This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json) Hash identifier: nvgK25THsEBQ5txrIzE5fIT4CYaL0rBdtHxgOKOPDrA= Subject key identifier: D4:BF:4A:0C:76:51:E3:C0:5D:23:71:10:4D:1D:72:8C:D5:E8:72:0F Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd Certificate serial: 019B096C2D4B1E2E00F93C4B7EE619C42527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft Manifest number: 08EC Signing time: Wed 10 Dec 2025 18:00:42 +0000 Manifest this update: Wed 10 Dec 2025 18:00:42 +0000 Manifest next update: Thu 11 Dec 2025 18:00:42 +0000 Files and hashes: 1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: eGz+Blg2+cyd8fWKgt6cok0IUuuEIrR/OdBoTrobk5U=) 2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:6c:2d:4b:1e:2e:00:f9:3c:4b:7e:e6:19:c4:25:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd Validity Not Before: Dec 10 18:00:42 2025 GMT Not After : Dec 11 18:00:42 2025 GMT Subject: CN=d4bf4a0c7651e3c05d2371104d1d728cd5e8720f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:52:b3:86:14:01:83:b6:d7:69:26:e5:66: 48:ce:52:3f:ae:3c:fd:35:1c:b7:c5:d7:43:81:0b: b5:46:16:27:73:fa:b3:2e:29:d8:92:09:99:c1:d1: 6b:a0:ac:21:43:9d:7a:e8:80:52:a3:0a:ea:78:f3: 97:ed:d1:35:65:c4:e1:29:2d:f3:5f:21:f5:44:40: 42:b1:34:63:cd:02:02:8c:b3:c2:5f:71:28:27:d6: 0a:42:b6:01:ba:74:49:39:15:73:2a:15:f6:ba:a2: 62:ec:77:84:5c:80:fe:1e:34:19:94:51:01:66:19: eb:6e:b1:10:37:67:a4:b6:3e:39:b9:a0:20:86:c2: 8a:3e:cb:0f:3f:d2:eb:d1:0e:b5:2b:58:38:60:7f: 2f:d9:92:d5:00:e2:8a:06:dc:55:52:fc:89:53:66: 1b:7e:27:70:67:df:84:d7:6a:97:ce:52:f4:99:2b: 14:55:94:02:fe:5a:6c:bb:c2:0e:ef:ad:27:dd:ef: 55:60:d4:85:e3:8d:d6:5a:ef:b7:06:f5:44:d4:f3: 6a:c2:b1:26:79:64:a8:7d:20:5c:98:e0:0a:18:09: 3c:2d:c5:40:c2:cf:35:96:27:fd:72:ab:4c:8a:a3: 0a:25:20:3e:cf:20:9d:14:44:07:a2:30:a1:b8:30: 3d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BF:4A:0C:76:51:E3:C0:5D:23:71:10:4D:1D:72:8C:D5:E8:72:0F X509v3 Authority Key Identifier: keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2b:3d:22:07:a3:19:a8:1c:c4:bc:3e:c2:f7:b8:2a:a4:91: bd:91:b0:1d:49:4f:b7:5a:8b:7d:5f:19:18:10:88:d7:e0:08: 53:92:e7:da:60:f6:99:a7:00:c1:6b:26:85:06:87:88:e8:d4: ff:5c:46:34:af:09:9e:9a:05:07:93:05:28:af:c3:f8:b8:41: 63:1f:38:c2:9a:20:30:06:0a:62:b5:aa:a5:9d:33:95:d5:db: c4:d7:db:b2:71:bb:05:bc:aa:3a:6b:2f:4f:53:19:be:41:ea: 29:f5:28:52:9b:c0:42:a4:f7:76:fb:b5:1b:fd:3f:dc:02:ac: 04:cf:46:d8:12:e7:bb:2b:71:1d:ff:e4:a2:4c:1f:40:21:4f: 41:7a:fc:99:31:ac:06:42:ef:6a:9a:ef:b9:f8:69:0d:43:19: a3:b5:14:d4:4d:07:48:f4:6a:35:d8:ab:27:7a:72:2f:b7:f4: e0:57:05:aa:bf:20:2a:7f:0b:2c:17:94:11:49:cc:18:eb:d7: 2c:b7:49:ee:2d:87:7b:fc:d2:e5:24:69:2c:68:e4:fd:76:02: 29:b2:de:70:d2:f0:e6:cb:78:30:32:fa:de:bf:9c:83:02:6d: d4:d7:58:c6:d6:7f:91:09:25:2b:95:43:25:5c:f9:7f:ce:fc: 19:8b:c7:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJbC1LHi4A+TxLfuYZxCUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODhlY2YwYTE0YWQxODU3MzU5ZDJjZTViZDA0MmI5Zjk2 YzdjZGQwHhcNMjUxMjEwMTgwMDQyWhcNMjUxMjExMTgwMDQyWjAzMTEwLwYDVQQD EyhkNGJmNGEwYzc2NTFlM2MwNWQyMzcxMTA0ZDFkNzI4Y2Q1ZTg3MjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbxSs4YUAYO212km5WZIzlI/rjz9 NRy3xddDgQu1RhYnc/qzLinYkgmZwdFroKwhQ5166IBSowrqePOX7dE1ZcThKS3z XyH1REBCsTRjzQICjLPCX3EoJ9YKQrYBunRJORVzKhX2uqJi7HeEXID+HjQZlFEB ZhnrbrEQN2ektj45uaAghsKKPssPP9Lr0Q61K1g4YH8v2ZLVAOKKBtxVUvyJU2Yb fidwZ9+E12qXzlL0mSsUVZQC/lpsu8IO760n3e9VYNSF443WWu+3BvVE1PNqwrEm eWSofSBcmOAKGAk8LcVAws81lif9cqtMiqMKJSA+zyCdFEQHojChuDA9BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS/Sgx2UePAXSNxEE0dcozV6HIPMB8GA1UdIwQY MBaAFF6I7PChStGFc1nSzlvQQrn5bHzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzkt OWYwZjMzNTMyZWEzLzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yMTFiMmUtNGUzYy00NDgyLWEyNzktOWYwZjMzNTMyZWEz LzEvWG9qczhLRkswWVZ6V2RMT1c5QkN1ZmxzZk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOys9Igej GagcxLw+wve4KqSRvZGwHUlPt1qLfV8ZGBCI1+AIU5Ln2mD2macAwWsmhQaHiOjU /1xGNK8JnpoFB5MFKK/D+LhBYx84wpogMAYKYrWqpZ0zldXbxNfbsnG7BbyqOmsv T1MZvkHqKfUoUpvAQqT3dvu1G/0/3AKsBM9G2BLnuytxHf/kokwfQCFPQXr8mTGs BkLvaprvufhpDUMZo7UU1E0HSPRqNdirJ3pyL7f04FcFqr8gKn8LLBeUEUnMGOvX LLdJ7i2He/zS5SRpLGjk/XYCKbLecNLw5st4MDL63r+cgwJt1NdYxtZ/kQklK5VD JVz5f878GYvHDQ== -----END CERTIFICATE-----Generated at Thu Dec 11 00:19:29 2025 by rpki-client