This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: hhTi0gcLUV8rKTJM8fv7x17WNGWcYeRz0fP1XQXgaNE= Subject key identifier: 9E:16:1A:DF:5C:97:84:C8:D9:F3:C9:C0:A6:FD:B8:13:76:1E:63:EB Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B353301C072350A27AA8B2BB4A180BA6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0FE5 Signing time: Fri 19 Dec 2025 06:01:33 +0000 Manifest this update: Fri 19 Dec 2025 06:01:33 +0000 Manifest next update: Sat 20 Dec 2025 06:01:33 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=) 12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: t54kvZb0g9ztIlE5rLT+G/uKIHzNXC60L2jnkmVfG7E=) 15: YwT_q4Kig3_g-NeH9DT3auGxCgo.roa (hash: ZaE3qib+0ral12KqqE3Ve01vVTpIeV1MSx94xxKpbME=) 16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:01:c0:72:35:0a:27:aa:8b:2b:b4:a1:80:ba:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Dec 19 06:01:33 2025 GMT Not After : Dec 20 06:01:33 2025 GMT Subject: CN=9e161adf5c9784c8d9f3c9c0a6fdb813761e63eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:99:c6:cb:f1:79:14:e4:64:85:1d:01:aa:71: f0:55:e3:96:ae:2c:d6:48:47:ef:ef:94:2c:41:e9: ce:e9:59:24:7a:8a:7a:ac:a0:95:46:5b:cb:54:f6: a9:a5:e1:70:21:8c:af:6a:2e:6d:cc:5a:92:91:ae: 5b:4f:90:7b:bd:23:af:00:fe:02:bf:65:1f:0c:82: 9a:2f:f2:a8:d4:ba:25:a0:87:e3:75:bb:9a:94:f9: f5:61:a1:26:44:b8:f8:25:a1:87:51:25:be:6b:9c: 6d:6c:07:14:f4:cb:44:45:16:5b:b5:44:b2:17:e3: 83:ca:90:bb:df:dd:77:de:6d:dd:66:6e:11:2f:bc: 7b:50:15:76:c1:f5:b8:08:7c:92:be:c6:bb:46:46: 17:c7:e9:fb:15:86:15:24:9b:ef:62:70:7b:a7:16: ae:84:f4:5d:52:66:b7:4a:31:5e:bf:8b:fc:1f:e1: c9:8b:2f:de:7f:a6:52:9c:13:c9:e1:c6:9a:8c:4d: 1e:14:1b:33:70:c7:c4:65:1d:06:61:84:6f:d2:48: 92:b3:16:17:90:7d:c0:0e:34:58:31:3c:3b:e5:5e: b5:6f:3d:ff:e1:87:91:99:db:d1:62:3a:43:bc:4e: 70:aa:7d:5e:4d:21:82:e4:b5:38:14:8f:30:df:0f: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:16:1A:DF:5C:97:84:C8:D9:F3:C9:C0:A6:FD:B8:13:76:1E:63:EB X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c7:3c:4b:2b:9d:6e:79:09:b3:8c:e4:13:8f:fa:77:c9:e2: 09:36:78:f4:c0:a0:bb:6d:42:8b:62:23:c9:4a:67:17:50:46: 1c:f5:fe:c3:a3:f1:c4:37:ab:5f:67:e2:bb:e0:c8:c4:b1:24: b3:ff:36:5f:71:69:6a:24:1c:bc:dc:c5:d2:0b:c0:1d:d5:74: 2f:d2:c9:c1:c5:de:e2:8f:e9:d7:82:3c:7b:8b:85:95:a9:77: ab:e0:15:bf:43:24:f5:4a:98:30:5b:f3:1f:74:e0:19:98:b7: 68:11:af:c5:d5:4b:d0:ca:fe:08:b3:69:97:a2:94:bd:09:96: 4a:3a:2d:2e:77:ad:64:2a:9e:d1:df:68:f4:7f:ce:1e:f5:4a: a8:72:5a:8d:b2:4f:8b:de:a7:3a:02:7b:32:16:5e:4e:98:42: 5d:57:f4:45:e1:5d:dc:04:a2:38:79:18:36:29:52:1e:29:09: 8a:64:af:66:c2:35:98:ce:b1:28:75:8e:f4:d2:0d:11:8c:30: 84:31:d5:96:90:37:b7:75:6b:c9:6c:29:9e:78:67:0f:03:e5: 23:f4:9c:b5:37:c4:8a:97:b4:4d:ae:bf:27:ca:d4:4f:cb:80: 13:bd:7b:29:33:3c:70:a9:9a:49:c3:45:cc:af:68:bb:d6:4b: 77:99:60:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MwHAcjUKJ6qLK7ShgLprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUxMjE5MDYwMTMzWhcNMjUxMjIwMDYwMTMzWjAzMTEwLwYDVQQD Eyg5ZTE2MWFkZjVjOTc4NGM4ZDlmM2M5YzBhNmZkYjgxMzc2MWU2M2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JnGy/F5FORkhR0BqnHwVeOWrizW SEfv75QsQenO6Vkkeop6rKCVRlvLVPappeFwIYyvai5tzFqSka5bT5B7vSOvAP4C v2UfDIKaL/Ko1LoloIfjdbualPn1YaEmRLj4JaGHUSW+a5xtbAcU9MtERRZbtUSy F+ODypC739133m3dZm4RL7x7UBV2wfW4CHySvsa7RkYXx+n7FYYVJJvvYnB7pxau hPRdUma3SjFev4v8H+HJiy/ef6ZSnBPJ4caajE0eFBszcMfEZR0GYYRv0kiSsxYX kH3ADjRYMTw75V61bz3/4YeRmdvRYjpDvE5wqn1eTSGC5LU4FI8w3w81SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4WGt9cl4TI2fPJwKb9uBN2HmPrMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsc8Syud bnkJs4zkE4/6d8niCTZ49MCgu21Ci2IjyUpnF1BGHPX+w6PxxDerX2fiu+DIxLEk s/82X3FpaiQcvNzF0gvAHdV0L9LJwcXe4o/p14I8e4uFlal3q+AVv0Mk9UqYMFvz H3TgGZi3aBGvxdVL0Mr+CLNpl6KUvQmWSjotLnetZCqe0d9o9H/OHvVKqHJajbJP i96nOgJ7MhZeTphCXVf0ReFd3ASiOHkYNilSHikJimSvZsI1mM6xKHWO9NINEYww hDHVlpA3t3VryWwpnnhnDwPlI/SctTfEipe0Ta6/J8rUT8uAE717KTM8cKmaScNF zK9ou9ZLd5lgvQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:46 2025 by rpki-client