This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft File: Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft (raw, json) Hash identifier: Utb50n7xL2Hjie7BJc0DMKCpSIowk6YdF8xIDpFvHU0= Subject key identifier: E7:03:F1:42:A2:A3:AD:31:FF:C9:0F:8D:B7:07:A7:9C:04:B3:07:DC Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e Certificate serial: 019AF12EA5B6EC1991BAF26467AFC42348F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl (hash: mc5bYv7VjIee9MQLsBX1wCkaDG+KwRL6RiKHxqlQQOs=) 2: dOe2C3PomUnQ6xc35HptdqNgMBQ.roa (hash: Xuv+aCcr1f8IKITCeJK5u15I1LDGKs+9hvrLxQLOxWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a5:b6:ec:19:91:ba:f2:64:67:af:c4:23:48:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=e703f142a2a3ad31ffc90f8db707a79c04b307dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:eb:f5:df:f7:37:3a:1f:3b:0c:44:31:58: c8:9c:aa:13:a4:6b:08:54:0b:6f:8b:84:35:ae:a4: e6:b8:47:3d:0b:37:86:22:9b:b6:75:29:fd:7e:e2: a7:37:7e:d9:85:e6:6e:be:d6:55:97:7e:9e:3a:82: 1b:82:03:28:31:83:a1:02:0b:b5:e5:57:e8:5b:34: 9c:da:b3:f6:72:86:25:c0:87:80:5a:07:3c:98:7a: 6e:32:2a:bd:98:c7:7a:3b:ec:76:15:82:7a:a8:17: 48:30:d6:73:cd:2c:21:00:1a:37:e7:41:9c:48:96: 33:1f:b0:de:55:1a:ac:c9:82:d6:a0:c0:10:6b:82: 7c:2f:e0:72:66:9b:33:5d:1e:4d:dc:c9:9e:ce:a4: a3:b9:11:f9:4d:6a:e4:1f:f9:06:d1:54:8e:75:61: 3a:27:89:2a:d1:71:74:86:d4:29:87:96:cd:ee:78: ed:44:b9:da:b9:46:53:09:bd:9c:3b:96:75:6d:4d: ce:ea:c3:40:fc:2b:bd:d5:5d:6f:06:f4:b3:4f:fa: 1a:8c:6e:2f:50:44:71:37:85:41:ff:66:83:21:23: d7:39:87:ff:b9:f3:d0:42:eb:0c:13:a8:73:a1:5a: 9c:c8:46:b9:e2:f0:5a:9d:52:11:5d:a4:3f:9a:5c: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:03:F1:42:A2:A3:AD:31:FF:C9:0F:8D:B7:07:A7:9C:04:B3:07:DC X509v3 Authority Key Identifier: keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c8:1a:b2:91:a8:ec:be:36:01:12:f4:a8:71:6c:5b:6b:cf: d4:96:c4:4e:14:a5:65:35:3b:d5:b6:80:5c:7b:3b:ae:31:e3: 1e:20:88:0b:9d:45:fe:7c:f7:95:f7:63:a4:27:27:d5:a7:03: 44:de:66:24:e0:56:5d:be:96:75:b8:5a:5a:7f:95:d4:65:de: 4a:9c:25:8a:f8:6d:7e:9c:48:a0:4d:e4:d7:51:13:7f:44:24: f6:a7:b2:25:7a:6b:19:a4:88:a5:c4:b7:ca:56:eb:6a:c3:f5: 6c:a4:4e:7b:4e:21:d5:35:54:51:d0:1e:8a:8d:bb:e0:92:cf: 48:a9:73:fa:09:f4:08:53:e2:15:64:fa:f6:fe:5b:1b:16:38: c7:7a:fb:9a:da:8b:93:d6:77:5c:21:a3:b9:c8:70:37:de:c2: 1e:49:d2:79:42:8f:13:66:65:d3:29:93:8c:62:2b:74:8d:88: a7:ed:7a:75:18:55:59:0e:78:37:a9:a5:aa:74:66:ce:98:7d: ff:c0:b0:be:25:62:4c:04:c2:60:f8:6a:a2:ee:db:54:b4:09: 0c:af:28:aa:de:c4:c3:b3:5e:6e:22:86:d5:df:e1:34:f7:56: c0:17:20:ee:b6:96:28:cd:13:4b:32:02:ac:49:e2:36:94:a4: 2c:3f:6a:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqW27BmRuvJkZ6/EI0jzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGNiNmRhMzU4YThkMmQyNzBjMzA1ZjhiNjFmM2M5OTBk NTc2NmUwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD EyhlNzAzZjE0MmEyYTNhZDMxZmZjOTBmOGRiNzA3YTc5YzA0YjMwN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo37r9d/3NzofOwxEMVjInKoTpGsI VAtvi4Q1rqTmuEc9CzeGIpu2dSn9fuKnN37ZheZuvtZVl36eOoIbggMoMYOhAgu1 5VfoWzSc2rP2coYlwIeAWgc8mHpuMiq9mMd6O+x2FYJ6qBdIMNZzzSwhABo350Gc SJYzH7DeVRqsyYLWoMAQa4J8L+ByZpszXR5N3MmezqSjuRH5TWrkH/kG0VSOdWE6 J4kq0XF0htQph5bN7njtRLnauUZTCb2cO5Z1bU3O6sNA/Cu91V1vBvSzT/oajG4v UERxN4VB/2aDISPXOYf/ufPQQusME6hzoVqcyEa54vBanVIRXaQ/mlxLiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcD8UKio60x/8kPjbcHp5wEswfcMB8GA1UdIwQY MBaAFF6Mtto1io0tJwwwX4th88mQ1XZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMDI2NjEtYjU5MS00ZjVlLWIzNjkt Zjc0YTVmMmJjYjQ3LzEvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMDI2NjEtYjU5MS00ZjVlLWIzNjktZjc0YTVmMmJjYjQ3 LzEvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8gaspGo 7L42ARL0qHFsW2vP1JbEThSlZTU71baAXHs7rjHjHiCIC51F/nz3lfdjpCcn1acD RN5mJOBWXb6WdbhaWn+V1GXeSpwlivhtfpxIoE3k11ETf0Qk9qeyJXprGaSIpcS3 ylbrasP1bKROe04h1TVUUdAeio274JLPSKlz+gn0CFPiFWT69v5bGxY4x3r7mtqL k9Z3XCGjuchwN97CHknSeUKPE2Zl0ymTjGIrdI2Ip+16dRhVWQ54N6mlqnRmzph9 /8CwviViTATCYPhqou7bVLQJDK8oqt7Ew7NebiKG1d/hNPdWwBcg7raWKM0TSzIC rEniNpSkLD9q9g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:42 2025 by rpki-client