This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft File: xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json) Hash identifier: 2hKlkaX+Q+sxPwCuMlBgHg41jkRhLCLXvow5BRPC9Mw= Subject key identifier: 75:1C:46:06:A2:8B:FC:27:21:23:32:02:C9:4B:D5:19:88:9B:97:EE Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85 Certificate issuer: /CN=c5e3f7f40c100dffdb18121c726199e85804c585 Certificate serial: 019AF208F44AECE1B057F3B0E5E9A18DCFE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=) 2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: CK741qDdkBJfPWsfOCkTUggSnK9+wU2oxMXV0e+8MAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f4:4a:ec:e1:b0:57:f3:b0:e5:e9:a1:8d:cf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=751c4606a28bfc2721233202c94bd519889b97ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:88:5a:8b:bd:9f:27:bd:22:8c:3b:18:68: 87:05:73:59:4a:ef:3c:50:2a:31:0c:a0:a2:36:16: 6b:f7:e3:da:b8:69:c8:f4:38:a7:ea:2b:47:81:07: 39:4f:9c:34:43:fc:58:9c:26:2e:f1:e1:64:38:de: 55:8b:41:b6:cf:7f:81:8a:19:80:0b:02:0c:8a:73: a3:c4:2d:9e:6b:80:67:c4:d5:2a:22:a3:5d:07:01: 02:2e:a1:ce:20:e8:60:3e:3c:99:92:c8:cd:84:18: 3d:3e:1f:ca:72:c4:37:4c:41:ed:ac:8a:75:8c:d7: 05:a8:6c:8f:4f:20:2b:2d:13:80:f7:10:59:ca:90: ab:09:14:9a:7d:96:68:5c:5b:7c:33:d1:62:3c:7a: 69:16:ad:6e:e3:0f:30:3f:90:31:15:c4:22:0c:ca: 8d:e5:01:d2:f0:51:a9:22:04:7a:ce:34:4c:89:e6: ca:6c:8a:e5:e3:7c:1a:ab:db:9e:b0:62:78:99:fd: 0c:b7:13:99:4c:8d:20:ff:10:9c:70:1d:87:63:76: c7:08:b8:c4:6a:ef:cb:bb:f3:2b:16:d9:0c:a5:58: ed:8c:84:47:ea:b5:fb:d3:72:4e:38:df:1d:72:4d: 0a:b3:d5:1c:7a:17:46:9c:1f:d8:da:76:3b:06:fd: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1C:46:06:A2:8B:FC:27:21:23:32:02:C9:4B:D5:19:88:9B:97:EE X509v3 Authority Key Identifier: keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:42:a9:02:ae:b4:d4:26:44:a7:8f:2a:ea:ea:e5:64:2e:c0: 7c:dc:7e:26:be:7f:35:e0:f9:4a:2b:e7:85:f3:2f:50:47:b6: 46:d1:60:b6:e2:56:41:88:69:b5:06:36:31:03:65:f2:5b:ba: 76:55:32:c9:76:f3:b4:7a:bb:0a:ba:d9:ba:9c:ea:25:6f:d4: c7:cf:ae:fb:2f:e0:cb:bf:b1:06:fb:aa:c7:44:61:5d:de:0f: c4:2a:e0:f0:0f:71:45:6d:df:b8:3d:84:db:18:35:d0:40:2d: 42:34:03:9e:b3:a3:ba:1d:e5:5f:73:14:49:2c:13:53:81:19: e8:24:5a:c2:9c:e1:72:e5:0b:63:d5:f6:66:d2:50:70:13:ac: fe:23:e8:3b:77:f0:7b:0c:69:2c:b5:d6:08:8c:a5:74:cc:4b: 52:cd:f0:46:6f:21:1b:28:4d:a3:68:1f:fa:48:9a:37:4e:c8: 5a:87:f7:54:49:50:0c:61:16:33:36:6b:ff:f7:d3:21:cc:28: 26:04:a6:67:d1:da:a0:91:38:85:f1:d7:9e:79:62:f3:41:ec: 93:6c:36:9a:67:7f:00:8b:6a:86:49:9f:19:81:10:e4:ac:49: c9:3b:5e:4b:f0:4e:4e:46:8b:6b:d7:b8:a1:31:b4:81:e1:83: 2d:c5:5f:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPRK7OGwV/Ow5emhjc/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTNmN2Y0MGMxMDBkZmZkYjE4MTIxYzcyNjE5OWU4NTgw NGM1ODUwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD Eyg3NTFjNDYwNmEyOGJmYzI3MjEyMzMyMDJjOTRiZDUxOTg4OWI5N2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV+IWou9nye9Iow7GGiHBXNZSu88 UCoxDKCiNhZr9+PauGnI9Din6itHgQc5T5w0Q/xYnCYu8eFkON5Vi0G2z3+BihmA CwIMinOjxC2ea4BnxNUqIqNdBwECLqHOIOhgPjyZksjNhBg9Ph/KcsQ3TEHtrIp1 jNcFqGyPTyArLROA9xBZypCrCRSafZZoXFt8M9FiPHppFq1u4w8wP5AxFcQiDMqN 5QHS8FGpIgR6zjRMiebKbIrl43waq9uesGJ4mf0MtxOZTI0g/xCccB2HY3bHCLjE au/Lu/MrFtkMpVjtjIRH6rX703JOON8dck0Ks9UcehdGnB/Y2nY7Bv3xvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUcRgaii/wnISMyAslL1RmIm5fuMB8GA1UdIwQY MBaAFMXj9/QMEA3/2xgSHHJhmehYBMWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYWY2ZWQtYmFmNC00MWJmLTlmMjIt N2Q5NzJlMWQyZTYxLzEveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYWY2ZWQtYmFmNC00MWJmLTlmMjItN2Q5NzJlMWQyZTYx LzEveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUKpAq60 1CZEp48q6urlZC7AfNx+Jr5/NeD5SivnhfMvUEe2RtFgtuJWQYhptQY2MQNl8lu6 dlUyyXbztHq7CrrZupzqJW/Ux8+u+y/gy7+xBvuqx0RhXd4PxCrg8A9xRW3fuD2E 2xg10EAtQjQDnrOjuh3lX3MUSSwTU4EZ6CRawpzhcuULY9X2ZtJQcBOs/iPoO3fw ewxpLLXWCIyldMxLUs3wRm8hGyhNo2gf+kiaN07IWof3VElQDGEWMzZr//fTIcwo JgSmZ9HaoJE4hfHXnnli80Hsk2w2mmd/AItqhkmfGYEQ5KxJyTteS/BOTkaLa9e4 oTG0geGDLcVfeg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:18 2025 by rpki-client