This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json) Hash identifier: GMkdI0pIbmPEAMi+tTfHlx/QlIzD+tk87UAv/kbY4tQ= Subject key identifier: D2:75:86:55:08:04:52:30:63:BE:57:5B:AF:41:D7:24:6E:C0:FB:E3 Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa Certificate serial: 019B19F21355B186D82CF35D47A03459BA50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft Manifest number: 045C Signing time: Sat 13 Dec 2025 23:00:53 +0000 Manifest this update: Sat 13 Dec 2025 23:00:53 +0000 Manifest next update: Sun 14 Dec 2025 23:00:53 +0000 Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=) 2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: FLUC919QuQrLllkkmTXzvnk5qdt8F5DHCZkz70H+9tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:13:55:b1:86:d8:2c:f3:5d:47:a0:34:59:ba:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa Validity Not Before: Dec 13 23:00:53 2025 GMT Not After : Dec 14 23:00:53 2025 GMT Subject: CN=d27586550804523063be575baf41d7246ec0fbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:ab:61:db:2b:6d:2f:4b:54:9d:00:20:96: fa:ee:99:cf:8d:50:f4:d7:1d:b7:62:4d:1b:76:b9: 5e:18:c2:38:30:40:fd:ef:0a:9c:0d:88:2b:19:ed: cc:34:7f:eb:9c:93:14:7b:df:31:04:2c:b7:53:d8: 2e:b1:4b:c5:94:52:91:9e:c8:99:3c:73:0c:69:82: 5e:c1:bb:26:d4:c7:d2:60:f2:5e:f0:ae:4c:a0:64: 70:6b:cd:44:2d:3e:d1:b3:7c:9b:d7:95:f1:e7:d7: 0e:98:5a:fc:8d:95:b3:7f:26:89:50:7b:79:0d:62: 57:7a:e6:e1:3a:2d:e0:60:5e:e1:28:cf:c3:96:15: 05:2e:28:e4:76:e9:13:af:67:3e:7e:71:b2:a5:b5: 90:93:9f:98:44:26:97:34:3c:32:e0:e6:06:da:66: e8:c6:3f:0f:5d:71:5f:5a:c1:32:8d:13:17:1d:75: ca:f2:ad:ed:ba:39:b3:ed:4e:11:ef:60:e1:ee:8a: c8:91:6e:95:e4:34:7a:ef:c4:0a:4a:d9:2a:29:77: c6:29:bf:51:88:5a:96:c1:41:09:0d:db:4e:1a:e2: 0e:56:f4:ba:c4:43:c2:48:f5:10:76:21:76:0d:38: c1:a8:87:d2:57:84:82:79:b2:04:23:5e:b9:5e:d4: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:75:86:55:08:04:52:30:63:BE:57:5B:AF:41:D7:24:6E:C0:FB:E3 X509v3 Authority Key Identifier: keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2a:a6:7c:33:af:74:85:15:81:66:20:54:ae:d5:89:53:a4: c4:c8:df:54:c5:b9:03:46:45:14:ba:27:c0:1b:07:bb:af:b5: 45:ca:70:16:6e:c7:7a:6f:6d:27:c3:d4:bf:22:55:44:12:3d: 06:20:de:31:f7:d4:96:dd:73:f5:1a:02:cc:44:85:47:4a:21: 0c:57:11:88:2c:4b:35:66:2e:a7:4d:5f:84:94:04:3d:89:ff: 84:d4:fc:02:60:3f:71:be:b9:e1:82:df:e9:9b:48:54:f6:05: 81:9f:af:a5:18:ee:7b:de:9b:a5:92:59:f4:10:96:7d:50:6a: f9:03:7f:d1:63:75:81:ad:3a:59:74:b9:39:0a:40:4b:ef:92: 6d:37:e8:cb:5c:da:a7:23:e4:0b:85:2d:d1:2b:cf:70:f0:01: d2:76:6c:9e:52:f5:e0:3b:28:f0:58:f5:c4:dc:27:56:ad:29: b5:f7:dd:ea:f4:16:d5:24:73:ff:20:3b:b0:12:a7:dc:bc:35: 26:47:bb:8e:9f:05:b0:cb:21:90:1e:5a:8e:ed:5c:b0:99:12: 2c:94:08:c4:e2:dc:4d:35:90:b0:c0:59:95:f3:71:e5:de:3e: 25:17:ad:cd:38:fc:0a:97:7e:79:95:39:7f:0f:d2:0d:49:53: 2a:1d:8b:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8hNVsYbYLPNdR6A0WbpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGNkOGQwYTJhYmFlOGMyNTM5MWYyMzA1MWNjM2YwZjI0 NzkzYWEwHhcNMjUxMjEzMjMwMDUzWhcNMjUxMjE0MjMwMDUzWjAzMTEwLwYDVQQD EyhkMjc1ODY1NTA4MDQ1MjMwNjNiZTU3NWJhZjQxZDcyNDZlYzBmYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj2rYdsrbS9LVJ0AIJb67pnPjVD0 1x23Yk0bdrleGMI4MED97wqcDYgrGe3MNH/rnJMUe98xBCy3U9gusUvFlFKRnsiZ PHMMaYJewbsm1MfSYPJe8K5MoGRwa81ELT7Rs3yb15Xx59cOmFr8jZWzfyaJUHt5 DWJXeubhOi3gYF7hKM/DlhUFLijkdukTr2c+fnGypbWQk5+YRCaXNDwy4OYG2mbo xj8PXXFfWsEyjRMXHXXK8q3tujmz7U4R72Dh7orIkW6V5DR678QKStkqKXfGKb9R iFqWwUEJDdtOGuIOVvS6xEPCSPUQdiF2DTjBqIfSV4SCebIEI165XtQs2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ1hlUIBFIwY75XW69B1yRuwPvjMB8GA1UdIwQY MBaAFMXc2NCiq66MJTkfIwUcw/DyR5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQt Yzc5ZDQ2YTkyMzliLzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mMzBjNGQtYjQyMi00NTgxLWJmMDQtYzc5ZDQ2YTkyMzli LzEveGR6WTBLS3Jyb3dsT1I4akJSekQ4UEpIazZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSqmfDOv dIUVgWYgVK7ViVOkxMjfVMW5A0ZFFLonwBsHu6+1RcpwFm7Hem9tJ8PUvyJVRBI9 BiDeMffUlt1z9RoCzESFR0ohDFcRiCxLNWYup01fhJQEPYn/hNT8AmA/cb654YLf 6ZtIVPYFgZ+vpRjue96bpZJZ9BCWfVBq+QN/0WN1ga06WXS5OQpAS++SbTfoy1za pyPkC4Ut0SvPcPAB0nZsnlL14Dso8Fj1xNwnVq0ptffd6vQW1SRz/yA7sBKn3Lw1 Jke7jp8FsMshkB5aju1csJkSLJQIxOLcTTWQsMBZlfNx5d4+JRetzTj8Cpd+eZU5 fw/SDUlTKh2LJg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:51 2025 by rpki-client