This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json) Hash identifier: ZviN49dswuvbNzNNDsUWhmPNXuKfPFRyqRN2OQAFtD4= Subject key identifier: 94:B9:77:A9:0C:D7:6D:43:1F:17:4E:25:E7:5D:6A:C9:0F:72:5C:54 Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606 Certificate serial: 019AF49BDAD13E0F72B4C3DD8ECEA290BA52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 17:00:46 +0000 Manifest this update: Sat 06 Dec 2025 17:00:46 +0000 Manifest next update: Sun 07 Dec 2025 17:00:46 +0000 Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=) 2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: TJGIOenOIYAEtNbQQLfE5+B3vZpRi+vpSiU6mXLr6Io=) 3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=) 4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:da:d1:3e:0f:72:b4:c3:dd:8e:ce:a2:90:ba:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606 Validity Not Before: Dec 6 17:00:46 2025 GMT Not After : Dec 7 17:00:46 2025 GMT Subject: CN=94b977a90cd76d431f174e25e75d6ac90f725c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:bc:69:4b:1d:3e:7c:57:4d:b3:c7:69:78: 86:b5:a5:01:11:4c:1e:cd:e3:8c:4c:47:d4:8a:dd: a5:36:55:f3:54:cb:3b:f2:c8:83:58:01:d2:2e:e0: 1b:97:8c:d5:c9:13:17:39:48:64:77:b8:da:f5:49: 39:74:19:86:fc:b3:da:91:b2:aa:4c:9d:76:7f:82: 25:29:5f:85:30:1c:6b:b7:c7:8e:03:af:db:64:c0: 41:50:8c:31:d1:25:00:d7:f5:e3:18:4d:72:c7:f0: da:d7:7f:4a:10:8c:48:60:bf:4a:75:96:77:16:b8: fe:dc:61:be:61:e2:ea:d6:54:ff:e5:a3:73:d2:55: 35:fa:8d:c7:3a:69:82:84:f5:3d:86:9a:6f:9c:a2: 64:64:8c:f4:82:8c:0b:e6:d1:2d:20:8c:7d:cc:a7: 58:fc:bb:11:32:e0:1e:de:23:2b:2e:66:9b:e5:08: 64:74:f4:62:d0:0a:dc:5f:83:c8:3e:72:a7:6d:6d: 5f:bb:53:d6:0b:e5:b2:75:65:e8:73:31:3d:9d:45: 16:1b:17:89:55:9a:e2:6c:42:d9:8c:62:ae:91:86: 3b:2e:28:3f:3d:06:6b:d7:a9:17:21:b1:52:4c:b9: 46:40:da:cf:fe:cf:37:be:e0:43:b3:84:62:ae:db: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B9:77:A9:0C:D7:6D:43:1F:17:4E:25:E7:5D:6A:C9:0F:72:5C:54 X509v3 Authority Key Identifier: keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f3:c0:6f:33:95:a9:ab:09:59:0c:c0:cf:79:5a:90:6f:32: 77:42:d5:9d:1d:11:7d:fa:54:85:bc:e9:87:b6:6d:26:48:82: 10:92:11:16:5e:8b:84:37:ad:20:2a:2f:a0:b7:62:5e:17:19: 37:88:c2:dd:3f:c7:80:74:e6:c7:c3:cc:bf:ef:12:36:7b:e2: a1:8b:ac:c8:f7:27:dd:2e:82:56:b8:8b:2b:bf:a6:50:36:5d: a8:b8:39:06:e1:92:c4:e8:b6:3a:75:67:2a:a4:b9:19:ba:ee: d6:29:fa:a2:e8:36:e7:46:73:63:cd:0c:f5:03:50:26:3d:e6: 8c:6f:1a:7f:d4:ef:94:db:ce:f5:de:ee:42:fe:73:e2:06:c0: ff:bf:70:77:3a:81:96:d8:fb:f0:7a:88:75:78:28:2a:f9:01: e6:8d:46:22:18:b5:cb:c7:76:21:26:55:f3:0f:f3:6b:03:f6: 48:ee:1f:2d:98:23:c1:91:9e:16:b7:1a:fc:98:ea:a1:a5:71: 06:6f:fe:f8:de:2e:78:0b:23:c1:12:ce:fc:91:8b:d9:0b:9b: d1:fc:4b:57:2f:73:a6:70:c4:a8:68:34:08:77:5c:1a:a0:45: 5c:5a:f0:e0:05:6a:a2:04:37:40:fd:3f:04:02:19:b6:35:36: 34:ff:dd:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9rRPg9ytMPdjs6ikLpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2 NWE2MDYwHhcNMjUxMjA2MTcwMDQ2WhcNMjUxMjA3MTcwMDQ2WjAzMTEwLwYDVQQD Eyg5NGI5NzdhOTBjZDc2ZDQzMWYxNzRlMjVlNzVkNmFjOTBmNzI1YzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApke8aUsdPnxXTbPHaXiGtaUBEUwe zeOMTEfUit2lNlXzVMs78siDWAHSLuAbl4zVyRMXOUhkd7ja9Uk5dBmG/LPakbKq TJ12f4IlKV+FMBxrt8eOA6/bZMBBUIwx0SUA1/XjGE1yx/Da139KEIxIYL9KdZZ3 Frj+3GG+YeLq1lT/5aNz0lU1+o3HOmmChPU9hppvnKJkZIz0gowL5tEtIIx9zKdY /LsRMuAe3iMrLmab5QhkdPRi0ArcX4PIPnKnbW1fu1PWC+WydWXoczE9nUUWGxeJ VZribELZjGKukYY7Lig/PQZr16kXIbFSTLlGQNrP/s83vuBDs4RirtuYAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJS5d6kM121DHxdOJeddaskPclxUMB8GA1UdIwQY MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt N2M5OTgwNzlhNmE5LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5 LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvPAbzOV qasJWQzAz3lakG8yd0LVnR0RffpUhbzph7ZtJkiCEJIRFl6LhDetICovoLdiXhcZ N4jC3T/HgHTmx8PMv+8SNnvioYusyPcn3S6CVriLK7+mUDZdqLg5BuGSxOi2OnVn KqS5Gbru1in6oug250ZzY80M9QNQJj3mjG8af9TvlNvO9d7uQv5z4gbA/79wdzqB ltj78HqIdXgoKvkB5o1GIhi1y8d2ISZV8w/zawP2SO4fLZgjwZGeFrca/JjqoaVx Bm/++N4ueAsjwRLO/JGL2Qub0fxLVy9zpnDEqGg0CHdcGqBFXFrw4AVqogQ3QP0/ BAIZtjU2NP/ddw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:09 2025 by rpki-client