This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json) Hash identifier: 6nxWYhWvD+9dxwE3mXHkzJA8qzphxSCUIQ2J0CtmIho= Subject key identifier: 53:B5:19:77:DE:83:8D:4D:63:B1:E6:D1:F7:54:CB:25:EF:5C:77:E0 Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Certificate serial: 019B0FA60A20FF0BD903760B7A707E31F799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft Manifest number: 11D2 Signing time: Thu 11 Dec 2025 23:01:38 +0000 Manifest this update: Thu 11 Dec 2025 23:01:38 +0000 Manifest next update: Fri 12 Dec 2025 23:01:38 +0000 Files and hashes: 1: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: +F1abSNI2Dk5w9SdF22PnQp74TEGItLcZsL67awxMjE=) 2: a15ql9whSmA7v8PDlzobAKStIYU.roa (hash: i4JQTq1d7soOmwMqfdiIR8FwyHTrIMo+VQIkB92oIzE=) 3: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (hash: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=) 4: tars8J2v-8N6JtB2suJ6nsAGhgI.roa (hash: VKSpLn3FB2L/sDLR9l5iJR3MIMweqN1CpStbR7qOoA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a6:0a:20:ff:0b:d9:03:76:0b:7a:70:7e:31:f7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Validity Not Before: Dec 11 23:01:38 2025 GMT Not After : Dec 12 23:01:38 2025 GMT Subject: CN=53b51977de838d4d63b1e6d1f754cb25ef5c77e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f1:a8:b2:08:d8:d9:85:a9:0b:67:0f:64:65: a0:0a:04:2d:a5:d9:de:97:46:aa:b6:0a:7c:6d:0a: ab:bb:97:73:5f:bd:71:ca:8a:93:4c:2b:e9:8e:a3: 43:32:61:46:30:6e:87:f9:f3:62:7a:61:76:1d:04: 24:77:f4:65:17:27:1f:90:61:17:39:f8:98:07:81: ef:a8:15:5a:78:ca:e5:a3:ee:d0:bc:ea:cc:0e:29: 95:74:01:e1:d4:c7:98:9d:8c:8b:11:de:94:f9:16: db:ef:f0:40:85:b1:ad:ae:ad:53:d5:03:8c:ce:5f: 07:03:01:a1:33:57:09:b7:a8:50:12:44:54:4e:76: 4b:5a:61:dd:fc:25:c6:1b:56:82:58:46:6a:d2:82: 5f:94:eb:bd:31:13:33:d6:4a:a8:28:69:3b:2a:ea: 3c:8f:ae:a5:c6:a0:43:04:cc:ad:7e:fd:b5:2a:38: 12:b2:4c:84:e8:43:ff:5e:c1:12:78:73:39:20:ad: 09:4f:d6:58:ad:fb:ed:24:ed:38:ff:41:80:cb:00: 02:60:21:34:fa:b5:19:19:72:da:9c:1a:43:07:2d: 9e:b1:5e:31:3b:03:3e:47:c1:e6:d5:8b:76:13:e8: 31:c3:82:75:f3:bf:cc:34:d0:dc:65:39:c9:da:2f: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B5:19:77:DE:83:8D:4D:63:B1:E6:D1:F7:54:CB:25:EF:5C:77:E0 X509v3 Authority Key Identifier: keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ae:6c:1b:ab:d3:3b:f6:84:01:bb:77:bc:2a:e6:d7:53:8f: a1:d3:a0:97:aa:b1:59:6e:7f:9d:74:da:d6:da:01:c8:39:1a: 3b:5c:56:ac:2d:93:85:78:95:09:89:99:7d:55:92:78:73:d1: b3:9f:35:f9:f9:1e:27:ec:2c:ca:a6:a9:42:45:71:f9:34:53: 91:b8:c7:06:1b:ed:8d:39:6b:29:53:02:66:82:41:26:eb:cb: 08:19:20:be:9e:3f:bf:f8:17:fc:d0:4c:92:cf:68:14:3f:6d: a9:46:de:d7:f9:7e:79:e2:70:52:2d:d7:08:27:86:c9:15:7b: 92:04:78:50:1c:c5:0a:7c:8a:42:b8:69:fc:4c:3c:8c:85:bf: db:b0:22:a6:36:60:fa:b4:5c:58:ce:95:ed:d7:88:2b:23:a0: 63:6f:9d:96:cb:cd:42:58:72:79:a5:e2:c2:fb:5e:30:b5:a9: cf:24:3b:1d:6d:cd:60:e8:a9:6c:da:14:03:f8:18:29:f4:9f: b7:b9:ec:6b:18:07:b3:a0:2d:00:12:b7:f4:eb:72:d6:ff:41: 3a:ff:11:9d:52:5e:cd:b7:bf:46:31:a7:b7:58:8b:48:f2:58: 26:74:2a:d0:77:ff:30:6e:75:a0:40:33:df:58:9a:70:91:b3: cd:bd:40:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpgog/wvZA3YLenB+MfeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzk5ZmJhOWFhZTlkMmQ2ZmZlNTJhZThjNzRhZTM4ZmM2 YzFhZjEwHhcNMjUxMjExMjMwMTM4WhcNMjUxMjEyMjMwMTM4WjAzMTEwLwYDVQQD Eyg1M2I1MTk3N2RlODM4ZDRkNjNiMWU2ZDFmNzU0Y2IyNWVmNWM3N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fGosgjY2YWpC2cPZGWgCgQtpdne l0aqtgp8bQqru5dzX71xyoqTTCvpjqNDMmFGMG6H+fNiemF2HQQkd/RlFycfkGEX OfiYB4HvqBVaeMrlo+7QvOrMDimVdAHh1MeYnYyLEd6U+Rbb7/BAhbGtrq1T1QOM zl8HAwGhM1cJt6hQEkRUTnZLWmHd/CXGG1aCWEZq0oJflOu9MRMz1kqoKGk7Kuo8 j66lxqBDBMytfv21KjgSskyE6EP/XsESeHM5IK0JT9ZYrfvtJO04/0GAywACYCE0 +rUZGXLanBpDBy2esV4xOwM+R8Hm1Yt2E+gxw4J187/MNNDcZTnJ2i+EmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFO1GXfeg41NY7Hm0fdUyyXvXHfgMB8GA1UdIwQY MBaAFF45n7qarp0tb/5Srox0rjj8bBrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMt YmQ4MDlkOWRlZGI5LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMtYmQ4MDlkOWRlZGI5 LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWa5sG6vT O/aEAbt3vCrm11OPodOgl6qxWW5/nXTa1toByDkaO1xWrC2ThXiVCYmZfVWSeHPR s581+fkeJ+wsyqapQkVx+TRTkbjHBhvtjTlrKVMCZoJBJuvLCBkgvp4/v/gX/NBM ks9oFD9tqUbe1/l+eeJwUi3XCCeGyRV7kgR4UBzFCnyKQrhp/Ew8jIW/27AipjZg +rRcWM6V7deIKyOgY2+dlsvNQlhyeaXiwvteMLWpzyQ7HW3NYOipbNoUA/gYKfSf t7nsaxgHs6AtABK39Oty1v9BOv8RnVJezbe/RjGnt1iLSPJYJnQq0Hf/MG51oEAz 31iacJGzzb1A0g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:50 2025 by rpki-client