This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json) Hash identifier: r2r1WE1cfbn9rECp0MGk9rEbHHrl05ZdeKWP5Xd8Yqk= Subject key identifier: 40:2F:0D:D4:65:75:68:80:D4:05:4E:50:F5:6A:B5:E9:E7:06:A6:B7 Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20 Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720 Certificate serial: 019AF2AD929FECD6DAC85E1141EF4D1EBEC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft Manifest number: 0BCC Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=) 2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: Ida/AqGCC6/ig3ds/stDl5Em8k5d2snE+ojPBZvZUFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:92:9f:ec:d6:da:c8:5e:11:41:ef:4d:1e:be:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720 Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=402f0dd465756880d4054e50f56ab5e9e706a6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:c3:d0:4d:d6:24:b2:bd:2b:72:63:76:c6: 58:a2:07:02:d3:e8:e6:f6:0c:10:c5:4a:2e:85:1d: a2:c3:7f:17:14:9d:83:a4:21:d5:d7:6f:77:a6:43: 88:d6:23:e4:3c:94:e6:d5:1c:cb:66:02:b6:d7:29: 0b:15:b3:03:b7:05:37:05:bc:77:ca:68:63:ca:53: 07:b5:63:2a:dc:22:e1:f4:be:25:37:85:a1:46:d1: ad:a0:3f:60:a1:62:af:b8:83:02:b9:7f:85:5d:ac: 98:13:49:62:c9:90:ae:b6:8c:aa:ea:ed:d2:87:36: 32:ee:4f:4f:e0:bb:1f:e5:2e:80:48:a6:94:dc:b6: 9b:11:18:c9:dd:33:4d:1b:d0:38:a2:00:e2:e6:ec: ea:f6:bd:d1:ff:c6:aa:60:4c:48:db:2f:1b:90:5a: 9f:eb:02:66:cd:b9:74:bd:42:96:a8:a3:af:e4:75: f7:b1:86:19:a3:7d:06:d3:6f:ba:6a:6c:ed:ac:75: a2:95:54:44:50:bb:ea:13:50:43:e5:0c:51:3e:18: 8c:41:f3:77:3f:27:ca:fe:33:a3:b5:da:70:6d:59: d5:02:f8:d2:b5:eb:dd:74:6c:2d:e0:41:08:7a:9a: b9:ce:51:ee:2d:89:b5:08:01:ac:e2:35:5f:24:f3: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2F:0D:D4:65:75:68:80:D4:05:4E:50:F5:6A:B5:E9:E7:06:A6:B7 X509v3 Authority Key Identifier: keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:45:02:9e:16:43:e7:2a:1a:13:c0:11:c4:db:4a:16:06:72: 13:8e:7d:1f:0a:b6:93:7f:80:a9:c6:ce:bd:52:e7:3a:40:85: f1:fe:f7:ea:57:6a:e9:c4:fc:ba:d8:19:2e:fa:ed:c3:70:2d: 4e:ed:4d:e0:bb:9f:a3:c8:7e:b9:3c:96:d3:3c:93:47:84:25: 1b:49:16:06:c9:f8:76:38:72:bf:47:9f:0a:39:c2:1f:ad:07: 9d:0e:c7:cf:32:8b:86:9c:e7:40:1e:5d:e8:42:fb:8b:24:69: f6:77:aa:15:33:46:a4:04:e9:72:f2:76:2b:56:ca:51:c0:5a: 6d:c5:0d:4e:e6:54:0c:c5:38:61:37:81:5a:41:46:f9:c9:f0: 1b:72:bf:e5:68:5f:4d:67:aa:61:94:f8:94:e7:e7:5e:1b:c5: ce:6b:96:7b:95:d3:6d:22:ed:8f:6c:e3:b2:94:ec:44:4d:57: 9d:c9:6b:aa:9b:59:08:17:d7:00:10:1c:b2:19:94:d5:b3:47: 32:af:9d:77:71:60:e3:29:32:83:3e:95:54:e2:6a:05:6f:40: a4:c7:d3:cf:a2:16:d7:de:f6:11:1f:c1:0c:80:a4:76:5b:55: 85:07:6a:7e:7b:f5:fc:7b:f4:05:b4:b1:e8:59:dc:ec:af:61: 37:a3:c0:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZKf7NbayF4RQe9NHr7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyMjllNzNjZTZiYjE5NmQ2NWMwYmVmMTE5NTYwNjU3 YTM3MjAwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD Eyg0MDJmMGRkNDY1NzU2ODgwZDQwNTRlNTBmNTZhYjVlOWU3MDZhNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlzD0E3WJLK9K3JjdsZYogcC0+jm 9gwQxUouhR2iw38XFJ2DpCHV1293pkOI1iPkPJTm1RzLZgK21ykLFbMDtwU3Bbx3 ymhjylMHtWMq3CLh9L4lN4WhRtGtoD9goWKvuIMCuX+FXayYE0liyZCutoyq6u3S hzYy7k9P4Lsf5S6ASKaU3LabERjJ3TNNG9A4ogDi5uzq9r3R/8aqYExI2y8bkFqf 6wJmzbl0vUKWqKOv5HX3sYYZo30G02+6amztrHWilVREULvqE1BD5QxRPhiMQfN3 PyfK/jOjtdpwbVnVAvjStevddGwt4EEIepq5zlHuLYm1CAGs4jVfJPM33QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAvDdRldWiA1AVOUPVqtennBqa3MB8GA1UdIwQY MBaAFMU7Ip5zzmuxltZcC+8RlWBlejcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEt NjM3MjhiMGZhMTA4LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEtNjM3MjhiMGZhMTA4 LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEUCnhZD 5yoaE8ARxNtKFgZyE459Hwq2k3+AqcbOvVLnOkCF8f736ldq6cT8utgZLvrtw3At Tu1N4Lufo8h+uTyW0zyTR4QlG0kWBsn4djhyv0efCjnCH60HnQ7HzzKLhpznQB5d 6EL7iyRp9neqFTNGpATpcvJ2K1bKUcBabcUNTuZUDMU4YTeBWkFG+cnwG3K/5Whf TWeqYZT4lOfnXhvFzmuWe5XTbSLtj2zjspTsRE1XnclrqptZCBfXABAcshmU1bNH Mq+dd3Fg4ykygz6VVOJqBW9ApMfTz6IW1972ER/BDICkdltVhQdqfnv1/Hv0BbSx 6Fnc7K9hN6PA/g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:21 2025 by rpki-client