This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json) Hash identifier: YNiAQIn60nhkaQsuu02N7pyE8ZuD/1O4/14LvzMPHDM= Subject key identifier: 2F:A2:A8:AD:7A:57:8F:86:31:21:FC:92:20:36:FC:12:F7:81:0B:AF Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Certificate serial: 019B115D12151A72B04A12C8D78ED21778D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 07:01:10 +0000 Manifest this update: Fri 12 Dec 2025 07:01:10 +0000 Manifest next update: Sat 13 Dec 2025 07:01:10 +0000 Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=) 2: EyJebdgN_fWVOlchPG_q8jVIsTI.roa (hash: pQpIAFQ+yM9up9856kTHZ8z3CJ8nyC04WtkTgvAhl0g=) 3: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=) 4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: e+mlaohQa1tzojJls8kYMP0pJ1a+cEkxRSIVz3jR3NA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:12:15:1a:72:b0:4a:12:c8:d7:8e:d2:17:78:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Validity Not Before: Dec 12 07:01:10 2025 GMT Not After : Dec 13 07:01:10 2025 GMT Subject: CN=2fa2a8ad7a578f863121fc922036fc12f7810baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:5d:cc:f2:9a:64:b2:8b:83:03:6b:f7:d5: 92:88:2f:2d:db:a0:92:b6:f9:5e:ac:30:df:7e:13: 06:4b:1c:d7:b5:be:16:f8:b6:5f:f6:ca:ae:2a:21: 64:08:25:92:c8:6c:bd:80:4b:be:cb:bb:93:df:7f: 58:8c:70:4f:b7:7f:ec:de:07:0a:72:2e:de:be:ac: 64:c0:de:97:33:12:6b:fb:72:fc:71:dd:30:3c:53: 51:c3:f5:07:e6:e2:11:65:79:df:a6:42:50:e2:15: b9:42:df:1d:7f:b7:87:1c:30:c2:9c:22:63:2e:da: 52:26:e6:c4:5c:f3:97:90:df:b4:7d:3f:d8:17:d9: 79:b7:49:66:10:0f:9a:f1:69:8c:16:54:4d:9f:84: 34:2a:98:fa:64:6d:f7:a7:8a:7b:c3:57:fb:07:d8: 5f:4b:17:8d:8b:69:a4:78:1f:6d:f3:91:95:d0:48: a7:92:11:f8:13:24:29:c6:33:c9:cc:f8:3b:ea:f7: db:72:69:11:dd:08:6d:00:89:98:2a:a2:22:b9:34: 53:98:dc:26:71:e9:89:59:77:91:95:c7:cb:06:78: b7:a3:26:56:94:26:7b:d6:4c:38:5a:9c:69:4d:0c: 1d:a7:b2:43:17:9d:12:7c:2d:1f:8e:9d:17:5d:5b: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A2:A8:AD:7A:57:8F:86:31:21:FC:92:20:36:FC:12:F7:81:0B:AF X509v3 Authority Key Identifier: keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:93:39:6c:e9:0c:71:2b:aa:60:0a:4c:1a:46:04:a5:c2:86: 03:8e:6e:e4:7f:90:0c:f3:6b:4c:13:a7:5c:36:f8:6d:74:dc: 70:18:64:92:cd:ee:12:e0:73:b5:7d:ac:54:3e:86:3d:e0:cd: c9:a5:83:26:06:46:47:66:82:8e:21:3e:23:ab:92:08:01:da: 61:40:8c:2a:d8:41:49:41:90:c4:76:15:50:7f:41:66:07:09: f0:1a:51:59:f7:a0:2c:39:9f:24:bb:ae:67:b1:c8:fc:d2:b2: ee:66:52:d3:95:6a:c1:cb:f7:fe:02:66:4b:f8:a6:4d:42:b5: cd:07:d4:3b:17:b6:d1:bc:8e:96:56:aa:4c:4a:bd:b1:a9:3b: 19:a8:0f:5a:ec:14:e1:f1:74:fa:aa:34:3a:06:87:aa:fe:51: 60:45:20:b3:8d:5b:16:a1:5c:f4:09:29:d4:64:62:68:69:da: a2:08:14:bb:ac:1a:c6:fa:0f:cd:95:30:96:b1:03:79:61:d0: 4c:68:6a:9d:8e:22:71:55:c4:fb:0d:3f:9a:a7:ee:8f:e1:a4: b3:30:d6:a2:4a:0a:8d:7b:db:75:1c:73:6d:c3:c1:29:50:c3: 84:74:43:24:03:ef:0b:64:87:ed:2a:84:85:27:b8:fa:6f:4e: 03:e6:96:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXRIVGnKwShLI147SF3jYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy NDkxYzUwHhcNMjUxMjEyMDcwMTEwWhcNMjUxMjEzMDcwMTEwWjAzMTEwLwYDVQQD EygyZmEyYThhZDdhNTc4Zjg2MzEyMWZjOTIyMDM2ZmMxMmY3ODEwYmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmupdzPKaZLKLgwNr99WSiC8t26CS tvlerDDffhMGSxzXtb4W+LZf9squKiFkCCWSyGy9gEu+y7uT339YjHBPt3/s3gcK ci7evqxkwN6XMxJr+3L8cd0wPFNRw/UH5uIRZXnfpkJQ4hW5Qt8df7eHHDDCnCJj LtpSJubEXPOXkN+0fT/YF9l5t0lmEA+a8WmMFlRNn4Q0Kpj6ZG33p4p7w1f7B9hf SxeNi2mkeB9t85GV0EinkhH4EyQpxjPJzPg76vfbcmkR3QhtAImYKqIiuTRTmNwm cemJWXeRlcfLBni3oyZWlCZ71kw4WpxpTQwdp7JDF50SfC0fjp0XXVvNzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+iqK16V4+GMSH8kiA2/BL3gQuvMB8GA1UdIwQY MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt MWM4YWZkMTlmZGJiLzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpM5bOkM cSuqYApMGkYEpcKGA45u5H+QDPNrTBOnXDb4bXTccBhkks3uEuBztX2sVD6GPeDN yaWDJgZGR2aCjiE+I6uSCAHaYUCMKthBSUGQxHYVUH9BZgcJ8BpRWfegLDmfJLuu Z7HI/NKy7mZS05Vqwcv3/gJmS/imTUK1zQfUOxe20byOllaqTEq9sak7GagPWuwU 4fF0+qo0OgaHqv5RYEUgs41bFqFc9Akp1GRiaGnaoggUu6waxvoPzZUwlrEDeWHQ TGhqnY4icVXE+w0/mqfuj+GkszDWokoKjXvbdRxzbcPBKVDDhHRDJAPvC2SH7SqE hSe4+m9OA+aWHQ== -----END CERTIFICATE-----Generated at Fri Dec 12 11:30:47 2025 by rpki-client