This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: 7Q8s6lWxBmWrhcoliz9CxwId+PWux7bev6iOKLC+gFI= Subject key identifier: F3:84:52:FB:B8:35:93:64:54:18:00:E8:29:7A:13:B2:4A:39:C8:50 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019AF276A10C3CCD26C400EB379CAD03835E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1338 Signing time: Sat 06 Dec 2025 07:00:52 +0000 Manifest this update: Sat 06 Dec 2025 07:00:52 +0000 Manifest next update: Sun 07 Dec 2025 07:00:52 +0000 Files and hashes: 1: 4RKx0TPWpjyqFnYw_5DcC4r--8c.roa (hash: EeJxEgHcgX2POFtcheGSjZ/nSQoAG58B2CWKgWaFLHU=) 2: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 3: B7-nq7_cc4f7Zt868VHWF4evtl4.roa (hash: 8XyukQXz+vjZuY6nqgv3ycX242CL7BTZXHzKPn1lLzs=) 4: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: Yp8UBZ4wZKFOaY5T6io+zryjb1A9AQ5h48RTUREB6AI=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: f4_XIVmsIZE5Q2N24spgeU0yDjk.roa (hash: 9PnPL8Uj92c8N0K6S0DkkLyk9Siv5wZEJPC/dCt0/ys=) 10: tWNAblpSIHBRwstDjrx69LZTG3c.roa (hash: TOR0ePLyq2A8fQRU7qwOgqkqVyE2uNZxjRQtXz0qxQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a1:0c:3c:cd:26:c4:00:eb:37:9c:ad:03:83:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Dec 6 07:00:52 2025 GMT Not After : Dec 7 07:00:52 2025 GMT Subject: CN=f38452fbb8359364541800e8297a13b24a39c850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:c1:20:8e:c1:53:11:97:97:a5:8d:e3:62: f7:ab:54:b1:04:a1:21:d7:06:fb:73:14:62:10:2e: 89:7e:e9:dc:f5:d2:69:3e:2b:d5:6d:97:e6:92:9b: 55:42:70:7c:23:56:9c:60:6f:ea:47:c5:67:65:8b: 34:f5:d1:b4:06:5c:79:8c:e0:44:05:9b:23:4b:6b: 2c:ed:d6:58:5b:a5:28:6f:7a:6c:0a:1f:4d:9e:08: f7:87:d6:66:d1:8d:89:92:7e:14:27:e0:97:9b:5a: d4:d6:43:6d:6a:31:89:b5:1f:48:ae:9d:31:1f:b9: 30:04:54:f4:d2:74:3a:bd:d5:de:47:8b:b7:e7:26: 27:99:78:5b:8e:2f:e6:0c:29:07:a8:de:7b:68:cf: 17:0e:09:a7:37:66:18:46:0f:87:3b:e3:0b:0e:f3: b4:71:05:4d:96:46:f3:0c:52:53:c9:e1:19:68:3e: 9b:e8:0c:7f:26:b6:45:cd:55:71:97:4c:a2:2f:17: af:b3:71:48:ae:16:6f:0a:aa:dd:5b:5f:33:86:3d: 33:38:11:3d:33:5c:62:1d:9f:d5:31:e5:96:7f:13: 97:65:27:83:9e:dc:d6:49:20:e6:d9:94:3e:24:5e: 50:13:b9:c6:19:6b:10:4a:86:79:2d:45:60:5c:86: 91:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:84:52:FB:B8:35:93:64:54:18:00:E8:29:7A:13:B2:4A:39:C8:50 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:53:06:83:e2:36:67:ad:c5:f4:72:af:36:ec:b3:22:19:1b: 98:af:78:fe:f1:67:e2:e2:4c:22:44:b2:0a:7c:75:f6:ff:29: 8c:75:82:86:68:f1:4f:3a:22:01:9c:53:a9:6e:81:2b:82:8f: 15:0d:2a:4a:35:81:42:de:3c:c9:01:4d:de:79:e4:18:3f:f1: 1a:b3:4b:d6:bf:2f:41:14:21:99:29:4f:d4:7a:41:4c:32:2d: 31:96:aa:f8:7d:6a:e2:26:68:7a:26:8b:e7:2d:96:ea:f6:70: 3b:bc:17:43:d2:a7:84:a2:77:ac:a7:24:e5:88:d7:9d:67:99: 05:05:0e:9a:ff:ea:9e:40:40:13:07:f0:62:dd:3a:e0:ac:bd: 8e:e2:28:4a:7f:24:47:2e:54:cf:24:19:6e:8e:18:26:7f:4c: ff:64:5b:53:6a:a8:f3:ee:8e:56:bb:7f:8e:46:a7:d6:98:4d: c6:e1:21:84:ad:fe:98:a4:5a:78:08:70:7c:4d:79:4d:68:dd: 30:40:de:7e:00:ae:6b:9e:36:75:37:62:63:d8:f5:c5:f5:db: 56:62:98:5e:92:94:b6:9d:ac:e8:89:c1:c7:c0:14:93:39:bf: f5:6b:f4:5e:ef:f2:25:c0:91:6b:a4:49:26:62:9d:94:a2:29: 42:f9:10:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqEMPM0mxADrN5ytA4NeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUxMjA2MDcwMDUyWhcNMjUxMjA3MDcwMDUyWjAzMTEwLwYDVQQD EyhmMzg0NTJmYmI4MzU5MzY0NTQxODAwZTgyOTdhMTNiMjRhMzljODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg3BII7BUxGXl6WN42L3q1SxBKEh 1wb7cxRiEC6Jfunc9dJpPivVbZfmkptVQnB8I1acYG/qR8VnZYs09dG0Blx5jOBE BZsjS2ss7dZYW6Uob3psCh9Nngj3h9Zm0Y2Jkn4UJ+CXm1rU1kNtajGJtR9Irp0x H7kwBFT00nQ6vdXeR4u35yYnmXhbji/mDCkHqN57aM8XDgmnN2YYRg+HO+MLDvO0 cQVNlkbzDFJTyeEZaD6b6Ax/JrZFzVVxl0yiLxevs3FIrhZvCqrdW18zhj0zOBE9 M1xiHZ/VMeWWfxOXZSeDntzWSSDm2ZQ+JF5QE7nGGWsQSoZ5LUVgXIaR+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOEUvu4NZNkVBgA6Cl6E7JKOchQMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1MGg+I2 Z63F9HKvNuyzIhkbmK94/vFn4uJMIkSyCnx19v8pjHWChmjxTzoiAZxTqW6BK4KP FQ0qSjWBQt48yQFN3nnkGD/xGrNL1r8vQRQhmSlP1HpBTDItMZaq+H1q4iZoeiaL 5y2W6vZwO7wXQ9KnhKJ3rKck5YjXnWeZBQUOmv/qnkBAEwfwYt064Ky9juIoSn8k Ry5UzyQZbo4YJn9M/2RbU2qo8+6OVrt/jkan1phNxuEhhK3+mKRaeAhwfE15TWjd MEDefgCua542dTdiY9j1xfXbVmKYXpKUtp2s6InBx8AUkzm/9Wv0Xu/yJcCRa6RJ JmKdlKIpQvkQ/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:00:38 2025 by rpki-client