This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json) Hash identifier: DPj074WTcYAxMeHR6ecF2wrA3JvAJNif85Zcv+nNJjA= Subject key identifier: E0:68:CD:68:B5:0C:18:16:3D:91:91:1F:99:C3:65:D7:5C:18:7D:E7 Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86 Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386 Certificate serial: 019B0E269BBE9359FB551361EDF2879345E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft Manifest number: 1704 Signing time: Thu 11 Dec 2025 16:02:49 +0000 Manifest this update: Thu 11 Dec 2025 16:02:49 +0000 Manifest next update: Fri 12 Dec 2025 16:02:49 +0000 Files and hashes: 1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=) 2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=) 3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: ZvFV15jncq14WE5miAg4hYOTKlVm8DnO82zE/NhWhFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:9b:be:93:59:fb:55:13:61:ed:f2:87:93:45:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386 Validity Not Before: Dec 11 16:02:49 2025 GMT Not After : Dec 12 16:02:49 2025 GMT Subject: CN=e068cd68b50c18163d91911f99c365d75c187de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:76:b1:7d:a3:fc:da:1d:2c:2e:44:22:64:d3: 54:79:ce:90:1b:99:df:6a:88:2d:c2:26:97:2a:b8: fd:9a:46:a2:ae:b0:e0:cb:33:59:93:e0:63:fe:98: 6e:fc:55:13:82:47:03:be:7a:16:57:aa:61:83:db: a5:f7:7d:bc:f7:9b:74:48:3c:80:3b:6f:38:de:32: 7f:de:c1:33:11:3a:29:da:4a:0e:04:6a:43:35:fc: 56:26:1d:fe:cc:f9:7c:3e:ae:ea:21:1d:a5:6e:39: 30:df:69:05:9f:84:cf:ee:52:63:ed:71:25:de:27: ba:d4:15:d7:01:3d:c3:ec:c5:6e:df:28:ef:3f:c2: d7:99:10:44:14:16:f6:62:16:d4:bc:de:f8:3f:b6: c6:b2:0e:ab:9e:d5:13:d3:0e:5f:6b:5e:93:d3:6e: fc:0c:04:92:3c:3d:55:c0:37:7c:03:97:56:93:24: a9:4e:ce:8e:dc:47:9e:a8:cf:9d:90:56:c6:2c:b0: 64:df:2a:44:fe:d3:93:15:40:e4:b4:9c:bf:da:a1: 91:39:5d:dc:2b:b4:eb:57:bd:2d:c3:7c:14:69:5f: 89:9e:77:50:f0:f4:6c:da:b5:25:ff:b0:8c:5f:45: 5f:e3:8e:bb:73:8e:60:01:d9:21:94:49:c5:07:cc: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:68:CD:68:B5:0C:18:16:3D:91:91:1F:99:C3:65:D7:5C:18:7D:E7 X509v3 Authority Key Identifier: keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:26:4a:d1:df:8e:5a:ba:be:75:77:3c:2b:90:84:c3:cd:22: cd:fd:1a:41:f8:5c:42:70:a3:5c:69:d1:75:5b:8e:eb:9c:ac: d5:b9:ac:3f:00:7c:fd:b0:95:b2:1b:85:18:85:98:96:26:41: 49:3d:a3:2e:ef:6c:47:bf:27:cc:9e:f8:33:f9:fd:4b:f4:34: 2c:b5:8f:96:5d:d2:f7:44:4d:a5:81:e3:58:aa:16:38:70:4b: 56:42:c9:5b:05:fe:41:5c:e4:f2:5f:44:05:7c:89:4e:20:a3: 2a:14:f3:0c:b8:33:d7:e2:aa:78:15:5e:07:e8:41:93:25:31: 5d:a6:2d:4b:21:25:bc:1a:43:f5:75:8c:83:5b:c4:ab:00:38: 92:0e:58:4b:69:bf:11:58:fc:df:23:26:3e:1e:2b:5f:c8:ea: aa:90:9f:11:6e:21:f1:ff:25:ea:40:c7:df:e4:78:05:ac:35: 7d:01:4a:b3:7e:5d:54:cb:79:ab:b5:0b:20:2c:58:e3:cb:01: d6:2c:74:59:50:6f:c5:80:0c:88:b8:dc:6f:8f:dd:c6:16:bf: ca:c2:da:12:50:e1:d4:a3:5a:4d:b9:a0:7c:ce:93:fb:29:1e: 2e:1f:24:ce:ec:a4:f1:ab:16:99:46:65:da:02:28:0c:b4:6a: 67:76:44:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJpu+k1n7VRNh7fKHk0XpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OGFmYTIyZjk4YTM3ZjZkOGQwMjkzYTliMzE5NDE2ZWM5 NGQzODYwHhcNMjUxMjExMTYwMjQ5WhcNMjUxMjEyMTYwMjQ5WjAzMTEwLwYDVQQD EyhlMDY4Y2Q2OGI1MGMxODE2M2Q5MTkxMWY5OWMzNjVkNzVjMTg3ZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3naxfaP82h0sLkQiZNNUec6QG5nf aogtwiaXKrj9mkairrDgyzNZk+Bj/phu/FUTgkcDvnoWV6phg9ul932895t0SDyA O2843jJ/3sEzETop2koOBGpDNfxWJh3+zPl8Pq7qIR2lbjkw32kFn4TP7lJj7XEl 3ie61BXXAT3D7MVu3yjvP8LXmRBEFBb2YhbUvN74P7bGsg6rntUT0w5fa16T0278 DASSPD1VwDd8A5dWkySpTs6O3EeeqM+dkFbGLLBk3ypE/tOTFUDktJy/2qGROV3c K7TrV70tw3wUaV+JnndQ8PRs2rUl/7CMX0Vf4467c45gAdkhlEnFB8wHQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBozWi1DBgWPZGRH5nDZddcGH3nMB8GA1UdIwQY MBaAFMWK+iL5ijf22NApOpsxlBbslNOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEt OTEyMjg2MjA1NzBlLzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEtOTEyMjg2MjA1NzBl LzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiZK0d+O Wrq+dXc8K5CEw80izf0aQfhcQnCjXGnRdVuO65ys1bmsPwB8/bCVshuFGIWYliZB ST2jLu9sR78nzJ74M/n9S/Q0LLWPll3S90RNpYHjWKoWOHBLVkLJWwX+QVzk8l9E BXyJTiCjKhTzDLgz1+KqeBVeB+hBkyUxXaYtSyElvBpD9XWMg1vEqwA4kg5YS2m/ EVj83yMmPh4rX8jqqpCfEW4h8f8l6kDH3+R4Baw1fQFKs35dVMt5q7ULICxY48sB 1ix0WVBvxYAMiLjcb4/dxha/ysLaElDh1KNaTbmgfM6T+ykeLh8kzuyk8asWmUZl 2gIoDLRqZ3ZE4w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:00 2025 by rpki-client