This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft File: xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json) Hash identifier: UiUPedP5u4W5AdeScNOGtAz1zt/I68E5f2PPrOObQ8w= Subject key identifier: CD:4C:E7:28:0F:4E:90:F1:7F:34:07:F9:D0:37:42:42:3C:43:03:59 Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35 Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035 Certificate serial: 019AF208D45616ABFA3C8D58633899944CEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft Manifest number: 072C Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: CL-hnZLAW32dB0McMUvKXumHbjc.roa (hash: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=) 2: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: 0So9jbkOwSe7K3LPGxjKMxvUjixYHdfLvXcgkaDeN8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d4:56:16:ab:fa:3c:8d:58:63:38:99:94:4c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=cd4ce7280f4e90f17f3407f9d03742423c430359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:db:75:e4:00:75:d4:b5:df:35:50:96:64:50: b6:41:af:08:fd:bb:2d:ce:2a:56:d2:5d:92:cf:78: f3:cb:a4:75:45:b3:57:9a:36:17:9a:c3:83:ab:93: d7:75:f6:0c:28:12:16:a0:22:9c:03:f0:58:94:b5: 01:5f:22:f7:6a:e0:48:96:b3:92:dd:fc:c7:8c:a6: 8e:8e:b7:bd:dc:89:dd:7e:74:12:d6:dc:a1:70:3b: 16:56:2b:e8:4c:62:b5:65:f7:9c:d1:78:e2:46:37: 28:a9:02:c2:e2:18:6b:5d:bf:8b:02:ef:85:03:34: 9a:35:96:f4:2a:a5:7d:a1:b3:be:c5:cb:6d:33:4c: 7d:d6:2c:a8:ed:d4:d3:8e:0b:28:8f:85:ff:59:35: 4e:6a:b1:59:9e:dd:7b:21:cd:64:45:b8:71:06:0d: 50:53:ef:b5:7d:0d:8b:35:d4:c4:24:7c:32:86:90: e4:d9:80:21:28:80:4e:78:86:5c:c4:bf:d2:01:5e: 17:af:92:99:31:8f:6d:64:82:37:23:b8:ce:ba:01: 0d:93:e5:ae:d2:c8:23:82:f4:bc:de:f1:40:c0:f0: 0f:ed:19:36:de:c5:8b:a1:97:b9:2b:ca:f9:f6:3e: 24:fc:1c:38:1a:b2:76:eb:11:6b:16:1a:a4:83:19: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4C:E7:28:0F:4E:90:F1:7F:34:07:F9:D0:37:42:42:3C:43:03:59 X509v3 Authority Key Identifier: keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7c:13:59:4b:25:38:db:da:dc:3f:80:af:8f:d7:b9:88:56: c8:5b:20:a8:4e:d0:3e:4a:3f:1a:7f:65:bb:cb:58:20:4a:01: 9a:07:8d:12:4b:59:32:44:52:b0:be:93:b8:01:df:db:88:ee: 90:2d:ff:b5:0d:65:10:13:01:c5:1a:96:6d:00:4e:9b:b4:8a: eb:5e:8f:31:b3:39:ed:90:bf:88:b4:73:4d:e0:65:b8:34:3f: 77:21:c3:e5:54:1c:68:40:77:c4:5c:4f:c8:f1:4d:49:18:9b: 22:a3:1b:1e:3e:73:86:52:58:74:be:c9:91:76:de:95:82:5a: 00:8d:b7:91:54:e8:c4:d0:9f:b3:a9:8f:26:db:99:45:3c:0e: 1b:19:06:53:f0:30:4f:96:58:32:35:8e:b6:3a:ad:b3:60:c5: f6:ec:71:8b:e3:a7:5d:b0:d0:96:3e:30:1f:df:a7:47:70:db: 09:5b:2c:bb:17:27:ea:21:b9:a5:e5:20:d6:3c:96:0d:0b:2c: 5a:41:88:54:91:28:dc:da:81:99:0c:23:5d:af:3b:ff:48:58: 03:80:90:14:53:40:06:2c:ed:29:24:d9:5a:f5:66:91:89:dd: b8:67:18:2a:aa:58:12:76:39:54:58:36:1a:a0:35:bc:0b:2c: 1f:54:53:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNRWFqv6PI1YYziZlEzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzY2NTNlODdiYjJlZjlhZGJiMDYxOTYwZTIwNTAwYTU1 NGYwMzUwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EyhjZDRjZTcyODBmNGU5MGYxN2YzNDA3ZjlkMDM3NDI0MjNjNDMwMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tt15AB11LXfNVCWZFC2Qa8I/bst zipW0l2Sz3jzy6R1RbNXmjYXmsODq5PXdfYMKBIWoCKcA/BYlLUBXyL3auBIlrOS 3fzHjKaOjre93IndfnQS1tyhcDsWVivoTGK1Zfec0XjiRjcoqQLC4hhrXb+LAu+F AzSaNZb0KqV9obO+xcttM0x91iyo7dTTjgsoj4X/WTVOarFZnt17Ic1kRbhxBg1Q U++1fQ2LNdTEJHwyhpDk2YAhKIBOeIZcxL/SAV4Xr5KZMY9tZII3I7jOugENk+Wu 0sgjgvS83vFAwPAP7Rk23sWLoZe5K8r59j4k/Bw4GrJ26xFrFhqkgxmigwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1M5ygPTpDxfzQH+dA3QkI8QwNZMB8GA1UdIwQY MBaAFMbGZT6Huy75rbsGGWDiBQClVPA1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85NjFhNzItNzBmZC00NTBmLTlmZTkt M2JiYTM2MjgzMjRiLzEveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85NjFhNzItNzBmZC00NTBmLTlmZTktM2JiYTM2MjgzMjRi LzEveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnwTWUsl ONva3D+Ar4/XuYhWyFsgqE7QPko/Gn9lu8tYIEoBmgeNEktZMkRSsL6TuAHf24ju kC3/tQ1lEBMBxRqWbQBOm7SK616PMbM57ZC/iLRzTeBluDQ/dyHD5VQcaEB3xFxP yPFNSRibIqMbHj5zhlJYdL7JkXbelYJaAI23kVToxNCfs6mPJtuZRTwOGxkGU/Aw T5ZYMjWOtjqts2DF9uxxi+OnXbDQlj4wH9+nR3DbCVssuxcn6iG5peUg1jyWDQss WkGIVJEo3NqBmQwjXa87/0hYA4CQFFNABiztKSTZWvVmkYnduGcYKqpYEnY5VFg2 GqA1vAssH1RTgA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:20 2025 by rpki-client