This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json) Hash identifier: Qvwtti+mlVOker6js/LNCDJhOyaBkNS+LfLpm9yM4DY= Subject key identifier: 7F:2A:05:B1:01:71:24:D5:BC:60:4B:05:FC:4C:5C:D5:AE:7E:53:76 Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15 Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515 Certificate serial: 019B074718A717F5034750D4D80A170DB646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft Manifest number: 0C12 Signing time: Wed 10 Dec 2025 08:00:58 +0000 Manifest this update: Wed 10 Dec 2025 08:00:58 +0000 Manifest next update: Thu 11 Dec 2025 08:00:58 +0000 Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: U52icVRFrEulBgqGNK7Bu6BHpdCenrS6iLzHhop/brE=) 2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:47:18:a7:17:f5:03:47:50:d4:d8:0a:17:0d:b6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515 Validity Not Before: Dec 10 08:00:58 2025 GMT Not After : Dec 11 08:00:58 2025 GMT Subject: CN=7f2a05b1017124d5bc604b05fc4c5cd5ae7e5376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:97:75:88:dd:eb:0f:20:fb:4a:d4:e8:6e: a2:b1:ec:83:4d:4b:2c:dc:92:01:d8:37:39:2c:24: 8b:78:05:92:a6:88:e4:b4:bb:88:ae:3c:10:20:83: f8:0e:a0:fd:36:22:c0:a4:4d:b4:8f:5e:51:62:ab: d1:05:c1:82:62:66:64:a5:d9:a9:1b:92:bc:3c:b7: 52:17:a7:d1:44:98:fb:45:67:21:ea:13:09:fe:d7: cc:f8:69:8a:25:58:33:cd:c3:80:9d:25:3e:e1:4b: 09:29:e9:e6:f7:2f:ff:cd:0f:5c:c5:0a:17:e9:36: e0:d5:a9:c9:2b:60:31:b2:11:14:a0:f1:d0:ed:db: 07:28:33:47:0b:dc:4f:83:ec:36:42:21:99:fa:fa: 6c:28:4e:08:a7:d8:07:fb:af:6e:82:39:c1:78:a1: 67:fe:3b:9e:18:8f:be:bf:70:2d:03:74:76:9f:a1: ef:e2:67:00:86:63:cd:2a:59:e8:67:3d:95:f3:5a: e0:b1:ab:04:63:57:58:7c:f0:29:16:8b:0c:0b:d0: a1:8b:e2:a4:cb:31:b2:38:d2:d5:89:67:1c:12:5e: 3a:4f:d0:e4:1e:dc:c3:b4:61:ad:37:86:ee:f9:08: 53:a7:54:64:bd:40:aa:e7:c6:54:f7:ae:ed:ae:15: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2A:05:B1:01:71:24:D5:BC:60:4B:05:FC:4C:5C:D5:AE:7E:53:76 X509v3 Authority Key Identifier: keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d4:2f:ef:ea:c0:98:ed:59:96:95:b0:16:08:42:e1:a2:cf: c3:60:00:16:d8:83:ce:8f:c1:c7:d5:ab:d8:af:b6:3d:6c:f9: 4b:3f:3a:84:0f:15:e6:9f:e0:92:1d:29:ba:a4:a6:1a:cd:f3: ef:a3:e2:f9:f9:5b:6a:f1:ac:a1:c3:a4:dd:3c:d3:c2:5d:4a: c5:ad:d9:c9:e3:53:05:71:d6:8d:4e:2e:bb:74:17:d1:d9:05: c7:f0:4f:28:8e:0d:43:41:83:6a:b7:d3:fd:fa:26:6a:70:73: 58:57:8d:cb:08:81:4a:ab:2a:ef:d6:35:f9:0a:ce:ee:ab:4c: 76:e6:67:b0:3b:91:a6:fa:86:98:fe:c1:2b:ee:03:57:da:45: 33:ad:fa:73:0a:db:bb:b8:a8:b0:62:3b:cb:72:e2:40:9f:8f: b4:23:5f:89:f9:b5:a1:a9:e9:c0:a1:8e:5a:0d:c4:66:36:47: c9:90:76:e8:90:e0:25:5d:9f:ff:ec:e9:df:7f:97:4a:a5:f3: b8:9b:00:12:bf:1c:de:dc:56:05:c3:8b:12:9d:29:e7:e1:17: b7:9d:e8:96:26:84:a6:e7:36:1c:60:b5:d2:a5:70:4c:bd:1b: 1e:86:68:d9:ac:8e:c3:ce:7a:01:30:17:a1:41:0e:22:e5:50: d1:9f:3e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRxinF/UDR1DU2AoXDbZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTg5ZGFmNjRmYWRiZGQ1MzQ4ZjdkZDIyNmVjYzlmZWZj MDQ1MTUwHhcNMjUxMjEwMDgwMDU4WhcNMjUxMjExMDgwMDU4WjAzMTEwLwYDVQQD Eyg3ZjJhMDViMTAxNzEyNGQ1YmM2MDRiMDVmYzRjNWNkNWFlN2U1Mzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+GXdYjd6w8g+0rU6G6iseyDTUss 3JIB2Dc5LCSLeAWSpojktLuIrjwQIIP4DqD9NiLApE20j15RYqvRBcGCYmZkpdmp G5K8PLdSF6fRRJj7RWch6hMJ/tfM+GmKJVgzzcOAnSU+4UsJKenm9y//zQ9cxQoX 6Tbg1anJK2AxshEUoPHQ7dsHKDNHC9xPg+w2QiGZ+vpsKE4Ip9gH+69ugjnBeKFn /jueGI++v3AtA3R2n6Hv4mcAhmPNKlnoZz2V81rgsasEY1dYfPApFosMC9Chi+Kk yzGyONLViWccEl46T9DkHtzDtGGtN4bu+QhTp1RkvUCq58ZU967trhUUsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8qBbEBcSTVvGBLBfxMXNWuflN2MB8GA1UdIwQY MBaAFF6Yna9k+tvdU0j33SJuzJ/vwEUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEt ODhiMjM4ZTViYjgwLzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEtODhiMjM4ZTViYjgw LzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtQv7+rA mO1ZlpWwFghC4aLPw2AAFtiDzo/Bx9Wr2K+2PWz5Sz86hA8V5p/gkh0puqSmGs3z 76Pi+flbavGsocOk3TzTwl1Kxa3ZyeNTBXHWjU4uu3QX0dkFx/BPKI4NQ0GDarfT /fomanBzWFeNywiBSqsq79Y1+QrO7qtMduZnsDuRpvqGmP7BK+4DV9pFM636cwrb u7iosGI7y3LiQJ+PtCNfifm1oanpwKGOWg3EZjZHyZB26JDgJV2f/+zp33+XSqXz uJsAEr8c3txWBcOLEp0p5+EXt53oliaEpuc2HGC10qVwTL0bHoZo2ayOw856ATAX oUEOIuVQ0Z8+bA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:22:16 2025 by rpki-client