This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json) Hash identifier: hr1tPFgeY+MkORMBbYYAPWL87tFKz3/Rz5PNiihp9cU= Subject key identifier: 31:DA:A7:E7:99:8B:BC:FC:45:B2:1E:35:9A:B5:7F:91:3D:FF:09:5D Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2 Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2 Certificate serial: 019B4ADF05DF381C84ABA5A8B06AEC33CAB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft Manifest number: 0F58 Signing time: Tue 23 Dec 2025 11:01:28 +0000 Manifest this update: Tue 23 Dec 2025 11:01:28 +0000 Manifest next update: Wed 24 Dec 2025 11:01:28 +0000 Files and hashes: 1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: ymwHUmyc+cl8fKdU5WSxuBQ1XAsmeVjcGMjaz77nBo0=) 2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:05:df:38:1c:84:ab:a5:a8:b0:6a:ec:33:ca:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2 Validity Not Before: Dec 23 11:01:28 2025 GMT Not After : Dec 24 11:01:28 2025 GMT Subject: CN=31daa7e7998bbcfc45b21e359ab57f913dff095d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:07:4c:ad:57:a5:01:91:78:05:e0:b2:36: 00:69:2f:1a:0c:6f:4e:08:d8:b6:db:c5:62:1c:44: 7e:3e:5a:ef:8a:bc:83:31:47:5d:24:4d:5f:cf:45: 68:dc:37:9c:15:c6:77:ef:44:70:f0:ae:fb:4d:ad: 22:39:c5:b0:8b:1b:37:3d:d7:5b:f8:bc:08:67:77: 07:42:36:40:fa:81:c7:1e:aa:37:ab:86:4a:48:79: f4:7f:87:40:f4:ab:01:7e:83:a2:32:95:fa:ff:ce: a4:7d:3d:1a:a3:c9:47:79:64:50:2b:f1:20:f0:49: d6:12:b4:14:41:74:1b:cd:56:ce:32:7f:b6:9f:0b: 18:52:44:dc:3a:a9:73:75:e7:da:3c:99:68:75:c0: 45:f2:b3:23:f0:dd:95:db:53:87:52:c0:fc:3f:d4: d8:b7:88:83:9d:55:0f:26:0f:db:de:4b:dc:b8:16: c8:3c:98:35:fb:4f:08:1b:1a:fd:54:d3:98:5d:5f: dd:73:59:a5:cd:0d:81:8e:11:6b:83:43:c2:e8:de: e0:ad:87:45:50:40:12:47:56:95:8c:19:34:79:00: bd:70:95:9e:9a:20:3f:7a:13:43:a5:61:0a:66:25: c0:18:81:f2:a6:e3:42:1a:b0:ee:18:7d:6c:a6:20: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:A7:E7:99:8B:BC:FC:45:B2:1E:35:9A:B5:7F:91:3D:FF:09:5D X509v3 Authority Key Identifier: keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:38:34:60:a3:0a:26:ee:a1:04:64:c2:f3:8f:39:57:5a:d3: 43:e0:f9:be:16:74:74:10:22:10:d0:9b:75:cd:0d:9f:2f:fb: f8:8e:1b:d9:1d:a1:57:6c:b4:1d:77:8d:8b:57:61:69:3b:15: 15:7b:e0:67:ad:63:57:6b:72:cb:2d:37:0c:99:fc:64:e7:a3: 1b:85:92:9a:d8:6a:67:fb:e7:8e:ce:c7:90:ef:46:7e:81:cb: 3a:62:bb:4f:c7:10:bf:99:86:f7:81:0b:5e:21:b9:25:02:22: 72:65:66:94:2d:01:2d:f4:15:ce:c7:a3:c1:ed:ca:9a:37:6b: ee:a7:84:d5:58:70:2d:42:eb:ef:81:e6:b6:ea:3e:3d:42:30: af:a0:5e:f1:09:80:4d:44:67:54:dc:3c:5c:12:96:c1:42:19: f5:8b:8a:2d:47:2c:e5:fb:1b:c7:a3:f1:d3:cb:fe:30:04:a6: c3:21:4b:0a:c3:e7:a0:f1:97:38:a9:55:2e:35:5d:9c:db:d0: 86:1e:24:3b:c4:8f:29:5f:35:29:55:1d:8e:24:d3:ea:81:0a: fb:c6:7d:ca:8f:a6:3d:44:83:9e:dc:43:b9:64:a7:16:28:38: a7:5e:2f:8c:7f:7f:4e:53:cd:41:eb:d0:e6:14:c2:f1:3a:63: ba:42:f0:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3wXfOByEq6WosGrsM8q4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMTNhMjFiNGU4Y2UxNGNlN2Q2NjgwYzk5MGVjNmJhMjlh MDI3YzIwHhcNMjUxMjIzMTEwMTI4WhcNMjUxMjI0MTEwMTI4WjAzMTEwLwYDVQQD EygzMWRhYTdlNzk5OGJiY2ZjNDViMjFlMzU5YWI1N2Y5MTNkZmYwOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUsHTK1XpQGReAXgsjYAaS8aDG9O CNi228ViHER+PlrviryDMUddJE1fz0Vo3DecFcZ370Rw8K77Ta0iOcWwixs3Pddb +LwIZ3cHQjZA+oHHHqo3q4ZKSHn0f4dA9KsBfoOiMpX6/86kfT0ao8lHeWRQK/Eg 8EnWErQUQXQbzVbOMn+2nwsYUkTcOqlzdefaPJlodcBF8rMj8N2V21OHUsD8P9TY t4iDnVUPJg/b3kvcuBbIPJg1+08IGxr9VNOYXV/dc1mlzQ2BjhFrg0PC6N7grYdF UEASR1aVjBk0eQC9cJWemiA/ehNDpWEKZiXAGIHypuNCGrDuGH1spiAi1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHap+eZi7z8RbIeNZq1f5E9/wldMB8GA1UdIwQY MBaAFP8TohtOjOFM59ZoDJkOxropoCfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2Yjkt N2ZiYzRlNTc5N2ExLzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2YjktN2ZiYzRlNTc5N2Ex LzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzg0YKMK Ju6hBGTC8485V1rTQ+D5vhZ0dBAiENCbdc0Nny/7+I4b2R2hV2y0HXeNi1dhaTsV FXvgZ61jV2tyyy03DJn8ZOejG4WSmthqZ/vnjs7HkO9GfoHLOmK7T8cQv5mG94EL XiG5JQIicmVmlC0BLfQVzsejwe3Kmjdr7qeE1VhwLULr74Hmtuo+PUIwr6Be8QmA TURnVNw8XBKWwUIZ9YuKLUcs5fsbx6Px08v+MASmwyFLCsPnoPGXOKlVLjVdnNvQ hh4kO8SPKV81KVUdjiTT6oEK+8Z9yo+mPUSDntxDuWSnFig4p14vjH9/TlPNQevQ 5hTC8TpjukLw+A== -----END CERTIFICATE-----Generated at Tue Dec 23 17:59:07 2025 by rpki-client