This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: Mbzi3QtC6ZtroBbn7SL+4gArnqUfqM7EcY57kets79A=
Subject key identifier: 8C:A0:E2:0E:ED:73:E4:97:3F:8E:65:D4:0B:9A:8E:E0:45:08:00:19
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019AF54097D54B231214E5C2A18B655FE22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0B4E
Signing time: Sat 06 Dec 2025 20:00:42 +0000
Manifest this update: Sat 06 Dec 2025 20:00:42 +0000
Manifest next update: Sun 07 Dec 2025 20:00:42 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: Y8XWvA+DzSGqUbW8VJ3VWMEsf6G4LC10JVAxf1b9oBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:40:97:d5:4b:23:12:14:e5:c2:a1:8b:65:5f:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Dec 6 20:00:42 2025 GMT
Not After : Dec 7 20:00:42 2025 GMT
Subject: CN=8ca0e20eed73e4973f8e65d40b9a8ee045080019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:94:ff:8f:41:95:40:fc:70:2f:66:6e:36:
64:93:3b:7f:5d:e9:4a:49:b6:5e:8d:cb:31:b2:e2:
b9:c9:1b:eb:ab:34:98:69:a9:ca:25:7f:00:e5:24:
ae:3c:a0:0d:67:2c:f7:85:c9:36:69:fd:5e:26:3b:
46:fe:6a:cc:38:cb:cf:6a:9f:93:15:d5:bb:d8:0f:
bc:64:98:b9:c8:22:cc:f6:d1:44:21:33:83:f2:0c:
30:01:97:6f:cc:9e:a9:7b:7a:36:6f:c4:55:f5:c1:
f4:a8:51:e5:07:c2:32:e7:ce:15:1f:59:d5:7d:e5:
89:e1:ce:59:4b:09:e4:11:f2:c8:c2:7d:a7:a0:35:
cc:c0:a6:76:ef:32:19:c3:92:0b:c0:95:82:8d:92:
f8:c7:78:90:62:e0:3a:29:56:bf:46:c2:be:a1:f5:
9c:21:74:fb:4a:80:f2:cf:18:7a:75:bb:7d:64:98:
96:9c:4b:35:64:c0:95:ec:d1:66:cc:2c:d7:3c:4f:
65:99:50:d1:d9:78:f3:a2:b7:58:7d:fb:2d:75:00:
68:5f:69:c8:e9:3f:17:b6:0a:f1:6f:24:1d:31:2c:
a8:6f:89:7e:7b:5b:5b:b8:52:64:99:a5:03:c8:9a:
35:ed:c0:c1:6a:be:65:73:c0:29:97:a9:88:34:d5:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:E2:0E:ED:73:E4:97:3F:8E:65:D4:0B:9A:8E:E0:45:08:00:19
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:99:e6:82:35:9a:a8:3a:c0:15:01:3f:d0:45:cd:03:c3:
4e:00:56:69:30:a2:d0:1d:77:2c:fb:e9:e8:db:1c:ce:ed:a5:
62:a9:8d:94:5e:2d:ff:a0:0b:99:e1:fd:70:a9:a5:6a:18:c0:
e3:9f:e2:6a:68:24:29:d0:a1:2d:e8:b1:23:b3:1a:5f:3d:c3:
a5:db:25:10:83:f8:b9:3f:13:d0:df:08:d5:27:bd:e0:f0:c4:
2d:b9:74:e6:b9:37:1d:f6:db:d5:db:e4:a2:32:30:3c:22:dc:
93:40:26:35:89:cd:ed:56:45:50:5e:9e:bf:30:b7:0f:59:bf:
2e:eb:7f:20:81:13:39:1e:3b:20:a6:db:ea:51:c1:b4:83:52:
c0:02:f3:07:a3:2a:cb:05:94:77:40:e8:cb:68:56:19:86:d8:
43:b6:9d:e5:3a:12:ed:cd:17:e1:d0:b5:c7:05:00:10:88:d9:
a5:bf:62:20:9b:e7:dc:23:56:3c:e3:5b:91:03:a3:d5:24:77:
14:6a:97:f0:f1:ba:3f:4e:ab:1a:f7:b8:a0:11:fc:de:46:44:
13:c1:8a:d4:5c:40:da:85:05:24:9f:75:a8:1d:8e:ec:5c:ff:
d6:12:5f:72:78:75:4b:bf:ea:df:ec:49:39:25:bf:9c:6b:b8:
55:88:72:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1QJfVSyMSFOXCoYtlX+IsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk
NTAzYzYwHhcNMjUxMjA2MjAwMDQyWhcNMjUxMjA3MjAwMDQyWjAzMTEwLwYDVQQD
Eyg4Y2EwZTIwZWVkNzNlNDk3M2Y4ZTY1ZDQwYjlhOGVlMDQ1MDgwMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pOU/49BlUD8cC9mbjZkkzt/XelK
SbZejcsxsuK5yRvrqzSYaanKJX8A5SSuPKANZyz3hck2af1eJjtG/mrMOMvPap+T
FdW72A+8ZJi5yCLM9tFEITOD8gwwAZdvzJ6pe3o2b8RV9cH0qFHlB8Iy584VH1nV
feWJ4c5ZSwnkEfLIwn2noDXMwKZ27zIZw5ILwJWCjZL4x3iQYuA6KVa/RsK+ofWc
IXT7SoDyzxh6dbt9ZJiWnEs1ZMCV7NFmzCzXPE9lmVDR2XjzordYffstdQBoX2nI
6T8XtgrxbyQdMSyob4l+e1tbuFJkmaUDyJo17cDBar5lc8Apl6mINNX7vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyg4g7tc+SXP45l1AuajuBFCAAZMB8GA1UdIwQY
MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt
N2RmYmJhZTAzNjhlLzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl
LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWT6Z5oI1
mqg6wBUBP9BFzQPDTgBWaTCi0B13LPvp6Nsczu2lYqmNlF4t/6ALmeH9cKmlahjA
45/iamgkKdChLeixI7MaXz3DpdslEIP4uT8T0N8I1Se94PDELbl05rk3Hfbb1dvk
ojIwPCLck0AmNYnN7VZFUF6evzC3D1m/Lut/IIETOR47IKbb6lHBtINSwALzB6Mq
ywWUd0Doy2hWGYbYQ7ad5ToS7c0X4dC1xwUAEIjZpb9iIJvn3CNWPONbkQOj1SR3
FGqX8PG6P06rGve4oBH83kZEE8GK1FxA2oUFJJ91qB2O7Fz/1hJfcnh1S7/q3+xJ
OSW/nGu4VYhyxw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:37:23 2025 by rpki-client