This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json) Hash identifier: mV1N40+KR04c0sgnVTyu17rIs31pjJZxi64gfIyaJ+A= Subject key identifier: 9F:CF:F9:57:2E:93:D4:68:C3:F6:21:13:EB:CD:0E:E0:B2:FE:66:72 Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Certificate serial: 019AAC15590F9EBB64510931C8A4A9FF6FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft Manifest number: 0E5C Signing time: Sat 22 Nov 2025 15:01:11 +0000 Manifest this update: Sat 22 Nov 2025 15:01:11 +0000 Manifest next update: Sun 23 Nov 2025 15:01:11 +0000 Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=) 2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=) 3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: NNJ4GmRc84l/l8uA+YqRFQtWExZ0zAyyr2Dff4rYG3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:59:0f:9e:bb:64:51:09:31:c8:a4:a9:ff:6f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Validity Not Before: Nov 22 15:01:11 2025 GMT Not After : Nov 23 15:01:11 2025 GMT Subject: CN=9fcff9572e93d468c3f62113ebcd0ee0b2fe6672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:0e:4a:0e:a2:1a:de:3e:b9:d7:a9:14:ac: 64:c7:90:1d:6f:eb:02:6b:1f:12:60:8a:00:4b:ab: da:cc:6d:cf:96:67:6f:52:e1:4b:42:e4:49:bb:e4: f0:41:75:53:2d:08:5d:fa:8d:96:6f:9e:38:0b:98: 4b:e2:be:44:a5:95:74:eb:62:3d:2c:52:47:14:69: 6b:f2:49:f1:a1:f8:0b:e3:60:32:9c:76:2c:0c:3d: 6d:4d:6c:3d:3b:fc:56:55:6c:c4:f7:1a:09:f7:f3: bc:2e:4e:57:da:c2:f3:92:23:07:de:f2:da:40:77: 2b:f3:ac:44:3e:09:bf:cf:06:99:3e:4e:1f:42:ec: 35:5a:ca:0c:a8:3d:87:0f:4b:a6:c9:5b:5b:69:01: ab:7e:1f:0f:db:31:79:94:ba:e6:57:c8:c7:4f:ea: 99:0d:79:11:51:59:f4:57:18:25:eb:0e:bc:1f:47: 61:f9:fb:04:65:a2:49:ac:59:4c:29:a9:bf:d8:86: be:79:75:82:6b:69:3d:1d:3d:ba:44:83:cf:b2:c4: fc:ac:86:92:1f:9b:0d:f0:1a:dd:47:ad:b4:c7:7f: ff:38:c1:c0:63:ed:c5:d4:df:92:c9:f6:1b:9e:ef: e8:54:c2:47:95:7f:f1:02:ae:93:07:55:52:11:70: 69:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CF:F9:57:2E:93:D4:68:C3:F6:21:13:EB:CD:0E:E0:B2:FE:66:72 X509v3 Authority Key Identifier: keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7c:65:df:e7:2f:ff:40:f1:40:ed:b8:25:50:f9:e6:ca:b4: 36:3d:33:31:59:c9:ca:fe:bf:6d:aa:e6:7c:94:a3:3a:d2:a7: a8:04:a1:de:4e:db:8a:70:c9:7a:52:d1:ed:12:a4:ee:48:3e: 76:e5:7d:4b:62:a9:dd:7c:70:81:9b:b4:ad:88:30:11:83:a5: a2:58:6b:a8:54:0a:dc:6e:c8:a9:54:bd:de:6e:f4:47:0e:ec: 3c:64:48:71:2f:64:ab:cb:38:bc:0d:37:bc:d0:16:50:d8:44: 0a:36:0e:29:01:f5:eb:95:8a:c0:23:09:76:63:e4:ad:86:61: a9:0e:00:cd:8c:ca:a7:65:af:6a:ea:b6:18:df:2a:1c:96:46: 11:c8:d7:12:69:1b:26:97:60:87:34:cd:9d:df:d4:16:f4:ec: 78:66:44:f9:e5:6b:2e:5e:a1:92:26:f7:0e:9c:a4:a0:04:a9: 5c:20:9c:e5:7b:bf:7a:95:62:fd:ef:06:db:7f:7f:3c:ef:b5: 0d:98:06:34:f3:91:ca:9f:f7:fb:79:fd:1d:88:e0:12:06:19: 52:55:56:fe:e5:7e:01:e0:c6:46:ed:73:e1:f4:df:6d:4c:c3: ab:b5:69:64:b0:ab:a5:06:41:e1:8c:e3:0d:13:93:c6:5d:22: 7f:b0:fc:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFVkPnrtkUQkxyKSp/2+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOTJiOWE5MmM3ZWI5MTNjM2RhNTU4MDAyYzY3M2U4MjM4 ZGIxYzcwHhcNMjUxMTIyMTUwMTExWhcNMjUxMTIzMTUwMTExWjAzMTEwLwYDVQQD Eyg5ZmNmZjk1NzJlOTNkNDY4YzNmNjIxMTNlYmNkMGVlMGIyZmU2NjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvAOSg6iGt4+udepFKxkx5Adb+sC ax8SYIoAS6vazG3PlmdvUuFLQuRJu+TwQXVTLQhd+o2Wb544C5hL4r5EpZV062I9 LFJHFGlr8knxofgL42AynHYsDD1tTWw9O/xWVWzE9xoJ9/O8Lk5X2sLzkiMH3vLa QHcr86xEPgm/zwaZPk4fQuw1WsoMqD2HD0umyVtbaQGrfh8P2zF5lLrmV8jHT+qZ DXkRUVn0Vxgl6w68H0dh+fsEZaJJrFlMKam/2Ia+eXWCa2k9HT26RIPPssT8rIaS H5sN8BrdR620x3//OMHAY+3F1N+SyfYbnu/oVMJHlX/xAq6TB1VSEXBpJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/P+Vcuk9Row/YhE+vNDuCy/mZyMB8GA1UdIwQY MBaAFFySuaksfrkTw9pVgALGc+gjjbHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQt ZDZiNTZhYmEzZWI3LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQtZDZiNTZhYmEzZWI3 LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHxl3+cv /0DxQO24JVD55sq0Nj0zMVnJyv6/barmfJSjOtKnqASh3k7binDJelLR7RKk7kg+ duV9S2Kp3XxwgZu0rYgwEYOlolhrqFQK3G7IqVS93m70Rw7sPGRIcS9kq8s4vA03 vNAWUNhECjYOKQH165WKwCMJdmPkrYZhqQ4AzYzKp2Wvauq2GN8qHJZGEcjXEmkb JpdghzTNnd/UFvTseGZE+eVrLl6hkib3DpykoASpXCCc5Xu/epVi/e8G239/PO+1 DZgGNPORyp/3+3n9HYjgEgYZUlVW/uV+AeDGRu1z4fTfbUzDq7VpZLCrpQZB4Yzj DROTxl0if7D82w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:01 2025 by rpki-client