This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json) Hash identifier: ek+sTaiMvXXkKL16UZRBXsVJDNF9quUpLnAJlhDqq8A= Subject key identifier: 2B:8D:42:B3:D1:0B:7F:EE:92:74:26:D0:52:F4:FA:8F:2E:C8:0C:4E Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Certificate serial: 019B0E5B675D0370FAC12174E58CE2C01DBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft Manifest number: 0B97 Signing time: Thu 11 Dec 2025 17:00:29 +0000 Manifest this update: Thu 11 Dec 2025 17:00:29 +0000 Manifest next update: Fri 12 Dec 2025 17:00:29 +0000 Files and hashes: 1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=) 2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=) 3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=) 4: TO_SSwf6-eWoLaY3pBc8ewOhpiA.roa (hash: ee63RZitNOPdcRNyJ4aJ7hmGttuUOvT0FBG6CRMod/s=) 5: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: FkfMClfvri/tJuFJlYCfkpypWqX57JY82556Xnhs7dc=) 6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=) 7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:67:5d:03:70:fa:c1:21:74:e5:8c:e2:c0:1d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Validity Not Before: Dec 11 17:00:29 2025 GMT Not After : Dec 12 17:00:29 2025 GMT Subject: CN=2b8d42b3d10b7fee927426d052f4fa8f2ec80c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:ac:0e:00:3c:59:65:6c:ef:a3:4c:fa:4f: d8:d2:9a:63:e8:4c:ef:b5:b4:69:84:9d:16:70:52: 9f:e1:98:11:ed:68:05:71:7a:79:b7:40:05:20:fc: 60:ed:6f:f5:ef:95:93:94:8b:cb:b3:7e:83:38:82: b9:ba:04:88:7f:f4:3f:20:2f:10:b9:e1:72:58:0c: f2:20:3a:41:41:8c:34:43:be:9e:c2:a0:dc:a6:07: 06:a4:9e:80:fb:0d:e9:06:0e:5d:ef:96:86:fb:7a: ed:9d:4e:4a:e9:1b:13:b1:28:ac:7d:33:11:b4:f2: 81:29:fd:81:c5:3c:c8:5b:4c:35:1d:b9:45:53:30: dd:6b:d1:cc:0c:62:81:68:ad:80:4b:0e:4f:53:90: be:7c:db:6f:d7:39:28:5b:d0:01:9c:06:59:00:e1: 32:e5:d2:02:6a:a4:b0:54:c9:17:9b:18:3b:7b:9a: 17:a5:a8:0b:ce:35:ee:12:51:b3:91:b8:21:77:88: 66:a4:de:85:52:a2:c1:06:f5:da:6d:26:47:00:df: 18:30:20:80:b1:ea:bb:98:92:9a:20:75:3d:8b:41: 42:f9:81:7a:a8:d0:d9:a8:69:dd:f0:62:09:e3:37: 5b:3e:0c:02:02:59:35:42:58:09:97:5f:b6:6c:f1: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8D:42:B3:D1:0B:7F:EE:92:74:26:D0:52:F4:FA:8F:2E:C8:0C:4E X509v3 Authority Key Identifier: keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:12:de:1c:67:0a:ee:53:74:af:7b:60:3a:77:e1:03:21:1a: c8:2d:90:99:36:ee:e8:4e:b0:32:7b:2c:69:86:15:6a:fb:9e: 2f:bb:a9:a2:0c:aa:0d:e8:bc:b6:60:42:49:50:47:b0:99:92: 4a:55:91:66:05:05:28:8b:88:e6:ff:89:4f:16:77:25:d8:44: 55:10:a2:17:d4:b3:d7:e2:ba:8f:91:86:c3:dd:ff:eb:80:4e: 1b:dc:f6:85:66:21:cf:7e:65:e9:a6:26:22:91:e7:d3:65:b2: 7f:a2:2e:cb:0c:d5:ef:ea:87:cf:96:db:06:2c:24:1f:15:5e: 7c:a5:9f:c4:4d:c0:6e:cb:fc:f6:ab:5a:7a:e3:0d:7e:b1:6e: 72:34:40:fa:c5:58:7b:68:84:ba:c0:02:96:16:3b:2b:5e:c1: 83:7e:39:c6:79:4c:b8:5d:f6:cf:31:49:b3:8c:5c:8c:07:0c: 86:79:1f:03:dc:33:23:7a:b6:e0:eb:70:93:0c:d5:93:1a:ad: b8:38:86:d8:39:ef:8b:a9:67:4d:5a:2f:7e:1e:ed:3c:24:19: 38:ed:cf:da:77:db:5e:82:33:08:ed:0c:c3:ca:b6:ff:ce:08: 8e:e0:d6:b8:bc:1d:1d:ae:4c:d0:1a:94:b3:fa:b5:59:3c:47: a2:e3:61:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW2ddA3D6wSF05YziwB26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDY5ZDlmNzQ5NjMwZjAyNTZjZjBjZWFiNTg4MzZiNDkx YTU4ZjYwHhcNMjUxMjExMTcwMDI5WhcNMjUxMjEyMTcwMDI5WjAzMTEwLwYDVQQD EygyYjhkNDJiM2QxMGI3ZmVlOTI3NDI2ZDA1MmY0ZmE4ZjJlYzgwYzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DKsDgA8WWVs76NM+k/Y0ppj6Ezv tbRphJ0WcFKf4ZgR7WgFcXp5t0AFIPxg7W/175WTlIvLs36DOIK5ugSIf/Q/IC8Q ueFyWAzyIDpBQYw0Q76ewqDcpgcGpJ6A+w3pBg5d75aG+3rtnU5K6RsTsSisfTMR tPKBKf2BxTzIW0w1HblFUzDda9HMDGKBaK2ASw5PU5C+fNtv1zkoW9ABnAZZAOEy 5dICaqSwVMkXmxg7e5oXpagLzjXuElGzkbghd4hmpN6FUqLBBvXabSZHAN8YMCCA seq7mJKaIHU9i0FC+YF6qNDZqGnd8GIJ4zdbPgwCAlk1QlgJl1+2bPG3xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuNQrPRC3/uknQm0FL0+o8uyAxOMB8GA1UdIwQY MBaAFF3WnZ90ljDwJWzwzqtYg2tJGlj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWIt ZjNmZDY0MzMxNzA5LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWItZjNmZDY0MzMxNzA5 LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBLeHGcK 7lN0r3tgOnfhAyEayC2QmTbu6E6wMnssaYYVavueL7upogyqDei8tmBCSVBHsJmS SlWRZgUFKIuI5v+JTxZ3JdhEVRCiF9Sz1+K6j5GGw93/64BOG9z2hWYhz35l6aYm IpHn02Wyf6IuywzV7+qHz5bbBiwkHxVefKWfxE3Absv89qtaeuMNfrFucjRA+sVY e2iEusAClhY7K17Bg345xnlMuF32zzFJs4xcjAcMhnkfA9wzI3q24OtwkwzVkxqt uDiG2Dnvi6lnTVovfh7tPCQZOO3P2nfbXoIzCO0Mw8q2/84IjuDWuLwdHa5M0BqU s/q1WTxHouNhPA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:02:06 2025 by rpki-client