This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json) Hash identifier: 70LM9LBMcXb8ey3orK6GxO8JVOnIzDA3w+aGjgHpRL0= Subject key identifier: 7A:F8:98:AC:6C:A2:C3:B7:9E:C3:69:F4:D5:9B:9F:AF:B5:B4:50:3F Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374 Certificate serial: 019B1DCEC664158763230E0356CFB70AAE36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 17:00:48 +0000 Manifest this update: Sun 14 Dec 2025 17:00:48 +0000 Manifest next update: Mon 15 Dec 2025 17:00:48 +0000 Files and hashes: 1: B9inWc_Zru3DBQYoTCckNvJAJjc.roa (hash: rR3/vKr9FiP0LIExuGsty/9oTkiBHkZoBOxEJZQ25PU=) 2: N2iXQzwnJ7HrnDOcVCjZn3aCcVw.roa (hash: YJwpPg1gpuiDf+AucM/2eZ40ZoPeyXC6eibq/R/5usA=) 3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: S22nBrxfFJ3+5DBiwINQweC9uENxzRTNvzZvjGGszAM=) 4: fXCcgUSD-6HNgkjQxM90O6lfJzY.roa (hash: hPPYSOb/+jw/H4XCWA1NGkrCD/90gdTOvYWg/h1cmfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:ce:c6:64:15:87:63:23:0e:03:56:cf:b7:0a:ae:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374 Validity Not Before: Dec 14 17:00:48 2025 GMT Not After : Dec 15 17:00:48 2025 GMT Subject: CN=7af898ac6ca2c3b79ec369f4d59b9fafb5b4503f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e0:10:92:88:44:cd:13:f3:52:c5:9a:00:07: 0e:92:6e:5f:53:c1:74:6e:66:bf:c2:82:97:1e:c9: 73:aa:37:f7:c3:db:52:52:50:d8:6b:99:05:58:4c: 21:c9:b2:bf:7f:ca:69:b0:57:39:ec:c4:38:1d:19: d2:3a:d0:6c:0b:aa:75:fa:d1:54:82:86:93:3b:73: 84:73:24:b6:4a:02:43:b2:71:a3:73:ba:a7:1b:e8: 48:e3:27:31:66:ed:3e:26:eb:de:9c:78:9d:5e:96: f0:8a:44:1b:e1:3c:08:88:66:a0:23:e6:3d:39:8f: 6f:4f:05:d9:24:d8:bd:2a:01:93:7e:16:1b:1b:cf: 34:72:ea:32:41:19:d1:2d:fb:c4:7e:52:c0:2c:51: 40:68:5b:b5:72:61:57:f8:18:b8:b8:83:63:5d:40: af:64:a5:b9:61:e8:c5:bb:7b:20:bb:e8:90:a2:c7: 43:38:6f:9a:7c:c8:65:f1:f4:ba:ae:29:e2:3b:83: 99:e6:0b:0d:51:fa:aa:b9:be:b9:9c:15:0f:48:fc: 39:25:3d:af:c9:46:f8:e4:e3:99:0e:72:1f:8e:7c: ab:a9:e4:de:78:78:20:ea:b3:fc:83:47:6b:ed:e7: 6a:44:f0:fd:f7:dc:38:10:8c:02:bd:72:88:67:83: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F8:98:AC:6C:A2:C3:B7:9E:C3:69:F4:D5:9B:9F:AF:B5:B4:50:3F X509v3 Authority Key Identifier: keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fc:c2:4a:4c:76:f7:64:1b:e9:63:79:93:aa:2f:8f:e9:e1: 81:c8:ff:80:ce:57:b1:86:b2:ef:81:80:f3:15:4d:3e:06:e9: ec:65:1c:dc:67:c9:1c:e9:fd:2f:ab:4e:27:b3:83:c0:12:71: 89:97:05:3c:54:18:f6:71:bb:0f:73:62:55:38:cc:ed:38:cc: 7a:83:27:0b:c6:35:62:5a:fe:28:2e:ca:e2:16:a8:2e:49:34: ac:81:69:92:e7:55:e3:1b:a1:9a:52:48:26:07:68:0b:27:16: 92:3c:65:08:4c:41:39:47:61:3c:3f:d4:dd:b8:50:6c:41:c4: a5:f2:58:91:a6:76:ca:90:d8:00:1f:55:b6:ff:86:86:ef:ec: 10:50:45:6d:ca:2f:0c:21:80:9c:c8:82:5c:a6:b3:fc:d2:64: 76:93:f7:0f:61:72:75:36:06:9e:74:7d:22:3f:be:73:63:fb: 4c:97:4d:ed:1f:e0:5b:88:9b:ba:d1:73:30:bc:75:eb:b0:dc: f3:45:44:08:c0:54:53:68:c0:89:c5:37:04:ed:ef:86:4b:47: e4:32:a0:06:1d:6f:de:31:04:f7:ec:89:a4:2e:1b:e2:fa:c1: 65:84:ea:fc:fb:ca:dc:71:53:26:e4:2d:1c:98:92:27:2d:94: bc:9f:0c:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzsZkFYdjIw4DVs+3Cq42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlY2NiN2NkMWI5ZDZmYzM5ZDcxNThmMmZlOWNmNTIxN2Ex MmQzNzQwHhcNMjUxMjE0MTcwMDQ4WhcNMjUxMjE1MTcwMDQ4WjAzMTEwLwYDVQQD Eyg3YWY4OThhYzZjYTJjM2I3OWVjMzY5ZjRkNTliOWZhZmI1YjQ1MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+AQkohEzRPzUsWaAAcOkm5fU8F0 bma/woKXHslzqjf3w9tSUlDYa5kFWEwhybK/f8ppsFc57MQ4HRnSOtBsC6p1+tFU goaTO3OEcyS2SgJDsnGjc7qnG+hI4ycxZu0+JuvenHidXpbwikQb4TwIiGagI+Y9 OY9vTwXZJNi9KgGTfhYbG880cuoyQRnRLfvEflLALFFAaFu1cmFX+Bi4uINjXUCv ZKW5YejFu3sgu+iQosdDOG+afMhl8fS6riniO4OZ5gsNUfqqub65nBUPSPw5JT2v yUb45OOZDnIfjnyrqeTeeHgg6rP8g0dr7edqRPD999w4EIwCvXKIZ4NAsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr4mKxsosO3nsNp9NWbn6+1tFA/MB8GA1UdIwQY MBaAFF7Mt80bnW/DnXFY8v6c9SF6EtN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQt ZDIyOTY3ZTIyZWYwLzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQtZDIyOTY3ZTIyZWYw LzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvzCSkx2 92Qb6WN5k6ovj+nhgcj/gM5XsYay74GA8xVNPgbp7GUc3GfJHOn9L6tOJ7ODwBJx iZcFPFQY9nG7D3NiVTjM7TjMeoMnC8Y1Ylr+KC7K4haoLkk0rIFpkudV4xuhmlJI JgdoCycWkjxlCExBOUdhPD/U3bhQbEHEpfJYkaZ2ypDYAB9Vtv+Ghu/sEFBFbcov DCGAnMiCXKaz/NJkdpP3D2FydTYGnnR9Ij++c2P7TJdN7R/gW4ibutFzMLx167Dc 80VECMBUU2jAicU3BO3vhktH5DKgBh1v3jEE9+yJpC4b4vrBZYTq/PvK3HFTJuQt HJiSJy2UvJ8MkQ== -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:46 2025 by rpki-client