This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json) Hash identifier: SH0mek8Y2rTtWrqikgvAHnAOviAQlwJcxFwosbZrGE8= Subject key identifier: 9D:45:9C:72:41:BA:0E:51:BC:1F:49:61:C0:F3:81:C5:6B:52:01:EC Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa Certificate serial: 019B0F6EDB876E2830FAE4F9125C23FDD8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft Manifest number: 0935 Signing time: Thu 11 Dec 2025 22:01:21 +0000 Manifest this update: Thu 11 Dec 2025 22:01:21 +0000 Manifest next update: Fri 12 Dec 2025 22:01:21 +0000 Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: Z4hc8W+J8JCP+yvI9pvlVAn3j17BUmx0b0EGRkhihY4=) 2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:db:87:6e:28:30:fa:e4:f9:12:5c:23:fd:d8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa Validity Not Before: Dec 11 22:01:21 2025 GMT Not After : Dec 12 22:01:21 2025 GMT Subject: CN=9d459c7241ba0e51bc1f4961c0f381c56b5201ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:1d:61:83:70:a5:f3:86:2d:78:44:5d:b0: 5e:35:cd:b4:a0:d4:c2:2a:be:4a:ee:9d:79:67:fc: 21:38:34:c8:f8:6f:d4:0e:99:07:0d:63:ac:db:82: 79:20:a2:45:e4:da:77:72:c8:26:22:dd:86:d8:03: 2e:28:51:27:b6:27:83:d0:a8:3f:76:7d:59:8b:d0: 0c:da:1e:bf:cc:be:31:99:71:ca:04:4f:b0:38:5e: 3c:06:be:8f:b8:5a:b8:72:bf:45:ab:e2:38:90:72: d4:2a:7d:59:b0:ad:c2:1a:91:e2:89:4f:b0:1f:61: 16:a4:3a:cf:03:40:0d:dd:23:fc:5c:d3:58:28:ed: 6e:e6:e2:6c:d0:1f:de:f0:e2:f3:8f:20:8a:59:d0: 8e:dd:d2:01:d0:76:38:f1:3e:3c:d0:e6:a6:7b:72: 71:69:1a:9d:a4:cd:38:b7:96:4f:90:20:8c:1e:9f: 40:e3:38:f7:3d:f1:5c:99:5e:69:b8:53:a8:a2:f7: 4d:99:b4:9e:de:16:6a:39:07:e7:8c:3c:12:2d:95: 75:2f:89:6d:e4:ea:85:e8:64:19:62:0d:a6:e5:97: 68:d5:75:32:64:7c:03:0f:25:bb:cb:cd:43:1c:47: 4b:5d:2c:e1:ef:5d:5d:da:5c:17:00:1b:04:c6:3d: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:9C:72:41:BA:0E:51:BC:1F:49:61:C0:F3:81:C5:6B:52:01:EC X509v3 Authority Key Identifier: keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:03:97:1c:4b:f5:27:81:19:f9:47:5a:26:b8:64:0c:65:01: b7:f0:9d:a7:d6:41:7d:83:63:fc:4a:3e:9a:8b:ff:d7:0f:fb: 69:a7:a1:0b:1a:d5:cc:8f:a7:f1:f0:5f:f6:6d:17:e6:cb:0a: 8b:26:9a:a8:b1:3f:27:85:40:01:7c:8e:0d:69:da:dd:d7:1e: 12:a9:07:01:de:9c:79:fd:e6:53:3c:f9:bc:e4:dd:71:36:60: 4f:2c:34:1e:96:8d:8f:a8:e0:14:9c:bd:ce:93:c3:26:3f:c9: 58:d7:92:34:1e:f1:fb:6f:f6:29:9b:de:21:eb:e0:23:3e:4d: ec:9b:ad:77:09:74:4b:e7:62:cc:18:ae:38:21:22:64:b2:71: a3:ab:7c:0c:d4:1f:00:26:88:42:6d:15:ba:b7:e0:4d:1a:41: b1:a8:61:09:e6:c5:e5:80:31:f3:94:1f:c7:a1:43:92:26:d0: ef:11:c0:fb:c0:e4:36:87:a8:7e:58:96:39:aa:45:51:5a:86: 47:15:85:f4:76:22:26:ba:59:90:05:c8:e7:a9:1b:91:38:76: 75:21:78:1f:0f:a4:1f:04:2a:62:d2:8d:9b:07:00:b0:fe:a0: 87:84:ed:4d:9a:c0:12:5e:9a:1d:a9:b5:fd:51:3c:7f:88:61: 5c:f9:9d:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbtuHbigw+uT5Elwj/di6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGRmMGM4ZTVkMWIyMzUzOGJlYjVlY2NjM2FiMTI4NjVk ZjdlYWEwHhcNMjUxMjExMjIwMTIxWhcNMjUxMjEyMjIwMTIxWjAzMTEwLwYDVQQD Eyg5ZDQ1OWM3MjQxYmEwZTUxYmMxZjQ5NjFjMGYzODFjNTZiNTIwMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDAdYYNwpfOGLXhEXbBeNc20oNTC Kr5K7p15Z/whODTI+G/UDpkHDWOs24J5IKJF5Np3csgmIt2G2AMuKFEntieD0Kg/ dn1Zi9AM2h6/zL4xmXHKBE+wOF48Br6PuFq4cr9Fq+I4kHLUKn1ZsK3CGpHiiU+w H2EWpDrPA0AN3SP8XNNYKO1u5uJs0B/e8OLzjyCKWdCO3dIB0HY48T480Oame3Jx aRqdpM04t5ZPkCCMHp9A4zj3PfFcmV5puFOoovdNmbSe3hZqOQfnjDwSLZV1L4lt 5OqF6GQZYg2m5Zdo1XUyZHwDDyW7y81DHEdLXSzh711d2lwXABsExj2zXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1FnHJBug5RvB9JYcDzgcVrUgHsMB8GA1UdIwQY MBaAFF8N8Mjl0bI1OL617Mw6sShl336qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUt YmM1MTNhOThiOWJlLzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUtYmM1MTNhOThiOWJl LzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAOXHEv1 J4EZ+UdaJrhkDGUBt/Cdp9ZBfYNj/Eo+mov/1w/7aaehCxrVzI+n8fBf9m0X5ssK iyaaqLE/J4VAAXyODWna3dceEqkHAd6cef3mUzz5vOTdcTZgTyw0HpaNj6jgFJy9 zpPDJj/JWNeSNB7x+2/2KZveIevgIz5N7Jutdwl0S+dizBiuOCEiZLJxo6t8DNQf ACaIQm0VurfgTRpBsahhCebF5YAx85Qfx6FDkibQ7xHA+8DkNoeofliWOapFUVqG RxWF9HYiJrpZkAXI56kbkTh2dSF4Hw+kHwQqYtKNmwcAsP6gh4TtTZrAEl6aHam1 /VE8f4hhXPmd3w== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:48 2025 by rpki-client