This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft File: X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json) Hash identifier: O5jeLJNbNeeGsvtYE4yMaMK9JcP3gEDdIZfNpc44HvE= Subject key identifier: 05:E0:33:2C:3E:23:E4:50:B3:E3:29:3A:ED:B9:FC:21:6A:AF:97:11 Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B3C0FE50EA5DF54A953E67ED502E8BA54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft Manifest number: 17AF Signing time: Sat 20 Dec 2025 14:00:33 +0000 Manifest this update: Sat 20 Dec 2025 14:00:33 +0000 Manifest next update: Sun 21 Dec 2025 14:00:33 +0000 Files and hashes: 1: 3j4TVDlr5ya34eIK5tEegAc3aPU.roa (hash: cPkb/fw62Ph7qprDyiHpgESmP2xlKBrLVzqR3BNFYFs=) 2: 9FUNdfnNIDDZflpkRTwpDb09HNU.roa (hash: BpM0SiFtPH/not4o5YIAAEEr6LX2KF5gaATgLFRqNII=) 3: STf9L7OysAzVA3auf6efELGrMic.roa (hash: jJ0UrRjneJTBVHBAK5geL+DCza4MUB+Pz9cDqbQqG1Q=) 4: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: yox1N3GgSn1HRB9STPZs14M1a33mHaA2y4z0OlX1mgI=) 5: ffaMH-0hGgHTMNCXX78L-h1LWAo.roa (hash: GyPeNrQVWNT93bYYebXS2jRf00/jNRqVqCrgj4gVPMY=) 6: rDF0yCBE4X8q41x2l6Nt4nfaFYs.roa (hash: xb5ZEXJ0QV1z7XXKAlC/1y6Tcd7ByFjDX9SUb7O///E=) 7: xxJU5TK5j86eCuqKfFa3ZjAgLJ0.roa (hash: 8Fc3FeiY5RFVLrYSZ7k2lRb5tRyk3H93J4Gso2Iermg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:e5:0e:a5:df:54:a9:53:e6:7e:d5:02:e8:ba:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Dec 20 14:00:33 2025 GMT Not After : Dec 21 14:00:33 2025 GMT Subject: CN=05e0332c3e23e450b3e3293aedb9fc216aaf9711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d6:da:ee:a8:2e:f7:58:8f:26:84:7b:49:91: c4:10:f7:ad:9e:64:a4:92:df:02:8e:f5:25:2a:76: 01:64:f2:03:cf:ac:7c:7b:ff:7e:bb:5c:82:6d:75: f0:c3:c9:4a:a1:96:7c:f3:41:a9:96:09:08:a9:91: 94:de:11:4d:17:3f:fb:cc:92:4b:39:91:f1:40:14: f4:05:8b:a9:5c:7b:cd:8b:2e:83:67:bc:90:10:f0: 96:48:8d:86:46:55:33:82:d9:21:70:15:f9:0b:26: 87:76:27:41:b9:f9:d8:ed:64:b1:9f:53:d7:06:c7: bc:60:64:8b:79:1e:a6:a4:ff:39:07:04:b5:f3:fc: 0d:88:de:89:fa:99:b3:d3:05:5e:e0:dd:45:8a:3c: 53:d4:15:6b:75:48:d8:bc:9c:60:86:8e:d1:78:f2: 14:e9:37:97:72:3e:24:b6:c7:82:a0:f6:61:4d:35: 67:a4:41:aa:9b:a4:af:ee:0a:ea:29:fd:07:1b:d8: 79:e8:32:da:fa:af:ac:5f:93:fd:4b:9d:49:ca:68: 7e:39:f1:07:f0:46:39:5b:47:14:29:bf:8c:35:a0: a9:85:f9:79:4b:fd:89:b5:6b:ab:38:dd:f8:6a:4d: 62:b8:b6:bc:58:ac:67:e7:72:e6:5f:21:83:8a:84: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E0:33:2C:3E:23:E4:50:B3:E3:29:3A:ED:B9:FC:21:6A:AF:97:11 X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:7d:b2:7f:8e:c3:dc:1a:e0:41:a8:d9:71:ff:86:2f:dd:28: bb:5f:d0:e1:25:cd:86:64:6a:a2:45:9f:f8:a5:aa:57:ee:5a: a6:8e:87:30:29:77:b8:6a:d3:82:f9:6c:39:c7:86:07:72:52: 40:f7:0d:77:54:d1:4d:1d:28:ce:50:8e:75:99:a9:e6:eb:6f: 9d:0f:89:7b:6b:5b:14:78:67:6b:31:cf:28:32:5a:f7:29:cd: 8f:e6:8b:c2:7a:eb:09:ae:0d:69:9b:76:ce:46:16:8e:5b:b4: 1e:c4:c5:71:cf:60:28:78:69:ff:16:ad:a8:75:45:d4:50:6b: 09:98:b0:0f:93:3c:ce:56:b4:15:cf:07:18:69:31:59:34:7d: 51:d6:ab:64:71:92:7b:68:1e:56:ed:aa:15:a9:61:c2:a0:0e: a8:18:7e:1d:3c:fb:e6:11:f5:a6:c1:9d:80:ec:58:40:aa:39: c3:65:0c:7d:83:d9:ef:b0:c3:a2:81:d2:66:9e:f3:4f:3e:e0: 70:4d:f0:41:8e:27:74:b3:03:61:89:f7:9a:7c:95:dd:fa:ae: af:d3:07:10:e4:04:ec:68:d0:15:34:52:6e:2d:38:39:cd:cc: 63:21:39:1f:f6:83:ba:b0:da:97:f1:2a:a5:bd:2a:1a:d5:61: 87:ad:bf:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+UOpd9UqVPmftUC6LpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjUxMjIwMTQwMDMzWhcNMjUxMjIxMTQwMDMzWjAzMTEwLwYDVQQD EygwNWUwMzMyYzNlMjNlNDUwYjNlMzI5M2FlZGI5ZmMyMTZhYWY5NzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tba7qgu91iPJoR7SZHEEPetnmSk kt8CjvUlKnYBZPIDz6x8e/9+u1yCbXXww8lKoZZ880GplgkIqZGU3hFNFz/7zJJL OZHxQBT0BYupXHvNiy6DZ7yQEPCWSI2GRlUzgtkhcBX5CyaHdidBufnY7WSxn1PX Bse8YGSLeR6mpP85BwS18/wNiN6J+pmz0wVe4N1FijxT1BVrdUjYvJxgho7RePIU 6TeXcj4ktseCoPZhTTVnpEGqm6Sv7grqKf0HG9h56DLa+q+sX5P9S51Jymh+OfEH 8EY5W0cUKb+MNaCphfl5S/2JtWurON34ak1iuLa8WKxn53LmXyGDioQznwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXgMyw+I+RQs+MpOu25/CFqr5cRMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcX2yf47D 3BrgQajZcf+GL90ou1/Q4SXNhmRqokWf+KWqV+5apo6HMCl3uGrTgvlsOceGB3JS QPcNd1TRTR0ozlCOdZmp5utvnQ+Je2tbFHhnazHPKDJa9ynNj+aLwnrrCa4NaZt2 zkYWjlu0HsTFcc9gKHhp/xatqHVF1FBrCZiwD5M8zla0Fc8HGGkxWTR9UdarZHGS e2geVu2qFalhwqAOqBh+HTz75hH1psGdgOxYQKo5w2UMfYPZ77DDooHSZp7zTz7g cE3wQY4ndLMDYYn3mnyV3fqur9MHEOQE7GjQFTRSbi04Oc3MYyE5H/aDurDal/Eq pb0qGtVhh62/UQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:19:32 2025 by rpki-client