This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json) Hash identifier: Dc21lTMf30SMkTDLTq9fAh8e5bSudKKxC3OAxq0weY8= Subject key identifier: 37:E5:EB:0F:B8:FD:BE:F7:03:94:D9:DD:63:0F:A2:28:1C:E0:C4:E3 Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Certificate serial: 019AACB9834C1A319A73FD8156D7AA3DF0A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft Manifest number: 173E Signing time: Sat 22 Nov 2025 18:00:30 +0000 Manifest this update: Sat 22 Nov 2025 18:00:30 +0000 Manifest next update: Sun 23 Nov 2025 18:00:30 +0000 Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=) 2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=) 3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=) 4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: atvf3RYBWHVzl22Qpqe/TOWdHLwgwrF80gVtbpHIN2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:83:4c:1a:31:9a:73:fd:81:56:d7:aa:3d:f0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Validity Not Before: Nov 22 18:00:30 2025 GMT Not After : Nov 23 18:00:30 2025 GMT Subject: CN=37e5eb0fb8fdbef70394d9dd630fa2281ce0c4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:79:ca:6a:ec:ac:10:7d:93:69:8c:6b:58: 0c:0d:a5:87:ce:88:a3:68:0f:a2:4f:f5:4b:bb:63: 49:d8:23:55:52:e7:19:bc:42:a3:2a:d4:c2:f8:ce: 11:77:c6:2c:f1:b4:9e:6e:21:ab:0a:a6:a3:f8:22: 9e:9a:c7:eb:b5:2a:50:e9:d2:14:3b:00:b6:14:07: 4e:22:cc:fd:a9:3d:71:39:36:f2:95:68:09:26:3c: ae:59:71:db:d1:95:0c:8c:65:63:65:71:cc:44:83: 97:e6:58:ed:51:ea:09:79:64:2b:36:00:e8:41:c5: 40:25:7a:58:f3:0e:e9:c9:57:ac:3a:bb:5c:c9:a7: ca:a4:9e:3d:47:75:f2:21:cc:f6:f7:02:a1:af:58: 68:46:c0:0b:c9:31:f0:2a:99:5a:05:08:c1:c7:df: 3f:bb:e1:5e:28:aa:aa:32:c2:53:17:a4:7d:9e:e6: 87:46:27:4b:4d:3f:7c:a9:52:7d:6e:6f:f1:ef:bb: 60:a9:e2:cc:a6:d5:83:f9:12:e0:27:07:ce:4e:e3: d1:a9:eb:f2:3e:04:59:f8:12:0e:d4:a3:77:86:1d: 8e:30:8a:be:b5:1f:47:1a:a5:18:83:d2:56:25:85: e6:09:57:9f:6e:ce:a6:18:ee:7d:d9:32:9d:ae:ab: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E5:EB:0F:B8:FD:BE:F7:03:94:D9:DD:63:0F:A2:28:1C:E0:C4:E3 X509v3 Authority Key Identifier: keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ed:18:3f:1b:96:51:43:6a:4b:58:b2:10:9c:08:e5:f4:76: b7:34:dc:25:e6:8c:55:8c:e4:37:9e:b2:a8:48:87:c8:11:db: 1a:aa:67:4b:d8:d8:a1:e7:d7:af:e0:18:3a:b6:98:e6:6b:df: 4e:ee:59:86:be:1c:37:c5:0a:36:ec:1d:45:da:8f:eb:18:28: a0:d5:3e:90:1c:82:de:09:62:d4:1c:3f:6b:c8:fd:f7:68:98: 76:8c:4e:6a:a1:d1:13:43:21:9f:33:20:f1:0d:58:cf:c8:11: 3e:a8:76:be:ed:aa:3c:d4:9b:91:59:f2:a0:9b:5a:aa:37:57: f3:de:13:13:31:5b:1b:96:e6:38:64:1a:81:ed:d7:34:13:1e: de:4e:54:da:04:30:f3:78:d2:cd:5b:d6:dc:89:1f:90:94:70: e0:10:c0:38:93:55:1e:d4:18:49:6b:8c:47:69:e1:d6:df:b9: ea:96:4c:9a:27:a8:f2:6c:0f:07:7a:15:b1:f9:97:b4:f2:f1: 5f:49:d2:09:f4:b6:7b:87:28:07:65:01:dd:53:29:8b:61:8e: a4:88:3d:ab:b7:97:1b:6e:f5:f6:d8:e6:5d:ad:b0:21:75:ec: 1e:49:77:ba:48:b0:99:96:45:09:47:7c:c6:6b:5c:64:dd:19: a0:b8:8d:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsuYNMGjGac/2BVteqPfCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz NzBhMTkwHhcNMjUxMTIyMTgwMDMwWhcNMjUxMTIzMTgwMDMwWjAzMTEwLwYDVQQD EygzN2U1ZWIwZmI4ZmRiZWY3MDM5NGQ5ZGQ2MzBmYTIyODFjZTBjNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C95ymrsrBB9k2mMa1gMDaWHzoij aA+iT/VLu2NJ2CNVUucZvEKjKtTC+M4Rd8Ys8bSebiGrCqaj+CKemsfrtSpQ6dIU OwC2FAdOIsz9qT1xOTbylWgJJjyuWXHb0ZUMjGVjZXHMRIOX5ljtUeoJeWQrNgDo QcVAJXpY8w7pyVesOrtcyafKpJ49R3XyIcz29wKhr1hoRsALyTHwKplaBQjBx98/ u+FeKKqqMsJTF6R9nuaHRidLTT98qVJ9bm/x77tgqeLMptWD+RLgJwfOTuPRqevy PgRZ+BIO1KN3hh2OMIq+tR9HGqUYg9JWJYXmCVefbs6mGO592TKdrqvVVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfl6w+4/b73A5TZ3WMPoigc4MTjMB8GA1UdIwQY MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu0YPxuW UUNqS1iyEJwI5fR2tzTcJeaMVYzkN56yqEiHyBHbGqpnS9jYoefXr+AYOraY5mvf Tu5Zhr4cN8UKNuwdRdqP6xgooNU+kByC3gli1Bw/a8j992iYdoxOaqHRE0MhnzMg 8Q1Yz8gRPqh2vu2qPNSbkVnyoJtaqjdX894TEzFbG5bmOGQage3XNBMe3k5U2gQw 83jSzVvW3IkfkJRw4BDAOJNVHtQYSWuMR2nh1t+56pZMmieo8mwPB3oVsfmXtPLx X0nSCfS2e4coB2UB3VMpi2GOpIg9q7eXG2719tjmXa2wIXXsHkl3ukiwmZZFCUd8 xmtcZN0ZoLiNfg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:58 2025 by rpki-client