3:6F:B5:42:32:9B:7F:48:61:FC:E8:2B:93:E7:2B:10:13 X509v3 Authority Key Identifier: keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:41:2c:b9:88:87:f4:d6:68:23:b7:db:4d:e1:68:04:65:d4: 4e:5d:24:b3:35:34:51:5f:bb:22:c9:8b:8b:1b:58:d8:a0:f1: e0:a2:18:65:26:6f:85:b8:83:90:8c:b6:ac:07:ae:d7:a0:85: 14:5b:ce:3f:83:16:65:45:86:4a:ce:cc:cd:8b:14:bd:12:e0: 74:dd:4c:b3:73:1e:dd:cb:e6:72:4b:93:fd:17:80:99:75:75: fa:29:ec:14:7b:15:ce:a0:ff:e2:9f:c7:c5:d2:92:11:6d:cb: b4:eb:7e:fb:06:6a:ba:c6:0a:f5:a1:86:65:bc:8c:22:99:da: 9a:c9:3d:11:8c:8a:cc:a9:cf:1a:4d:82:6e:27:3d:08:ee:cd: 8e:ab:c3:ce:78:8f:71:1b:fc:cb:33:eb:90:b1:ff:e3:46:82: 32:ab:7d:d4:dd:9a:3a:64:cc:ff:d6:d8:73:85:dd:64:b0:a1: 73:75:98:19:de:52:73:00:de:82:8d:1e:ee:79:a1:c8:cc:f8: 06:58:73:4a:3c:01:cb:3e:8e:6f:9c:61:39:76:0b:40:db:ef: 6f:ea:b5:40:2c:e7:23:fa:c8:71:a3:89:24:9b:51:84:47:28: 7d:00:44:74:bb:d7:c7:3f:ee:7f:a2:5e:0a:96:8e:62:fb:e4: a1:8b:fb:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyHdQTPbyG8tv36+6ZXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIyNmE3MDRjZjYyMGViMjAwMGYyN2U3YTkxOWNlNzMw OTkxYmUwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD EygzNDFmNDdlMzZmYjU0MjMyOWI3ZjQ4NjFmY2U4MmI5M2U3MmIxMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs4KTgOKobohOm4xlUqkjRhFjWar k1BoxJVv7x2hnS2FXYWxKxG93JJuJ006w0A5ItIijCsbcJSgxXDcBzkkZHlJhU0r GLYc59gThJAjsBx2f2BNxn5SwxuNOFt1WVIPTX/saS68zbEAxuonSHGvHFVaiUYt jX+lhIMAFAuEA/6mNH3kdRX76s1eSICn/d14V6NytYIybdNdK1kz3NXzGGml4/lz i6xiQZqRVe8/yVUnkQVprJWFx7Zq7uVaLcqWWg9wIDqzJfKzQfOz6MlLwylWGX3I 2uf+XiSdQ7I3ysD4VePDx+7hc/XBk9IH6ONbyE862QW4m5fg0xNrvRvY2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQfR+NvtUIym39IYfzoK5PnKxATMB8GA1UdIwQY MBaAFF8CJqcEz2IOsgAPJ+epGc5zCZG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAt NzVkOWNlNWI4ZDljLzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAtNzVkOWNlNWI4ZDlj LzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0EsuYiH 9NZoI7fbTeFoBGXUTl0kszU0UV+7IsmLixtY2KDx4KIYZSZvhbiDkIy2rAeu16CF FFvOP4MWZUWGSs7MzYsUvRLgdN1Ms3Me3cvmckuT/ReAmXV1+insFHsVzqD/4p/H xdKSEW3LtOt++wZqusYK9aGGZbyMIpnamsk9EYyKzKnPGk2Cbic9CO7NjqvDzniP cRv8yzPrkLH/40aCMqt91N2aOmTM/9bYc4XdZLChc3WYGd5ScwDego0e7nmhyMz4 BlhzSjwByz6Ob5xhOXYLQNvvb+q1QCznI/rIcaOJJJtRhEcofQBEdLvXxz/uf6Je CpaOYvvkoYv7qQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:45 2025 by rpki-client