This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft File: xFpgEca3YVjA9sXCctgtgCf4j6M.mft (raw, json) Hash identifier: l5jDCjEnekAvG7oO6fuJ2+E13WJdX21DhcytafREjoo= Subject key identifier: 21:97:9B:61:F1:02:96:13:91:5E:84:E5:C3:7F:95:78:22:A2:2C:B3 Authority key identifier: C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3 Certificate issuer: /CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3 Certificate serial: 019AF0F5C649A176C15A7A82E12C85421B61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft Manifest number: 4D Signing time: Sat 06 Dec 2025 00:00:30 +0000 Manifest this update: Sat 06 Dec 2025 00:00:30 +0000 Manifest next update: Sun 07 Dec 2025 00:00:30 +0000 Files and hashes: 1: TDwx2WmFrMdexoGeE59PEmpc9rM.roa (hash: 28BE4l6J/5v8RjnKxtTkUCzhfcWaJj8sY8Y3wzlLglI=) 2: xFpgEca3YVjA9sXCctgtgCf4j6M.crl (hash: rORdv7K6Ez++6GLlndnRD1eH9/38es0MLxqm36SRR7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c6:49:a1:76:c1:5a:7a:82:e1:2c:85:42:1b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3 Validity Not Before: Dec 6 00:00:30 2025 GMT Not After : Dec 7 00:00:30 2025 GMT Subject: CN=21979b61f1029613915e84e5c37f957822a22cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:d2:d5:c9:53:d5:74:14:5a:ac:66:d5:7c: 69:a8:dc:17:76:7b:d9:0a:aa:45:0c:d3:88:7b:ae: b3:23:11:41:75:7b:18:82:24:8a:ae:ea:a1:03:91: 17:66:73:10:5e:ab:51:ed:38:c3:4c:56:9b:e6:43: 97:f1:e4:d2:56:63:4f:69:9c:03:65:77:a1:f5:a9: 5a:a3:c5:7d:be:d7:00:51:82:69:cc:a3:b4:78:74: 58:b8:fb:62:e1:44:a6:09:64:65:29:51:7b:6a:5c: 90:1e:94:2b:a6:87:94:04:90:25:73:25:8b:d9:c7: 7a:56:3a:a7:54:6a:00:54:c6:b0:b1:5d:9d:46:8f: f4:25:ad:c5:b8:f2:87:1c:98:59:62:be:57:b5:1e: e4:3f:95:60:6f:35:5c:b6:84:2b:7f:4a:05:ed:97: 94:e2:32:b0:58:a2:01:21:72:5d:89:0a:28:8a:5a: ad:8d:5a:3e:40:00:d2:98:91:5d:36:6b:4a:fe:c4: ae:85:d4:83:d9:36:00:62:28:3e:10:a4:c2:7e:3b: 26:48:6f:9e:fa:70:db:56:4b:3f:10:15:fc:ef:b4: 87:57:04:ea:17:d4:ab:5a:aa:c3:9e:80:7e:a9:09: 29:30:11:c3:a5:71:cf:9d:98:56:03:0c:42:c8:e2: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:97:9B:61:F1:02:96:13:91:5E:84:E5:C3:7F:95:78:22:A2:2C:B3 X509v3 Authority Key Identifier: keyid:C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:59:d3:ab:6e:08:df:50:3e:af:dc:d7:6e:ab:5b:94:f1:29: c1:09:bb:6d:3f:60:47:55:cb:40:2f:89:89:0b:ac:53:6c:43: 5d:07:e3:af:16:b7:03:0d:45:b3:a6:36:38:df:55:d4:e4:1a: 49:1e:a7:13:c2:36:d3:4d:01:a3:21:f6:09:55:0a:66:db:3a: 4d:19:3f:14:fa:2e:c0:6a:48:f2:e8:a4:5e:99:20:95:c6:e9: 25:ff:1c:35:c4:db:9b:c1:f5:92:03:6a:e6:69:88:0f:1b:7c: bd:e0:57:62:09:ca:dc:8e:16:17:b4:0c:99:b0:78:0c:9f:fa: 9d:8a:34:3d:04:88:a5:c4:94:6d:ae:34:69:f8:ea:28:04:da: 9b:11:25:f1:ad:fc:7a:43:f6:d6:8a:2f:2d:95:89:bf:1d:7a: 20:7c:4c:19:1b:ff:b8:5a:d3:2b:57:53:7e:f8:5a:cb:0c:f9: 72:a7:4a:c5:d3:e6:2b:eb:27:6d:65:7b:69:95:45:50:23:1f: 8b:0a:c1:b0:e9:71:09:1b:9a:13:51:be:ce:87:b1:b4:d3:6d: b3:52:d8:28:01:dd:ea:fb:95:08:27:d9:aa:de:61:a8:b8:e7: 14:91:a6:41:3f:f7:f0:1c:c3:ee:5f:0c:ea:ff:6a:2e:89:59: a5:ea:3a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cZJoXbBWnqC4SyFQhthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWE2MDExYzZiNzYxNThjMGY2YzVjMjcyZDgyZDgwMjdm ODhmYTMwHhcNMjUxMjA2MDAwMDMwWhcNMjUxMjA3MDAwMDMwWjAzMTEwLwYDVQQD EygyMTk3OWI2MWYxMDI5NjEzOTE1ZTg0ZTVjMzdmOTU3ODIyYTIyY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDTS1clT1XQUWqxm1XxpqNwXdnvZ CqpFDNOIe66zIxFBdXsYgiSKruqhA5EXZnMQXqtR7TjDTFab5kOX8eTSVmNPaZwD ZXeh9alao8V9vtcAUYJpzKO0eHRYuPti4USmCWRlKVF7alyQHpQrpoeUBJAlcyWL 2cd6VjqnVGoAVMawsV2dRo/0Ja3FuPKHHJhZYr5XtR7kP5VgbzVctoQrf0oF7ZeU 4jKwWKIBIXJdiQooilqtjVo+QADSmJFdNmtK/sSuhdSD2TYAYig+EKTCfjsmSG+e +nDbVks/EBX877SHVwTqF9SrWqrDnoB+qQkpMBHDpXHPnZhWAwxCyOK9UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGXm2HxApYTkV6E5cN/lXgioiyzMB8GA1UdIwQY MBaAFMRaYBHGt2FYwPbFwnLYLYAn+I+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZwZ0VjYTNZVmpBOXNYQ2N0Z3RnQ2Y0ajZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGJmZTgtOWEzZS00MDAwLWFkZjgt ZmYyODdjMDYyYjYxLzEveEZwZ0VjYTNZVmpBOXNYQ2N0Z3RnQ2Y0ajZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jMGJmZTgtOWEzZS00MDAwLWFkZjgtZmYyODdjMDYyYjYx LzEveEZwZ0VjYTNZVmpBOXNYQ2N0Z3RnQ2Y0ajZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFnTq24I 31A+r9zXbqtblPEpwQm7bT9gR1XLQC+JiQusU2xDXQfjrxa3Aw1Fs6Y2ON9V1OQa SR6nE8I2000BoyH2CVUKZts6TRk/FPouwGpI8uikXpkglcbpJf8cNcTbm8H1kgNq 5mmIDxt8veBXYgnK3I4WF7QMmbB4DJ/6nYo0PQSIpcSUba40afjqKATamxEl8a38 ekP21oovLZWJvx16IHxMGRv/uFrTK1dTfvhaywz5cqdKxdPmK+snbWV7aZVFUCMf iwrBsOlxCRuaE1G+zoextNNts1LYKAHd6vuVCCfZqt5hqLjnFJGmQT/38BzD7l8M 6v9qLolZpeo64Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:20 2025 by rpki-client