This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft File: Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json) Hash identifier: VxXRWJqCQGV2kJZW1LgT6HbypsKjUH/ConE6A1DIqKM= Subject key identifier: 5C:DF:57:31:74:D1:3F:C0:48:E8:9E:FF:DC:DD:FA:1D:53:C1:2D:30 Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Certificate serial: 019AF98B9404671249A55AEDC526907961D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft Manifest number: 177E Signing time: Sun 07 Dec 2025 16:01:05 +0000 Manifest this update: Sun 07 Dec 2025 16:01:05 +0000 Manifest next update: Mon 08 Dec 2025 16:01:05 +0000 Files and hashes: 1: 42NnB3jW5n3RbWWrHMDd_7NubAY.roa (hash: bZyySLXxgMQfpoBtEuXSmgHgMgLKQxBjV3IqMenXg0E=) 2: EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa (hash: GstL7gwAEgcyBOR5WEEQ3UJ45LkAklqubcGaSv86PEM=) 3: U3GEel-_AheBYgIYIVYL9mt_5dg.roa (hash: qjeuuOD21NigMG6GkIxT7OwP2vU0izG4cg6tV2NDSPY=) 4: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: wqq0J9ls01J48iVbEgLX5R9mT8BshUY/FtBo1r0jxtI=) 5: ZvRJrTWQfMOoVK-yV_Cqwkgeu5A.roa (hash: hHz6N7J+wTDqY/Lm+M/7LMn5tnMNWvw100eCFcrE1zM=) 6: hMxFbe2_woNux6m3JkElwux-E5g.roa (hash: nrSIsPwWOsAGq4mrEG8bp4vhnLrScT5iVl2b8ClElOk=) 7: olCZzHEOZSOjj4yqtahX2zJkhMQ.roa (hash: aXtBhSkmw714xAy5wT1PAT7ELEpsc4omuqROu4g4WE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:8b:94:04:67:12:49:a5:5a:ed:c5:26:90:79:61:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Validity Not Before: Dec 7 16:01:05 2025 GMT Not After : Dec 8 16:01:05 2025 GMT Subject: CN=5cdf573174d13fc048e89effdcddfa1d53c12d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:05:bf:fe:5a:02:b8:7c:00:54:92:e9:0f: 6b:e2:1f:38:40:f4:25:48:ca:36:0a:6d:36:db:a6: c4:fa:e2:8e:4f:8b:f2:52:ef:1b:a3:03:a6:3f:f4: 28:b8:18:8d:f4:9f:38:7c:bf:46:f1:77:f4:88:1e: f4:37:31:08:bd:c7:e2:7d:a4:5a:91:f5:f0:dc:b8: 55:bc:86:d8:9a:b8:cd:d2:88:e7:f6:6b:fa:79:26: a9:31:55:1a:01:48:40:59:81:f9:a8:41:ce:97:b1: 6c:38:cf:59:c9:05:b3:34:2b:91:38:c2:e3:38:61: 1e:7e:0c:a6:f4:d1:85:03:a7:6f:75:78:74:67:45: 71:3f:d2:c2:b0:1a:0c:2f:6d:a4:bd:7b:73:95:99: c3:72:c1:bd:46:80:b4:92:4d:f6:1d:03:a4:98:7f: 6f:e2:a0:9f:9b:a8:f2:7c:ed:e0:dd:1f:a1:2d:95: 03:fe:c0:be:5f:a6:c1:03:27:c1:02:c1:19:bf:06: cd:8b:1b:eb:83:27:68:33:b6:ed:67:c2:80:77:3f: c4:a3:8d:c6:6a:f8:a9:75:bb:4a:ed:75:e3:80:d9: 8f:55:1c:49:83:8f:49:6f:48:6a:b3:e7:af:02:44: 62:d7:ae:0e:e1:7b:ba:58:1a:b0:d8:5c:2c:7e:04: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DF:57:31:74:D1:3F:C0:48:E8:9E:FF:DC:DD:FA:1D:53:C1:2D:30 X509v3 Authority Key Identifier: keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5d:c0:83:56:c2:d8:e7:d9:07:38:2e:60:07:47:55:c6:56: 88:6b:38:22:ad:f0:9f:0f:bb:f1:51:7d:7c:bf:50:2a:6b:bc: ea:33:75:8a:b7:84:78:5c:e7:0f:c1:04:b5:8c:3f:86:8a:b1: 38:cf:ac:de:13:3c:27:8a:b3:3f:96:90:5f:ef:0a:ae:84:f5: b4:9d:1b:d4:fa:3b:2f:95:bf:bd:6e:5c:02:67:31:10:74:82: 9e:93:09:87:59:e4:43:d4:04:93:c6:5f:b4:e9:67:c3:8a:ce: 00:54:ea:80:a7:12:16:dc:0a:5f:b0:82:94:12:71:ee:33:d5: 46:01:c8:90:2f:e1:5e:2d:1d:7f:80:bc:37:c4:cb:cb:75:a8: 1d:52:c4:64:47:25:b3:61:db:67:3f:08:4d:1b:e6:9c:b2:3e: 59:72:91:a6:4e:9a:bd:23:a0:75:36:ae:33:4f:67:b5:e0:5f: 62:11:5a:96:8b:84:0c:d0:4c:1e:f7:b2:b3:e1:7b:73:2b:08: 86:aa:0b:a7:a1:e1:74:c9:78:7a:a8:1a:e7:5d:05:40:1b:07: c6:9a:3d:7b:08:8b:fe:91:e8:b8:3e:90:cb:f4:f4:81:3e:fb: 2f:ef:4a:6b:73:5c:f7:7a:60:89:4d:c5:e6:d7:06:9d:4d:ed: c1:ec:67:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5i5QEZxJJpVrtxSaQeWHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2 OGIzN2UwHhcNMjUxMjA3MTYwMTA1WhcNMjUxMjA4MTYwMTA1WjAzMTEwLwYDVQQD Eyg1Y2RmNTczMTc0ZDEzZmMwNDhlODllZmZkY2RkZmExZDUzYzEyZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6UFv/5aArh8AFSS6Q9r4h84QPQl SMo2Cm0226bE+uKOT4vyUu8bowOmP/QouBiN9J84fL9G8Xf0iB70NzEIvcfifaRa kfXw3LhVvIbYmrjN0ojn9mv6eSapMVUaAUhAWYH5qEHOl7FsOM9ZyQWzNCuROMLj OGEefgym9NGFA6dvdXh0Z0VxP9LCsBoML22kvXtzlZnDcsG9RoC0kk32HQOkmH9v 4qCfm6jyfO3g3R+hLZUD/sC+X6bBAyfBAsEZvwbNixvrgydoM7btZ8KAdz/Eo43G avipdbtK7XXjgNmPVRxJg49Jb0hqs+evAkRi164O4Xu6WBqw2FwsfgTGfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzfVzF00T/ASOie/9zd+h1TwS0wMB8GA1UdIwQY MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt NmM4ZmQ4NGJiNWY1LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1 LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK13Ag1bC 2OfZBzguYAdHVcZWiGs4Iq3wnw+78VF9fL9QKmu86jN1ireEeFznD8EEtYw/hoqx OM+s3hM8J4qzP5aQX+8KroT1tJ0b1Po7L5W/vW5cAmcxEHSCnpMJh1nkQ9QEk8Zf tOlnw4rOAFTqgKcSFtwKX7CClBJx7jPVRgHIkC/hXi0df4C8N8TLy3WoHVLEZEcl s2HbZz8ITRvmnLI+WXKRpk6avSOgdTauM09nteBfYhFalouEDNBMHveys+F7cysI hqoLp6HhdMl4eqga510FQBsHxpo9ewiL/pHouD6Qy/T0gT77L+9Ka3Nc93pgiU3F 5tcGnU3twexnyg== -----END CERTIFICATE-----Generated at Sun Dec 7 20:09:10 2025 by rpki-client