This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json) Hash identifier: ncUCBHLu5rS7BZMs+FgjHEfnA93ojVEj07/3laiRRd4= Subject key identifier: CF:46:34:92:B8:15:2F:FD:E4:1A:9D:65:92:20:E1:BF:9E:51:DD:E5 Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Certificate serial: 019AF208E7D86E5C49D889975F35D0C3AB76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:01 +0000 Manifest this update: Sat 06 Dec 2025 05:01:01 +0000 Manifest next update: Sun 07 Dec 2025 05:01:01 +0000 Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=) 2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=) 3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: uCJZ+pTBH8X7lt0luG6A/n6xBFe1ch0rLh48H8hdKdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e7:d8:6e:5c:49:d8:89:97:5f:35:d0:c3:ab:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Validity Not Before: Dec 6 05:01:01 2025 GMT Not After : Dec 7 05:01:01 2025 GMT Subject: CN=cf463492b8152ffde41a9d659220e1bf9e51dde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:14:87:e3:15:44:de:7a:a8:e9:62:30:6a: 80:11:10:be:86:42:e3:7a:b0:5a:ec:dc:ca:cd:07: 07:39:70:00:08:6e:2a:46:f5:52:ed:0a:ee:b8:3f: 0e:80:8b:90:05:ff:59:8b:6f:7e:65:f9:96:c7:fc: 44:de:0d:0c:77:59:e7:08:da:2d:73:64:b2:73:b5: a7:12:a6:56:04:1b:3f:10:fc:5d:70:e2:4f:28:88: d1:a2:8e:99:d5:18:84:b1:97:fd:63:9b:4c:e0:41: 33:2f:cd:25:c8:ce:b6:88:a7:84:0c:1f:75:5d:c0: 2a:7f:dc:8b:31:96:62:14:d1:23:24:56:38:4d:3a: e3:a7:8e:bc:b4:f4:0f:ab:13:1c:bc:01:a5:16:57: 80:e1:d0:b0:09:10:b8:8c:ff:da:8d:4e:7b:ea:c7: 51:9d:d7:33:a8:e1:ee:6c:12:93:0f:8c:6c:51:84: eb:15:13:62:6c:5b:b2:34:17:3d:0e:45:9d:cd:a1: fd:42:e5:f5:9d:17:3f:00:50:a3:a7:d5:0d:bd:37: ca:4a:81:b6:d2:29:73:eb:4f:08:28:06:7f:34:60: 66:7b:a5:a9:ac:5f:80:c2:14:5a:d0:68:a9:e7:ea: 94:00:28:06:b3:f4:5c:ec:67:ea:30:53:bc:99:29: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:46:34:92:B8:15:2F:FD:E4:1A:9D:65:92:20:E1:BF:9E:51:DD:E5 X509v3 Authority Key Identifier: keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e7:9b:04:fd:b8:d8:02:5f:3d:18:0f:c8:ea:bf:14:f4:64: 28:35:53:33:4d:ca:87:92:1e:06:3a:39:55:6c:ad:89:53:de: ff:ab:2f:48:1d:12:26:f9:c4:60:b5:86:66:50:4b:a1:30:9e: 0e:f6:1e:cd:3d:c3:a0:5f:57:8e:31:66:89:32:fb:08:97:68: e3:04:37:f5:3d:1d:46:eb:c0:5d:f4:56:5e:09:d4:3f:5f:e3: 8c:be:27:93:d4:fe:4a:7f:ed:cb:a8:7d:06:d0:9f:ed:da:0f: 56:6a:7c:6e:ab:96:c4:f6:94:85:f6:f6:22:45:c0:fc:87:fb: 44:fe:2e:68:8f:ea:62:69:c8:f2:47:bf:f1:1e:41:01:ec:1e: 5c:e0:99:78:77:d6:4a:a3:4a:9c:95:ce:c3:54:dc:d8:c2:16: f7:9a:0b:2e:53:a1:5c:40:f1:41:3a:64:fc:39:69:3d:0c:9f: 28:d8:66:bd:c4:5d:a3:00:0e:f1:37:a5:bf:23:a8:1b:de:49: 88:59:fa:07:76:68:1d:3d:30:a3:c3:c1:1e:62:81:ee:91:1a: 83:cc:60:96:2a:9d:2d:4d:b4:18:7f:09:d4:ca:54:17:a2:40: 35:6c:c5:a8:17:51:e9:71:3b:94:ea:01:09:1a:80:56:b1:93: e8:df:96:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOfYblxJ2ImXXzXQw6t2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl OTZjMzUwHhcNMjUxMjA2MDUwMTAxWhcNMjUxMjA3MDUwMTAxWjAzMTEwLwYDVQQD EyhjZjQ2MzQ5MmI4MTUyZmZkZTQxYTlkNjU5MjIwZTFiZjllNTFkZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV8Uh+MVRN56qOliMGqAERC+hkLj erBa7NzKzQcHOXAACG4qRvVS7QruuD8OgIuQBf9Zi29+ZfmWx/xE3g0Md1nnCNot c2Syc7WnEqZWBBs/EPxdcOJPKIjRoo6Z1RiEsZf9Y5tM4EEzL80lyM62iKeEDB91 XcAqf9yLMZZiFNEjJFY4TTrjp468tPQPqxMcvAGlFleA4dCwCRC4jP/ajU576sdR ndczqOHubBKTD4xsUYTrFRNibFuyNBc9DkWdzaH9QuX1nRc/AFCjp9UNvTfKSoG2 0ilz608IKAZ/NGBme6WprF+AwhRa0Gip5+qUACgGs/Rc7GfqMFO8mSmgZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9GNJK4FS/95BqdZZIg4b+eUd3lMB8GA1UdIwQY MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4 LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+ebBP24 2AJfPRgPyOq/FPRkKDVTM03Kh5IeBjo5VWytiVPe/6svSB0SJvnEYLWGZlBLoTCe DvYezT3DoF9XjjFmiTL7CJdo4wQ39T0dRuvAXfRWXgnUP1/jjL4nk9T+Sn/ty6h9 BtCf7doPVmp8bquWxPaUhfb2IkXA/If7RP4uaI/qYmnI8ke/8R5BAeweXOCZeHfW SqNKnJXOw1Tc2MIW95oLLlOhXEDxQTpk/DlpPQyfKNhmvcRdowAO8TelvyOoG95J iFn6B3ZoHT0wo8PBHmKB7pEag8xgliqdLU20GH8J1MpUF6JANWzFqBdR6XE7lOoB CRqAVrGT6N+W+w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:05 2025 by rpki-client