This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json) Hash identifier: ReK8PdCuBWZPMBHYXuV7+eFqeujDgjbS6uh7CexNAB8= Subject key identifier: 63:9F:FA:68:B7:E9:90:C4:5B:B5:C0:22:CF:6C:A1:67:71:2C:02:72 Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40 Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40 Certificate serial: 019AF0BEE0A75C54852CE464E5054790B336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:00:32 +0000 Manifest this update: Fri 05 Dec 2025 23:00:32 +0000 Manifest next update: Sat 06 Dec 2025 23:00:32 +0000 Files and hashes: 1: W0bin1f1CMvgpKtT56TjILo2VZA.roa (hash: X82YsEeg1Z/7Sd+F8cKgkMOl6JvYCwSgMvIizshjpZc=) 2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: WApUH11zptxaQr3AxCFRt09zu+Bc0EyIrAP4nvTiYdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e0:a7:5c:54:85:2c:e4:64:e5:05:47:90:b3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40 Validity Not Before: Dec 5 23:00:32 2025 GMT Not After : Dec 6 23:00:32 2025 GMT Subject: CN=639ffa68b7e990c45bb5c022cf6ca167712c0272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:0a:0f:64:4f:7a:92:5c:15:5a:1f:4c:4a: f5:83:e0:07:32:e7:33:c2:1d:0b:59:72:30:95:1a: c4:98:67:e2:03:c7:d7:cd:e7:54:93:73:95:fd:d8: ef:55:55:51:fc:5c:d2:b1:08:9d:7f:ca:26:51:54: a1:ab:83:75:54:08:7b:e1:e0:d3:40:30:0f:38:cb: af:25:7f:55:1d:ce:72:7f:ab:f7:c0:0a:bb:d1:73: 2d:3d:0d:b4:9d:e5:a7:b5:11:12:41:10:bb:0b:77: 44:9b:c7:35:2e:88:aa:63:c9:8f:44:25:f6:a7:fb: 80:fe:10:c9:33:78:1a:85:5a:22:5f:f7:a0:57:79: 8c:e3:ff:91:8c:44:95:1c:ce:03:65:52:44:c8:47: 09:48:88:52:b1:1b:39:38:05:6f:44:c2:58:e0:66: 5d:bc:b1:c1:78:75:37:5c:29:c0:17:c7:6d:c2:57: 35:99:41:cb:5b:34:6e:0b:75:50:18:ae:22:07:32: c6:ff:89:9b:2a:f9:49:b9:dd:58:a5:01:c8:1e:05: 22:db:50:dc:5f:85:17:cf:80:6c:57:08:66:0f:bf: a8:de:1e:0c:99:5a:dd:36:ab:04:b5:e2:ec:78:1b: 42:0a:29:d9:52:d8:f6:46:02:64:cd:d9:e1:7a:01: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9F:FA:68:B7:E9:90:C4:5B:B5:C0:22:CF:6C:A1:67:71:2C:02:72 X509v3 Authority Key Identifier: keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ba:cd:9c:45:9f:8d:fb:60:67:2b:4b:7a:22:a5:c6:4a:91: d6:4b:6d:82:8f:ae:99:4d:14:63:ac:a5:0c:68:c3:a3:e1:3c: 28:f1:63:c6:9a:d1:fc:01:61:69:9a:64:35:01:eb:95:03:7f: 0b:b6:53:ac:a6:a6:a2:aa:6e:ae:30:ab:65:f1:d1:d6:62:94: c3:50:cd:c8:70:e3:f5:62:51:66:2d:33:18:13:ae:1d:a0:d6: 1e:f4:5d:70:44:5e:a8:d5:66:cd:ec:93:a9:d7:2c:43:48:4f: f5:8e:7c:20:1d:a9:64:93:b7:10:4e:16:99:60:cf:62:e5:2e: 29:d8:2f:23:8b:55:f7:df:e2:7a:d6:3c:d9:15:e0:b1:8f:41: b4:7a:c5:7e:e9:a8:2d:5f:63:99:33:44:7b:a5:b2:6d:02:32: ca:82:50:25:5b:92:ed:1d:30:a9:73:c5:19:fd:55:da:3a:19: 4b:5c:ff:6b:a7:ea:e3:d1:28:4a:a3:55:e0:66:36:07:d6:1c: 7f:4d:dc:49:60:cf:a2:90:d1:29:44:4e:f7:6d:f5:d0:30:91: 48:c2:ed:c4:52:69:bb:c5:27:40:cb:18:65:26:9c:ed:69:58: 98:47:1c:71:d1:f6:c1:52:bb:a3:25:07:c8:a8:6b:cf:d1:86: 50:68:bc:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuCnXFSFLORk5QVHkLM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2M2Q5NmFlZmM1NDgwMjRmYTM2ZmE1Y2U4MDRhNDhiZjdj YTNhNDAwHhcNMjUxMjA1MjMwMDMyWhcNMjUxMjA2MjMwMDMyWjAzMTEwLwYDVQQD Eyg2MzlmZmE2OGI3ZTk5MGM0NWJiNWMwMjJjZjZjYTE2NzcxMmMwMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp8KD2RPepJcFVofTEr1g+AHMucz wh0LWXIwlRrEmGfiA8fXzedUk3OV/djvVVVR/FzSsQidf8omUVShq4N1VAh74eDT QDAPOMuvJX9VHc5yf6v3wAq70XMtPQ20neWntRESQRC7C3dEm8c1LoiqY8mPRCX2 p/uA/hDJM3gahVoiX/egV3mM4/+RjESVHM4DZVJEyEcJSIhSsRs5OAVvRMJY4GZd vLHBeHU3XCnAF8dtwlc1mUHLWzRuC3VQGK4iBzLG/4mbKvlJud1YpQHIHgUi21Dc X4UXz4BsVwhmD7+o3h4MmVrdNqsEteLseBtCCinZUtj2RgJkzdnhegGx8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOf+mi36ZDEW7XAIs9soWdxLAJyMB8GA1UdIwQY MBaAFMY9lq78VIAk+jb6XOgEpIv3yjpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDct OTcxZDI4ZDQzYzE0LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDctOTcxZDI4ZDQzYzE0 LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7rNnEWf jftgZytLeiKlxkqR1kttgo+umU0UY6ylDGjDo+E8KPFjxprR/AFhaZpkNQHrlQN/ C7ZTrKamoqpurjCrZfHR1mKUw1DNyHDj9WJRZi0zGBOuHaDWHvRdcEReqNVmzeyT qdcsQ0hP9Y58IB2pZJO3EE4WmWDPYuUuKdgvI4tV99/ietY82RXgsY9BtHrFfumo LV9jmTNEe6WybQIyyoJQJVuS7R0wqXPFGf1V2joZS1z/a6fq49EoSqNV4GY2B9Yc f03cSWDPopDRKURO92310DCRSMLtxFJpu8UnQMsYZSac7WlYmEcccdH2wVK7oyUH yKhrz9GGUGi81Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:01 2025 by rpki-client