This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json) Hash identifier: uCA9H2F7jm2uT5DP9fu7kZ2Ss8LEEHrteq2VmQlPemI= Subject key identifier: DD:75:F5:E6:64:7C:69:2E:07:14:B0:E8:5F:1D:98:12:A6:1F:B8:96 Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad Certificate serial: 019B2B8A98F01AE17A1AACB32876E0403B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft Manifest number: 0F4C Signing time: Wed 17 Dec 2025 09:01:01 +0000 Manifest this update: Wed 17 Dec 2025 09:01:01 +0000 Manifest next update: Thu 18 Dec 2025 09:01:01 +0000 Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=) 2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: dbw/BTI8iV83QFAPJOBJ9llojVGcUp0fDu3T7kX/c8s=) 3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:98:f0:1a:e1:7a:1a:ac:b3:28:76:e0:40:3b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad Validity Not Before: Dec 17 09:01:01 2025 GMT Not After : Dec 18 09:01:01 2025 GMT Subject: CN=dd75f5e6647c692e0714b0e85f1d9812a61fb896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:31:6f:77:bb:8f:55:84:2c:fe:67:cc:28: 44:92:20:cd:6e:5b:f1:ed:8f:41:05:66:16:ab:b5: ba:4d:38:33:b6:c9:21:63:c5:c2:9a:88:ce:84:92: 02:95:ec:f6:2b:48:bd:87:67:4a:66:46:65:8a:e5: f7:ce:cc:20:5c:d8:ac:c5:9e:f1:e4:93:ea:77:08: 03:cd:88:e1:e8:63:af:31:98:c9:3e:c0:d5:62:ad: 39:8d:e9:7e:08:74:14:b3:27:c2:34:74:2f:28:0f: 51:d7:8a:a8:e2:29:e9:d0:50:d2:bf:fd:c0:65:15: 86:dd:78:0c:bc:52:c5:dd:35:38:28:a4:83:37:97: ed:93:b5:21:65:d4:36:dd:31:ae:de:b5:13:b0:e5: 83:5c:c8:5f:cf:20:a7:06:8e:89:83:9b:04:0c:14: 7d:f2:a0:77:48:b7:ff:00:0a:c5:57:cb:f5:05:7a: b3:8d:df:e0:72:1c:cd:4f:71:d7:58:27:77:b7:61: 6c:49:aa:3d:1f:05:ee:98:a4:43:72:de:21:c4:14: 12:c3:dc:de:96:29:ea:b2:2d:40:7f:2a:e3:64:b9: bb:7a:39:ee:85:f8:3a:bc:3d:0d:51:b6:2e:68:1e: cf:49:59:33:f4:33:4a:66:39:5c:79:21:d6:0b:f1: a9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:75:F5:E6:64:7C:69:2E:07:14:B0:E8:5F:1D:98:12:A6:1F:B8:96 X509v3 Authority Key Identifier: keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3c:64:b6:04:71:71:63:f1:fa:4f:95:2e:17:10:ff:a4:99: 84:fe:cd:a7:35:78:31:f2:38:5c:7e:9c:21:1c:a2:0f:06:91: c5:24:0a:62:33:6f:10:20:0a:b7:fd:e5:ea:e5:97:29:fc:95: ed:76:36:1c:6f:f6:57:26:c3:23:70:d0:84:eb:9b:cd:35:24: 74:38:d5:69:5b:f0:33:68:76:64:b9:8b:e8:28:70:c0:bf:4f: c8:4c:47:6c:68:da:3a:ba:54:51:21:42:8e:b5:d2:df:cd:61: 23:65:5a:9f:01:8b:5e:be:1e:34:f0:da:49:08:db:56:d4:1f: 45:a4:3b:e3:ca:19:b7:f7:1b:fd:68:05:77:25:af:20:6f:d3: 85:96:c0:98:b8:a6:f7:2b:28:0e:89:e4:e0:37:90:63:31:8e: 3c:85:4a:03:07:dc:5d:86:f0:77:d2:a4:99:e2:9d:6b:82:da: b4:bc:cf:dd:8c:5f:78:69:0b:7b:93:1b:50:be:36:9a:46:dd: fe:b7:0d:16:2a:b5:12:c5:de:bd:89:c0:b6:b1:33:2a:0d:fb: ec:16:bf:3e:fa:dd:4a:be:0c:3b:22:e5:b3:a8:38:31:7e:3d: 1f:c0:24:f0:6b:b6:da:ff:71:59:70:66:73:4d:e6:9e:4f:11: 70:56:5f:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsripjwGuF6GqyzKHbgQDuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2M3NzM2OTQ1YzI5YTc3YmFjZDViMThiMGZmNTg3NTEx MTdiYWQwHhcNMjUxMjE3MDkwMTAxWhcNMjUxMjE4MDkwMTAxWjAzMTEwLwYDVQQD EyhkZDc1ZjVlNjY0N2M2OTJlMDcxNGIwZTg1ZjFkOTgxMmE2MWZiODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraAxb3e7j1WELP5nzChEkiDNblvx 7Y9BBWYWq7W6TTgztskhY8XCmojOhJIClez2K0i9h2dKZkZliuX3zswgXNisxZ7x 5JPqdwgDzYjh6GOvMZjJPsDVYq05jel+CHQUsyfCNHQvKA9R14qo4inp0FDSv/3A ZRWG3XgMvFLF3TU4KKSDN5ftk7UhZdQ23TGu3rUTsOWDXMhfzyCnBo6Jg5sEDBR9 8qB3SLf/AArFV8v1BXqzjd/gchzNT3HXWCd3t2FsSao9HwXumKRDct4hxBQSw9ze linqsi1AfyrjZLm7ejnuhfg6vD0NUbYuaB7PSVkz9DNKZjlceSHWC/GpSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN119eZkfGkuBxSw6F8dmBKmH7iWMB8GA1UdIwQY MBaAFF58dzaUXCmne6zVsYsP9YdREXutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWIt ZWVlZGQ5OWI4Y2M0LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWItZWVlZGQ5OWI4Y2M0 LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjxktgRx cWPx+k+VLhcQ/6SZhP7NpzV4MfI4XH6cIRyiDwaRxSQKYjNvECAKt/3l6uWXKfyV 7XY2HG/2VybDI3DQhOubzTUkdDjVaVvwM2h2ZLmL6ChwwL9PyExHbGjaOrpUUSFC jrXS381hI2VanwGLXr4eNPDaSQjbVtQfRaQ748oZt/cb/WgFdyWvIG/ThZbAmLim 9ysoDonk4DeQYzGOPIVKAwfcXYbwd9KkmeKda4LatLzP3YxfeGkLe5MbUL42mkbd /rcNFiq1EsXevYnAtrEzKg377Ba/PvrdSr4MOyLls6g4MX49H8Ak8Gu22v9xWXBm c03mnk8RcFZfZQ== -----END CERTIFICATE-----Generated at Wed Dec 17 15:11:44 2025 by rpki-client