This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json) Hash identifier: OY9S9piVoN8A/7wOVBgKNPMlZbyggFxnJI8jEa6VJjo= Subject key identifier: FC:18:E2:5B:DA:C3:53:4B:51:83:45:47:9B:B5:95:73:0D:F3:93:62 Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa Certificate serial: 019AF65412CAED6782909E823D6CB2F74E01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft Manifest number: 0928 Signing time: Sun 07 Dec 2025 01:01:36 +0000 Manifest this update: Sun 07 Dec 2025 01:01:36 +0000 Manifest next update: Mon 08 Dec 2025 01:01:36 +0000 Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: naQ40C8zwV/zC8U7sovHdAfS1TvlPvWuCF0qjTcehZA=) 2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:54:12:ca:ed:67:82:90:9e:82:3d:6c:b2:f7:4e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa Validity Not Before: Dec 7 01:01:36 2025 GMT Not After : Dec 8 01:01:36 2025 GMT Subject: CN=fc18e25bdac3534b518345479bb595730df39362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:ba:54:db:85:63:c4:a9:f0:6d:70:fb:4c: 74:8d:62:63:a1:bb:8b:04:0e:07:ee:e4:7e:46:4f: 8e:05:38:6b:b6:db:79:d0:e3:ce:04:cb:90:b1:01: 5b:8e:24:05:0b:40:15:a6:ab:af:48:1f:a3:11:0b: 38:49:89:b5:ae:94:89:61:f8:4c:f8:a9:7c:1b:b2: ee:c2:42:81:2e:73:6a:3a:d0:c3:88:84:08:28:50: 03:2c:c2:3e:89:48:22:6d:95:6f:87:53:33:d9:45: eb:b3:47:22:88:1a:95:7a:d4:40:60:dc:62:e4:dc: 56:67:8d:a0:88:47:ff:bb:af:98:33:5a:8a:5c:17: 34:7e:4c:fe:6b:d8:01:26:fb:37:ae:5b:d9:91:c2: b7:50:2b:78:b9:3c:f8:cb:30:0a:08:e3:74:58:ce: f8:fb:b3:7d:13:53:25:d9:f8:86:78:1b:2b:de:69: 31:ca:a5:a0:5e:ce:2c:78:bd:15:fd:a0:df:d3:e3: 62:39:1b:d7:bd:d2:5a:35:a7:06:48:bf:ae:13:a3: b2:c9:bc:76:69:c3:d2:59:37:fc:ac:a6:af:cd:34: 34:f0:fc:53:82:04:41:58:b8:a4:3e:fe:b9:11:68: ef:ea:ca:3f:c6:89:d2:20:85:90:d1:b8:48:9d:66: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:18:E2:5B:DA:C3:53:4B:51:83:45:47:9B:B5:95:73:0D:F3:93:62 X509v3 Authority Key Identifier: keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7a:05:59:e0:8e:97:bd:d3:49:1b:96:0a:6c:5c:3f:b2:c0: b3:cf:57:7b:5c:5e:6b:d5:93:ee:84:03:d2:8d:a9:2a:a8:62: 32:d9:29:d7:c2:ad:56:d7:dc:69:7c:49:fe:61:78:5b:1d:97: 6d:c9:77:58:54:c7:47:9c:fa:56:9b:53:51:bb:ed:4a:36:4e: bf:02:b8:25:e3:d9:f2:b0:fb:04:ff:0a:13:b0:61:6e:41:b4: 40:96:a2:9c:d0:fc:82:dd:67:04:3a:61:3e:9a:76:52:94:59: 9e:b4:79:44:7e:a2:a2:47:b1:81:dd:1c:87:4d:94:ad:41:a2: c6:ab:99:30:ee:9b:41:f7:6f:ad:35:c6:a1:38:85:5f:d2:17: 2e:a5:f6:c7:df:22:e5:b3:1b:64:1d:e9:cd:2c:08:b5:21:58: 85:01:41:e8:ad:f7:a4:e5:f1:3a:4a:e1:c8:fe:64:46:e5:1e: 62:46:3c:34:7f:c9:fa:ef:c9:e1:c2:4d:c3:e9:14:a2:60:00: 7f:f8:2a:58:a4:1d:54:47:cf:cd:a4:14:1b:8c:95:d0:ca:c7: 2f:cd:54:3e:11:d0:4d:d4:21:80:df:49:5e:c5:6b:66:5a:6f: 17:66:44:8e:50:77:2c:da:59:e5:d4:6c:a3:d1:07:c3:2d:90: b8:3e:24:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2VBLK7WeCkJ6CPWyy904BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGRmMGM4ZTVkMWIyMzUzOGJlYjVlY2NjM2FiMTI4NjVk ZjdlYWEwHhcNMjUxMjA3MDEwMTM2WhcNMjUxMjA4MDEwMTM2WjAzMTEwLwYDVQQD EyhmYzE4ZTI1YmRhYzM1MzRiNTE4MzQ1NDc5YmI1OTU3MzBkZjM5MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBG6VNuFY8Sp8G1w+0x0jWJjobuL BA4H7uR+Rk+OBThrttt50OPOBMuQsQFbjiQFC0AVpquvSB+jEQs4SYm1rpSJYfhM +Kl8G7LuwkKBLnNqOtDDiIQIKFADLMI+iUgibZVvh1Mz2UXrs0ciiBqVetRAYNxi 5NxWZ42giEf/u6+YM1qKXBc0fkz+a9gBJvs3rlvZkcK3UCt4uTz4yzAKCON0WM74 +7N9E1Ml2fiGeBsr3mkxyqWgXs4seL0V/aDf0+NiORvXvdJaNacGSL+uE6Oyybx2 acPSWTf8rKavzTQ08PxTggRBWLikPv65EWjv6so/xonSIIWQ0bhInWY0aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwY4lvaw1NLUYNFR5u1lXMN85NiMB8GA1UdIwQY MBaAFF8N8Mjl0bI1OL617Mw6sShl336qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUt YmM1MTNhOThiOWJlLzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUtYmM1MTNhOThiOWJl LzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHoFWeCO l73TSRuWCmxcP7LAs89Xe1xea9WT7oQD0o2pKqhiMtkp18KtVtfcaXxJ/mF4Wx2X bcl3WFTHR5z6VptTUbvtSjZOvwK4JePZ8rD7BP8KE7BhbkG0QJainND8gt1nBDph Ppp2UpRZnrR5RH6iokexgd0ch02UrUGixquZMO6bQfdvrTXGoTiFX9IXLqX2x98i 5bMbZB3pzSwItSFYhQFB6K33pOXxOkrhyP5kRuUeYkY8NH/J+u/J4cJNw+kUomAA f/gqWKQdVEfPzaQUG4yV0MrHL81UPhHQTdQhgN9JXsVrZlpvF2ZEjlB3LNpZ5dRs o9EHwy2QuD4kzA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:38 2025 by rpki-client