This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json) Hash identifier: XWS+LZCNYrKav/r6FsVDZROyT5o6YtECPKqXlBPVKu8= Subject key identifier: F0:15:4A:D2:AB:CA:02:19:8F:09:31:DD:FC:1A:61:38:FC:F6:7E:E2 Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605 Certificate serial: 019B0746DAA47936507616C0035BC1C52A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft Manifest number: 064C Signing time: Wed 10 Dec 2025 08:00:42 +0000 Manifest this update: Wed 10 Dec 2025 08:00:42 +0000 Manifest next update: Thu 11 Dec 2025 08:00:42 +0000 Files and hashes: 1: 02wqSv6S3QfGQclsARr7QXNvdWI.roa (hash: blfoT2HbR+GD9/4BT0/OCiD+iemp7TQrPXABrjQFnJw=) 2: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (hash: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=) 3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: PYEnw9R1+2gIBQ8MJPXovvKU3z4Hto6UWlh8XjyZFjI=) 4: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:46:da:a4:79:36:50:76:16:c0:03:5b:c1:c5:2a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605 Validity Not Before: Dec 10 08:00:42 2025 GMT Not After : Dec 11 08:00:42 2025 GMT Subject: CN=f0154ad2abca02198f0931ddfc1a6138fcf67ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b1:4a:6f:31:4b:46:58:09:31:06:c2:a4:e4: 15:de:b6:e0:8a:14:f7:c3:30:bb:f7:ca:36:59:b6: f9:99:38:45:d7:80:b2:2e:99:a9:67:bf:ac:8d:09: 91:b0:1c:f0:d4:34:17:b6:6f:f5:4f:48:98:b2:35: 88:76:33:fe:67:72:13:8c:0c:e2:4d:64:8a:de:d1: 9c:98:94:7e:d3:05:c4:26:c0:1e:02:bf:3e:ee:f9: 47:d3:f0:f2:3d:7d:5d:49:f5:c2:45:17:fd:0c:79: c0:1e:d0:84:ce:9d:c2:8f:d8:5e:33:4d:9d:b5:40: 94:bc:c1:38:c0:f8:a7:fb:1e:d2:c1:c2:20:e0:58: 35:d7:25:15:58:cf:cc:7d:1b:51:1c:e0:f0:56:bc: a0:a2:d4:84:3f:b1:7b:d5:43:2c:10:da:51:e0:4b: eb:75:f6:5f:0a:77:5b:d9:3b:7f:12:9f:20:10:e6: 1b:a3:7f:f6:70:4e:50:60:83:d4:b0:12:2a:1c:1d: b2:d2:41:39:43:5d:17:37:3a:00:7b:40:dd:6f:7e: 6d:a9:c1:60:a6:fd:8c:c5:c0:b1:9d:3c:62:35:d1: 71:7d:82:54:1c:bd:14:08:bf:99:56:25:b7:f7:07: 81:76:5f:f8:af:18:78:be:24:f0:9e:99:84:ac:0d: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:15:4A:D2:AB:CA:02:19:8F:09:31:DD:FC:1A:61:38:FC:F6:7E:E2 X509v3 Authority Key Identifier: keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b5:5d:22:74:89:9a:48:fe:b0:67:eb:74:90:2b:d0:db:da: 0e:cd:12:d0:1c:38:a1:5d:ab:4d:09:28:72:c5:24:c2:ed:47: b9:17:65:4b:9d:62:e9:1c:c3:56:ff:b9:36:0f:93:2f:ca:ff: 32:16:68:89:48:3d:b7:ba:71:0e:16:df:29:3f:66:62:32:1b: 44:da:ac:67:79:8f:a5:46:59:1d:07:c6:1f:99:c9:e9:ee:9f: 19:eb:9d:9f:dd:7e:83:b1:19:02:b0:79:82:7b:37:dc:fb:14: bb:d3:55:8e:be:4e:fb:16:56:96:16:14:c6:b6:bf:58:38:3f: 47:68:f7:c5:32:a0:9c:5c:d6:49:39:6c:97:e0:0e:42:b5:70: cd:c6:a0:69:af:16:ea:d6:88:bb:af:5a:ac:f4:01:6e:c8:d8: 6b:31:90:04:b6:8c:42:2e:0d:c8:d2:aa:79:b4:9a:82:ca:86: fa:0d:4f:d1:f7:23:cb:75:41:9e:ec:92:c9:54:d5:3e:ed:ff: f2:d4:de:d4:f3:24:8b:09:c4:ed:6f:e0:25:b6:60:b8:76:33: 62:b3:56:96:6d:74:74:32:c7:52:bc:30:d2:76:93:66:c4:77: 5d:35:7f:5e:e8:60:87:0b:63:c3:af:0a:80:db:5c:6c:a7:34: d4:9a:61:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRtqkeTZQdhbAA1vBxSoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx N2Q2MDUwHhcNMjUxMjEwMDgwMDQyWhcNMjUxMjExMDgwMDQyWjAzMTEwLwYDVQQD EyhmMDE1NGFkMmFiY2EwMjE5OGYwOTMxZGRmYzFhNjEzOGZjZjY3ZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LFKbzFLRlgJMQbCpOQV3rbgihT3 wzC798o2Wbb5mThF14CyLpmpZ7+sjQmRsBzw1DQXtm/1T0iYsjWIdjP+Z3ITjAzi TWSK3tGcmJR+0wXEJsAeAr8+7vlH0/DyPX1dSfXCRRf9DHnAHtCEzp3Cj9heM02d tUCUvME4wPin+x7SwcIg4Fg11yUVWM/MfRtRHODwVrygotSEP7F71UMsENpR4Evr dfZfCndb2Tt/Ep8gEOYbo3/2cE5QYIPUsBIqHB2y0kE5Q10XNzoAe0Ddb35tqcFg pv2MxcCxnTxiNdFxfYJUHL0UCL+ZViW39weBdl/4rxh4viTwnpmErA31ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAVStKrygIZjwkx3fwaYTj89n7iMB8GA1UdIwQY MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct NWQzYTQyMWEwZjEwLzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7VdInSJ mkj+sGfrdJAr0NvaDs0S0Bw4oV2rTQkocsUkwu1HuRdlS51i6RzDVv+5Ng+TL8r/ MhZoiUg9t7pxDhbfKT9mYjIbRNqsZ3mPpUZZHQfGH5nJ6e6fGeudn91+g7EZArB5 gns33PsUu9NVjr5O+xZWlhYUxra/WDg/R2j3xTKgnFzWSTlsl+AOQrVwzcagaa8W 6taIu69arPQBbsjYazGQBLaMQi4NyNKqebSagsqG+g1P0fcjy3VBnuySyVTVPu3/ 8tTe1PMkiwnE7W/gJbZguHYzYrNWlm10dDLHUrww0naTZsR3XTV/Xuhghwtjw68K gNtcbKc01JphAg== -----END CERTIFICATE-----Generated at Wed Dec 10 12:49:23 2025 by rpki-client