This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json) Hash identifier: 8dyelgv1ZGxFXyMKnc0cAEk84wQ8dIfSADgyNPAJyw0= Subject key identifier: 3E:8B:29:0A:99:F7:2F:46:57:F0:75:8D:15:A7:A5:78:6C:EC:36:FD Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Certificate serial: 019B08FE6DEBC4739C236B5EA700811AECDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft Manifest number: 1770 Signing time: Wed 10 Dec 2025 16:00:50 +0000 Manifest this update: Wed 10 Dec 2025 16:00:50 +0000 Manifest next update: Thu 11 Dec 2025 16:00:50 +0000 Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=) 2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=) 3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: QzIhG+xZr0in24YoX/WOCbHQz4HEyu6xltr40Dmo8z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:6d:eb:c4:73:9c:23:6b:5e:a7:00:81:1a:ec:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Validity Not Before: Dec 10 16:00:50 2025 GMT Not After : Dec 11 16:00:50 2025 GMT Subject: CN=3e8b290a99f72f4657f0758d15a7a5786cec36fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:c4:99:eb:3f:53:71:12:b6:96:64:33:08: 16:99:d4:2e:68:c3:5e:ed:a0:f9:d5:87:0e:1e:76: 88:e9:5f:e2:a3:93:85:f8:57:6c:ab:fd:1a:6a:d8: 19:e5:14:62:89:12:a8:b1:fc:d0:d7:3e:b4:6e:94: 5c:2d:ab:0c:bf:05:4b:f8:85:06:22:72:f3:3f:db: a7:b6:75:2f:40:de:36:e3:12:38:3b:a4:84:6b:9d: 1c:1b:c5:d2:9c:01:a6:6d:06:03:50:67:30:2f:91: a2:f6:b1:1e:8b:12:9c:67:40:ae:56:ca:a2:9c:d1: ec:f5:c0:d7:5a:dc:f7:8d:89:ec:58:59:0e:2e:25: 93:e2:7d:24:bf:b5:88:d5:b3:19:a4:e0:f6:59:44: 8a:b0:5d:6a:40:2b:6b:0f:f8:12:90:a4:49:f0:b2: cc:cb:46:9d:d5:2b:a7:c3:5e:cd:aa:f4:61:40:ec: 6d:b1:d2:23:69:2f:45:91:63:33:8a:8d:42:30:2e: ef:ea:9d:34:e5:6a:71:09:89:2c:d1:73:12:6e:d7: 8c:8c:5d:a1:86:26:b1:dd:a5:6c:10:fb:60:ed:8f: c3:9d:50:d3:73:28:04:01:5a:07:59:46:f3:29:3f: 7a:7a:12:a3:ee:04:4c:4e:3b:b0:7a:53:26:1c:64: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8B:29:0A:99:F7:2F:46:57:F0:75:8D:15:A7:A5:78:6C:EC:36:FD X509v3 Authority Key Identifier: keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e2:92:21:28:62:75:68:30:f4:84:69:64:16:9a:91:04:9f: 02:34:d8:69:9d:a9:8d:bc:6a:e4:60:64:d6:71:90:ec:5d:71: 49:7a:eb:50:24:6a:a5:31:b0:54:68:a8:88:b7:10:4f:eb:c5: af:dd:4c:ed:c1:ff:ad:9e:3c:43:b4:8b:b0:7e:af:41:d8:86: 0a:a2:84:02:b8:82:ae:26:9e:c6:69:3e:99:6d:f3:13:3a:88: ea:49:78:c2:6d:82:75:eb:df:73:e3:a5:6f:9d:ea:ae:fc:f1: 9f:79:47:09:fc:da:11:71:29:fa:4a:94:5a:40:6d:fe:eb:db: 6e:c4:94:9a:24:7a:6f:15:ed:60:9a:70:54:a4:9b:41:f1:43: ff:56:f5:0f:b3:03:0a:ef:70:29:07:62:b7:62:70:30:64:80: a7:99:8e:c3:64:89:e1:b4:fb:40:16:56:0d:5b:c2:fc:e3:25: c5:2f:9f:79:63:6d:64:e6:cf:da:c3:d7:d2:ad:e1:ab:d4:28: 82:1e:32:14:77:be:b0:78:ff:4d:fe:96:08:da:08:3d:d3:90: f1:73:62:cb:b2:2d:86:2e:e9:f0:9f:e3:ac:c1:2f:ea:25:80: d7:cd:f1:a5:3c:2e:c6:22:90:d1:c8:c7:2d:b4:ac:3d:e0:75: f8:06:3e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/m3rxHOcI2tepwCBGuzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YmZiZWYyNzliZjlkZWQ2ZTM2NTFlMDYyOGQzOWJhNzky OTRmNzgwHhcNMjUxMjEwMTYwMDUwWhcNMjUxMjExMTYwMDUwWjAzMTEwLwYDVQQD EygzZThiMjkwYTk5ZjcyZjQ2NTdmMDc1OGQxNWE3YTU3ODZjZWMzNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD/Emes/U3EStpZkMwgWmdQuaMNe 7aD51YcOHnaI6V/io5OF+Fdsq/0aatgZ5RRiiRKosfzQ1z60bpRcLasMvwVL+IUG InLzP9untnUvQN424xI4O6SEa50cG8XSnAGmbQYDUGcwL5Gi9rEeixKcZ0CuVsqi nNHs9cDXWtz3jYnsWFkOLiWT4n0kv7WI1bMZpOD2WUSKsF1qQCtrD/gSkKRJ8LLM y0ad1Sunw17NqvRhQOxtsdIjaS9FkWMzio1CMC7v6p005WpxCYks0XMSbteMjF2h hiax3aVsEPtg7Y/DnVDTcygEAVoHWUbzKT96ehKj7gRMTjuwelMmHGTdQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6LKQqZ9y9GV/B1jRWnpXhs7Db9MB8GA1UdIwQY MBaAFMa/vvJ5v53tbjZR4GKNObp5KU94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQt YWRlNTMwZDdjNDFiLzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQtYWRlNTMwZDdjNDFi LzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeKSIShi dWgw9IRpZBaakQSfAjTYaZ2pjbxq5GBk1nGQ7F1xSXrrUCRqpTGwVGioiLcQT+vF r91M7cH/rZ48Q7SLsH6vQdiGCqKEAriCriaexmk+mW3zEzqI6kl4wm2Cdevfc+Ol b53qrvzxn3lHCfzaEXEp+kqUWkBt/uvbbsSUmiR6bxXtYJpwVKSbQfFD/1b1D7MD Cu9wKQdit2JwMGSAp5mOw2SJ4bT7QBZWDVvC/OMlxS+feWNtZObP2sPX0q3hq9Qo gh4yFHe+sHj/Tf6WCNoIPdOQ8XNiy7Ithi7p8J/jrMEv6iWA183xpTwuxiKQ0cjH LbSsPeB1+AY+fQ== -----END CERTIFICATE-----Generated at Thu Dec 11 01:23:19 2025 by rpki-client