This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json) Hash identifier: leCpy/TG7gSux56EpcBx9AC/Skqy+qqPkdjgjIK/QI0= Subject key identifier: A0:CF:4E:E9:88:DA:75:C4:62:0C:98:8F:D7:8F:B9:AC:F6:D9:B8:EE Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Certificate serial: 019B300BBCECF53AF9A6A3AEBEBDF1580FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft Manifest number: 079B Signing time: Thu 18 Dec 2025 06:00:34 +0000 Manifest this update: Thu 18 Dec 2025 06:00:34 +0000 Manifest next update: Fri 19 Dec 2025 06:00:34 +0000 Files and hashes: 1: PM3-UGKjLr96XIFPl-hOFG_Fkxo.roa (hash: 1qezTMxLLeCKKaAo2JrFFrXX9RE2wcF8+6TlYZv7BMc=) 2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: Dd/PZo2xMOuvH+FOKPYvR521U9fbq4qRv8gV31d9mnk=) 3: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:bc:ec:f5:3a:f9:a6:a3:ae:be:bd:f1:58:0f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Validity Not Before: Dec 18 06:00:34 2025 GMT Not After : Dec 19 06:00:34 2025 GMT Subject: CN=a0cf4ee988da75c4620c988fd78fb9acf6d9b8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:05:41:c8:88:fb:c2:e1:78:0b:21:db:81: 8f:03:b4:77:cb:28:4f:5b:24:4d:f5:45:e0:9a:a6: 6e:e4:b5:e3:fa:ff:de:8c:dc:22:21:71:45:2e:9c: a6:e6:66:3f:66:0a:e3:99:31:1c:ef:1a:3e:fe:0c: f6:4e:7a:2a:46:fd:23:63:d1:a3:a3:e2:4f:b9:4a: 4b:64:3e:00:d7:7e:b4:6c:cc:93:fa:bd:1e:24:fc: e5:43:d1:bd:71:ec:30:cc:98:88:7e:f2:c9:53:c7: 73:1f:a5:97:7b:0f:75:8c:cf:38:ae:89:40:84:fe: 77:73:31:ec:b5:70:1e:3d:a0:cc:20:4c:3e:c7:04: 02:49:b0:4e:0e:68:de:37:80:3f:01:17:b8:b8:a5: bd:ac:d8:96:77:ee:c8:02:c7:b1:2e:26:8a:83:77: e1:97:54:85:0d:6a:c8:01:14:79:d7:6a:2d:ce:77: fa:ff:92:9a:df:0b:78:39:22:70:79:63:75:7b:97: a2:86:ae:e8:bd:38:4e:b7:53:a1:d9:f1:c6:03:fb: 77:4d:4b:cc:14:b6:a7:88:e7:25:d3:c1:ed:07:70: 6d:60:d9:d9:85:39:29:8c:38:de:79:7d:77:f6:72: c1:ea:8e:03:e9:8a:b9:bd:88:27:06:4a:b1:c4:32: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:4E:E9:88:DA:75:C4:62:0C:98:8F:D7:8F:B9:AC:F6:D9:B8:EE X509v3 Authority Key Identifier: keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c0:65:2b:fc:be:93:60:11:cd:80:2f:9f:6f:30:52:53:95: 10:62:ba:e1:6e:99:69:5a:b7:ad:84:91:0b:ee:29:ab:79:e7: b1:1d:87:d9:66:fb:dc:b0:a2:a8:2f:f1:81:88:f0:ba:9d:5c: c4:1f:b4:97:e3:d7:63:85:50:54:e0:95:3c:a5:84:03:c5:94: 24:fd:a7:e9:d3:5f:0c:83:7d:db:4d:23:26:50:dc:83:60:53: 55:bc:3d:23:08:8a:73:7f:d3:16:54:f2:e1:8f:79:92:26:1c: 20:7f:31:d6:7e:6a:5d:47:bc:04:19:ea:72:e7:27:d5:db:7b: db:d9:fc:c5:4d:01:be:54:6f:f3:3f:58:bd:34:dd:b3:fb:c0: 30:df:d4:8e:e7:3c:da:e6:f8:89:e8:f1:6d:13:46:81:98:f7: 04:cf:b4:f3:1e:7d:c5:57:20:90:6e:d6:0b:7b:94:47:5f:53: b9:af:4f:6b:ca:ba:16:74:2d:b5:de:4a:4f:59:2d:60:47:a2: eb:cb:70:9e:09:77:e3:ff:f5:9f:2c:21:a5:38:2a:ee:4d:4e: 0e:2b:39:ca:68:6a:be:73:46:78:f6:16:86:93:2c:60:da:a1: be:d1:cc:10:37:3a:a1:f0:78:f2:82:05:10:d5:21:59:ab:c6: 9a:0e:0e:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC7zs9Tr5pqOuvr3xWA+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4 MTk5ZTYwHhcNMjUxMjE4MDYwMDM0WhcNMjUxMjE5MDYwMDM0WjAzMTEwLwYDVQQD EyhhMGNmNGVlOTg4ZGE3NWM0NjIwYzk4OGZkNzhmYjlhY2Y2ZDliOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pEFQciI+8LheAsh24GPA7R3yyhP WyRN9UXgmqZu5LXj+v/ejNwiIXFFLpym5mY/ZgrjmTEc7xo+/gz2TnoqRv0jY9Gj o+JPuUpLZD4A1360bMyT+r0eJPzlQ9G9cewwzJiIfvLJU8dzH6WXew91jM84rolA hP53czHstXAePaDMIEw+xwQCSbBODmjeN4A/ARe4uKW9rNiWd+7IAsexLiaKg3fh l1SFDWrIARR512otznf6/5Ka3wt4OSJweWN1e5eihq7ovThOt1Oh2fHGA/t3TUvM FLaniOcl08HtB3BtYNnZhTkpjDjeeX139nLB6o4D6Yq5vYgnBkqxxDKsZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDPTumI2nXEYgyYj9ePuaz22bjuMB8GA1UdIwQY MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt ZGYyN2YxMGM3MDk3LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3 LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsBlK/y+ k2ARzYAvn28wUlOVEGK64W6ZaVq3rYSRC+4pq3nnsR2H2Wb73LCiqC/xgYjwup1c xB+0l+PXY4VQVOCVPKWEA8WUJP2n6dNfDIN9200jJlDcg2BTVbw9IwiKc3/TFlTy 4Y95kiYcIH8x1n5qXUe8BBnqcucn1dt729n8xU0BvlRv8z9YvTTds/vAMN/Ujuc8 2ub4iejxbRNGgZj3BM+08x59xVcgkG7WC3uUR19Tua9Pa8q6FnQttd5KT1ktYEei 68twngl34//1nywhpTgq7k1ODis5ymhqvnNGePYWhpMsYNqhvtHMEDc6ofB48oIF ENUhWavGmg4OrA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:25:27 2025 by rpki-client