This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json) Hash identifier: n2MQI9XEOuX2YI1VyKupK0zFTkQnFfIN4HrVxHyBqjk= Subject key identifier: 4C:1C:FC:60:0F:5C:46:86:58:93:0D:EE:60:85:A9:97:15:9D:C9:BC Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Certificate serial: 019B34FB2754C68E84B79EA09154820398AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft Manifest number: 0B6F Signing time: Fri 19 Dec 2025 05:00:33 +0000 Manifest this update: Fri 19 Dec 2025 05:00:33 +0000 Manifest next update: Sat 20 Dec 2025 05:00:33 +0000 Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=) 2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: WGBz2ggmVgM2HhkwGVokJdLuu0yCRo3H94oCaXMjfG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:27:54:c6:8e:84:b7:9e:a0:91:54:82:03:98:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Validity Not Before: Dec 19 05:00:33 2025 GMT Not After : Dec 20 05:00:33 2025 GMT Subject: CN=4c1cfc600f5c468658930dee6085a997159dc9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:70:d9:53:1e:e0:ce:e7:4f:d2:41:36:1c:e3: 5f:18:d6:82:dd:95:35:59:8e:72:c2:9f:ce:9a:95: e4:44:ba:4b:ca:b1:50:bf:da:5b:28:3e:21:19:41: 09:c6:0d:ca:e1:98:8d:26:c2:d5:2d:12:5a:5c:5b: 74:41:ae:28:02:b0:d5:14:db:8e:33:42:a1:b4:64: f6:04:26:b4:f2:41:ca:f2:08:5f:3b:89:e6:37:5d: ff:09:0a:ed:fd:79:3f:66:8f:f5:81:7d:d1:87:13: 83:be:8f:d6:9c:ec:a1:ed:34:f9:4f:c7:08:5c:77: a5:9f:dc:b4:6e:e7:55:b3:70:fd:9c:22:e3:81:b6: e6:14:a4:9e:bd:20:a1:ab:bb:ee:f0:d8:56:fa:30: 05:fa:af:1b:8d:d5:e6:c8:eb:6a:c9:c3:58:41:6b: d6:7e:0b:ef:1d:96:12:a2:a8:b0:78:69:1f:a8:d3: 7b:6c:a6:b3:a1:38:f6:70:1f:ab:41:92:5e:ed:e4: 21:7f:da:d1:99:cf:e2:9f:79:c5:ac:d2:60:8d:9f: 54:a3:0c:5e:f4:b8:4e:5a:f5:8d:f0:d3:4f:98:c3: 99:8d:20:90:d1:80:d3:56:2e:7b:03:0b:00:0a:8b: af:47:d8:e5:25:2e:ac:85:8d:69:09:c4:f3:77:86: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1C:FC:60:0F:5C:46:86:58:93:0D:EE:60:85:A9:97:15:9D:C9:BC X509v3 Authority Key Identifier: keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:66:14:20:50:bc:17:22:0f:4c:c1:02:7c:da:89:0f:5c:90: 6e:34:03:ca:06:c2:b9:3a:fb:9a:dd:b8:7a:55:9b:2b:96:d6: c6:d0:6a:a8:f0:ff:33:51:63:ec:47:5a:b4:8d:21:6c:97:b9: 17:c7:8e:aa:10:3f:5a:67:33:b6:40:b7:80:01:c6:ae:d9:cb: a4:fa:29:c9:05:67:ba:bf:d0:fc:bc:c2:90:95:a6:37:11:e3: 98:67:91:25:36:b4:fd:01:db:98:2e:f7:d4:13:25:ed:19:ff: 35:2e:f8:b7:3b:ff:69:1e:a0:df:7e:82:74:c7:90:32:a1:8a: 70:e5:45:3b:d2:d7:84:20:81:a5:9c:f7:e0:ea:fa:04:84:c8: 36:c1:46:7d:40:2d:2a:0e:c3:42:74:45:68:90:99:9d:48:1c: c1:2f:76:2f:5b:78:fd:2d:a8:20:0f:cb:ae:56:67:3e:8a:9b: 6e:19:25:34:65:6d:ae:0c:a9:1a:67:d6:d3:41:4c:48:72:df: 53:98:ab:f0:5a:87:b9:1e:03:62:43:b8:81:fd:f5:84:9b:b3: 68:dc:02:8e:c2:47:3e:19:7d:b5:45:cc:a6:59:27:af:cc:f0: 7e:ea:17:47:43:6b:44:4d:fb:70:ea:d8:74:59:93:fd:ad:a2: e1:19:dc:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+ydUxo6Et56gkVSCA5iuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk NTAzYzYwHhcNMjUxMjE5MDUwMDMzWhcNMjUxMjIwMDUwMDMzWjAzMTEwLwYDVQQD Eyg0YzFjZmM2MDBmNWM0Njg2NTg5MzBkZWU2MDg1YTk5NzE1OWRjOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XDZUx7gzudP0kE2HONfGNaC3ZU1 WY5ywp/OmpXkRLpLyrFQv9pbKD4hGUEJxg3K4ZiNJsLVLRJaXFt0Qa4oArDVFNuO M0KhtGT2BCa08kHK8ghfO4nmN13/CQrt/Xk/Zo/1gX3RhxODvo/WnOyh7TT5T8cI XHeln9y0budVs3D9nCLjgbbmFKSevSChq7vu8NhW+jAF+q8bjdXmyOtqycNYQWvW fgvvHZYSoqiweGkfqNN7bKazoTj2cB+rQZJe7eQhf9rRmc/in3nFrNJgjZ9Uowxe 9LhOWvWN8NNPmMOZjSCQ0YDTVi57AwsACouvR9jlJS6shY1pCcTzd4ZGuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwc/GAPXEaGWJMN7mCFqZcVncm8MB8GA1UdIwQY MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt N2RmYmJhZTAzNjhlLzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2YUIFC8 FyIPTMECfNqJD1yQbjQDygbCuTr7mt24elWbK5bWxtBqqPD/M1Fj7EdatI0hbJe5 F8eOqhA/WmcztkC3gAHGrtnLpPopyQVnur/Q/LzCkJWmNxHjmGeRJTa0/QHbmC73 1BMl7Rn/NS74tzv/aR6g336CdMeQMqGKcOVFO9LXhCCBpZz34Or6BITINsFGfUAt Kg7DQnRFaJCZnUgcwS92L1t4/S2oIA/LrlZnPoqbbhklNGVtrgypGmfW00FMSHLf U5ir8FqHuR4DYkO4gf31hJuzaNwCjsJHPhl9tUXMplknr8zwfuoXR0NrRE37cOrY dFmT/a2i4RnciQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:25:48 2025 by rpki-client