This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json) Hash identifier: 1iNb0jMhuo8od8uDwiEg22CCAMzyUZeVql/PSS0Tz54= Subject key identifier: 20:DD:6A:10:AF:8C:26:E2:14:BF:61:D9:40:09:7B:EA:E9:7E:A5:88 Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0 Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0 Certificate serial: 019AF5E67DD2AF37123693ECBAB1517773D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 23:01:54 +0000 Manifest this update: Sat 06 Dec 2025 23:01:54 +0000 Manifest next update: Sun 07 Dec 2025 23:01:54 +0000 Files and hashes: 1: O4OjioqtdLSc9vBVs2H8waPnIgU.roa (hash: NSGxfFoC9xrE9ZgK+kDfAmJ0Yg5M2rh+aZQuRq8sgYc=) 2: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: bKZXrOEtfKqWNRonSjmN5xinlJ4CjoWcTK7QoR/md+o=) 3: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:7d:d2:af:37:12:36:93:ec:ba:b1:51:77:73:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0 Validity Not Before: Dec 6 23:01:54 2025 GMT Not After : Dec 7 23:01:54 2025 GMT Subject: CN=20dd6a10af8c26e214bf61d940097beae97ea588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:f2:0c:ee:7d:30:8e:4d:38:ab:41:8b:44: ce:9b:42:99:70:38:4d:b5:4a:4a:d4:4d:d0:8d:a7: 50:5a:a4:15:93:16:2c:5c:cd:af:9a:28:ca:32:f9: 32:dc:22:d8:7a:8d:bd:8d:d6:1b:ab:03:ec:ba:15: 06:fb:63:fb:6d:b2:78:3c:3a:61:18:08:74:fc:cd: 74:42:47:4c:6b:48:d3:d5:85:75:ca:8b:4e:34:eb: 94:c0:47:a8:36:e9:bb:e1:f1:42:d9:de:48:a3:c7: fc:7d:26:b3:a8:2c:b9:d6:ba:a1:44:7e:51:f1:36: 2d:ec:7d:21:5d:82:1e:70:d8:8d:9c:fc:1b:2f:5f: 73:86:72:38:fb:24:2c:78:7a:87:57:b2:3c:b6:a0: 43:09:9b:be:e8:7b:c6:0a:a6:60:ef:ad:60:15:b0: 03:33:f4:48:52:9e:fd:33:5d:33:07:2d:32:dc:3f: 1c:34:c3:e6:7a:e6:07:a2:c5:fb:eb:91:3b:23:6d: fc:21:ad:9d:20:3b:a6:dd:9e:7f:53:4a:25:45:39: 53:ca:4e:88:fa:f1:c4:41:52:8b:b7:36:92:73:84: 31:7e:5a:4e:e7:06:bd:25:f4:c4:2a:a6:39:a0:61: 97:35:24:11:e2:2e:68:50:4a:df:ae:76:13:56:5c: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DD:6A:10:AF:8C:26:E2:14:BF:61:D9:40:09:7B:EA:E9:7E:A5:88 X509v3 Authority Key Identifier: keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2b:d1:25:fe:0b:04:c6:8c:e2:7b:fc:ef:c4:c6:cc:e4:25: 82:16:16:7d:d8:42:e5:81:d0:7a:82:81:16:a8:83:4a:50:7f: 93:0c:a6:4c:67:66:17:6c:83:b4:d1:be:71:8e:28:64:3e:46: 35:ac:05:f4:8a:0f:02:1b:6e:5c:d8:e3:72:f8:e5:1b:e7:4f: 99:83:0b:5c:dd:54:6d:23:f0:7e:fa:f0:c3:cb:df:ac:59:07: 9d:9b:65:3a:71:21:49:17:dc:c8:74:ee:58:af:cd:71:4e:32: 20:2f:34:8c:17:d4:e7:e7:7c:83:0d:70:72:97:31:dc:40:af: 9c:e9:31:95:44:49:c6:ba:d1:38:94:f1:08:1f:35:73:2a:28: fc:54:89:1c:88:83:82:a3:84:ef:b9:a2:24:f4:bd:f9:c5:de: bc:ec:61:89:79:f2:88:f7:93:04:5f:ab:fb:ab:eb:88:dc:d6: 35:b1:bc:07:b8:cb:ff:a1:17:7b:16:08:2e:1a:fa:22:e8:22: 25:c6:72:fe:0b:ed:99:37:6f:01:d7:75:dc:2d:ef:b4:c4:8e: 9b:2a:4e:b6:fa:f7:83:32:46:d3:58:90:7d:d2:7e:fc:17:f8: 31:35:96:c9:fe:e5:51:9e:94:a9:9d:77:34:f4:55:64:9c:f4: 4f:af:48:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15n3SrzcSNpPsurFRd3PZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTc5MWE1ODExYzdmNmVkODFmZDQ0MWI1MDI2NWFmNWU5 YzYxYjAwHhcNMjUxMjA2MjMwMTU0WhcNMjUxMjA3MjMwMTU0WjAzMTEwLwYDVQQD EygyMGRkNmExMGFmOGMyNmUyMTRiZjYxZDk0MDA5N2JlYWU5N2VhNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM/yDO59MI5NOKtBi0TOm0KZcDhN tUpK1E3QjadQWqQVkxYsXM2vmijKMvky3CLYeo29jdYbqwPsuhUG+2P7bbJ4PDph GAh0/M10QkdMa0jT1YV1yotONOuUwEeoNum74fFC2d5Io8f8fSazqCy51rqhRH5R 8TYt7H0hXYIecNiNnPwbL19zhnI4+yQseHqHV7I8tqBDCZu+6HvGCqZg761gFbAD M/RIUp79M10zBy0y3D8cNMPmeuYHosX765E7I238Ia2dIDum3Z5/U0olRTlTyk6I +vHEQVKLtzaSc4QxflpO5wa9JfTEKqY5oGGXNSQR4i5oUErfrnYTVlz9uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDdahCvjCbiFL9h2UAJe+rpfqWIMB8GA1UdIwQY MBaAFMUXkaWBHH9u2B/UQbUCZa9enGGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEt ODE5MTY0YjkyYjg4LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEtODE5MTY0YjkyYjg4 LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCvRJf4L BMaM4nv878TGzOQlghYWfdhC5YHQeoKBFqiDSlB/kwymTGdmF2yDtNG+cY4oZD5G NawF9IoPAhtuXNjjcvjlG+dPmYMLXN1UbSPwfvrww8vfrFkHnZtlOnEhSRfcyHTu WK/NcU4yIC80jBfU5+d8gw1wcpcx3ECvnOkxlURJxrrROJTxCB81cyoo/FSJHIiD gqOE77miJPS9+cXevOxhiXnyiPeTBF+r+6vriNzWNbG8B7jL/6EXexYILhr6Iugi JcZy/gvtmTdvAdd13C3vtMSOmypOtvr3gzJG01iQfdJ+/Bf4MTWWyf7lUZ6UqZ13 NPRVZJz0T69Iyg== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:14 2025 by rpki-client