This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: 4WvZF3HjzTeIOBnh1zMzRk/r1Ny1qkbI5hXZvltpJ4s= Subject key identifier: FE:B4:F3:86:C8:0F:01:70:64:E7:80:E4:86:94:5C:CA:94:20:0C:C9 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019AF577FACBE95282557A3A5D7444E8A948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0FC4 Signing time: Sat 06 Dec 2025 21:01:12 +0000 Manifest this update: Sat 06 Dec 2025 21:01:12 +0000 Manifest next update: Sun 07 Dec 2025 21:01:12 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=) 12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: /L9MLl9T3kKGY0gMNV+zBr981d3hWwnW6HgAUR3gFSo=) 15: YwT_q4Kig3_g-NeH9DT3auGxCgo.roa (hash: ZaE3qib+0ral12KqqE3Ve01vVTpIeV1MSx94xxKpbME=) 16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:fa:cb:e9:52:82:55:7a:3a:5d:74:44:e8:a9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Dec 6 21:01:12 2025 GMT Not After : Dec 7 21:01:12 2025 GMT Subject: CN=feb4f386c80f017064e780e486945cca94200cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:19:c8:4f:e1:3d:97:91:b7:df:87:7a:20: a4:71:55:e8:7f:c8:c1:1f:30:9a:cc:e2:b5:a4:0c: 6d:ba:1d:9b:5b:75:83:66:70:b5:8f:4c:ef:7c:cd: 50:02:bb:9d:a5:ed:3a:f0:de:71:d2:8e:52:4c:38: 5e:ce:2d:4d:3b:4c:5c:0d:5e:e5:b5:05:22:dd:e7: fc:31:28:7a:eb:8f:ac:2f:7f:83:ca:3e:65:72:69: 81:34:e1:e0:6e:4c:7c:3f:58:2b:0c:99:1e:0a:2a: fb:ba:e3:4a:79:69:81:28:97:ac:dc:b4:e0:e2:f4: 49:2c:96:41:c7:47:71:ee:94:8a:53:b1:45:26:98: 6d:49:dd:ec:67:cf:af:32:9d:94:70:cc:09:92:40: c8:98:a5:b4:ae:14:63:95:fd:3e:7b:d4:c9:a4:92: be:fc:52:15:ae:15:ea:7a:b5:83:69:a5:a0:fb:f8: 12:9e:df:2b:83:d6:68:8c:36:f1:57:c6:07:d9:72: fb:33:90:cd:2b:3b:2f:f4:95:dc:4c:57:08:11:78: 0c:ec:99:c4:8f:af:fb:b0:0a:ea:3b:50:09:9c:cc: 7d:98:b2:0d:90:4d:b9:21:cc:5f:b3:cc:a1:81:4c: 08:56:af:9f:ab:2e:fb:99:cd:77:bc:5f:23:4c:93: 41:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B4:F3:86:C8:0F:01:70:64:E7:80:E4:86:94:5C:CA:94:20:0C:C9 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c1:b1:2a:26:bc:59:ba:e1:ce:7d:23:a6:9c:2d:99:19:98: e6:61:80:5f:f5:38:1f:56:e8:1a:c6:6b:b6:fd:e7:85:18:fd: 8a:90:3b:ce:bc:eb:1d:36:8a:03:e7:cf:7a:b3:c4:6d:5e:34: 01:ea:80:a2:59:a1:6b:3b:6f:9c:8d:89:76:b4:bf:20:50:88: 26:b8:00:0a:b3:a4:d4:0d:3f:c7:69:57:30:44:04:e9:46:13: c5:5d:2c:ef:57:d5:0e:b1:01:a6:27:f6:91:f7:0c:06:b1:84: d8:c5:a0:a8:41:c7:ac:29:4e:7f:4c:cd:2d:ed:9a:39:74:28: 53:53:f0:2a:9d:63:a4:5b:a5:8d:97:70:d4:4e:d4:4f:7f:00: af:62:96:09:08:03:1c:6f:1b:07:9c:45:b1:d0:6b:33:e4:9e: ea:e8:e8:56:ef:47:cf:23:98:7f:6f:39:c2:2a:ae:4a:0b:a8: 9b:0a:0e:81:50:78:f2:fd:b8:9f:86:88:ba:3f:6c:8a:4a:4f: e4:ee:f1:fc:58:63:4f:0a:42:d4:c3:d0:28:bb:05:ac:c2:86: 0b:f8:8c:bc:33:9f:9c:9d:84:05:ee:85:ff:61:61:2d:97:66: ac:a1:80:bd:88:20:45:f7:8f:aa:fb:55:6c:7f:3f:a2:ba:d9: 0d:f6:e1:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/rL6VKCVXo6XXRE6KlIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUxMjA2MjEwMTEyWhcNMjUxMjA3MjEwMTEyWjAzMTEwLwYDVQQD EyhmZWI0ZjM4NmM4MGYwMTcwNjRlNzgwZTQ4Njk0NWNjYTk0MjAwY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshkZyE/hPZeRt9+HeiCkcVXof8jB HzCazOK1pAxtuh2bW3WDZnC1j0zvfM1QArudpe068N5x0o5STDhezi1NO0xcDV7l tQUi3ef8MSh664+sL3+Dyj5lcmmBNOHgbkx8P1grDJkeCir7uuNKeWmBKJes3LTg 4vRJLJZBx0dx7pSKU7FFJphtSd3sZ8+vMp2UcMwJkkDImKW0rhRjlf0+e9TJpJK+ /FIVrhXqerWDaaWg+/gSnt8rg9ZojDbxV8YH2XL7M5DNKzsv9JXcTFcIEXgM7JnE j6/7sArqO1AJnMx9mLINkE25Icxfs8yhgUwIVq+fqy77mc13vF8jTJNBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6084bIDwFwZOeA5IaUXMqUIAzJMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8GxKia8 Wbrhzn0jppwtmRmY5mGAX/U4H1boGsZrtv3nhRj9ipA7zrzrHTaKA+fPerPEbV40 AeqAolmhaztvnI2JdrS/IFCIJrgACrOk1A0/x2lXMEQE6UYTxV0s71fVDrEBpif2 kfcMBrGE2MWgqEHHrClOf0zNLe2aOXQoU1PwKp1jpFuljZdw1E7UT38Ar2KWCQgD HG8bB5xFsdBrM+Se6ujoVu9HzyOYf285wiquSguomwoOgVB48v24n4aIuj9sikpP 5O7x/FhjTwpC1MPQKLsFrMKGC/iMvDOfnJ2EBe6F/2FhLZdmrKGAvYggRfePqvtV bH8/orrZDfbh3Q== -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:46 2025 by rpki-client