This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json) Hash identifier: Ta393+It+B0WT6ilZdFMbXhtTeJXCxDbu+UJ5M8627A= Subject key identifier: EE:D6:08:AD:34:05:6E:BC:B7:2D:AB:99:03:01:E0:26:1F:00:C8:6C Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68 Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68 Certificate serial: 019AEF75D5D3C8CA007B3035A60C5597BF15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft Manifest number: 1305 Signing time: Fri 05 Dec 2025 17:01:08 +0000 Manifest this update: Fri 05 Dec 2025 17:01:08 +0000 Manifest next update: Sat 06 Dec 2025 17:01:08 +0000 Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=) 2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: mqbX+FX6kcYgGyqOJSHP6kI2Fq7Ho4s7nNfCJTIRReg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:75:d5:d3:c8:ca:00:7b:30:35:a6:0c:55:97:bf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68 Validity Not Before: Dec 5 17:01:08 2025 GMT Not After : Dec 6 17:01:08 2025 GMT Subject: CN=eed608ad34056ebcb72dab990301e0261f00c86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:43:b2:96:00:75:e5:ef:20:83:f9:83:d4: 9e:37:b1:ce:ee:5e:08:71:b2:43:b7:89:12:47:4c: 42:f3:62:c6:e3:b0:9b:dd:6b:e1:ff:26:23:74:db: 6d:a3:13:08:68:ac:29:f1:a7:4c:13:f7:3f:ed:b9: 24:25:2a:7c:f1:34:08:e5:28:7e:34:31:d6:53:83: 4f:7b:bb:68:5b:8e:96:e1:7a:b3:f6:5b:b1:72:0f: b9:9c:04:b1:43:ab:57:9a:96:35:60:2e:88:54:55: 77:3e:86:51:3c:f9:27:67:76:5d:a0:f4:2c:6b:2b: c0:07:43:0c:71:7c:50:27:cc:5e:22:b6:d9:a7:84: b9:95:47:70:14:5d:da:37:04:ed:c9:39:b0:ac:88: 03:24:ea:25:82:06:86:be:fa:31:47:c3:b8:4b:a7: 5a:09:3b:4a:ff:ca:c8:9d:23:64:56:47:87:92:34: 33:6f:4d:69:d3:19:65:e0:df:9d:85:b7:04:1f:c7: 92:6b:23:72:a5:fa:25:9c:51:63:d1:d3:c6:6a:d3: cd:32:94:8e:10:f4:01:5f:d1:1c:b1:33:c7:55:ee: 9d:40:18:98:33:fe:b7:b5:ed:04:e2:98:75:77:02: 7c:85:47:ac:c8:81:67:65:53:f4:af:65:a7:ee:81: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D6:08:AD:34:05:6E:BC:B7:2D:AB:99:03:01:E0:26:1F:00:C8:6C X509v3 Authority Key Identifier: keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e1:7b:22:14:d4:8e:0a:15:e8:c5:7d:a2:1f:66:11:57:1e: ab:7f:fb:4c:d5:43:6c:58:56:70:ac:2a:86:6c:41:7c:9f:9b: b2:3c:d6:29:04:20:4c:d7:d8:77:4f:6b:41:f3:88:28:d8:91: 8d:cc:99:7b:c2:a2:35:ff:41:45:34:c1:c9:5d:53:3e:b8:0a: b4:24:49:c5:97:39:af:be:33:cb:86:c8:b5:89:c6:79:35:16: 84:49:f3:83:56:5b:28:64:e1:df:69:55:03:0c:5a:43:77:a0: e1:d9:05:33:1e:1d:4b:34:02:29:cf:64:b8:07:3c:f0:08:36: e6:56:d6:6c:a9:70:d6:e7:80:ac:85:57:b7:a9:99:99:bc:3f: 03:6c:fa:b7:e5:c4:18:be:dc:9f:03:62:e6:db:b5:0f:da:e9: 81:8e:bc:49:96:f7:ab:ff:47:40:a3:e1:38:61:09:49:fe:b9: 44:9d:97:e4:08:70:d5:53:80:c9:32:a8:df:f4:37:36:c4:1d: fd:e2:59:0d:88:2a:a1:c7:bb:36:3f:89:b7:46:4b:87:3d:f7: 1c:65:d7:b8:66:d6:bb:cb:8b:3c:76:14:b7:1b:ec:71:8f:4f: 18:6d:cc:02:74:2d:66:c9:64:0d:25:ae:e7:73:6d:a8:3c:a1: 19:6f:8e:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvddXTyMoAezA1pgxVl78VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm M2VmNjgwHhcNMjUxMjA1MTcwMTA4WhcNMjUxMjA2MTcwMTA4WjAzMTEwLwYDVQQD EyhlZWQ2MDhhZDM0MDU2ZWJjYjcyZGFiOTkwMzAxZTAyNjFmMDBjODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkBDspYAdeXvIIP5g9SeN7HO7l4I cbJDt4kSR0xC82LG47Cb3Wvh/yYjdNttoxMIaKwp8adME/c/7bkkJSp88TQI5Sh+ NDHWU4NPe7toW46W4Xqz9luxcg+5nASxQ6tXmpY1YC6IVFV3PoZRPPknZ3ZdoPQs ayvAB0MMcXxQJ8xeIrbZp4S5lUdwFF3aNwTtyTmwrIgDJOolggaGvvoxR8O4S6da CTtK/8rInSNkVkeHkjQzb01p0xll4N+dhbcEH8eSayNypfolnFFj0dPGatPNMpSO EPQBX9EcsTPHVe6dQBiYM/63te0E4ph1dwJ8hUesyIFnZVP0r2Wn7oGbiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7WCK00BW68ty2rmQMB4CYfAMhsMB8GA1UdIwQY MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt ZGI1YWE1NzdjM2FmLzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+F7IhTU jgoV6MV9oh9mEVceq3/7TNVDbFhWcKwqhmxBfJ+bsjzWKQQgTNfYd09rQfOIKNiR jcyZe8KiNf9BRTTByV1TPrgKtCRJxZc5r74zy4bItYnGeTUWhEnzg1ZbKGTh32lV AwxaQ3eg4dkFMx4dSzQCKc9kuAc88Ag25lbWbKlw1ueArIVXt6mZmbw/A2z6t+XE GL7cnwNi5tu1D9rpgY68SZb3q/9HQKPhOGEJSf65RJ2X5Ahw1VOAyTKo3/Q3NsQd /eJZDYgqoce7Nj+Jt0ZLhz33HGXXuGbWu8uLPHYUtxvscY9PGG3MAnQtZslkDSWu 53NtqDyhGW+OqA== -----END CERTIFICATE-----Generated at Fri Dec 5 23:04:23 2025 by rpki-client