This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json) Hash identifier: j6Y35nL4ZVmoUb3PMziLj8who631uPWAo/OOYDUptaA= Subject key identifier: E1:76:E4:21:D6:10:DB:91:FA:BB:3E:00:60:29:09:B9:81:FC:1D:85 Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Certificate serial: 019B4091A43BC66B14A76742BA3D136BCC78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft Manifest number: 0B75 Signing time: Sun 21 Dec 2025 11:00:45 +0000 Manifest this update: Sun 21 Dec 2025 11:00:45 +0000 Manifest next update: Mon 22 Dec 2025 11:00:45 +0000 Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=) 2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: Qki8LKmXAWlDNOuxwLffnMdRLcsLOIm3ZGIUW7YP7y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:a4:3b:c6:6b:14:a7:67:42:ba:3d:13:6b:cc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Validity Not Before: Dec 21 11:00:45 2025 GMT Not After : Dec 22 11:00:45 2025 GMT Subject: CN=e176e421d610db91fabb3e00602909b981fc1d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:da:04:5c:61:63:4c:7c:de:f9:bb:e4:4c:6f: 73:9f:ff:39:7b:fd:55:1f:53:78:26:e6:9c:4c:c1: 3a:15:04:5d:46:45:ac:72:4d:fd:66:6c:e2:6a:6a: 1a:e6:dc:7a:07:f4:5f:6c:62:0a:0c:8e:8b:96:f2: 51:3e:d5:e7:07:16:de:ca:63:fe:90:1a:8d:cf:6c: 77:9f:d1:94:93:dd:a4:d4:f2:67:b8:18:16:b0:16: 3a:6d:a6:30:d4:03:71:df:92:35:3f:9c:5f:44:ba: 03:f8:39:d1:a6:b6:9e:1a:80:c2:10:90:66:87:5c: 61:86:89:71:ca:06:22:53:9f:66:0d:10:b2:2d:02: 69:9e:8f:66:a0:7d:e2:ea:62:83:dc:0c:82:a8:e8: 94:fe:a1:2f:8a:1d:27:fa:e8:55:ab:60:fe:11:fa: 93:2b:4c:dd:f7:a7:91:fb:99:38:97:99:b6:64:0f: bc:50:fa:a6:25:83:c6:15:6f:f4:52:aa:01:99:61: 5b:b3:26:fe:fe:87:c3:70:24:07:96:31:9f:9e:64: 35:00:61:9b:38:8f:6a:1e:a8:23:7f:b4:99:c1:7b: 6d:08:64:3b:40:5c:a5:17:17:75:f2:3b:fb:aa:c2: ee:ca:d3:af:44:f7:11:62:34:cc:dd:42:58:4c:41: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:76:E4:21:D6:10:DB:91:FA:BB:3E:00:60:29:09:B9:81:FC:1D:85 X509v3 Authority Key Identifier: keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a5:b1:38:a9:96:e1:22:e9:d1:a2:cf:b5:bb:42:41:d3:8b: ed:5c:2b:a0:a2:e9:6b:8f:f4:01:7f:68:71:35:f1:49:13:b4: f3:ba:03:af:e1:64:72:f9:9c:8f:86:bd:74:a2:fa:e0:93:82: cf:16:8a:c6:29:20:83:91:d5:15:04:69:43:d1:14:f9:6a:4b: 13:94:6e:0c:d6:f7:e1:2c:1f:e4:3d:36:51:3a:28:36:da:2d: 07:7d:42:95:2b:ee:cb:6d:fa:14:80:0d:3a:46:40:38:f6:d5: 32:f5:b7:bf:50:f8:84:ae:eb:c6:de:87:3a:7b:ff:a1:32:35: eb:13:e5:96:75:e4:05:35:fc:7d:f7:69:e8:cc:d9:e0:72:d8: 71:a5:8e:58:d2:05:ed:42:b7:76:20:5a:ad:80:6b:36:f3:3c: 27:d7:b1:69:51:8e:a3:98:5c:8a:3c:cf:23:d9:a9:3e:97:a3: b7:83:99:c8:cf:00:34:d4:ee:b3:66:14:f3:f1:53:9f:22:c1: 21:e0:63:28:c2:0b:12:be:91:46:c0:2a:84:f6:9e:15:cf:e1: 1f:fb:d2:b3:04:4d:ec:09:b1:f6:4b:3b:b6:95:ad:c7:e4:81: b2:fd:6e:fb:5c:99:8e:46:a2:84:25:68:21:aa:1e:4b:27:5f: 14:47:89:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkaQ7xmsUp2dCuj0Ta8x4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk NTAzYzYwHhcNMjUxMjIxMTEwMDQ1WhcNMjUxMjIyMTEwMDQ1WjAzMTEwLwYDVQQD EyhlMTc2ZTQyMWQ2MTBkYjkxZmFiYjNlMDA2MDI5MDliOTgxZmMxZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2doEXGFjTHze+bvkTG9zn/85e/1V H1N4JuacTME6FQRdRkWsck39Zmziamoa5tx6B/RfbGIKDI6LlvJRPtXnBxbeymP+ kBqNz2x3n9GUk92k1PJnuBgWsBY6baYw1ANx35I1P5xfRLoD+DnRpraeGoDCEJBm h1xhholxygYiU59mDRCyLQJpno9moH3i6mKD3AyCqOiU/qEvih0n+uhVq2D+EfqT K0zd96eR+5k4l5m2ZA+8UPqmJYPGFW/0UqoBmWFbsyb+/ofDcCQHljGfnmQ1AGGb OI9qHqgjf7SZwXttCGQ7QFylFxd18jv7qsLuytOvRPcRYjTM3UJYTEHOkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF25CHWENuR+rs+AGApCbmB/B2FMB8GA1UdIwQY MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt N2RmYmJhZTAzNjhlLzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaWxOKmW 4SLp0aLPtbtCQdOL7VwroKLpa4/0AX9ocTXxSRO087oDr+Fkcvmcj4a9dKL64JOC zxaKxikgg5HVFQRpQ9EU+WpLE5RuDNb34Swf5D02UTooNtotB31ClSvuy236FIAN OkZAOPbVMvW3v1D4hK7rxt6HOnv/oTI16xPllnXkBTX8ffdp6MzZ4HLYcaWOWNIF 7UK3diBarYBrNvM8J9exaVGOo5hcijzPI9mpPpejt4OZyM8ANNTus2YU8/FTnyLB IeBjKMILEr6RRsAqhPaeFc/hH/vSswRN7Amx9ks7tpWtx+SBsv1u+1yZjkaihCVo IaoeSydfFEeJ3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 17:14:21 2025 by rpki-client