This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json) Hash identifier: yBywnmzHHixBlqQL3G0LjDPKcaSO2fD5L/9Uvs0+AFg= Subject key identifier: FC:AA:BE:A6:4A:95:7D:5C:4E:24:E0:BF:8E:52:1C:6B:38:F5:00:60 Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Certificate serial: 019AF19A9D2C366863C3028A4A09FBF101F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft Manifest number: 0E80 Signing time: Sat 06 Dec 2025 03:00:32 +0000 Manifest this update: Sat 06 Dec 2025 03:00:32 +0000 Manifest next update: Sun 07 Dec 2025 03:00:32 +0000 Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=) 2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=) 3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: 5EDJynJ0i8CkRlTbtRRTsHOSxHNaGyp/fczwgF7j6rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9d:2c:36:68:63:c3:02:8a:4a:09:fb:f1:01:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Validity Not Before: Dec 6 03:00:32 2025 GMT Not After : Dec 7 03:00:32 2025 GMT Subject: CN=fcaabea64a957d5c4e24e0bf8e521c6b38f50060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:47:a5:5c:a7:07:79:71:4b:f6:c4:3b:56: 1b:99:b4:8a:e0:10:90:4a:f4:09:01:a8:0b:c9:bb: 89:a1:19:f5:38:0d:bc:7a:78:9f:28:92:9f:66:35: a2:0e:4d:06:06:91:fd:a5:61:6b:7e:3b:35:80:fe: 5b:5f:bc:fb:a9:b3:04:f6:3d:e7:3d:84:f3:13:a7: 62:bc:a5:5f:15:19:8e:57:2d:14:b8:c9:f1:73:c3: f8:e3:d0:23:1e:21:9f:39:7f:40:b7:42:96:a6:d0: e6:ee:24:62:72:99:83:92:9b:e5:43:27:9a:11:5f: af:ed:f0:ff:4a:27:58:6a:02:c9:42:c5:59:00:f7: 59:72:3f:2c:e6:c9:f4:68:4f:9c:69:0e:ac:40:d4: 18:52:16:7a:27:c9:04:8f:57:d5:9c:41:a1:18:10: 68:34:1b:e0:31:81:1c:36:8d:86:29:a0:9a:f3:22: e5:98:83:15:a7:cf:59:3d:24:9e:35:bc:c4:83:41: ad:27:ac:a0:28:5e:83:8d:dd:bb:3a:ba:53:67:6b: 03:1e:b6:c2:94:16:f3:6b:5f:e5:9a:23:3a:14:36: 7c:56:09:28:e0:64:50:77:ab:8b:9f:02:ba:b4:b0: 25:16:d8:04:07:b4:99:7d:5b:08:f3:6d:ab:d5:e4: 08:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AA:BE:A6:4A:95:7D:5C:4E:24:E0:BF:8E:52:1C:6B:38:F5:00:60 X509v3 Authority Key Identifier: keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3d:0b:81:1f:75:c2:d4:20:b5:92:14:bb:03:f9:05:be:a3: 5e:87:eb:eb:20:fd:3d:b8:96:d9:5b:e5:2d:e7:3a:2b:37:e6: 12:65:87:2e:82:c1:3e:b4:2d:01:f0:6e:82:21:c6:fe:fe:f3: 26:5d:74:31:7f:30:7c:f0:45:a5:4a:5f:be:a0:a5:ed:1a:07: 09:e6:01:ef:aa:3d:02:b5:c1:72:a6:3c:5a:c5:ff:9d:5d:42: 3a:c9:d3:aa:bb:2e:db:96:6c:ba:f6:9c:f9:ed:3f:c6:85:c5: 22:3c:08:08:03:94:b5:8b:9a:88:d5:d1:e0:21:82:6c:ef:55: 8f:23:7f:6a:f9:26:c3:b3:5b:3f:71:6f:2a:91:0b:aa:ef:c1: ca:2e:0d:6b:ad:be:c6:55:58:65:58:b8:08:11:e0:20:34:2b: 07:39:16:d4:1b:6c:49:49:74:f9:75:7a:07:aa:82:e4:3b:9f: 35:b5:81:59:6f:a0:57:09:4a:fe:5a:b3:03:36:f0:21:25:51: bd:c6:f1:67:2d:06:46:b1:f8:2a:b5:12:f3:33:6b:81:c9:3c: 2b:db:9a:84:1d:af:ae:1f:59:f2:18:91:cb:59:ae:16:a2:e3: 67:27:09:5a:c2:2b:13:a9:f3:c6:ed:b4:47:15:77:7c:27:29: 1d:ed:ac:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmp0sNmhjwwKKSgn78QH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOTJiOWE5MmM3ZWI5MTNjM2RhNTU4MDAyYzY3M2U4MjM4 ZGIxYzcwHhcNMjUxMjA2MDMwMDMyWhcNMjUxMjA3MDMwMDMyWjAzMTEwLwYDVQQD EyhmY2FhYmVhNjRhOTU3ZDVjNGUyNGUwYmY4ZTUyMWM2YjM4ZjUwMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl9HpVynB3lxS/bEO1YbmbSK4BCQ SvQJAagLybuJoRn1OA28enifKJKfZjWiDk0GBpH9pWFrfjs1gP5bX7z7qbME9j3n PYTzE6divKVfFRmOVy0UuMnxc8P449AjHiGfOX9At0KWptDm7iRicpmDkpvlQyea EV+v7fD/SidYagLJQsVZAPdZcj8s5sn0aE+caQ6sQNQYUhZ6J8kEj1fVnEGhGBBo NBvgMYEcNo2GKaCa8yLlmIMVp89ZPSSeNbzEg0GtJ6ygKF6Djd27OrpTZ2sDHrbC lBbza1/lmiM6FDZ8Vgko4GRQd6uLnwK6tLAlFtgEB7SZfVsI822r1eQISQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyqvqZKlX1cTiTgv45SHGs49QBgMB8GA1UdIwQY MBaAFFySuaksfrkTw9pVgALGc+gjjbHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQt ZDZiNTZhYmEzZWI3LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQtZDZiNTZhYmEzZWI3 LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXD0LgR91 wtQgtZIUuwP5Bb6jXofr6yD9PbiW2VvlLec6KzfmEmWHLoLBPrQtAfBugiHG/v7z Jl10MX8wfPBFpUpfvqCl7RoHCeYB76o9ArXBcqY8WsX/nV1COsnTqrsu25Zsuvac +e0/xoXFIjwICAOUtYuaiNXR4CGCbO9VjyN/avkmw7NbP3FvKpELqu/Byi4Na62+ xlVYZVi4CBHgIDQrBzkW1BtsSUl0+XV6B6qC5DufNbWBWW+gVwlK/lqzAzbwISVR vcbxZy0GRrH4KrUS8zNrgck8K9uahB2vrh9Z8hiRy1muFqLjZycJWsIrE6nzxu20 RxV3fCcpHe2shg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:27 2025 by rpki-client