This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json) Hash identifier: 1Pb2AkfsnmSBVjFZrXQu60dj3ePKAAymeCO8b+m0DQ0= Subject key identifier: 22:52:41:67:7B:0F:4A:68:BB:3B:7E:71:25:E8:B6:8D:4D:FB:14:B9 Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Certificate serial: 019B1080DAAF804D127F9DD48E3889C894F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft Manifest number: 064F Signing time: Fri 12 Dec 2025 03:00:38 +0000 Manifest this update: Fri 12 Dec 2025 03:00:38 +0000 Manifest next update: Sat 13 Dec 2025 03:00:38 +0000 Files and hashes: 1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: XeQ7R2UJzhb5wW8+0bi9vplJptPQLowLqThD73XEkvs=) 2: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (hash: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:80:da:af:80:4d:12:7f:9d:d4:8e:38:89:c8:94:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Validity Not Before: Dec 12 03:00:38 2025 GMT Not After : Dec 13 03:00:38 2025 GMT Subject: CN=225241677b0f4a68bb3b7e7125e8b68d4dfb14b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:95:ca:22:c2:44:ef:ac:11:dd:d6:1c:49: 2f:f1:4e:48:83:54:f3:f1:30:0b:7d:4e:97:d2:14: de:53:94:9e:2f:d5:54:f4:83:ff:a8:ac:70:77:04: 37:a3:0a:4e:1c:cd:0f:94:d3:25:b6:6e:a5:62:4b: 8a:68:c6:e3:e9:53:47:14:66:de:32:c1:e8:8b:65: f6:f0:9b:46:96:6a:fb:a9:a4:82:44:dd:2b:74:b9: 06:e8:04:09:34:49:68:3d:bb:00:54:02:b8:40:71: a3:24:50:bc:a1:20:34:db:d7:f4:97:b8:6c:5b:9e: 47:84:1b:ed:01:d5:ec:a7:1e:56:17:1b:34:ab:3c: 5a:1e:49:d0:60:5f:71:7f:89:ee:2b:fc:9d:3f:bb: 07:60:16:9e:9f:2e:b8:df:df:fe:f8:73:24:21:10: d7:b4:90:c6:fa:d7:2c:fa:97:90:bd:ba:66:33:bf: fd:08:a9:04:ef:c2:50:30:1d:d1:80:25:4f:10:b0: 28:cc:41:b4:f6:03:1c:e4:4b:20:02:fe:19:e0:f4: 91:8e:e0:45:9e:ae:31:e9:b3:f5:16:6e:47:17:1e: 55:5d:4b:ed:dd:be:81:08:e9:ef:c3:a0:de:4e:cb: d1:bf:e6:17:62:66:c2:ea:4b:cb:63:6c:04:b5:fa: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:52:41:67:7B:0F:4A:68:BB:3B:7E:71:25:E8:B6:8D:4D:FB:14:B9 X509v3 Authority Key Identifier: keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7e:0d:c8:73:f2:7f:94:f5:24:03:6e:fc:96:f7:b4:02:91: 8e:8f:17:f3:47:e1:09:f8:f8:6c:b1:50:b8:4d:bd:b9:74:38: 14:97:d3:91:6a:86:63:e3:84:4c:23:ba:f9:a2:51:f4:20:05: b7:3c:c3:b6:f6:d8:a4:d7:1e:a9:19:d1:fc:40:12:c9:5b:ef: e9:4a:58:0b:1f:f9:43:c6:74:ac:28:9c:e5:3c:c0:c0:3c:87: 2b:3c:ba:a8:4d:f0:17:bf:ff:b0:2b:09:96:2b:d8:05:38:1e: 52:fd:14:62:bb:58:60:69:4a:b4:aa:5a:21:ee:18:d9:0d:26: cb:37:55:06:8e:eb:af:2a:49:22:7c:e5:31:f7:35:84:78:65: 21:53:5e:44:70:e9:18:98:05:9a:6b:91:b6:bf:33:83:9b:df: 18:d5:00:bd:b0:1b:40:16:07:2b:82:4b:1e:f5:fc:da:e2:b3: d4:18:9e:54:44:63:ec:5c:fc:23:6a:04:ba:c7:28:27:67:20: 83:46:eb:14:84:f3:76:98:d5:0a:09:51:bf:a0:d8:7c:e1:50: 31:51:51:41:bf:91:61:fc:15:68:13:fb:49:6c:f6:11:25:3d: 40:9e:73:91:37:b1:5b:82:34:c3:00:62:30:dd:1a:59:21:08: b9:b4:83:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgNqvgE0Sf53UjjiJyJT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmM2E2YzIxOTQxYzFlMTNiZmZjNGQ0NGQ2MWJkMjU5NWZk ZDhmZTgwHhcNMjUxMjEyMDMwMDM4WhcNMjUxMjEzMDMwMDM4WjAzMTEwLwYDVQQD EygyMjUyNDE2NzdiMGY0YTY4YmIzYjdlNzEyNWU4YjY4ZDRkZmIxNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhOVyiLCRO+sEd3WHEkv8U5Ig1Tz 8TALfU6X0hTeU5SeL9VU9IP/qKxwdwQ3owpOHM0PlNMltm6lYkuKaMbj6VNHFGbe MsHoi2X28JtGlmr7qaSCRN0rdLkG6AQJNEloPbsAVAK4QHGjJFC8oSA029f0l7hs W55HhBvtAdXspx5WFxs0qzxaHknQYF9xf4nuK/ydP7sHYBaeny6439/++HMkIRDX tJDG+tcs+peQvbpmM7/9CKkE78JQMB3RgCVPELAozEG09gMc5EsgAv4Z4PSRjuBF nq4x6bP1Fm5HFx5VXUvt3b6BCOnvw6DeTsvRv+YXYmbC6kvLY2wEtfpdnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJSQWd7D0pouzt+cSXoto1N+xS5MB8GA1UdIwQY MBaAFF86bCGUHB4Tv/xNRNYb0llf3Y/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMt Y2Y4Njk4NzU3ZDM3LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMtY2Y4Njk4NzU3ZDM3 LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX4NyHPy f5T1JANu/Jb3tAKRjo8X80fhCfj4bLFQuE29uXQ4FJfTkWqGY+OETCO6+aJR9CAF tzzDtvbYpNceqRnR/EASyVvv6UpYCx/5Q8Z0rCic5TzAwDyHKzy6qE3wF7//sCsJ livYBTgeUv0UYrtYYGlKtKpaIe4Y2Q0myzdVBo7rrypJInzlMfc1hHhlIVNeRHDp GJgFmmuRtr8zg5vfGNUAvbAbQBYHK4JLHvX82uKz1BieVERj7Fz8I2oEuscoJ2cg g0brFITzdpjVCglRv6DYfOFQMVFRQb+RYfwVaBP7SWz2ESU9QJ5zkTexW4I0wwBi MN0aWSEIubSDfw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:40:48 2025 by rpki-client