This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: 55WrMwdTu0NQ2xtfkSFmP8uNXKBz/zSdJFqmFrZ9JZw= Subject key identifier: EB:65:9C:99:C9:DB:90:C3:B5:3E:D8:B1:1B:FB:AA:99:D7:30:24:E6 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B09DA834462E8FCF1C49F92344BF55653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 102A Signing time: Wed 10 Dec 2025 20:01:13 +0000 Manifest this update: Wed 10 Dec 2025 20:01:13 +0000 Manifest next update: Thu 11 Dec 2025 20:01:13 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 7: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: jkZIldUNcJbBt10OIXkVCLmT0LDUBepjX773hREocnk=) 8: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 9: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 10: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) 11: l7iZbiV7r6tXyFTfuUPxFcrsM4M.roa (hash: G7fwAbhY4dToat2MKtWl3kp+QqFAqtJoJEL3kRG4KEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:da:83:44:62:e8:fc:f1:c4:9f:92:34:4b:f5:56:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Dec 10 20:01:13 2025 GMT Not After : Dec 11 20:01:13 2025 GMT Subject: CN=eb659c99c9db90c3b53ed8b11bfbaa99d73024e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:b5:ef:c2:ed:ab:75:3a:9c:c1:23:a1:5d: 6d:48:dd:82:27:c1:c1:39:58:3c:46:bb:45:83:7c: e9:10:b7:13:d5:19:58:9d:a6:ea:13:7b:d7:e9:7d: bb:24:82:59:8d:61:07:a5:bb:19:bc:bc:e3:76:b4: 2a:bc:f3:bf:b7:b5:98:98:96:9e:01:9c:84:b8:d8: 59:a9:60:82:a9:bf:91:a9:97:a2:e4:e5:65:67:2a: f1:1a:29:b3:c9:8a:ec:1b:d4:f4:3d:45:bc:17:0a: 2c:96:68:0a:12:02:ce:f9:d0:81:64:34:77:09:e8: d1:bf:b5:f7:7a:06:37:6f:12:52:5b:13:3e:ff:2c: a1:3f:8f:a8:a9:be:64:d3:32:f1:6f:11:fe:cb:9c: e0:c4:76:76:ab:72:62:2e:63:81:11:35:32:61:21: d4:ac:cf:62:0a:09:25:33:f9:f6:c9:48:d7:ef:ce: 92:ef:52:8e:cc:6c:96:81:64:26:f5:5c:dd:bd:9f: 0c:7d:bf:af:a6:64:ab:b2:7d:6e:8f:71:d8:72:39: c5:1a:27:81:cb:6c:4d:94:26:44:12:14:0a:c5:29: 5b:54:14:f5:c2:61:62:0b:bf:75:46:6c:98:21:81: 1f:f9:9b:f0:3f:e2:33:29:f1:cc:99:bc:3a:58:e6: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:65:9C:99:C9:DB:90:C3:B5:3E:D8:B1:1B:FB:AA:99:D7:30:24:E6 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:78:ae:28:7f:8c:cd:31:6c:2a:74:24:3e:01:f9:34:f8:d2: 4d:e4:e5:1c:e5:17:08:9d:cf:86:2d:af:2d:7d:6f:c4:ae:70: 06:62:ec:24:81:4b:ec:be:4c:65:67:8a:30:8d:22:ff:8e:1a: 15:9b:5f:03:d1:27:ab:94:06:43:64:f3:81:90:3a:39:8a:97: e3:fd:f9:ce:8d:29:72:33:33:17:ee:83:5a:f6:d2:56:31:50: f1:58:82:a6:83:e9:54:f8:92:2d:be:ee:c3:ee:0b:b6:99:78: 88:72:15:27:28:09:92:e9:60:46:9c:03:5c:45:10:39:7f:08: b3:16:73:5b:f5:fc:a2:1b:75:18:51:68:b5:61:d3:ba:a7:47: 1f:2f:a5:c2:d4:13:a3:e3:e3:50:e2:2d:49:c7:22:74:1d:77: 9c:c8:46:d8:56:5f:39:bf:69:ec:af:b2:d2:80:9c:44:85:86: 22:23:92:4c:87:c3:8f:07:fb:0b:9c:73:6e:0b:fe:e0:19:9d: a2:47:64:a7:e6:e5:3d:65:62:bc:90:e5:23:43:5e:aa:78:34: 69:f4:55:7e:cf:7e:5e:67:e8:4f:fa:d3:cf:a0:bf:48:ae:ab: aa:25:41:77:6a:b6:d8:db:3f:2a:2d:f7:72:cd:53:ad:b2:74: 70:e4:b9:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJ2oNEYuj88cSfkjRL9VZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUxMjEwMjAwMTEzWhcNMjUxMjExMjAwMTEzWjAzMTEwLwYDVQQD EyhlYjY1OWM5OWM5ZGI5MGMzYjUzZWQ4YjExYmZiYWE5OWQ3MzAyNGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl2178Ltq3U6nMEjoV1tSN2CJ8HB OVg8RrtFg3zpELcT1RlYnabqE3vX6X27JIJZjWEHpbsZvLzjdrQqvPO/t7WYmJae AZyEuNhZqWCCqb+RqZei5OVlZyrxGimzyYrsG9T0PUW8FwoslmgKEgLO+dCBZDR3 CejRv7X3egY3bxJSWxM+/yyhP4+oqb5k0zLxbxH+y5zgxHZ2q3JiLmOBETUyYSHU rM9iCgklM/n2yUjX786S71KOzGyWgWQm9VzdvZ8Mfb+vpmSrsn1uj3HYcjnFGieB y2xNlCZEEhQKxSlbVBT1wmFiC791RmyYIYEf+ZvwP+IzKfHMmbw6WObY/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtlnJnJ25DDtT7YsRv7qpnXMCTmMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXiuKH+M zTFsKnQkPgH5NPjSTeTlHOUXCJ3Phi2vLX1vxK5wBmLsJIFL7L5MZWeKMI0i/44a FZtfA9Enq5QGQ2TzgZA6OYqX4/35zo0pcjMzF+6DWvbSVjFQ8ViCpoPpVPiSLb7u w+4Ltpl4iHIVJygJkulgRpwDXEUQOX8IsxZzW/X8oht1GFFotWHTuqdHHy+lwtQT o+PjUOItSccidB13nMhG2FZfOb9p7K+y0oCcRIWGIiOSTIfDjwf7C5xzbgv+4Bmd okdkp+blPWVivJDlI0Neqng0afRVfs9+XmfoT/rTz6C/SK6rqiVBd2q22Ns/Ki33 cs1TrbJ0cOS5xA== -----END CERTIFICATE-----Generated at Thu Dec 11 05:46:16 2025 by rpki-client