This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json) Hash identifier: YoDCPYTsV7NFfA6JOmDRHqpy4n+nR0iUS12GgYaEmG0= Subject key identifier: CA:E8:E5:1E:B7:E9:37:21:0C:A3:CC:97:79:A0:8F:64:AB:DB:F6:AA Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f Certificate serial: 019B2F9E9B6E1A62717053A8B20AE8D45E54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 04:01:22 +0000 Manifest this update: Thu 18 Dec 2025 04:01:22 +0000 Manifest next update: Fri 19 Dec 2025 04:01:22 +0000 Files and hashes: 1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=) 2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: MsBFHYYf5k150v+QF7SKetgqHsTPGmi7r1MoMq85Y5A=) 3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:9b:6e:1a:62:71:70:53:a8:b2:0a:e8:d4:5e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f Validity Not Before: Dec 18 04:01:22 2025 GMT Not After : Dec 19 04:01:22 2025 GMT Subject: CN=cae8e51eb7e937210ca3cc9779a08f64abdbf6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c3:7c:cc:66:9d:85:cb:dd:e0:0e:11:11:a8: b1:a0:e2:fb:36:c5:6b:89:77:cf:25:15:62:ce:ef: 46:3a:da:34:ee:51:47:73:fe:bc:69:dc:c3:13:cb: 2e:e7:3d:39:9a:56:ec:6d:e5:aa:f3:8a:bd:04:2a: d1:5d:9e:d2:c9:36:eb:1c:ab:9e:39:7e:ab:6a:0c: 6e:37:3b:c3:31:0d:3a:69:f2:b8:4d:2d:f2:c4:97: b2:f2:d0:77:52:a4:8d:aa:b2:ca:ad:7f:31:bf:3e: e3:d1:0c:ec:8a:72:73:4e:1a:25:ed:0c:1d:26:a9: 88:80:93:e1:42:9c:ae:77:4b:b4:db:19:ae:e0:a5: 7a:b3:3d:ef:72:bd:19:f7:94:cb:df:a7:c5:0f:b5: 56:2e:ec:dd:b0:2e:36:63:75:a0:f5:57:5f:d3:e1: 92:da:c1:65:1b:09:53:8e:9e:e1:72:1e:0c:4c:02: a1:ae:87:62:45:5e:06:32:2f:35:ce:52:34:8b:78: 1f:21:1c:35:d3:70:02:8b:f0:e7:0f:da:4a:f7:e9: 27:74:0e:3e:6f:13:c1:0c:5e:48:58:84:80:41:ce: 05:2f:47:f1:15:8e:e5:3d:55:20:e5:17:47:83:a6: 97:fc:75:47:ad:42:62:b0:1f:cc:17:4b:e1:e9:da: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E8:E5:1E:B7:E9:37:21:0C:A3:CC:97:79:A0:8F:64:AB:DB:F6:AA X509v3 Authority Key Identifier: keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7b:b6:25:02:52:6a:1e:69:8f:49:57:03:99:72:9b:ac:0a: 62:f3:29:ba:71:fb:fe:67:21:c0:2a:1a:81:c7:cb:31:37:cd: ff:48:cf:7a:08:6c:ab:7c:35:2b:2d:55:33:ab:88:6b:e9:96: 06:f7:25:f0:e2:2d:78:db:07:66:75:fe:1f:9d:fa:6b:81:e1: 0a:3d:62:18:57:bc:33:2a:b1:29:02:b1:94:ac:6e:8f:df:f1: 1e:ff:98:13:57:89:d2:e8:8c:cf:b1:aa:2f:e9:66:2d:38:72: 39:db:77:82:8d:2c:a9:2b:24:bf:f8:eb:45:b0:e7:a5:8c:e0: 3a:ca:62:bc:45:70:7f:6a:66:1e:e8:53:fb:13:32:01:36:ff: 88:d6:5b:e8:96:f3:9a:86:16:b8:f8:6b:19:eb:84:ec:de:00: 6c:6a:fe:7b:a4:0d:eb:15:3b:4c:c8:07:20:be:72:4d:dd:d1: 0a:d4:09:16:34:04:8e:49:d3:93:4a:f6:b1:4c:8c:fb:dc:81: 61:ff:67:93:df:16:b8:c2:3d:8e:ad:e0:60:26:7f:ec:47:d8: bc:6b:13:98:1f:47:a0:11:12:fd:c1:7a:7a:77:8f:e7:a0:a1: a4:59:4c:0d:73:e4:d2:e4:cc:44:7c:d7:df:e5:1e:25:ad:97: 1f:c2:57:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnptuGmJxcFOosgro1F5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3 ZjEyMWYwHhcNMjUxMjE4MDQwMTIyWhcNMjUxMjE5MDQwMTIyWjAzMTEwLwYDVQQD EyhjYWU4ZTUxZWI3ZTkzNzIxMGNhM2NjOTc3OWEwOGY2NGFiZGJmNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cN8zGadhcvd4A4REaixoOL7NsVr iXfPJRVizu9GOto07lFHc/68adzDE8su5z05mlbsbeWq84q9BCrRXZ7SyTbrHKue OX6ragxuNzvDMQ06afK4TS3yxJey8tB3UqSNqrLKrX8xvz7j0QzsinJzThol7Qwd JqmIgJPhQpyud0u02xmu4KV6sz3vcr0Z95TL36fFD7VWLuzdsC42Y3Wg9Vdf0+GS 2sFlGwlTjp7hch4MTAKhrodiRV4GMi81zlI0i3gfIRw103ACi/DnD9pK9+kndA4+ bxPBDF5IWISAQc4FL0fxFY7lPVUg5RdHg6aX/HVHrUJisB/MF0vh6drZWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMro5R636TchDKPMl3mgj2Sr2/aqMB8GA1UdIwQY MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5 LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXu2JQJS ah5pj0lXA5lym6wKYvMpunH7/mchwCoagcfLMTfN/0jPeghsq3w1Ky1VM6uIa+mW Bvcl8OIteNsHZnX+H536a4HhCj1iGFe8MyqxKQKxlKxuj9/xHv+YE1eJ0uiMz7Gq L+lmLThyOdt3go0sqSskv/jrRbDnpYzgOspivEVwf2pmHuhT+xMyATb/iNZb6Jbz moYWuPhrGeuE7N4AbGr+e6QN6xU7TMgHIL5yTd3RCtQJFjQEjknTk0r2sUyM+9yB Yf9nk98WuMI9jq3gYCZ/7EfYvGsTmB9HoBES/cF6eneP56ChpFlMDXPk0uTMRHzX 3+UeJa2XH8JXFA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:53:55 2025 by rpki-client