This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json) Hash identifier: T39d4ivENVncVuCY+o1EcJhTLQubXyXM9L/OoGpj9EM= Subject key identifier: 48:7D:B9:22:18:84:6E:5E:49:95:65:29:02:FF:47:65:47:80:EF:EA Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408 Certificate serial: 019AF61C3CA0E3A21505A8DDA8EDAB05194D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft Manifest number: 1769 Signing time: Sun 07 Dec 2025 00:00:36 +0000 Manifest this update: Sun 07 Dec 2025 00:00:36 +0000 Manifest next update: Mon 08 Dec 2025 00:00:36 +0000 Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: JxQcICkPStMZXQ5pGTRb+vU/vDrO7DAcs6JloeJAjjs=) 2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=) 3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:3c:a0:e3:a2:15:05:a8:dd:a8:ed:ab:05:19:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408 Validity Not Before: Dec 7 00:00:36 2025 GMT Not After : Dec 8 00:00:36 2025 GMT Subject: CN=487db92218846e5e4995652902ff47654780efea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:6a:96:75:34:4a:da:3e:f4:5c:96:0b:42: 2f:2c:1a:ca:f5:ad:97:87:36:dc:12:9f:ff:b2:fa: 05:c2:72:94:eb:26:cd:06:0d:b9:40:e7:5e:3d:19: 3e:5f:1c:1a:ed:93:0d:9d:44:16:9a:4e:d4:2b:7f: 9e:28:d4:50:10:1c:aa:20:bb:3b:34:65:88:23:d4: b5:e1:f9:05:ef:37:1a:87:db:b1:55:3d:45:2e:3b: 36:e4:13:b7:66:e2:00:a8:19:6e:f0:89:90:55:b5: f7:20:cd:a4:f5:30:55:5b:6b:58:d1:da:d8:b4:a2: 48:13:20:5b:5c:bb:ae:c7:6c:22:0a:36:eb:a3:13: 4f:36:b3:19:2c:93:c3:61:92:39:11:9d:e0:65:81: 85:c8:01:7c:03:a5:15:35:4c:f4:8f:cc:44:d4:82: 4a:c7:8f:21:b0:a7:f5:2a:42:4b:a4:52:dd:53:d7: 88:da:e0:05:d2:02:00:11:66:11:b4:c1:63:63:52: 01:7f:dd:d5:15:32:3d:ae:6f:3a:db:50:a0:78:f2: 9a:32:b5:4d:09:a5:39:77:5d:02:5f:a2:c7:71:13: 55:c4:96:dd:f6:31:71:f1:8f:20:a1:0d:c9:76:0e: 4e:38:14:bb:65:a4:8b:8e:36:98:84:1d:af:64:bb: 82:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7D:B9:22:18:84:6E:5E:49:95:65:29:02:FF:47:65:47:80:EF:EA X509v3 Authority Key Identifier: keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:12:7e:dd:35:ea:ca:ee:9c:06:32:11:cf:61:65:df:51:14: 06:72:a2:e9:ec:fd:a1:a8:27:bd:21:14:b9:5e:ce:b7:cf:9a: f0:10:21:b9:6b:4b:34:73:12:2c:2e:ea:8e:1d:9e:6b:25:15: f5:0c:cf:b5:c8:02:f5:50:b3:04:68:94:00:9c:03:0f:3a:51: 34:e1:a9:3b:43:5d:43:d0:a1:9b:62:88:a8:7e:19:03:64:c5: 2c:b4:d6:e0:05:fa:25:f6:b8:ed:f9:b5:48:79:7d:8f:33:92: 65:42:4c:91:bd:89:94:22:91:e5:3e:f4:2f:e3:20:cd:12:9e: b9:ab:2b:35:9a:ab:d8:18:e3:5a:2f:e2:8a:f9:9a:f4:e9:84: b4:cb:2e:b1:45:5c:dc:4e:73:60:24:ed:0a:3e:71:f4:6d:7f: d0:d8:b9:7e:64:5e:42:a5:26:24:02:e9:c5:f8:df:d7:38:64: bd:0b:a6:64:fb:da:0d:7a:df:9f:60:e1:d0:ab:a8:84:92:51: d2:2b:c1:55:42:ac:d8:55:12:82:81:ca:e3:84:12:2c:2a:24: 83:65:ab:4f:ba:78:f2:c9:2f:1e:05:6c:7d:40:ac:ae:5f:39: d7:53:a8:56:a4:0a:3f:ea:45:25:26:55:f2:35:b7:df:aa:4e: bc:17:e4:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDyg46IVBajdqO2rBRlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWRkNmY1M2JjYjQ5ZTRiOWIwNzA2ZGZkMDc0MjU5Yzli OGE0MDgwHhcNMjUxMjA3MDAwMDM2WhcNMjUxMjA4MDAwMDM2WjAzMTEwLwYDVQQD Eyg0ODdkYjkyMjE4ODQ2ZTVlNDk5NTY1MjkwMmZmNDc2NTQ3ODBlZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuZqlnU0Sto+9FyWC0IvLBrK9a2X hzbcEp//svoFwnKU6ybNBg25QOdePRk+Xxwa7ZMNnUQWmk7UK3+eKNRQEByqILs7 NGWII9S14fkF7zcah9uxVT1FLjs25BO3ZuIAqBlu8ImQVbX3IM2k9TBVW2tY0drY tKJIEyBbXLuux2wiCjbroxNPNrMZLJPDYZI5EZ3gZYGFyAF8A6UVNUz0j8xE1IJK x48hsKf1KkJLpFLdU9eI2uAF0gIAEWYRtMFjY1IBf93VFTI9rm8621CgePKaMrVN CaU5d10CX6LHcRNVxJbd9jFx8Y8goQ3Jdg5OOBS7ZaSLjjaYhB2vZLuCBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEh9uSIYhG5eSZVlKQL/R2VHgO/qMB8GA1UdIwQY MBaAFF7t1vU7y0nkubBwbf0HQlnJuKQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODIt MjE1ZGJjODljMmI5LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODItMjE1ZGJjODljMmI5 LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBJ+3TXq yu6cBjIRz2Fl31EUBnKi6ez9oagnvSEUuV7Ot8+a8BAhuWtLNHMSLC7qjh2eayUV 9QzPtcgC9VCzBGiUAJwDDzpRNOGpO0NdQ9Chm2KIqH4ZA2TFLLTW4AX6Jfa47fm1 SHl9jzOSZUJMkb2JlCKR5T70L+MgzRKeuasrNZqr2BjjWi/iivma9OmEtMsusUVc 3E5zYCTtCj5x9G1/0Ni5fmReQqUmJALpxfjf1zhkvQumZPvaDXrfn2Dh0KuohJJR 0ivBVUKs2FUSgoHK44QSLCokg2WrT7p48skvHgVsfUCsrl8511OoVqQKP+pFJSZV 8jW336pOvBfkyQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:52 2025 by rpki-client