This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json) Hash identifier: Y8oDGxTq2lMatWBs4HlMdnqLdJmgC4RPhtCnPJZLHHE= Subject key identifier: 8D:5E:74:E9:4D:FF:79:49:D6:D4:94:0C:62:34:A4:9D:6D:EB:EB:DE Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Certificate serial: 019AF38984FA0D2940ABDAB461D1C282AF0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft Manifest number: 0D47 Signing time: Sat 06 Dec 2025 12:01:07 +0000 Manifest this update: Sat 06 Dec 2025 12:01:07 +0000 Manifest next update: Sun 07 Dec 2025 12:01:07 +0000 Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=) 2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=) 3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: Ag3iyhROG8UTuXq8SDr85ppvnriyDetlEQEqELx8/ig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:84:fa:0d:29:40:ab:da:b4:61:d1:c2:82:af:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Validity Not Before: Dec 6 12:01:07 2025 GMT Not After : Dec 7 12:01:07 2025 GMT Subject: CN=8d5e74e94dff7949d6d4940c6234a49d6debebde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:46:c6:aa:e9:78:6e:0c:3b:8c:ab:71:6b: ef:01:4f:63:9d:b9:6a:97:da:1d:79:31:a4:84:fe: 30:ab:eb:b7:be:08:f0:b8:88:2b:b0:bf:58:91:62: dd:ac:ce:fb:03:7f:92:f7:5a:e4:e1:e9:90:e6:a2: 8d:20:9e:af:b8:04:55:5f:84:65:1f:33:86:8e:03: f0:99:91:b0:8e:71:13:f0:1a:e3:d8:eb:81:6e:06: ef:80:b1:16:6a:2c:25:6b:0e:91:1a:bf:fc:4d:bb: ff:82:8e:e0:49:93:06:a1:0c:e8:25:a6:ee:d7:98: 7f:72:22:75:95:d8:d6:6d:80:e1:69:30:e8:85:d7: 78:1b:d7:ba:2d:eb:e6:f1:8c:1c:e2:b3:85:d2:e6: ab:35:f3:b6:5c:39:0e:ee:17:78:cb:78:4d:95:81: 84:79:c2:39:fd:16:be:a8:30:4d:f3:1c:30:f3:7f: d2:93:b4:c0:88:3a:a5:31:1b:3a:a2:b5:ce:85:6f: 32:14:91:60:d2:20:db:36:76:cf:ad:4b:7a:31:e2: e2:43:86:e4:7c:94:3b:b9:8f:db:36:ce:5c:88:60: 89:67:db:d9:f4:a9:e8:b3:1a:b5:de:e3:02:49:47: c9:56:c6:f9:68:92:13:d7:b0:c4:13:c9:cb:4c:06: 6e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:74:E9:4D:FF:79:49:D6:D4:94:0C:62:34:A4:9D:6D:EB:EB:DE X509v3 Authority Key Identifier: keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e8:9a:5a:13:87:66:5c:1d:bd:fd:ba:eb:98:70:78:0f:2f: b0:3f:32:12:68:e1:ee:5e:f1:97:05:22:e8:a9:95:5e:4f:0a: dc:1e:a2:64:18:b7:70:bd:8d:5b:4c:da:01:31:6f:4f:78:a5: 94:dc:3d:73:6b:6f:7c:9d:c5:53:12:99:40:60:ac:3e:f3:9f: 65:dd:60:7a:72:ae:da:89:82:7d:6a:ae:79:57:e9:c2:d2:db: 9e:f5:98:da:b0:29:e0:b5:2c:6d:38:f7:e1:25:54:2c:0a:3c: ce:e0:b9:f8:5a:90:57:97:9f:3b:f8:5a:9c:57:1c:6a:fc:37: 06:95:16:f2:53:57:08:bf:87:c8:a4:83:9f:ff:ae:c0:fe:58: 13:b7:8f:96:f4:0d:34:ff:39:1f:50:cd:81:b8:19:dc:1e:ba: 0e:de:90:4e:88:84:a1:37:cc:14:8d:47:75:ea:6d:9e:18:b8: 90:a4:73:5c:a8:1c:dd:48:d1:ac:54:a9:b5:89:82:7a:e3:8e: 77:e2:c9:f0:cb:f2:a8:2b:0a:94:9c:f6:70:c2:a4:e6:31:a1: 59:98:93:83:66:ef:be:8b:fe:c0:a1:a1:e4:68:1d:b8:86:29: a7:4f:09:2f:68:8c:b6:56:29:cc:63:2c:3b:eb:e1:bd:b7:3f: 98:ae:be:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYT6DSlAq9q0YdHCgq8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5 OTNjMDQwHhcNMjUxMjA2MTIwMTA3WhcNMjUxMjA3MTIwMTA3WjAzMTEwLwYDVQQD Eyg4ZDVlNzRlOTRkZmY3OTQ5ZDZkNDk0MGM2MjM0YTQ5ZDZkZWJlYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0tGxqrpeG4MO4yrcWvvAU9jnblq l9odeTGkhP4wq+u3vgjwuIgrsL9YkWLdrM77A3+S91rk4emQ5qKNIJ6vuARVX4Rl HzOGjgPwmZGwjnET8Brj2OuBbgbvgLEWaiwlaw6RGr/8Tbv/go7gSZMGoQzoJabu 15h/ciJ1ldjWbYDhaTDohdd4G9e6Levm8Ywc4rOF0uarNfO2XDkO7hd4y3hNlYGE ecI5/Ra+qDBN8xww83/Sk7TAiDqlMRs6orXOhW8yFJFg0iDbNnbPrUt6MeLiQ4bk fJQ7uY/bNs5ciGCJZ9vZ9Knosxq13uMCSUfJVsb5aJIT17DEE8nLTAZuAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1edOlN/3lJ1tSUDGI0pJ1t6+veMB8GA1UdIwQY MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt YzY5ODcxZjVkMzA1LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1 LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+iaWhOH Zlwdvf2665hweA8vsD8yEmjh7l7xlwUi6KmVXk8K3B6iZBi3cL2NW0zaATFvT3il lNw9c2tvfJ3FUxKZQGCsPvOfZd1genKu2omCfWqueVfpwtLbnvWY2rAp4LUsbTj3 4SVULAo8zuC5+FqQV5efO/hanFccavw3BpUW8lNXCL+HyKSDn/+uwP5YE7ePlvQN NP85H1DNgbgZ3B66Dt6QToiEoTfMFI1Hdeptnhi4kKRzXKgc3UjRrFSptYmCeuOO d+LJ8MvyqCsKlJz2cMKk5jGhWZiTg2bvvov+wKGh5GgduIYpp08JL2iMtlYpzGMs O+vhvbc/mK6+tA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:34 2025 by rpki-client