This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json) Hash identifier: sb7tFLuByrSZLjBtXA6uuu2naT8HEYWMEm30BE3SeVs= Subject key identifier: 00:76:D9:78:31:AF:B3:37:16:3F:3C:D9:E2:7D:3A:D6:6D:B3:69:51 Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6 Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6 Certificate serial: 019AF19AE4961490B0907BBF4C995D2779C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft Manifest number: 1097 Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=) 2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: OymF1fv5jhvCZPx9a8pfDyEzdYHIWyyMKTVhMk+RrlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e4:96:14:90:b0:90:7b:bf:4c:99:5d:27:79:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6 Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=0076d97831afb337163f3cd9e27d3ad66db36951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:22:ba:b1:77:29:4b:87:ab:0f:89:32:29: fe:48:21:f0:39:f6:8d:cd:a0:3e:15:68:7e:fd:34: a5:0d:70:ae:6c:c4:2c:d1:8d:66:05:35:1a:3e:43: aa:68:d7:71:ff:19:e8:3f:27:39:a5:47:2f:6d:5a: 71:1b:6b:d6:3b:5f:c6:c1:68:a1:a3:7e:4c:63:a0: 2c:17:c7:d1:f0:1c:fe:9c:ee:75:fd:8d:c5:8f:64: db:94:09:da:77:45:fd:47:e2:22:f2:e3:0a:51:34: 1f:fd:b7:f1:b6:90:b0:8e:e2:79:00:9e:76:ae:e2: b5:fa:99:42:9b:12:6e:0c:ab:c3:07:7b:de:f1:3a: 21:28:f2:8a:f1:d7:18:fd:95:7b:e7:53:04:1e:44: d1:f9:cb:49:68:d2:1d:e0:dd:f8:36:3e:65:86:5d: 65:68:bc:16:ea:60:13:eb:61:d0:e8:a9:25:41:8a: 3b:78:fd:0e:77:53:d8:df:67:82:01:23:f4:7d:b3: c8:96:d6:4f:5f:84:48:b6:f0:d8:bd:04:df:63:0b: e1:3d:b1:21:80:10:ae:12:ec:ff:b4:b0:47:b4:db: d4:ce:c6:0a:6d:76:1b:63:0d:20:2d:95:c4:62:84: e9:0e:b4:7d:e9:67:16:bd:fc:53:7f:cf:11:bb:7d: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:76:D9:78:31:AF:B3:37:16:3F:3C:D9:E2:7D:3A:D6:6D:B3:69:51 X509v3 Authority Key Identifier: keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:52:ec:9b:1d:d4:7b:5b:40:2a:01:7f:74:5d:fe:a5:82:1c: 4c:cb:54:8c:53:07:88:34:81:dd:14:f2:e5:1e:79:fb:61:f4: 6b:0a:60:77:e1:56:76:7d:b8:87:fe:28:3b:b4:82:a0:de:b8: 74:f3:65:ef:3e:4e:c0:1f:2e:bf:ef:95:cf:00:2e:f4:e7:25: 65:f1:ea:1f:57:84:88:6b:ad:af:ac:56:a3:e7:85:7c:84:e2: 35:d3:93:de:e3:d8:c6:54:59:97:9e:24:4d:11:b1:38:67:9d: df:ed:4c:48:d5:18:cb:2c:ff:37:d8:c5:f7:4d:79:8e:7b:83: b6:2e:d9:c4:98:6e:c6:63:c4:2b:00:4f:d9:e5:79:5b:ce:0a: 06:24:25:f5:58:bd:db:12:40:36:92:24:b2:1a:01:12:f5:97: 92:1b:14:be:f2:ae:1c:e9:77:29:af:6f:30:b8:a2:af:b8:c2: 2a:76:80:55:08:16:c5:c9:d8:b4:c9:32:38:08:1d:31:ab:14: a1:c4:3e:70:0c:1d:3c:99:66:7a:6e:af:70:17:bc:0c:d0:aa: 41:b1:d2:3a:b9:f9:7f:ed:fe:14:91:da:5e:68:4c:6d:3f:7b: c5:c1:da:5e:8a:6f:a4:13:c7:1a:ff:7f:f9:0f:08:2b:9c:21: 13:69:1a:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuSWFJCwkHu/TJldJ3nIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmY3NzJiZjNjNDY0MWE3MWJmN2Y0YmM0ZGUxMWM5M2Fk ZGZlYTYwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD EygwMDc2ZDk3ODMxYWZiMzM3MTYzZjNjZDllMjdkM2FkNjZkYjM2OTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eYiurF3KUuHqw+JMin+SCHwOfaN zaA+FWh+/TSlDXCubMQs0Y1mBTUaPkOqaNdx/xnoPyc5pUcvbVpxG2vWO1/GwWih o35MY6AsF8fR8Bz+nO51/Y3Fj2TblAnad0X9R+Ii8uMKUTQf/bfxtpCwjuJ5AJ52 ruK1+plCmxJuDKvDB3ve8TohKPKK8dcY/ZV751MEHkTR+ctJaNId4N34Nj5lhl1l aLwW6mAT62HQ6KklQYo7eP0Od1PY32eCASP0fbPIltZPX4RItvDYvQTfYwvhPbEh gBCuEuz/tLBHtNvUzsYKbXYbYw0gLZXEYoTpDrR96WcWvfxTf88Ru31JVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAB22Xgxr7M3Fj882eJ9OtZts2lRMB8GA1UdIwQY MBaAFMVvdyvzxGQacb9/S8TeEck63f6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTct N2VjYTIwNWZhZmNiLzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTctN2VjYTIwNWZhZmNi LzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVLsmx3U e1tAKgF/dF3+pYIcTMtUjFMHiDSB3RTy5R55+2H0awpgd+FWdn24h/4oO7SCoN64 dPNl7z5OwB8uv++VzwAu9OclZfHqH1eEiGutr6xWo+eFfITiNdOT3uPYxlRZl54k TRGxOGed3+1MSNUYyyz/N9jF9015jnuDti7ZxJhuxmPEKwBP2eV5W84KBiQl9Vi9 2xJANpIkshoBEvWXkhsUvvKuHOl3Ka9vMLiir7jCKnaAVQgWxcnYtMkyOAgdMasU ocQ+cAwdPJlmem6vcBe8DNCqQbHSOrn5f+3+FJHaXmhMbT97xcHaXopvpBPHGv9/ +Q8IK5whE2kahQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:21 2025 by rpki-client