This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json) Hash identifier: IK7MYzKlbPqCimYfq+7Vt4taVceyr1ICOrr04UmQfYQ= Subject key identifier: B3:CB:A8:FA:D9:61:E9:BD:01:D4:01:4D:B0:85:F2:29:5C:4F:F1:F7 Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Certificate serial: 019AF276F71B75875237FD434E34A2413082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft Manifest number: 0D61 Signing time: Sat 06 Dec 2025 07:01:14 +0000 Manifest this update: Sat 06 Dec 2025 07:01:14 +0000 Manifest next update: Sun 07 Dec 2025 07:01:14 +0000 Files and hashes: 1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=) 2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: 7CTgbQ+NC5RPX5QAYzGRm+1x2zIO4U4bNs9KNiJoCkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f7:1b:75:87:52:37:fd:43:4e:34:a2:41:30:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Validity Not Before: Dec 6 07:01:14 2025 GMT Not After : Dec 7 07:01:14 2025 GMT Subject: CN=b3cba8fad961e9bd01d4014db085f2295c4ff1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:ee:97:ef:bc:20:50:0b:6e:70:82:c4:4f: aa:56:16:d0:ef:40:1d:a5:26:94:a7:2e:a7:dd:b3: c1:bf:c2:e9:9b:c7:e9:0f:be:de:8a:9e:cc:79:4d: 47:e9:47:13:2c:c0:b9:41:a8:1d:3b:b6:92:b6:0f: f4:7a:20:28:87:ea:9a:d3:e6:bc:e3:10:f2:64:16: 11:4f:a6:07:d3:2a:e8:4b:b8:d8:85:a3:12:b4:92: a4:ff:a6:b5:05:23:93:93:cb:76:67:6f:69:d6:fb: 98:e9:b5:e6:3a:59:95:11:e5:b7:ad:2e:19:56:1e: fe:d6:3a:e9:b7:7f:20:cf:af:fe:c6:14:da:e4:60: a3:a2:e1:9b:7c:a5:2d:4b:98:66:46:07:14:c6:ba: 15:59:34:aa:86:9d:a1:9c:e9:0a:6b:b2:53:c6:23: 3a:57:f0:09:68:23:dd:94:0d:8a:e3:cc:e2:2e:7c: 92:3f:20:5e:d1:43:eb:cb:5e:6a:1a:d2:8b:cf:f0: 4f:39:b5:40:50:d5:b0:81:ce:da:b3:51:53:da:a9: fa:a7:97:dc:82:a1:21:59:11:0d:89:17:3c:ef:33: 85:7a:b1:dc:5b:26:18:0d:f0:12:82:f3:0d:bb:1e: 08:76:22:40:84:07:7a:74:f1:a6:9a:3f:cb:1c:ae: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CB:A8:FA:D9:61:E9:BD:01:D4:01:4D:B0:85:F2:29:5C:4F:F1:F7 X509v3 Authority Key Identifier: keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:97:e7:34:f8:d9:3e:25:0b:dc:e5:ef:1c:63:0f:09:a0:4e: db:18:e3:24:22:51:8d:2d:8f:f7:70:d5:02:34:e0:3a:81:56: e5:56:40:2b:8b:ef:d9:8d:6e:82:cc:79:81:9b:5d:20:31:bc: 89:f8:3e:66:13:31:74:39:fd:96:3c:aa:27:1e:81:f3:20:c3: d5:59:bd:41:94:c0:be:d5:58:57:90:93:7c:2f:d2:19:4d:d4: f8:ce:88:64:c1:82:18:fe:7a:74:4d:45:1e:0e:51:c7:92:d8: 5e:62:03:b0:05:9e:0a:16:bf:a2:76:59:22:dc:44:4b:b6:c9: 00:9e:34:01:e7:9f:1e:b6:93:59:67:dd:6a:bd:e3:07:0f:ed: 24:0b:51:27:19:a2:40:df:d1:66:8b:6f:82:04:df:79:43:d5: 2f:99:96:c4:b5:25:f6:78:ed:e0:46:83:61:31:a6:f9:56:54: eb:0e:be:cf:6f:4b:5a:72:38:e0:f9:43:3c:9f:b6:4b:21:cc: 73:23:c7:4b:df:af:18:f1:a9:24:b4:be:c8:4f:d4:14:b8:d6: 04:c0:d9:57:ec:69:b1:58:52:60:93:82:70:41:27:c7:f9:1d: dd:c1:9f:b9:cc:58:30:ea:89:9f:32:00:ad:11:34:2f:74:eb: 1c:f3:a7:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvcbdYdSN/1DTjSiQTCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2Y0Mzg4YWFkZjBhZTRmZjVlZTdiZDM3MjYzYzlmMWU4 NDY3YzcwHhcNMjUxMjA2MDcwMTE0WhcNMjUxMjA3MDcwMTE0WjAzMTEwLwYDVQQD EyhiM2NiYThmYWQ5NjFlOWJkMDFkNDAxNGRiMDg1ZjIyOTVjNGZmMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPul++8IFALbnCCxE+qVhbQ70Ad pSaUpy6n3bPBv8Lpm8fpD77eip7MeU1H6UcTLMC5QagdO7aStg/0eiAoh+qa0+a8 4xDyZBYRT6YH0yroS7jYhaMStJKk/6a1BSOTk8t2Z29p1vuY6bXmOlmVEeW3rS4Z Vh7+1jrpt38gz6/+xhTa5GCjouGbfKUtS5hmRgcUxroVWTSqhp2hnOkKa7JTxiM6 V/AJaCPdlA2K48ziLnySPyBe0UPry15qGtKLz/BPObVAUNWwgc7as1FT2qn6p5fc gqEhWRENiRc87zOFerHcWyYYDfASgvMNux4IdiJAhAd6dPGmmj/LHK62VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPLqPrZYem9AdQBTbCF8ilcT/H3MB8GA1UdIwQY MBaAFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUt ZGRhMzUwYjExZjAyLzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUtZGRhMzUwYjExZjAy LzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpfnNPjZ PiUL3OXvHGMPCaBO2xjjJCJRjS2P93DVAjTgOoFW5VZAK4vv2Y1ugsx5gZtdIDG8 ifg+ZhMxdDn9ljyqJx6B8yDD1Vm9QZTAvtVYV5CTfC/SGU3U+M6IZMGCGP56dE1F Hg5Rx5LYXmIDsAWeCha/onZZItxES7bJAJ40AeefHraTWWfdar3jBw/tJAtRJxmi QN/RZotvggTfeUPVL5mWxLUl9njt4EaDYTGm+VZU6w6+z29LWnI44PlDPJ+2SyHM cyPHS9+vGPGpJLS+yE/UFLjWBMDZV+xpsVhSYJOCcEEnx/kd3cGfucxYMOqJnzIA rRE0L3TrHPOnRg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:06 2025 by rpki-client