This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json) Hash identifier: wsnbt61w5izbuNcLYoDH2yhmFee78D4tTDRpm89Y/Jg= Subject key identifier: AA:90:F0:99:42:B4:47:EF:BE:EF:15:F7:41:32:BC:59:98:52:10:C8 Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0 Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0 Certificate serial: 019AF0BEF1F6C1208B2A98A934F9EE1B2DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft Manifest number: 7E Signing time: Fri 05 Dec 2025 23:00:36 +0000 Manifest this update: Fri 05 Dec 2025 23:00:36 +0000 Manifest next update: Sat 06 Dec 2025 23:00:36 +0000 Files and hashes: 1: huTpztbsQALNaxE7iUdUxmvpFuk.roa (hash: sMf2UqH7zZTc0SKWY1HAbVuZYKZQgSMeRF7P6Xn93AA=) 2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: IFGSBabjbM++Nqtvogdj1emeYQyX4C8fqdCkDfaxbcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f1:f6:c1:20:8b:2a:98:a9:34:f9:ee:1b:2d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0 Validity Not Before: Dec 5 23:00:36 2025 GMT Not After : Dec 6 23:00:36 2025 GMT Subject: CN=aa90f09942b447efbeef15f74132bc59985210c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:57:60:dc:5b:cb:ae:dd:64:06:2e:cf:5f: 9b:46:7c:01:bc:7c:0d:38:96:f7:8e:6b:18:b2:4b: 3d:39:4f:0f:fd:9c:66:55:f1:38:08:75:a2:58:fc: 00:e1:08:be:87:cf:e8:2a:6c:93:80:0f:80:31:d8: ca:0f:03:ec:23:b4:bf:65:4b:eb:3a:97:bf:4b:25: 13:e4:02:a7:7c:9b:21:c9:ea:67:96:6f:d8:66:8b: 17:b4:69:6d:8f:67:d0:a4:46:de:b7:88:cf:04:d3: e6:2e:28:75:7b:40:53:5d:93:b8:a6:78:4d:53:44: c9:3c:78:c9:d7:b5:38:b1:43:03:a4:bc:e0:fc:5c: 9f:9d:b5:78:0f:15:0b:c0:4a:36:ab:3b:3c:af:a5: 51:2d:78:ac:aa:ee:b8:31:56:93:aa:1f:3e:7b:e0: e9:4e:38:3d:6a:f5:da:7c:5e:3d:54:93:3f:81:36: 43:e3:e0:a9:63:6f:15:7d:b6:ac:f4:ae:2c:34:94: 8d:aa:7c:f6:df:f6:7d:8c:0b:b9:ad:63:b9:85:5d: c4:75:b4:d9:2c:aa:24:0c:7c:89:7b:da:3f:9b:47: 0c:5d:e5:08:c4:df:95:95:ad:d6:d9:c9:75:de:73: f0:97:56:37:aa:1b:46:a2:82:07:4e:e5:bb:ad:0f: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:90:F0:99:42:B4:47:EF:BE:EF:15:F7:41:32:BC:59:98:52:10:C8 X509v3 Authority Key Identifier: keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:04:66:21:e8:f9:f1:90:e1:80:17:44:a2:f6:cb:d8:e4:ff: 16:61:c8:b4:8d:bd:4a:62:fe:99:78:71:7f:e0:9d:47:b3:b9: 57:7f:da:6c:a4:b9:9a:85:fe:da:bb:15:4d:89:41:d4:47:3b: 88:8b:f3:ec:5f:01:27:bd:68:15:d9:08:fb:7f:04:c3:ca:c5: b9:ba:01:d4:1a:43:df:72:de:3e:d1:e3:5e:71:36:1b:0a:c1: e2:f0:ff:98:f2:c6:3c:c3:35:99:56:c2:93:db:2e:df:94:7c: 62:fc:68:59:fa:81:e0:80:c0:22:37:91:12:05:eb:1b:a9:e6: 1b:3b:03:8f:0e:5a:cd:ce:8d:6d:e3:90:6e:00:8d:09:ae:c5: bb:ab:05:4a:cb:f7:0f:4c:85:85:f5:c9:af:a1:2d:f8:11:0d: dc:a5:34:10:79:c3:d9:25:4a:0f:01:94:b7:a2:5f:0d:08:cc: 44:49:15:8e:42:07:b5:f7:3b:20:d7:3e:24:a7:eb:f9:b1:ba: 95:58:b9:cf:43:16:06:24:99:75:86:29:89:0b:1a:81:b4:17: 21:5f:a9:b5:56:c8:39:4f:54:de:d0:9d:26:77:5f:49:1b:e8: b5:b3:00:57:d0:6b:92:9f:ca:c0:66:de:b8:43:ec:af:51:71: 5d:e6:e4:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvH2wSCLKpipNPnuGy3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MWYzOTFkNjBlMWExMzljY2M0MmIxN2EzMmE5NTM2M2Rm NWNmYjAwHhcNMjUxMjA1MjMwMDM2WhcNMjUxMjA2MjMwMDM2WjAzMTEwLwYDVQQD EyhhYTkwZjA5OTQyYjQ0N2VmYmVlZjE1Zjc0MTMyYmM1OTk4NTIxMGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMFXYNxby67dZAYuz1+bRnwBvHwN OJb3jmsYsks9OU8P/ZxmVfE4CHWiWPwA4Qi+h8/oKmyTgA+AMdjKDwPsI7S/ZUvr Ope/SyUT5AKnfJshyepnlm/YZosXtGltj2fQpEbet4jPBNPmLih1e0BTXZO4pnhN U0TJPHjJ17U4sUMDpLzg/FyfnbV4DxULwEo2qzs8r6VRLXisqu64MVaTqh8+e+Dp Tjg9avXafF49VJM/gTZD4+CpY28Vfbas9K4sNJSNqnz23/Z9jAu5rWO5hV3EdbTZ LKokDHyJe9o/m0cMXeUIxN+Vla3W2cl13nPwl1Y3qhtGooIHTuW7rQ8MawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqQ8JlCtEfvvu8V90EyvFmYUhDIMB8GA1UdIwQY MBaAFMcfOR1g4aE5zMQrF6MqlTY99c+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAt NjU0MWNjMDA2ZWFjLzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAtNjU0MWNjMDA2ZWFj LzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgRmIej5 8ZDhgBdEovbL2OT/FmHItI29SmL+mXhxf+CdR7O5V3/abKS5moX+2rsVTYlB1Ec7 iIvz7F8BJ71oFdkI+38Ew8rFuboB1BpD33LePtHjXnE2GwrB4vD/mPLGPMM1mVbC k9su35R8YvxoWfqB4IDAIjeREgXrG6nmGzsDjw5azc6NbeOQbgCNCa7Fu6sFSsv3 D0yFhfXJr6Et+BEN3KU0EHnD2SVKDwGUt6JfDQjMREkVjkIHtfc7INc+JKfr+bG6 lVi5z0MWBiSZdYYpiQsagbQXIV+ptVbIOU9U3tCdJndfSRvotbMAV9Brkp/KwGbe uEPsr1FxXebk4w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:07 2025 by rpki-client