This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft File: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json) Hash identifier: YbnJPQYGVzdgONoyt7qtX+6K4Pyr2xsnHpa0CxzNMfo= Subject key identifier: 1F:55:2F:8C:98:06:39:F6:32:97:A7:78:45:66:2C:D3:2E:6F:0A:6C Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414 Certificate serial: 019AF5AE81F926F1A1784427B8DFE1C8E720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft Manifest number: 031E Signing time: Sat 06 Dec 2025 22:00:45 +0000 Manifest this update: Sat 06 Dec 2025 22:00:45 +0000 Manifest next update: Sun 07 Dec 2025 22:00:45 +0000 Files and hashes: 1: DErHItNq7nABZO58YjUcqRebihE.roa (hash: ubfaZz+JuneQdJw4LkjXBWrUt9hJpsUiv6JFIG/nn8s=) 2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: IG0GveV/V3UWSEP/aBnaNZYiTZW0f/KKZDT1lmJsRs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:81:f9:26:f1:a1:78:44:27:b8:df:e1:c8:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414 Validity Not Before: Dec 6 22:00:45 2025 GMT Not After : Dec 7 22:00:45 2025 GMT Subject: CN=1f552f8c980639f63297a77845662cd32e6f0a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:16:70:ad:a9:6d:ca:c4:6c:0d:c7:d3:8e: 36:8e:b4:9d:71:fc:3a:2f:59:2a:5c:47:90:6a:40: ad:45:b2:f1:b5:80:ad:7e:8c:b7:aa:af:17:cc:19: 64:f7:11:c1:2c:c8:77:63:40:97:d7:38:76:67:02: 33:dd:bc:79:f1:8e:35:d5:4e:db:9f:76:20:ab:aa: 36:f3:1f:45:6b:e0:2d:f8:44:d7:d3:0f:31:54:b9: a7:82:d5:28:66:60:c0:cd:d8:59:7c:36:38:83:1f: 11:2f:34:94:3d:93:8a:3b:bc:82:8f:9a:4f:bf:60: 90:77:2f:dc:a9:09:37:1b:67:45:87:ab:e6:a3:e5: 4d:ba:fc:df:eb:10:0e:70:77:aa:d7:00:15:a3:41: 29:4b:c0:e9:ca:86:09:e1:c8:28:20:19:67:9b:76: 7f:5e:04:54:b7:a1:8a:4b:6f:ad:23:dc:1c:4d:2d: 8d:91:fc:1a:e2:7b:73:60:c2:53:92:72:79:f8:14: 1b:eb:95:81:62:9c:e0:fc:34:75:96:3d:02:6d:17: af:35:b1:e3:5c:60:10:16:3e:b3:8f:d5:53:d3:98: 2b:82:17:51:88:e6:e4:12:35:7a:e4:67:c0:ab:b8: d4:66:16:e9:19:87:e9:87:88:1d:40:f7:cb:88:ff: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:2F:8C:98:06:39:F6:32:97:A7:78:45:66:2C:D3:2E:6F:0A:6C X509v3 Authority Key Identifier: keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2a:ab:b0:5f:cc:b7:ea:88:f5:3a:d4:c0:04:c9:f3:75:21: e3:d6:63:15:1c:70:ee:d2:ae:28:db:89:63:c0:2a:bc:0e:91: 14:9a:34:6a:7d:df:37:fe:c1:c1:c7:9e:f0:39:e8:b5:6f:36: e3:f9:e1:aa:5b:53:79:6e:ee:f5:70:a5:0c:38:80:79:f1:d6: ca:8c:8a:04:74:7a:d7:32:31:ff:56:db:bf:3e:98:2c:e8:c4: a8:b7:93:2a:b0:85:95:27:f0:5c:59:cd:4b:6a:eb:4b:25:15: b3:b8:13:c3:2c:37:71:91:ab:07:f8:1b:83:74:e9:cd:24:8d: 09:17:31:c1:42:a6:97:af:f8:43:52:b9:48:57:4b:15:df:43: 23:d4:98:31:49:7b:9c:d2:8a:dc:d0:1d:5f:de:ea:87:e8:e6: b2:60:6a:47:9f:10:b4:29:f9:4a:af:ce:d4:4d:41:03:76:ed: 3e:12:71:40:33:60:d9:a4:02:9b:3e:56:2d:bb:79:de:88:34: a6:ec:b1:c3:d1:c1:66:87:6c:4a:1b:70:96:d8:d4:51:a8:66: 0f:12:e8:a2:c4:f7:88:4a:c0:d3:d3:c9:db:16:ad:c2:ca:1b: ae:26:0a:60:e6:1c:ad:88:cb:db:39:48:17:36:54:14:ae:6b: 5b:71:20:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1roH5JvGheEQnuN/hyOcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YWNjOWUyOTk5NjQ3ZDgwMWQ0NjA2ZWM5NGQ2YjcyMWY3 YTY0MTQwHhcNMjUxMjA2MjIwMDQ1WhcNMjUxMjA3MjIwMDQ1WjAzMTEwLwYDVQQD EygxZjU1MmY4Yzk4MDYzOWY2MzI5N2E3Nzg0NTY2MmNkMzJlNmYwYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8sWcK2pbcrEbA3H0442jrSdcfw6 L1kqXEeQakCtRbLxtYCtfoy3qq8XzBlk9xHBLMh3Y0CX1zh2ZwIz3bx58Y411U7b n3Ygq6o28x9Fa+At+ETX0w8xVLmngtUoZmDAzdhZfDY4gx8RLzSUPZOKO7yCj5pP v2CQdy/cqQk3G2dFh6vmo+VNuvzf6xAOcHeq1wAVo0EpS8DpyoYJ4cgoIBlnm3Z/ XgRUt6GKS2+tI9wcTS2Nkfwa4ntzYMJTknJ5+BQb65WBYpzg/DR1lj0CbRevNbHj XGAQFj6zj9VT05grghdRiObkEjV65GfAq7jUZhbpGYfph4gdQPfLiP90mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9VL4yYBjn2MpeneEVmLNMubwpsMB8GA1UdIwQY MBaAFMSsyeKZlkfYAdRgbslNa3IfemQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEt YTA0YTJjOWFmZGVlLzEveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEtYTA0YTJjOWFmZGVl LzEveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSqrsF/M t+qI9TrUwATJ83Uh49ZjFRxw7tKuKNuJY8AqvA6RFJo0an3fN/7Bwcee8DnotW82 4/nhqltTeW7u9XClDDiAefHWyoyKBHR61zIx/1bbvz6YLOjEqLeTKrCFlSfwXFnN S2rrSyUVs7gTwyw3cZGrB/gbg3TpzSSNCRcxwUKml6/4Q1K5SFdLFd9DI9SYMUl7 nNKK3NAdX97qh+jmsmBqR58QtCn5Sq/O1E1BA3btPhJxQDNg2aQCmz5WLbt53og0 puyxw9HBZodsShtwltjUUahmDxLoosT3iErA09PJ2xatwsobriYKYOYcrYjL2zlI FzZUFK5rW3Egyw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:30 2025 by rpki-client