This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: vcYKgSdUsFS621nVe6COb3uCl2ZgPAdwNn3AHM3GjKw= Subject key identifier: 0F:FA:A1:6E:5E:DF:39:8C:7D:49:16:B7:0F:61:7B:78:3D:47:AB:81 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019B022088EE7C74E96A0A584D94074AD0F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1324 Signing time: Tue 09 Dec 2025 08:00:45 +0000 Manifest this update: Tue 09 Dec 2025 08:00:45 +0000 Manifest next update: Wed 10 Dec 2025 08:00:45 +0000 Files and hashes: 1: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (hash: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=) 2: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=) 3: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=) 4: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=) 5: DvF8t9IlxmCDE7eFFlHlL3S7BtQ.roa (hash: q1i0GBgyIfuASOH5psAfGMqR7ZZC66TTNfURWKBgMUE=) 6: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=) 7: Y2nJBnRnNh-WlEWlPML8mjTDUbM.roa (hash: EQQSLf951cekN3Ib/OD0TFtguegsJd5BXORrWTSHjrc=) 8: ZAx7Azq9YHnuLtmsAGgkpQ9XaQk.roa (hash: Nv+QAFomBrYRU4aOf9OpKKgjZFP6zJcF4QMA/O4RLyo=) 9: cGP_gRD-iBTmMU6jmRktcee-Lfo.roa (hash: wwltlEMfjaaWf1NiPcGDf2EH6nVadz8p372jM5CZNuE=) 10: fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa (hash: xpyUK/0mWO28W5ZFHD9SD69xhudYUF35PPRLXFMXs6I=) 11: kskuiZFZ4qnR7ertADOXhwQ9Oco.roa (hash: ZSYBr6SFSDGeJPdXMk2oIUoftKHvv6I70l0Yr4tHKxk=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: RG2bXGq+edXGsxNjaIgHIeNxg3sjWPP0JimFirzuUCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:20:88:ee:7c:74:e9:6a:0a:58:4d:94:07:4a:d0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Dec 9 08:00:45 2025 GMT Not After : Dec 10 08:00:45 2025 GMT Subject: CN=0ffaa16e5edf398c7d4916b70f617b783d47ab81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:e5:5a:2a:e0:3e:bc:d2:b9:57:df:e2:e8: 7c:bc:54:03:e8:95:28:a8:7e:4e:a4:bc:ef:20:13: 08:99:45:08:a3:07:14:f4:c4:6b:d0:16:0f:1e:17: d6:30:67:37:3c:63:8b:49:32:0e:78:96:f2:5d:e9: ab:4a:9a:b3:ff:e3:a7:d1:1e:5c:ea:65:83:06:51: 71:e3:49:dd:36:cf:5a:2a:f9:98:6e:b7:a2:df:a6: 7a:e4:8e:64:9f:21:fd:e0:00:22:cc:ca:17:b7:12: 7e:11:00:62:39:e6:51:79:b6:da:7e:90:4d:ca:b5: 81:d3:ea:48:3c:27:93:39:15:ec:1e:42:b1:b4:42: db:0b:44:24:ad:35:e9:f1:bd:e5:c0:3c:8c:17:95: 8a:18:fb:e5:1e:27:67:b8:1c:32:e6:d0:a0:f6:c8: 3a:ff:0c:29:a9:b5:00:5d:08:21:82:19:9d:63:25: 33:7d:d6:5a:38:48:89:be:e9:94:df:a0:fd:db:f7: a7:b1:b1:b8:42:40:13:4d:2c:c8:a1:2f:2e:d5:87: ff:2b:e4:ad:5c:8d:68:d0:95:63:b0:6d:85:88:6b: c8:37:31:f3:2d:2b:f4:b3:bb:52:e9:6a:54:67:8b: 36:5e:4c:ce:d0:3b:88:f0:dc:c8:94:bb:47:cd:37: 3c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FA:A1:6E:5E:DF:39:8C:7D:49:16:B7:0F:61:7B:78:3D:47:AB:81 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a4:38:d7:3b:ed:5a:e9:6a:0e:65:3d:bc:21:c6:41:86:d3: 82:8c:60:53:c3:a2:2e:bb:55:47:ef:c7:8d:d6:2f:94:f9:dc: 99:00:88:bb:5f:cb:69:52:04:95:a5:d3:6f:8d:9a:20:01:c2: e6:ba:59:57:e2:84:40:2e:8b:1e:e5:56:4d:6d:a6:02:55:99: 57:bd:78:33:71:65:18:3d:15:5f:61:e9:ee:2d:ee:59:24:09: 1d:c9:9b:82:0b:e1:b0:09:b7:b6:21:15:e0:89:5d:21:09:f4: 7f:bc:fb:a5:20:9c:cd:e1:6b:2a:cc:b4:8a:c1:19:2e:08:88: c6:8f:53:21:b4:c0:72:55:bd:24:2e:3e:b5:c3:4d:3d:0b:4d: 4a:50:0d:40:e9:1e:7e:fa:bc:19:a0:ae:1e:18:ee:8c:d9:66: dd:3a:09:68:95:46:4b:0d:76:0f:f1:5c:ab:cf:70:af:68:f5: d4:99:27:22:a9:5e:da:f6:4e:24:c5:d7:15:a8:18:93:72:6b: 34:18:58:27:34:8a:d9:4e:f2:b2:17:dd:8b:0c:c7:1b:84:ea: 66:95:cc:1e:78:12:5a:2a:61:2e:99:da:58:0a:8a:cd:32:45: 6e:30:21:a8:19:eb:ed:ce:d2:cd:ca:37:3f:d8:30:7e:11:57: a3:b8:76:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsCIIjufHTpagpYTZQHStDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjUxMjA5MDgwMDQ1WhcNMjUxMjEwMDgwMDQ1WjAzMTEwLwYDVQQD EygwZmZhYTE2ZTVlZGYzOThjN2Q0OTE2YjcwZjYxN2I3ODNkNDdhYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CrlWirgPrzSuVff4uh8vFQD6JUo qH5OpLzvIBMImUUIowcU9MRr0BYPHhfWMGc3PGOLSTIOeJbyXemrSpqz/+On0R5c 6mWDBlFx40ndNs9aKvmYbrei36Z65I5knyH94AAizMoXtxJ+EQBiOeZRebbafpBN yrWB0+pIPCeTORXsHkKxtELbC0QkrTXp8b3lwDyMF5WKGPvlHidnuBwy5tCg9sg6 /wwpqbUAXQghghmdYyUzfdZaOEiJvumU36D92/ensbG4QkATTSzIoS8u1Yf/K+St XI1o0JVjsG2FiGvINzHzLSv0s7tS6WpUZ4s2XkzO0DuI8NzIlLtHzTc8dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/6oW5e3zmMfUkWtw9he3g9R6uBMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKQ41zvt WulqDmU9vCHGQYbTgoxgU8OiLrtVR+/HjdYvlPncmQCIu1/LaVIElaXTb42aIAHC 5rpZV+KEQC6LHuVWTW2mAlWZV714M3FlGD0VX2Hp7i3uWSQJHcmbggvhsAm3tiEV 4IldIQn0f7z7pSCczeFrKsy0isEZLgiIxo9TIbTAclW9JC4+tcNNPQtNSlANQOke fvq8GaCuHhjujNlm3ToJaJVGSw12D/Fcq89wr2j11JknIqle2vZOJMXXFagYk3Jr NBhYJzSK2U7yshfdiwzHG4TqZpXMHngSWiphLpnaWAqKzTJFbjAhqBnr7c7Szco3 P9gwfhFXo7h2WQ== -----END CERTIFICATE-----Generated at Tue Dec 9 15:25:42 2025 by rpki-client