This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json) Hash identifier: 5qAeicXs1yBjYfDZAUkEAlnfugBt5NS8WkNmKqPKXUE= Subject key identifier: 43:34:EF:27:5A:C9:07:4D:D7:15:13:1F:25:12:41:08:45:1E:32:F5 Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019B0EC943A13E513D07967764CCC4691B5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft Manifest number: 08E4 Signing time: Thu 11 Dec 2025 19:00:29 +0000 Manifest this update: Thu 11 Dec 2025 19:00:29 +0000 Manifest next update: Fri 12 Dec 2025 19:00:29 +0000 Files and hashes: 1: 03bpI-w18-fLfKrGneHS5OC3lK4.roa (hash: 015UeQCesyPqqo0lNLcoMmYZaU1tmuzuzIUUZ2FgF3o=) 2: EnIqlvcohGwr9_QO8UiJDynyMjg.roa (hash: 2SZOKpKm6p7U6uHMsa55SpuH60Kzn75O+euuKRFZlZM=) 3: gCeEg2-aKNA4NJwCq_wet9ZUHSo.roa (hash: c1XqtEHbwnDz4EEYbDLzjNU+kaoA7BLTobxYu0vC/Ec=) 4: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (hash: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=) 5: qbDVabYqJeYEqjBWj7Cv4XVl3xw.roa (hash: EKqAOb5Dbm7XycIewVU/Wv2fHJD/MJiV9ILVNO/5NdE=) 6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: xKPUmY/NRx98DD2Y9eSGT8p8vGRi8coiA0ulrWATGXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:43:a1:3e:51:3d:07:96:77:64:cc:c4:69:1b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Dec 11 19:00:29 2025 GMT Not After : Dec 12 19:00:29 2025 GMT Subject: CN=4334ef275ac9074dd715131f25124108451e32f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:9b:29:32:7f:bd:30:e2:3f:ca:61:60:63: 5f:49:71:0b:d2:bf:8b:26:d6:64:80:9e:ac:97:f0: 79:2e:14:76:f3:6a:21:92:b5:63:bc:80:35:e5:05: 26:90:9c:fd:74:b1:af:be:87:06:69:6c:18:0e:cb: 75:fd:73:b3:07:d5:c7:e3:cb:fa:47:ea:03:e4:d9: 9c:05:93:e6:ec:4c:01:02:d0:b6:83:e6:ef:a0:96: f1:81:51:7f:67:9d:81:8c:e2:75:a3:d2:e6:5d:aa: a5:ba:cf:6d:82:ed:48:a0:f3:e5:3f:a2:f6:2b:3d: 3a:6f:60:a8:32:46:df:c3:11:1b:44:57:75:1b:e7: 45:b0:18:99:89:c8:1e:32:53:ed:b2:5c:36:a0:1c: 82:77:4d:9f:14:de:43:53:72:ea:1f:b4:f5:b7:43: dc:88:58:72:5b:0d:65:e7:2d:69:c2:26:45:d9:77: 59:e9:fa:4a:6e:60:85:11:f6:99:31:76:92:b3:83: dd:6d:1d:45:9b:35:55:81:24:7c:2e:dc:b2:56:fb: 71:aa:66:8d:f9:0c:c6:1d:41:00:ff:18:d0:ac:dd: e5:bc:e1:36:68:84:39:ef:26:97:6c:eb:e0:21:18: 51:57:0c:52:47:5b:03:6b:80:18:3f:13:d0:24:13: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:34:EF:27:5A:C9:07:4D:D7:15:13:1F:25:12:41:08:45:1E:32:F5 X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e6:64:4f:cc:b3:37:24:8a:84:fe:64:17:0f:91:09:ee:c9: 2b:c4:7f:b9:fd:bc:76:ba:ad:e0:94:1a:0d:e7:8e:4a:34:d1: cf:ea:19:21:88:88:8a:3d:93:7a:d2:fc:e2:16:c0:d1:67:ca: f3:a0:af:14:95:ea:eb:f5:82:ea:74:7d:30:d8:03:2c:29:3a: f0:91:0b:46:05:ff:ed:23:2f:35:7c:4e:5f:e8:0f:a5:42:77: 70:2e:b2:44:14:19:e3:0e:98:2d:61:6e:a5:06:5e:80:f1:05: f9:ff:51:a3:8d:03:c3:7a:88:24:40:63:3e:a3:30:35:a1:55: d8:6a:09:4d:d3:0a:7a:0d:73:3d:dc:48:80:1d:3b:46:b4:cb: 06:8e:1e:17:a5:12:90:48:f6:19:d4:cc:4f:1a:1a:c9:7b:e4: a2:34:43:8e:0d:a7:e8:74:ba:41:62:34:27:dd:24:be:f1:42: 28:71:94:a3:b9:ef:cd:38:d6:ea:98:a3:07:41:96:71:e7:58: d8:6a:63:2d:92:6d:ed:b0:c4:72:87:47:77:a1:bc:0b:d4:ed: 58:a1:60:37:e7:71:de:7e:fc:73:ad:84:32:af:09:ee:8a:56: 9d:a5:d4:29:ca:b3:ab:4e:eb:4e:58:3b:4a:14:af:cf:20:c8: 58:2f:9e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyUOhPlE9B5Z3ZMzEaRtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjUxMjExMTkwMDI5WhcNMjUxMjEyMTkwMDI5WjAzMTEwLwYDVQQD Eyg0MzM0ZWYyNzVhYzkwNzRkZDcxNTEzMWYyNTEyNDEwODQ1MWUzMmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBibKTJ/vTDiP8phYGNfSXEL0r+L JtZkgJ6sl/B5LhR282ohkrVjvIA15QUmkJz9dLGvvocGaWwYDst1/XOzB9XH48v6 R+oD5NmcBZPm7EwBAtC2g+bvoJbxgVF/Z52BjOJ1o9LmXaqlus9tgu1IoPPlP6L2 Kz06b2CoMkbfwxEbRFd1G+dFsBiZicgeMlPtslw2oByCd02fFN5DU3LqH7T1t0Pc iFhyWw1l5y1pwiZF2XdZ6fpKbmCFEfaZMXaSs4PdbR1FmzVVgSR8LtyyVvtxqmaN +QzGHUEA/xjQrN3lvOE2aIQ57yaXbOvgIRhRVwxSR1sDa4AYPxPQJBPxkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM07ydayQdN1xUTHyUSQQhFHjL1MB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuZkT8yz NySKhP5kFw+RCe7JK8R/uf28drqt4JQaDeeOSjTRz+oZIYiIij2TetL84hbA0WfK 86CvFJXq6/WC6nR9MNgDLCk68JELRgX/7SMvNXxOX+gPpUJ3cC6yRBQZ4w6YLWFu pQZegPEF+f9Ro40Dw3qIJEBjPqMwNaFV2GoJTdMKeg1zPdxIgB07RrTLBo4eF6US kEj2GdTMTxoayXvkojRDjg2n6HS6QWI0J90kvvFCKHGUo7nvzTjW6pijB0GWcedY 2GpjLZJt7bDEcodHd6G8C9TtWKFgN+dx3n78c62EMq8J7opWnaXUKcqzq07rTlg7 ShSvzyDIWC+eLg== -----END CERTIFICATE-----Generated at Fri Dec 12 03:41:12 2025 by rpki-client