This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json) Hash identifier: pBtOA96/aPY9hnnkmyTQXtwjrRC55QGuY3MGp+2gNTA= Subject key identifier: 6F:05:02:98:77:D0:32:D4:FB:F3:12:C8:57:B4:A8:99:18:AA:3F:20 Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a Certificate serial: 019AF19B27E669750B12E36AFD13E266A52D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft Manifest number: 03B3 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=) 2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: 9IDYJ2ib/dD2Ac0Twlk1yQJRTOISg6MZ4u7xxQ7d4oQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:27:e6:69:75:0b:12:e3:6a:fd:13:e2:66:a5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=6f05029877d032d4fbf312c857b4a89918aa3f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:83:36:3e:f7:64:ac:25:81:97:35:02:73:16: 46:6e:a1:e7:8d:56:f0:63:32:33:3e:fc:32:a9:2b: 01:ec:7b:11:79:f2:2d:68:eb:a3:70:45:fd:af:a3: 41:ec:ab:ab:4a:8a:ff:44:d9:24:7d:3a:e5:0e:e3: 92:3e:30:64:44:dd:39:38:5d:05:bc:47:26:94:27: 2f:b2:42:2c:5a:56:68:92:33:e9:87:3a:be:bf:37: 18:cc:ec:d3:c7:29:3e:25:df:59:3e:cb:5b:44:8e: 48:f8:92:17:7c:8e:6b:8a:d4:ac:96:a5:ab:9f:d4: c3:69:ee:28:00:ca:fb:c8:76:be:c6:7f:5c:4b:03: 22:68:cc:86:4f:d7:bf:6b:f6:11:40:0d:d2:c3:97: dd:ee:8e:c2:1d:5b:75:09:82:4a:dd:98:b6:50:80: ab:cb:de:0c:f6:fd:f0:2c:99:03:c1:e9:14:2a:38: 77:e2:d1:52:99:7c:ff:6f:89:28:0a:81:0c:f3:5f: 38:22:8c:62:c7:e8:08:45:60:94:cf:68:1e:0e:74: 9c:53:33:73:c0:69:bd:8a:f2:9c:fe:94:9b:3f:dc: fd:48:62:60:ed:7a:da:6c:38:8a:ca:49:41:b6:c8: f4:84:41:d2:5b:74:35:19:5e:ab:c0:c6:f2:5c:4f: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:05:02:98:77:D0:32:D4:FB:F3:12:C8:57:B4:A8:99:18:AA:3F:20 X509v3 Authority Key Identifier: keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:12:34:28:47:0d:e0:14:f1:9f:0b:28:e4:41:1d:90:ab:79: 90:4b:81:33:e3:ce:c9:08:c1:88:ce:33:79:c4:4b:03:a3:fa: 06:81:af:54:fb:c3:7d:2f:92:b8:60:82:e1:37:4e:b2:b6:2f: 84:64:f2:c9:0c:2b:25:1e:2d:1d:f1:79:a4:94:4e:0e:14:11: 2a:ef:0c:ad:ca:71:ae:b9:39:6c:4a:d0:21:08:a2:36:a5:ef: 6d:30:b3:9e:b3:ea:57:ea:1a:62:ca:52:18:8d:e2:ed:38:f1: 71:60:fd:f2:ac:e9:5d:18:65:91:92:82:76:d7:ce:c3:7b:7a: 1e:3e:af:49:aa:f3:77:7c:09:a1:c2:5a:af:8c:10:ef:3d:ff: bd:ae:8d:60:fe:10:77:e3:17:98:b1:9f:67:37:39:93:02:1a: e6:fe:c6:76:36:8c:f1:f2:2c:7e:66:fc:ac:a0:e8:ef:f5:2b: 53:23:0f:ee:de:11:05:2b:e9:38:92:49:d8:36:d8:98:10:26: 54:9d:c7:5d:d8:7f:53:d4:15:34:96:6c:03:20:27:99:e5:40: 45:03:42:08:58:78:d7:41:ee:27:7b:14:03:a1:54:a0:c8:77: df:b9:1d:26:49:6c:e6:be:a7:43:97:ea:18:ae:dc:16:63:d6: 22:dc:4f:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyfmaXULEuNq/RPiZqUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NjYyZjk4MDIwZGE0ZTM3ZDUwZWQzYmIzMDIwMjc3NGYy OTJkN2EwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD Eyg2ZjA1MDI5ODc3ZDAzMmQ0ZmJmMzEyYzg1N2I0YTg5OTE4YWEzZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4M2PvdkrCWBlzUCcxZGbqHnjVbw YzIzPvwyqSsB7HsRefItaOujcEX9r6NB7KurSor/RNkkfTrlDuOSPjBkRN05OF0F vEcmlCcvskIsWlZokjPphzq+vzcYzOzTxyk+Jd9ZPstbRI5I+JIXfI5ritSslqWr n9TDae4oAMr7yHa+xn9cSwMiaMyGT9e/a/YRQA3Sw5fd7o7CHVt1CYJK3Zi2UICr y94M9v3wLJkDwekUKjh34tFSmXz/b4koCoEM8184Ioxix+gIRWCUz2geDnScUzNz wGm9ivKc/pSbP9z9SGJg7XrabDiKyklBtsj0hEHSW3Q1GV6rwMbyXE9ioQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8FAph30DLU+/MSyFe0qJkYqj8gMB8GA1UdIwQY MBaAFMVmL5gCDaTjfVDtO7MCAndPKS16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTIt Zjg5OTc3YTQ1YjYwLzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81ZDZjMTUtYTU4OC00MWRjLWE2YTItZjg5OTc3YTQ1YjYw LzEveFdZdm1BSU5wT045VU8wN3N3SUNkMDhwTFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRI0KEcN 4BTxnwso5EEdkKt5kEuBM+POyQjBiM4zecRLA6P6BoGvVPvDfS+SuGCC4TdOsrYv hGTyyQwrJR4tHfF5pJRODhQRKu8Mrcpxrrk5bErQIQiiNqXvbTCznrPqV+oaYspS GI3i7TjxcWD98qzpXRhlkZKCdtfOw3t6Hj6vSarzd3wJocJar4wQ7z3/va6NYP4Q d+MXmLGfZzc5kwIa5v7GdjaM8fIsfmb8rKDo7/UrUyMP7t4RBSvpOJJJ2DbYmBAm VJ3HXdh/U9QVNJZsAyAnmeVARQNCCFh410HuJ3sUA6FUoMh337kdJkls5r6nQ5fq GK7cFmPWItxPcA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:55 2025 by rpki-client