This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json) Hash identifier: 2puccktDaJDp1jMRDqqCyJ5+zWwQNgJE9p/iA3PIbeU= Subject key identifier: 66:23:91:C9:C6:36:06:EA:52:C5:57:B7:73:21:8D:D7:07:D6:D8:42 Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Certificate serial: 019AF72F021E1265E2093BA0AC8158E19E9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft Manifest number: 0B4F Signing time: Sun 07 Dec 2025 05:00:44 +0000 Manifest this update: Sun 07 Dec 2025 05:00:44 +0000 Manifest next update: Mon 08 Dec 2025 05:00:44 +0000 Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=) 2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: 3hdS/Ap3ThwqfQ77L79TE1bCf0I4A7Vo23A/lh/0K6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:02:1e:12:65:e2:09:3b:a0:ac:81:58:e1:9e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Validity Not Before: Dec 7 05:00:44 2025 GMT Not After : Dec 8 05:00:44 2025 GMT Subject: CN=662391c9c63606ea52c557b773218dd707d6d842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:14:c9:ab:16:b5:1e:b8:72:e6:ae:32:d9: 10:10:67:28:ba:14:69:cc:a3:09:02:8d:9a:8f:98: 6d:c3:29:01:38:72:eb:db:f7:23:70:83:f8:9f:25: d5:73:81:97:b7:d1:f8:00:01:be:e7:5b:12:ac:c0: a7:00:94:e3:97:ec:c7:88:a8:4a:d3:7a:1e:df:00: ec:bb:50:80:c4:50:67:d9:37:5a:10:1f:da:9c:fd: a8:7c:e4:f7:45:e1:88:9f:54:a3:6b:03:83:f4:66: 6a:c8:f4:73:59:df:f5:41:6f:83:a9:51:7e:cd:42: 33:35:33:fc:ae:54:e8:ad:b4:7d:5c:07:ca:d0:34: 4a:88:d6:d2:9a:00:87:c5:5a:82:4b:72:33:87:61: d1:d0:8f:45:9e:16:1f:c5:70:21:08:14:3e:69:35: 7b:c7:7c:f8:3b:2f:74:c9:07:e0:f7:1c:7e:8c:87: af:e3:97:4b:6d:ac:c3:0c:c7:4d:8b:ea:f9:dc:5f: 32:6e:ce:47:1d:5e:c6:15:dc:1c:ae:17:4f:9c:42: 24:5a:26:ba:25:f5:e1:46:a6:95:cf:7e:be:1b:1c: c4:aa:8d:6b:87:8a:25:7e:6d:03:1f:37:d1:e8:e7: 83:5a:d6:7b:28:47:0c:2d:8d:60:b6:a8:8f:74:f4: 9c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:91:C9:C6:36:06:EA:52:C5:57:B7:73:21:8D:D7:07:D6:D8:42 X509v3 Authority Key Identifier: keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:12:7d:6b:5b:df:85:ca:98:fa:ea:d6:6d:74:ec:8f:56: 13:d8:2e:6d:5d:56:75:c1:fc:f9:3c:e8:a7:ae:82:01:e4:f9: f5:9a:ec:5a:19:82:f7:ac:cf:07:f8:dd:34:d3:db:13:c1:9d: fe:ba:c8:d6:dc:94:e1:76:f3:18:57:a0:77:f9:be:90:57:65: 10:59:8c:21:a3:2b:d1:9f:05:21:7f:d0:fb:a9:c8:f2:e2:46: a8:e1:6d:57:30:e4:34:09:16:8f:1b:46:2b:9d:65:c5:ba:3e: 1f:27:18:18:7f:b0:59:d8:37:4b:ee:c9:6f:23:1d:d3:5c:a2: eb:19:c9:bc:3f:d3:91:36:0d:dc:84:3d:0a:2b:48:f9:f0:07: 8d:24:c9:11:ea:40:63:45:e0:52:50:32:e0:cf:d8:37:55:75: 35:14:70:18:e5:82:bf:00:b1:f3:26:54:b4:3e:20:1f:ce:a8: 13:f5:10:cd:45:7b:05:f0:44:08:98:c2:06:37:e3:60:5d:5a: 1e:50:19:45:1a:6d:95:df:01:9d:c5:cc:27:4f:db:3a:3e:5f: 7e:5d:4e:43:cb:ed:49:fa:ff:84:07:a4:85:44:a4:6b:db:d6: d6:d8:9c:73:d2:3b:12:03:65:dd:59:e3:82:fa:bd:66:9c:56: b8:b5:75:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LwIeEmXiCTugrIFY4Z6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk NTAzYzYwHhcNMjUxMjA3MDUwMDQ0WhcNMjUxMjA4MDUwMDQ0WjAzMTEwLwYDVQQD Eyg2NjIzOTFjOWM2MzYwNmVhNTJjNTU3Yjc3MzIxOGRkNzA3ZDZkODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVAUyasWtR64cuauMtkQEGcouhRp zKMJAo2aj5htwykBOHLr2/cjcIP4nyXVc4GXt9H4AAG+51sSrMCnAJTjl+zHiKhK 03oe3wDsu1CAxFBn2TdaEB/anP2ofOT3ReGIn1SjawOD9GZqyPRzWd/1QW+DqVF+ zUIzNTP8rlTorbR9XAfK0DRKiNbSmgCHxVqCS3Izh2HR0I9FnhYfxXAhCBQ+aTV7 x3z4Oy90yQfg9xx+jIev45dLbazDDMdNi+r53F8ybs5HHV7GFdwcrhdPnEIkWia6 JfXhRqaVz36+GxzEqo1rh4olfm0DHzfR6OeDWtZ7KEcMLY1gtqiPdPSckQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYjkcnGNgbqUsVXt3MhjdcH1thCMB8GA1UdIwQY MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt N2RmYmJhZTAzNjhlLzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgESfWtb 34XKmPrq1m107I9WE9gubV1WdcH8+Tzop66CAeT59ZrsWhmC96zPB/jdNNPbE8Gd /rrI1tyU4XbzGFegd/m+kFdlEFmMIaMr0Z8FIX/Q+6nI8uJGqOFtVzDkNAkWjxtG K51lxbo+HycYGH+wWdg3S+7JbyMd01yi6xnJvD/TkTYN3IQ9CitI+fAHjSTJEepA Y0XgUlAy4M/YN1V1NRRwGOWCvwCx8yZUtD4gH86oE/UQzUV7BfBECJjCBjfjYF1a HlAZRRptld8BncXMJ0/bOj5ffl1OQ8vtSfr/hAekhUSka9vW1ticc9I7EgNl3Vnj gvq9ZpxWuLV1aA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:56:34 2025 by rpki-client