This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json) Hash identifier: OAk1gp8LiJlazKzispNWZXHxel+18mPpAJDZO+R0OhE= Subject key identifier: 3A:E3:4E:58:B5:73:E0:22:07:35:C8:38:5F:97:8A:80:34:C7:A8:B5 Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f Certificate serial: 019AF0BF24BDFDD26CAA2F032B3086A7CC12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft Manifest number: 0374 Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: duv4en-kEZVnVXOXNGPZW_Jyrcw.roa (hash: /NQGSNT25LxwGXN6iIBj1hB3qklD/ePBBcZOp63AVyY=) 2: vCCb_HMH6KGFfsqbXQ0TIng1tfU.roa (hash: Twx8fVXaunI4+UsiQLUlLfwUCYQ1G7itZPYouG+NOxY=) 3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: FUgAIGcTwhhQBMD/utKWpiUZGANLA+NgqTQfMeHXONw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:24:bd:fd:d2:6c:aa:2f:03:2b:30:86:a7:cc:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=3ae34e58b573e0220735c8385f978a8034c7a8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:70:ae:cb:bf:79:98:eb:45:89:a4:8f:3f: e6:be:be:3d:89:d5:25:ac:f0:5e:2d:6a:ae:6e:cf: cf:f0:24:37:06:9c:4c:97:6e:52:d9:28:c6:87:1e: 95:22:e6:e9:c9:84:c8:03:b0:8f:78:ba:a4:dd:cf: d9:9d:5b:b9:e3:48:7e:da:81:af:08:df:75:9c:5c: 18:91:87:b8:35:20:e2:e9:2b:f2:c8:c8:a8:00:6b: 21:88:94:ad:1c:a8:41:fa:d8:d6:71:b5:61:85:23: e7:78:94:5e:f2:b3:83:f1:22:40:f1:e8:ac:fe:bb: c7:8c:58:de:80:5c:95:8c:38:e5:a0:fe:09:b2:7d: ab:07:ef:33:bd:23:f8:83:fc:8a:8d:64:6f:87:c4: 64:4b:30:bb:69:1b:54:87:a7:a1:7b:1d:9d:5b:b0: 26:73:53:a1:74:7e:07:b5:57:0b:97:1c:91:14:07: a8:6c:fd:da:d7:61:5e:48:e9:4a:97:60:26:8f:8d: 7e:38:1c:91:93:94:09:28:7c:5e:1b:81:72:ad:cf: 84:84:e2:1b:67:b1:3b:d7:72:ac:cd:b6:00:07:27: fc:f3:20:95:c4:da:d9:1f:ba:42:e8:69:32:98:c4: c6:38:a4:88:fd:7c:4d:a9:02:86:bf:c8:6a:4a:02: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E3:4E:58:B5:73:E0:22:07:35:C8:38:5F:97:8A:80:34:C7:A8:B5 X509v3 Authority Key Identifier: keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b7:59:1f:5d:47:93:c4:12:a0:30:a0:3c:5b:6d:e1:d1:28: 94:e8:a7:a6:db:ce:91:a7:5c:7c:be:e6:15:2f:dd:8b:f5:3c: 2b:0a:45:54:12:ce:b9:c4:89:d4:97:3b:05:4c:3a:ec:0f:2c: 8b:72:bf:7c:1e:79:90:1d:6f:cd:8b:a9:d1:93:08:89:16:b1: d7:97:67:08:d0:a4:9d:c7:f4:74:9f:9d:19:1a:41:b2:b5:7e: b4:a7:c0:9e:77:0d:72:a3:9a:63:d2:cc:36:a2:92:ea:6a:b3: ae:2a:90:4e:5a:8c:cd:1a:08:f2:fd:3a:15:64:ff:d1:6e:6e: e5:26:34:03:dc:8e:36:d7:bb:27:aa:cd:b8:a2:17:d7:2b:cd: 6e:c8:60:c6:a8:b2:97:82:95:39:d4:00:66:30:42:4d:f6:38: 1e:d8:dc:da:27:98:c9:78:69:17:02:ae:7d:9e:47:ee:dd:b5: 6a:8a:a0:a7:be:9d:5d:bb:22:f4:c0:50:38:4d:2e:7b:50:9b: b5:93:d8:a2:c5:97:4f:62:12:5d:3f:10:77:81:8e:61:f4:27: ae:4a:89:f8:a9:61:71:1e:52:ab:e6:f9:e3:63:e6:83:c3:bf: 1d:48:19:0b:8c:55:2f:32:3f:f8:e1:23:7d:ed:7a:a4:34:0e: 0f:24:b6:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyS9/dJsqi8DKzCGp8wSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2YwYWRhZWFmYjQwYzc3MjQ1OWU5MzkzNTRmNmJlNDUz ZjE1OGYwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD EygzYWUzNGU1OGI1NzNlMDIyMDczNWM4Mzg1Zjk3OGE4MDM0YzdhOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCJwrsu/eZjrRYmkjz/mvr49idUl rPBeLWqubs/P8CQ3BpxMl25S2SjGhx6VIubpyYTIA7CPeLqk3c/ZnVu540h+2oGv CN91nFwYkYe4NSDi6SvyyMioAGshiJStHKhB+tjWcbVhhSPneJRe8rOD8SJA8eis /rvHjFjegFyVjDjloP4Jsn2rB+8zvSP4g/yKjWRvh8RkSzC7aRtUh6ehex2dW7Am c1OhdH4HtVcLlxyRFAeobP3a12FeSOlKl2Amj41+OByRk5QJKHxeG4Fyrc+EhOIb Z7E713KszbYAByf88yCVxNrZH7pC6GkymMTGOKSI/XxNqQKGv8hqSgLDtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrjTli1c+AiBzXIOF+XioA0x6i1MB8GA1UdIwQY MBaAFMU/Ctrq+0DHckWek5NU9r5FPxWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzct NDYxN2NhMzc2MDgzLzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzctNDYxN2NhMzc2MDgz LzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrdZH11H k8QSoDCgPFtt4dEolOinptvOkadcfL7mFS/di/U8KwpFVBLOucSJ1Jc7BUw67A8s i3K/fB55kB1vzYup0ZMIiRax15dnCNCkncf0dJ+dGRpBsrV+tKfAnncNcqOaY9LM NqKS6mqzriqQTlqMzRoI8v06FWT/0W5u5SY0A9yONte7J6rNuKIX1yvNbshgxqiy l4KVOdQAZjBCTfY4Htjc2ieYyXhpFwKufZ5H7t21aoqgp76dXbsi9MBQOE0ue1Cb tZPYosWXT2ISXT8Qd4GOYfQnrkqJ+KlhcR5Sq+b542Pmg8O/HUgZC4xVLzI/+OEj fe16pDQODyS2rQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:22 2025 by rpki-client