This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json) Hash identifier: qy7F+CyPDp51tlD1ZOA5TLrqDuEx2fKPEQfbWhtPGhg= Subject key identifier: 9A:73:9F:95:5B:B3:21:94:1D:70:F3:DE:2D:1E:26:70:D6:0E:1D:00 Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb Certificate serial: 019AF50A0F28EB135B9960BEC4AF48FB3D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:01:08 +0000 Manifest this update: Sat 06 Dec 2025 19:01:08 +0000 Manifest next update: Sun 07 Dec 2025 19:01:08 +0000 Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=) 2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: YR+A2JYwD4DxGk9CvKFhoyaBpShi1fxhq0RAXb3Ai3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:0f:28:eb:13:5b:99:60:be:c4:af:48:fb:3d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb Validity Not Before: Dec 6 19:01:08 2025 GMT Not After : Dec 7 19:01:08 2025 GMT Subject: CN=9a739f955bb321941d70f3de2d1e2670d60e1d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:c9:9a:63:a4:49:bd:56:27:37:57:d7:38: fe:ba:bd:9a:c8:ee:7e:ea:73:fd:06:27:7a:b0:10: 98:93:9d:c5:04:f4:24:a6:eb:64:fa:03:f1:8c:ec: af:b4:ae:da:e2:53:8b:bd:62:4a:da:e4:2a:6a:33: d3:88:2f:1a:15:c9:e2:76:39:db:e4:df:e8:02:f2: 66:59:ec:09:eb:a2:e2:ba:0e:ea:2c:25:96:fd:c1: ba:e2:ee:87:21:bd:6f:e7:0c:a7:69:de:c9:0e:dd: 09:1f:60:f3:11:1d:e7:25:45:72:bd:4a:a1:78:81: 64:8f:be:37:d8:46:f3:9d:66:a3:12:c7:ce:ac:99: 7f:42:34:e7:d0:e0:6c:e1:53:5e:ff:c9:80:04:90: b1:a1:9d:b2:2f:01:3d:1f:87:a4:be:80:f8:71:2a: 70:b2:4f:c1:fe:d1:44:11:62:33:16:30:33:c5:32: 53:2b:c7:bc:34:c0:90:ce:58:d5:88:b8:00:aa:c2: b5:fa:d4:22:24:a4:10:1e:f3:3f:f5:5c:51:4c:9c: 7f:a2:d8:a4:2c:f6:6b:59:37:bf:5b:b3:38:87:7c: c4:25:19:c4:3d:57:16:1f:e0:19:c3:c4:8b:27:1c: 5b:ce:8b:8e:99:9f:6d:87:82:2f:44:88:16:61:2d: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:73:9F:95:5B:B3:21:94:1D:70:F3:DE:2D:1E:26:70:D6:0E:1D:00 X509v3 Authority Key Identifier: keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e6:0e:bc:03:6b:dc:c1:cd:3e:47:60:33:02:66:4f:ee:01: 57:fa:12:c6:36:ac:c0:17:6b:b9:a4:9b:7b:6d:51:65:8d:f1: ac:05:11:0a:bd:5c:7d:87:89:eb:aa:dc:6a:99:11:24:cf:13: 7b:70:73:ed:a4:27:37:fe:fa:d0:af:24:e2:65:c2:5c:a5:1a: d1:ee:42:29:ed:e8:eb:f4:a8:a0:f1:89:4f:95:50:a7:38:95: b9:b2:67:8e:fa:48:0f:f0:d9:1d:72:63:18:d9:83:3b:ff:0b: 11:74:6a:d6:09:d7:dc:8f:3e:88:ba:bf:76:ba:52:d3:06:22: 65:3f:a8:21:7d:03:ae:7d:a7:a1:71:b8:f6:ed:de:b1:84:e6: 72:4f:c8:d0:5f:ed:a2:52:28:ed:3b:96:3f:88:44:cb:ad:92: cc:9f:52:26:5d:e4:f2:2f:e6:37:2d:64:c4:e1:78:fb:0a:8d: e6:72:a8:f5:80:77:6f:ff:5b:3a:b2:21:0e:fc:d2:fc:d5:f0: 45:a5:4a:48:da:93:59:aa:8b:81:4f:57:ae:0c:4a:72:b3:46: 26:e2:f2:c3:53:da:ac:c8:6e:f6:b6:a4:4d:50:fa:ed:41:12: 55:df:0f:56:0f:b7:b4:cf:88:a9:29:c1:27:11:60:ed:fb:6a: 59:f2:99:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cg8o6xNbmWC+xK9I+z1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZGZlYmFjOGI3NTQ1MTEyMmY5MTRmY2EwMjRlZTFmNTQx N2NhYmIwHhcNMjUxMjA2MTkwMTA4WhcNMjUxMjA3MTkwMTA4WjAzMTEwLwYDVQQD Eyg5YTczOWY5NTViYjMyMTk0MWQ3MGYzZGUyZDFlMjY3MGQ2MGUxZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsjJmmOkSb1WJzdX1zj+ur2ayO5+ 6nP9Bid6sBCYk53FBPQkputk+gPxjOyvtK7a4lOLvWJK2uQqajPTiC8aFcnidjnb 5N/oAvJmWewJ66Liug7qLCWW/cG64u6HIb1v5wynad7JDt0JH2DzER3nJUVyvUqh eIFkj7432EbznWajEsfOrJl/QjTn0OBs4VNe/8mABJCxoZ2yLwE9H4ekvoD4cSpw sk/B/tFEEWIzFjAzxTJTK8e8NMCQzljViLgAqsK1+tQiJKQQHvM/9VxRTJx/otik LPZrWTe/W7M4h3zEJRnEPVcWH+AZw8SLJxxbzouOmZ9th4IvRIgWYS389QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpzn5VbsyGUHXDz3i0eJnDWDh0AMB8GA1UdIwQY MBaAFMbf66yLdUURIvkU/KAk7h9UF8q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYt MzgwOTFiMTk3NjRiLzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYtMzgwOTFiMTk3NjRi LzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeYOvANr 3MHNPkdgMwJmT+4BV/oSxjaswBdruaSbe21RZY3xrAURCr1cfYeJ66rcapkRJM8T e3Bz7aQnN/760K8k4mXCXKUa0e5CKe3o6/SooPGJT5VQpziVubJnjvpID/DZHXJj GNmDO/8LEXRq1gnX3I8+iLq/drpS0wYiZT+oIX0Drn2noXG49u3esYTmck/I0F/t olIo7TuWP4hEy62SzJ9SJl3k8i/mNy1kxOF4+wqN5nKo9YB3b/9bOrIhDvzS/NXw RaVKSNqTWaqLgU9XrgxKcrNGJuLyw1ParMhu9rakTVD67UESVd8PVg+3tM+IqSnB JxFg7ftqWfKZfA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:47 2025 by rpki-client