This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json) Hash identifier: Mbzi3QtC6ZtroBbn7SL+4gArnqUfqM7EcY57kets79A= Subject key identifier: 8C:A0:E2:0E:ED:73:E4:97:3F:8E:65:D4:0B:9A:8E:E0:45:08:00:19 Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Certificate serial: 019AF54097D54B231214E5C2A18B655FE22C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft Manifest number: 0B4E Signing time: Sat 06 Dec 2025 20:00:42 +0000 Manifest this update: Sat 06 Dec 2025 20:00:42 +0000 Manifest next update: Sun 07 Dec 2025 20:00:42 +0000 Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=) 2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: Y8XWvA+DzSGqUbW8VJ3VWMEsf6G4LC10JVAxf1b9oBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:97:d5:4b:23:12:14:e5:c2:a1:8b:65:5f:e2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Validity Not Before: Dec 6 20:00:42 2025 GMT Not After : Dec 7 20:00:42 2025 GMT Subject: CN=8ca0e20eed73e4973f8e65d40b9a8ee045080019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:94:ff:8f:41:95:40:fc:70:2f:66:6e:36: 64:93:3b:7f:5d:e9:4a:49:b6:5e:8d:cb:31:b2:e2: b9:c9:1b:eb:ab:34:98:69:a9:ca:25:7f:00:e5:24: ae:3c:a0:0d:67:2c:f7:85:c9:36:69:fd:5e:26:3b: 46:fe:6a:cc:38:cb:cf:6a:9f:93:15:d5:bb:d8:0f: bc:64:98:b9:c8:22:cc:f6:d1:44:21:33:83:f2:0c: 30:01:97:6f:cc:9e:a9:7b:7a:36:6f:c4:55:f5:c1: f4:a8:51:e5:07:c2:32:e7:ce:15:1f:59:d5:7d:e5: 89:e1:ce:59:4b:09:e4:11:f2:c8:c2:7d:a7:a0:35: cc:c0:a6:76:ef:32:19:c3:92:0b:c0:95:82:8d:92: f8:c7:78:90:62:e0:3a:29:56:bf:46:c2:be:a1:f5: 9c:21:74:fb:4a:80:f2:cf:18:7a:75:bb:7d:64:98: 96:9c:4b:35:64:c0:95:ec:d1:66:cc:2c:d7:3c:4f: 65:99:50:d1:d9:78:f3:a2:b7:58:7d:fb:2d:75:00: 68:5f:69:c8:e9:3f:17:b6:0a:f1:6f:24:1d:31:2c: a8:6f:89:7e:7b:5b:5b:b8:52:64:99:a5:03:c8:9a: 35:ed:c0:c1:6a:be:65:73:c0:29:97:a9:88:34:d5: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A0:E2:0E:ED:73:E4:97:3F:8E:65:D4:0B:9A:8E:E0:45:08:00:19 X509v3 Authority Key Identifier: keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3e:99:e6:82:35:9a:a8:3a:c0:15:01:3f:d0:45:cd:03:c3: 4e:00:56:69:30:a2:d0:1d:77:2c:fb:e9:e8:db:1c:ce:ed:a5: 62:a9:8d:94:5e:2d:ff:a0:0b:99:e1:fd:70:a9:a5:6a:18:c0: e3:9f:e2:6a:68:24:29:d0:a1:2d:e8:b1:23:b3:1a:5f:3d:c3: a5:db:25:10:83:f8:b9:3f:13:d0:df:08:d5:27:bd:e0:f0:c4: 2d:b9:74:e6:b9:37:1d:f6:db:d5:db:e4:a2:32:30:3c:22:dc: 93:40:26:35:89:cd:ed:56:45:50:5e:9e:bf:30:b7:0f:59:bf: 2e:eb:7f:20:81:13:39:1e:3b:20:a6:db:ea:51:c1:b4:83:52: c0:02:f3:07:a3:2a:cb:05:94:77:40:e8:cb:68:56:19:86:d8: 43:b6:9d:e5:3a:12:ed:cd:17:e1:d0:b5:c7:05:00:10:88:d9: a5:bf:62:20:9b:e7:dc:23:56:3c:e3:5b:91:03:a3:d5:24:77: 14:6a:97:f0:f1:ba:3f:4e:ab:1a:f7:b8:a0:11:fc:de:46:44: 13:c1:8a:d4:5c:40:da:85:05:24:9f:75:a8:1d:8e:ec:5c:ff: d6:12:5f:72:78:75:4b:bf:ea:df:ec:49:39:25:bf:9c:6b:b8: 55:88:72:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJfVSyMSFOXCoYtlX+IsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk NTAzYzYwHhcNMjUxMjA2MjAwMDQyWhcNMjUxMjA3MjAwMDQyWjAzMTEwLwYDVQQD Eyg4Y2EwZTIwZWVkNzNlNDk3M2Y4ZTY1ZDQwYjlhOGVlMDQ1MDgwMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pOU/49BlUD8cC9mbjZkkzt/XelK SbZejcsxsuK5yRvrqzSYaanKJX8A5SSuPKANZyz3hck2af1eJjtG/mrMOMvPap+T FdW72A+8ZJi5yCLM9tFEITOD8gwwAZdvzJ6pe3o2b8RV9cH0qFHlB8Iy584VH1nV feWJ4c5ZSwnkEfLIwn2noDXMwKZ27zIZw5ILwJWCjZL4x3iQYuA6KVa/RsK+ofWc IXT7SoDyzxh6dbt9ZJiWnEs1ZMCV7NFmzCzXPE9lmVDR2XjzordYffstdQBoX2nI 6T8XtgrxbyQdMSyob4l+e1tbuFJkmaUDyJo17cDBar5lc8Apl6mINNX7vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyg4g7tc+SXP45l1AuajuBFCAAZMB8GA1UdIwQY MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt N2RmYmJhZTAzNjhlLzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWT6Z5oI1 mqg6wBUBP9BFzQPDTgBWaTCi0B13LPvp6Nsczu2lYqmNlF4t/6ALmeH9cKmlahjA 45/iamgkKdChLeixI7MaXz3DpdslEIP4uT8T0N8I1Se94PDELbl05rk3Hfbb1dvk ojIwPCLck0AmNYnN7VZFUF6evzC3D1m/Lut/IIETOR47IKbb6lHBtINSwALzB6Mq ywWUd0Doy2hWGYbYQ7ad5ToS7c0X4dC1xwUAEIjZpb9iIJvn3CNWPONbkQOj1SR3 FGqX8PG6P06rGve4oBH83kZEE8GK1FxA2oUFJJ91qB2O7Fz/1hJfcnh1S7/q3+xJ OSW/nGu4VYhyxw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:37:23 2025 by rpki-client