This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json) Hash identifier: gAuesCnsG2A0mG6O9HGGhD0aVdCm6l9jGBAGITJDqp4= Subject key identifier: 03:E0:5B:C1:A2:8D:28:BE:F7:D7:96:DB:11:C0:7B:67:FE:85:68:6E Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Certificate serial: 019B3DFEF1E0EF0DABB3864ACC5FA350FD9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft Manifest number: 057B Signing time: Sat 20 Dec 2025 23:01:16 +0000 Manifest this update: Sat 20 Dec 2025 23:01:16 +0000 Manifest next update: Sun 21 Dec 2025 23:01:16 +0000 Files and hashes: 1: 6ygnhBUtwPQwZvSXcNdi14r70G8.roa (hash: GkX4vYSYMB0jxRhwwYLdEtE/7rtPvxVB7Y43y4t2nDM=) 2: QWrzK8RWuSQghqCldb_6fzSJudQ.roa (hash: QojBEqYBdik2hEDKGtROktHVNznRag8r5CcPDwvCnWg=) 3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: nUqV++1FbybESAV7WV4HR2ru6RUVYiooKghmJ7RfOGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:f1:e0:ef:0d:ab:b3:86:4a:cc:5f:a3:50:fd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Validity Not Before: Dec 20 23:01:16 2025 GMT Not After : Dec 21 23:01:16 2025 GMT Subject: CN=03e05bc1a28d28bef7d796db11c07b67fe85686e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:e5:40:84:dd:59:71:e5:69:08:30:89:5b: 55:c1:68:48:dc:6b:b6:ee:1b:d4:ba:e3:b8:91:b7: 77:c7:3f:0c:4a:01:8c:32:c9:4a:38:98:58:b3:1c: 6a:68:33:fb:a1:59:6e:81:30:0c:e1:db:1d:39:cc: fe:df:86:c4:d6:06:f8:32:66:8a:84:0c:51:5d:0d: 25:fa:c7:bb:e0:f6:7d:da:ea:3a:e4:8f:5b:db:a9: 12:cc:47:12:1d:d0:a0:53:bc:d0:0b:fb:21:c5:38: 74:2f:00:7e:b9:10:ba:bd:1b:45:09:6b:8b:a7:44: 73:39:c7:bc:5b:5e:51:5d:da:f6:6c:ce:f5:11:be: 36:4c:35:bc:5a:65:30:40:a3:bd:6e:8f:26:42:a5: 1d:aa:a2:89:68:ce:b9:de:0c:28:4c:42:e5:9c:07: 86:53:3a:23:66:80:d5:48:c7:6f:ef:48:b7:98:ff: e7:3e:f1:a6:dd:9c:b2:48:23:d9:71:27:0f:c9:12: ac:86:03:26:61:51:87:43:c1:85:42:ab:7a:68:bc: 27:43:6c:00:d1:68:e0:44:fd:32:ae:04:ac:1e:55: 8b:38:cd:3a:07:01:aa:49:43:ac:b5:87:d3:7d:da: 15:5d:a6:a2:78:39:18:cf:80:5c:9f:30:48:4f:6c: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E0:5B:C1:A2:8D:28:BE:F7:D7:96:DB:11:C0:7B:67:FE:85:68:6E X509v3 Authority Key Identifier: keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:31:09:c6:b7:a0:ed:79:9b:0d:f7:82:8c:21:82:20:2c:dc: 91:0f:98:4f:a6:d1:fe:c2:00:0e:47:1d:87:ae:d5:d0:90:42: ad:b6:a2:bf:2b:84:25:a1:a5:fb:05:0b:ee:79:dd:c2:e5:5c: 6d:b6:0b:bc:fd:6e:ab:cc:f4:c5:99:31:04:88:74:b4:ff:40: e7:36:7b:c9:f1:62:8f:cf:87:e2:83:7a:a4:64:57:55:46:c6: ca:26:1d:dc:a5:4b:97:81:1f:b4:79:e3:38:75:ca:fa:93:9f: 56:58:f8:b2:06:ea:7f:94:9b:30:8f:4a:af:a6:6e:f2:63:7d: b4:b8:7c:9a:fe:ac:ee:a0:69:f6:4a:df:30:a1:fd:65:f6:e5: 0e:b7:49:0f:32:2a:bf:fd:6a:1b:a9:05:56:7f:45:6a:b0:3f: 9c:56:db:02:81:65:27:22:9b:6d:21:15:3a:10:e0:a0:52:18: ab:08:88:3f:73:55:a3:2d:e5:e8:86:37:49:b5:2c:1e:15:1e: 0a:aa:59:b0:39:c9:5c:2d:e4:7c:2c:ef:a2:60:ed:08:0d:d6: e6:35:7d:a0:62:f6:3f:e9:86:df:c2:7c:8a:70:67:bc:1f:dd: 6b:07:91:1f:09:3e:14:6f:23:d5:15:94:3c:bb:fd:b9:2f:b3: cb:84:e9:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/vHg7w2rs4ZKzF+jUP2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi YmI1YWQwHhcNMjUxMjIwMjMwMTE2WhcNMjUxMjIxMjMwMTE2WjAzMTEwLwYDVQQD EygwM2UwNWJjMWEyOGQyOGJlZjdkNzk2ZGIxMWMwN2I2N2ZlODU2ODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBzlQITdWXHlaQgwiVtVwWhI3Gu2 7hvUuuO4kbd3xz8MSgGMMslKOJhYsxxqaDP7oVlugTAM4dsdOcz+34bE1gb4MmaK hAxRXQ0l+se74PZ92uo65I9b26kSzEcSHdCgU7zQC/shxTh0LwB+uRC6vRtFCWuL p0RzOce8W15RXdr2bM71Eb42TDW8WmUwQKO9bo8mQqUdqqKJaM653gwoTELlnAeG UzojZoDVSMdv70i3mP/nPvGm3ZyySCPZcScPyRKshgMmYVGHQ8GFQqt6aLwnQ2wA 0WjgRP0yrgSsHlWLOM06BwGqSUOstYfTfdoVXaaieDkYz4BcnzBIT2xsVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPgW8GijSi+99eW2xHAe2f+hWhuMB8GA1UdIwQY MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt NTQyMDRkZGQyY2E2LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2 LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzEJxreg 7XmbDfeCjCGCICzckQ+YT6bR/sIADkcdh67V0JBCrbaivyuEJaGl+wUL7nndwuVc bbYLvP1uq8z0xZkxBIh0tP9A5zZ7yfFij8+H4oN6pGRXVUbGyiYd3KVLl4EftHnj OHXK+pOfVlj4sgbqf5SbMI9Kr6Zu8mN9tLh8mv6s7qBp9krfMKH9ZfblDrdJDzIq v/1qG6kFVn9FarA/nFbbAoFlJyKbbSEVOhDgoFIYqwiIP3NVoy3l6IY3SbUsHhUe CqpZsDnJXC3kfCzvomDtCA3W5jV9oGL2P+mG38J8inBnvB/daweRHwk+FG8j1RWU PLv9uS+zy4TpqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:33:55 2025 by rpki-client