This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json) Hash identifier: awOasCFh+s9d3ZbipOgA46TCAJw413dkxNxLhPJQtgg= Subject key identifier: F6:3B:42:89:A5:01:12:69:A9:F0:B9:11:03:2A:22:8B:79:74:90:6E Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e Certificate serial: 019B2852EFEEACCC7953B6BB1A08DB3102D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft Manifest number: 0D2F Signing time: Tue 16 Dec 2025 18:01:22 +0000 Manifest this update: Tue 16 Dec 2025 18:01:22 +0000 Manifest next update: Wed 17 Dec 2025 18:01:22 +0000 Files and hashes: 1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: 4GnU/WFZCcFHNPZsqkdt1QMX3V6SIAMneK4SvxHP/Uk=) 2: gzdyy5qInnSa0M6b956pVUzgC-k.roa (hash: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:ef:ee:ac:cc:79:53:b6:bb:1a:08:db:31:02:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e Validity Not Before: Dec 16 18:01:22 2025 GMT Not After : Dec 17 18:01:22 2025 GMT Subject: CN=f63b4289a5011269a9f0b911032a228b7974906e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:cd:cd:b1:35:49:db:eb:4e:ed:f0:73:83: 4c:68:70:9d:b8:95:6b:a1:02:e0:4d:39:39:ef:3e: 66:d0:87:e5:44:3d:df:a0:9e:1c:db:c0:ad:44:aa: 86:92:4e:3b:da:fc:9d:fe:d3:fc:00:84:73:8b:da: 4f:83:7c:f9:a0:92:50:12:f4:f7:3c:72:24:53:c3: cb:e8:5e:79:ec:1a:95:21:8f:1f:bf:7a:e1:d7:06: c8:25:9b:37:81:b7:54:3b:8b:86:21:00:eb:4b:47: a8:b3:de:de:67:f7:32:84:77:07:0a:8e:8e:ce:f7: 5c:0b:a5:0d:a5:96:dd:5e:ef:05:d3:9b:be:37:23: 4c:7a:e5:ee:5c:77:da:5e:a0:a6:d3:a0:ac:5e:cf: 2c:f8:f4:6c:5d:64:3d:6b:9b:c6:5d:b0:da:a4:1b: c5:52:0d:4d:e5:85:02:b9:c8:f0:5c:93:9d:d1:ce: 00:14:29:da:61:63:22:b8:ee:f9:ac:50:f2:aa:38: 20:b4:37:30:e1:21:7e:89:3d:58:54:8d:73:7e:ed: 8a:8c:a1:37:1f:56:99:d3:f2:89:12:35:81:f3:e9: 3f:69:c0:20:a8:99:31:32:32:40:f2:10:f5:01:bc: 39:c2:5e:e8:ed:59:01:0c:48:96:ab:5c:e8:94:40: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3B:42:89:A5:01:12:69:A9:F0:B9:11:03:2A:22:8B:79:74:90:6E X509v3 Authority Key Identifier: keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:12:73:a5:a0:ea:a3:e7:fc:1a:cc:5a:b9:1b:9d:fd:4c:c9: 7e:d7:24:ae:08:eb:31:87:17:70:78:87:d9:39:ab:1f:02:60: e8:30:70:21:e5:1a:7e:25:b9:a3:52:d5:ad:f0:fe:72:70:0e: 97:9b:2d:6f:1c:73:c9:e3:9b:82:6d:7d:74:52:c2:f2:74:dd: 04:ac:85:26:4f:e2:22:6a:54:41:e6:6e:6c:67:83:2f:24:d2: c2:b0:da:fc:bc:47:8d:9d:d8:29:7f:5a:9b:a4:fb:dd:43:f9: aa:26:71:96:31:6c:9a:43:61:be:fe:8a:b3:a0:93:27:ec:c7: 7f:70:fb:9c:0a:34:31:7d:53:89:d9:a8:ed:b5:29:ff:3f:96: 34:d6:9d:b3:ab:9e:86:89:ee:c5:49:6b:2f:a9:27:a0:13:34: e2:f2:78:a7:c6:6a:91:dc:61:d6:a0:f4:50:79:b2:1c:93:7a: 1d:29:30:1a:ab:25:70:5b:ad:88:f1:4c:d3:e9:cf:82:04:fa: 18:c2:e9:a6:af:bb:67:b0:b7:dc:b5:4b:ba:17:73:c2:82:fb: a1:bc:b8:88:90:83:7e:ca:3f:44:db:6c:ed:f2:7b:37:30:cd: 15:3a:b8:e2:fc:51:f5:ee:8a:d2:ba:42:ee:21:f6:58:20:b7: 54:76:5c:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUu/urMx5U7a7GgjbMQLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNzE3ZjNhYjYzOTQ1YTFiZTczOWMyYjNhMjU4OWJlYTU1 ZGRiNmUwHhcNMjUxMjE2MTgwMTIyWhcNMjUxMjE3MTgwMTIyWjAzMTEwLwYDVQQD EyhmNjNiNDI4OWE1MDExMjY5YTlmMGI5MTEwMzJhMjI4Yjc5NzQ5MDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkXNzbE1SdvrTu3wc4NMaHCduJVr oQLgTTk57z5m0IflRD3foJ4c28CtRKqGkk472vyd/tP8AIRzi9pPg3z5oJJQEvT3 PHIkU8PL6F557BqVIY8fv3rh1wbIJZs3gbdUO4uGIQDrS0eos97eZ/cyhHcHCo6O zvdcC6UNpZbdXu8F05u+NyNMeuXuXHfaXqCm06CsXs8s+PRsXWQ9a5vGXbDapBvF Ug1N5YUCucjwXJOd0c4AFCnaYWMiuO75rFDyqjggtDcw4SF+iT1YVI1zfu2KjKE3 H1aZ0/KJEjWB8+k/acAgqJkxMjJA8hD1Abw5wl7o7VkBDEiWq1zolEAa8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPY7QomlARJpqfC5EQMqIot5dJBuMB8GA1UdIwQY MBaAFP1xfzq2OUWhvnOcKzolib6lXdtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1hGX09yWTVSYUctYzV3ck9pV0p2cVZkMjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yZjBhNjYtMTYzNC00MGZiLTk5YjAt OTMxNTA1ZmY0MWM1LzEvX1hGX09yWTVSYUctYzV3ck9pV0p2cVZkMjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yZjBhNjYtMTYzNC00MGZiLTk5YjAtOTMxNTA1ZmY0MWM1 LzEvX1hGX09yWTVSYUctYzV3ck9pV0p2cVZkMjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxJzpaDq o+f8GsxauRud/UzJftckrgjrMYcXcHiH2TmrHwJg6DBwIeUafiW5o1LVrfD+cnAO l5stbxxzyeObgm19dFLC8nTdBKyFJk/iImpUQeZubGeDLyTSwrDa/LxHjZ3YKX9a m6T73UP5qiZxljFsmkNhvv6Ks6CTJ+zHf3D7nAo0MX1Tidmo7bUp/z+WNNads6ue honuxUlrL6knoBM04vJ4p8Zqkdxh1qD0UHmyHJN6HSkwGqslcFutiPFM0+nPggT6 GMLppq+7Z7C33LVLuhdzwoL7oby4iJCDfso/RNts7fJ7NzDNFTq44vxR9e6K0rpC 7iH2WCC3VHZciw== -----END CERTIFICATE-----Generated at Tue Dec 16 23:02:00 2025 by rpki-client