This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json) Hash identifier: 2kvwM+ggcfQ+gKC896LA4FdmGqw8k6ylIV2ngz1nSAA= Subject key identifier: 74:F8:35:F0:B3:3D:33:A5:92:14:22:7C:87:56:82:8A:A0:EC:BF:C6 Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b Certificate serial: 019B0F00C91C5BB800647379C5B992F49861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft Manifest number: 1703 Signing time: Thu 11 Dec 2025 20:01:08 +0000 Manifest this update: Thu 11 Dec 2025 20:01:08 +0000 Manifest next update: Fri 12 Dec 2025 20:01:08 +0000 Files and hashes: 1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=) 2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: DEhgcWig/yMviUubdrsZ+ckB2GOR2BWEuoTM7PJrSN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c9:1c:5b:b8:00:64:73:79:c5:b9:92:f4:98:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b Validity Not Before: Dec 11 20:01:08 2025 GMT Not After : Dec 12 20:01:08 2025 GMT Subject: CN=74f835f0b33d33a59214227c8756828aa0ecbfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:4d:b2:10:42:a3:a5:f3:31:73:99:d9:14: a4:68:21:60:5c:29:e9:0f:9b:b2:69:e8:0a:3c:0b: 2f:35:35:1d:6e:5f:74:db:b7:61:29:aa:f0:80:b1: 48:05:01:60:c3:c4:8d:72:05:04:aa:78:bb:d9:40: c2:62:a0:f9:27:dd:ba:ad:24:4e:03:c0:57:80:4b: 0b:99:95:2a:ce:a0:77:f6:8a:7c:93:16:94:40:ba: cf:76:37:ed:0b:49:b0:bd:bb:36:c0:b8:13:32:d2: 15:d9:d7:a4:33:0f:cc:72:e4:46:08:0e:bf:44:86: 9d:75:d8:9c:4e:24:9e:bc:13:13:a8:6b:4e:ac:bd: 5a:4b:7d:14:63:e6:8a:cd:6c:63:14:dc:b9:f0:f3: a3:3a:14:a3:12:71:9c:21:de:0e:b4:61:26:35:c1: 94:2d:a5:71:6c:5a:8e:42:a0:34:a6:2a:64:9f:05: 6c:8d:e3:c9:6b:03:b1:33:06:5c:84:a5:ab:5e:52: fe:5c:dd:ab:09:08:15:b3:68:73:de:d0:61:a9:cd: e0:c7:8b:62:b9:b9:09:9e:17:ba:38:e5:6e:98:93: ef:4e:b8:bb:a1:85:40:99:8b:1c:df:c0:df:7b:62: 3a:15:f8:dc:b9:24:66:a3:00:2d:91:01:58:ff:2a: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F8:35:F0:B3:3D:33:A5:92:14:22:7C:87:56:82:8A:A0:EC:BF:C6 X509v3 Authority Key Identifier: keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:89:be:a4:38:d4:6c:f2:00:9f:55:62:74:40:8b:ad:e8:e1: a9:12:23:77:02:d5:44:2c:1f:2b:62:ba:3e:96:8f:52:8b:48: de:eb:88:bc:b8:a5:10:78:55:e6:7d:ab:d3:98:c3:f5:f5:ac: 22:1f:5e:1a:d3:2e:d9:72:6a:6b:43:1f:db:ee:44:ef:bb:d4: ca:42:e5:48:a5:5e:a2:69:27:33:be:54:c9:52:61:ef:43:2e: 8c:a6:98:04:32:f7:26:0b:20:38:46:ec:f8:fb:a7:32:78:14: 92:a7:4b:43:56:27:d2:1c:51:f7:7c:a3:bf:84:ab:ec:69:7c: c9:f0:63:b3:88:02:fc:e9:13:c2:81:0f:33:b1:65:92:34:b9: f7:c2:e0:2c:a9:2f:e3:ac:26:23:a9:54:9f:8a:fb:ee:da:f5: 2e:87:ae:c8:17:57:4f:91:de:46:44:5f:84:11:1b:5c:0b:ad: ed:d8:c9:a3:69:fb:f1:ec:35:a0:57:48:4b:25:16:0a:e3:d3: b2:fe:62:a7:a8:30:4c:e8:74:04:9a:59:fa:6e:15:9b:f1:dd: 71:8d:79:5b:be:eb:45:90:8d:fd:c0:2b:a5:4c:40:de:d0:af: 28:cf:b5:bd:da:04:17:85:e8:e0:51:6f:49:5d:33:d1:21:f7: ab:b5:32:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMkcW7gAZHN5xbmS9JhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWM0MWRhZjAwOTJiNzAzYmMwNTliYTEzNTNmMDcxZWQx MjE5OWIwHhcNMjUxMjExMjAwMTA4WhcNMjUxMjEyMjAwMTA4WjAzMTEwLwYDVQQD Eyg3NGY4MzVmMGIzM2QzM2E1OTIxNDIyN2M4NzU2ODI4YWEwZWNiZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq49NshBCo6XzMXOZ2RSkaCFgXCnp D5uyaegKPAsvNTUdbl9027dhKarwgLFIBQFgw8SNcgUEqni72UDCYqD5J926rSRO A8BXgEsLmZUqzqB39op8kxaUQLrPdjftC0mwvbs2wLgTMtIV2dekMw/McuRGCA6/ RIadddicTiSevBMTqGtOrL1aS30UY+aKzWxjFNy58POjOhSjEnGcId4OtGEmNcGU LaVxbFqOQqA0pipknwVsjePJawOxMwZchKWrXlL+XN2rCQgVs2hz3tBhqc3gx4ti ubkJnhe6OOVumJPvTri7oYVAmYsc38Dfe2I6FfjcuSRmowAtkQFY/ypT7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT4NfCzPTOlkhQifIdWgoqg7L/GMB8GA1UdIwQY MBaAFMWcQdrwCStwO8BZuhNT8HHtEhmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQt YzU0OTNmZTgyZTI2LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQtYzU0OTNmZTgyZTI2 LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOom+pDjU bPIAn1VidECLrejhqRIjdwLVRCwfK2K6PpaPUotI3uuIvLilEHhV5n2r05jD9fWs Ih9eGtMu2XJqa0Mf2+5E77vUykLlSKVeomknM75UyVJh70MujKaYBDL3JgsgOEbs +PunMngUkqdLQ1Yn0hxR93yjv4Sr7Gl8yfBjs4gC/OkTwoEPM7FlkjS598LgLKkv 46wmI6lUn4r77tr1LoeuyBdXT5HeRkRfhBEbXAut7djJo2n78ew1oFdISyUWCuPT sv5ip6gwTOh0BJpZ+m4Vm/HdcY15W77rRZCN/cArpUxA3tCvKM+1vdoEF4Xo4FFv SV0z0SH3q7Uy6Q== -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:52 2025 by rpki-client