This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json) Hash identifier: t+Piu88DPXqnqy+7xu293HvVGRyh4vosKV73AkY4Qjk= Subject key identifier: A4:22:A5:EA:45:12:8A:88:72:13:3A:91:F5:4E:AF:8F:72:85:CA:65 Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Certificate serial: 019AF31D2F87F297C8D4312FA959874B9658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft Manifest number: 1771 Signing time: Sat 06 Dec 2025 10:02:47 +0000 Manifest this update: Sat 06 Dec 2025 10:02:47 +0000 Manifest next update: Sun 07 Dec 2025 10:02:47 +0000 Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=) 2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: BlU+cw5PzyQzfH8dCqlJnARl7hZdMKm+4pzDwymZg60=) 3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:2f:87:f2:97:c8:d4:31:2f:a9:59:87:4b:96:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Validity Not Before: Dec 6 10:02:47 2025 GMT Not After : Dec 7 10:02:47 2025 GMT Subject: CN=a422a5ea45128a8872133a91f54eaf8f7285ca65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:91:f6:84:3a:af:33:25:ef:19:c5:fa:03: 72:7a:e8:49:3d:6b:da:2d:e6:9b:a1:ab:6a:87:ab: 1f:33:36:8e:0e:c2:1c:fd:87:1a:df:05:2a:cf:3a: fa:b8:a5:fb:e8:46:e0:a6:7f:33:be:0b:2d:fa:6d: c1:b7:95:84:7b:88:ed:c9:dd:00:c7:ed:8f:f6:af: 25:16:31:33:44:36:ec:c1:60:c6:ae:9f:b0:90:cb: 58:21:7d:e9:ac:fb:e4:6f:62:f4:02:66:6e:bb:f1: 43:d4:1b:f0:01:73:60:eb:4b:73:e4:c5:20:c1:cc: b9:53:b0:c4:ab:d2:5c:19:68:43:8e:b2:43:54:47: 7a:64:77:55:27:03:ca:28:04:04:cd:6a:92:75:07: 22:70:82:ec:c0:78:0a:32:c5:49:1b:a5:ff:c2:73: 29:07:a8:a6:d1:be:93:fa:3e:41:bc:c8:5a:c8:8b: 1a:ec:2d:04:b5:24:cd:a4:0a:c0:90:0e:ea:c5:06: 42:14:0d:79:8e:bd:4a:a7:9b:97:7f:fd:58:c4:d5: 6d:25:40:4f:0a:d6:18:94:db:d9:c9:4e:25:84:a8: 6f:a8:4a:72:04:39:05:98:53:76:06:fa:3c:c5:31: 9f:e3:50:dc:85:32:fa:7c:58:28:4f:f9:b5:fa:00: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:22:A5:EA:45:12:8A:88:72:13:3A:91:F5:4E:AF:8F:72:85:CA:65 X509v3 Authority Key Identifier: keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:99:21:38:86:88:2b:2f:00:18:38:7b:55:e7:bb:b5:77:ed: 69:15:d4:fb:9d:32:c7:a3:ac:80:72:ca:4f:cf:f5:64:24:c4: ac:45:d3:24:b1:2c:2b:07:95:4c:80:5d:0d:1e:51:fd:ea:36: 96:e1:ba:5f:ae:6a:29:b8:ba:28:7f:36:d1:c7:b1:bb:a4:4a: bd:8c:95:47:d6:3b:c8:f6:70:3f:7e:ca:f1:f0:e2:41:97:70: 41:f3:4e:ae:9f:45:20:71:0c:f6:64:2c:a2:b2:cd:3f:f8:70: 0a:8f:17:37:8d:13:09:80:85:7a:89:06:91:0d:d8:e8:70:c8: 0f:70:f1:c9:c8:dd:b1:63:ea:f3:a6:5f:09:65:61:5a:bb:a0: 8f:d0:85:08:f0:52:ab:3e:72:a2:24:ae:89:23:6d:c1:ce:ee: 4e:c1:10:39:a9:4b:84:8c:7f:45:46:e5:33:c0:e5:21:86:42: 03:19:4c:db:90:12:30:ec:86:ae:60:2d:9f:99:e4:28:e5:4b: 03:f4:ff:1a:40:2a:22:6c:52:9a:41:8e:f2:6e:b3:29:96:a2: df:35:be:87:2a:29:aa:fe:cb:31:1b:f2:1f:f9:74:b5:d6:39: 6b:6d:c5:29:c7:a4:7f:8c:d5:44:3a:9f:34:2b:7f:60:cf:a8: d9:e4:d7:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHS+H8pfI1DEvqVmHS5ZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDZiZjFmZjgxNmJlMGJhNGM2MjE3MTIzNDIzMzBhOWZh ZDhiZGEwHhcNMjUxMjA2MTAwMjQ3WhcNMjUxMjA3MTAwMjQ3WjAzMTEwLwYDVQQD EyhhNDIyYTVlYTQ1MTI4YTg4NzIxMzNhOTFmNTRlYWY4ZjcyODVjYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+CR9oQ6rzMl7xnF+gNyeuhJPWva Leaboatqh6sfMzaODsIc/Yca3wUqzzr6uKX76Ebgpn8zvgst+m3Bt5WEe4jtyd0A x+2P9q8lFjEzRDbswWDGrp+wkMtYIX3prPvkb2L0AmZuu/FD1BvwAXNg60tz5MUg wcy5U7DEq9JcGWhDjrJDVEd6ZHdVJwPKKAQEzWqSdQcicILswHgKMsVJG6X/wnMp B6im0b6T+j5BvMhayIsa7C0EtSTNpArAkA7qxQZCFA15jr1Kp5uXf/1YxNVtJUBP CtYYlNvZyU4lhKhvqEpyBDkFmFN2Bvo8xTGf41DchTL6fFgoT/m1+gAaOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQipepFEoqIchM6kfVOr49yhcplMB8GA1UdIwQY MBaAFF5Gvx/4Fr4LpMYhcSNCMwqfrYvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUt YjhkYjE1YjUzMWEyLzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUtYjhkYjE1YjUzMWEy LzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZkhOIaI Ky8AGDh7Vee7tXftaRXU+50yx6OsgHLKT8/1ZCTErEXTJLEsKweVTIBdDR5R/eo2 luG6X65qKbi6KH820cexu6RKvYyVR9Y7yPZwP37K8fDiQZdwQfNOrp9FIHEM9mQs orLNP/hwCo8XN40TCYCFeokGkQ3Y6HDID3DxycjdsWPq86ZfCWVhWrugj9CFCPBS qz5yoiSuiSNtwc7uTsEQOalLhIx/RUblM8DlIYZCAxlM25ASMOyGrmAtn5nkKOVL A/T/GkAqImxSmkGO8m6zKZai3zW+hyopqv7LMRvyH/l0tdY5a23FKcekf4zVRDqf NCt/YM+o2eTXmA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:16:24 2025 by rpki-client