This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json) Hash identifier: Z/KDEneOzNnzYTOiMS5cRtZj2d6x0zFhCGdMfOKwO5A= Subject key identifier: BB:74:53:65:6B:58:DF:6F:8C:CE:0E:D9:99:CC:ED:47:24:0B:57:46 Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c Certificate serial: 019B06A1FC2E688CB89711AD49244E1FBF93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft Manifest number: 014D Signing time: Wed 10 Dec 2025 05:00:37 +0000 Manifest this update: Wed 10 Dec 2025 05:00:37 +0000 Manifest next update: Thu 11 Dec 2025 05:00:37 +0000 Files and hashes: 1: TbZ9-J7RJ19MnUwHQhG72h3QmmA.roa (hash: 1KAnW0BNGRWt07l0J8xmwG1lZvzCRjTvOjNa6gA0ebQ=) 2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: zDJ23bfFZnpNQpgddXQu7r8pU3E2mEB5J0xo0UgEk1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:a1:fc:2e:68:8c:b8:97:11:ad:49:24:4e:1f:bf:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c Validity Not Before: Dec 10 05:00:37 2025 GMT Not After : Dec 11 05:00:37 2025 GMT Subject: CN=bb7453656b58df6f8cce0ed999cced47240b5746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:4c:89:c5:b6:f8:73:5d:8c:7a:f0:98:85: dd:09:a9:27:9e:0a:81:21:fe:6a:f9:50:f8:ad:f3: a7:9b:7a:f7:a9:7f:05:20:86:8e:34:bb:79:c3:fc: f0:69:93:ee:0e:45:c1:38:4c:80:a0:df:76:24:e5: 52:69:2d:b8:e8:f9:59:29:4b:56:d0:c9:e0:ff:3b: 90:5d:86:d4:56:df:06:9e:cf:b3:39:fe:5e:6c:18: 64:3e:af:02:33:da:1b:7f:67:59:89:52:5d:37:fe: af:20:34:af:8e:cd:4b:ba:13:73:63:15:18:ec:5f: 66:ed:6f:2c:11:5a:c9:b8:04:e4:dd:9b:fa:69:c9: 02:6b:1f:fb:c6:33:9c:b1:40:b7:c9:94:d0:fb:ac: d7:a2:d3:e6:6e:36:80:a1:3b:36:a4:64:68:ed:bc: 32:f5:87:56:ce:6d:b2:05:f4:ee:5e:4e:15:10:f0: 0d:33:ef:03:e8:d4:86:f4:06:d9:d7:ef:47:6a:0d: a9:c3:28:47:89:a6:21:b7:cf:a8:c3:e5:ff:43:91: 92:c4:08:bb:2c:38:92:32:3b:bb:2e:06:1a:d1:35: a3:75:93:90:5e:de:64:76:35:57:0b:66:59:6c:d4: cc:7f:c4:98:df:6e:27:f6:0b:a9:50:ec:e5:ba:5d: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:74:53:65:6B:58:DF:6F:8C:CE:0E:D9:99:CC:ED:47:24:0B:57:46 X509v3 Authority Key Identifier: keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ed:e7:02:9b:9c:d4:7d:df:27:47:b8:fe:ce:d8:33:dd:71: 7e:4c:59:16:78:0d:30:b9:0b:0f:5e:1f:92:4c:2c:4f:fd:93: da:b9:8a:4c:08:5e:f7:4f:82:d6:07:a3:1e:84:14:28:45:9b: 7b:27:e1:10:d2:5f:e0:f5:3c:ad:48:90:3c:64:20:ab:8f:2d: 56:49:87:a0:e7:4d:7f:66:03:89:0f:90:6c:40:96:ab:7f:4e: 54:f1:f7:08:71:2a:42:7e:f8:cc:47:7c:66:cd:f3:40:0f:00: fd:3a:0e:52:6e:73:6c:66:85:9f:39:40:85:ab:ee:74:35:2f: a7:b5:80:b1:ee:79:72:3e:30:d7:46:97:b3:81:e6:10:75:20: 7a:3e:c0:dd:ba:4b:a1:4e:a2:70:a3:6e:99:e4:52:93:80:b8: 86:7d:59:43:ae:d9:31:67:ab:82:0a:45:a2:59:f8:90:41:e1: 94:43:54:02:46:17:09:f1:3d:00:8c:78:12:b2:33:13:85:3d: 20:b6:f4:9a:ec:61:3a:04:c3:5a:2f:81:34:0d:ea:07:75:8d: 75:f7:74:5c:6a:c8:6f:b4:58:84:9e:e1:91:68:1a:9c:c5:17: b7:11:63:52:73:f0:ad:81:a8:f9:eb:d9:34:dd:a6:19:94:8c: b6:5d:87:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGofwuaIy4lxGtSSROH7+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MGYzMjQ2ZmRkNjFiYTFiNTc5MmZlMWFlYzRhZGNhOThk NzVhNWMwHhcNMjUxMjEwMDUwMDM3WhcNMjUxMjExMDUwMDM3WjAzMTEwLwYDVQQD EyhiYjc0NTM2NTZiNThkZjZmOGNjZTBlZDk5OWNjZWQ0NzI0MGI1NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLhMicW2+HNdjHrwmIXdCaknngqB If5q+VD4rfOnm3r3qX8FIIaONLt5w/zwaZPuDkXBOEyAoN92JOVSaS246PlZKUtW 0Mng/zuQXYbUVt8Gns+zOf5ebBhkPq8CM9obf2dZiVJdN/6vIDSvjs1LuhNzYxUY 7F9m7W8sEVrJuATk3Zv6ackCax/7xjOcsUC3yZTQ+6zXotPmbjaAoTs2pGRo7bwy 9YdWzm2yBfTuXk4VEPANM+8D6NSG9AbZ1+9Hag2pwyhHiaYht8+ow+X/Q5GSxAi7 LDiSMju7LgYa0TWjdZOQXt5kdjVXC2ZZbNTMf8SY324n9gupUOzlul26GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLt0U2VrWN9vjM4O2ZnM7UckC1dGMB8GA1UdIwQY MBaAFMYPMkb91huhtXkv4a7ErcqY11pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUt MTc5NzkyNzY4ZGFlLzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUtMTc5NzkyNzY4ZGFl LzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+3nApuc 1H3fJ0e4/s7YM91xfkxZFngNMLkLD14fkkwsT/2T2rmKTAhe90+C1gejHoQUKEWb eyfhENJf4PU8rUiQPGQgq48tVkmHoOdNf2YDiQ+QbECWq39OVPH3CHEqQn74zEd8 Zs3zQA8A/ToOUm5zbGaFnzlAhavudDUvp7WAse55cj4w10aXs4HmEHUgej7A3bpL oU6icKNumeRSk4C4hn1ZQ67ZMWerggpFoln4kEHhlENUAkYXCfE9AIx4ErIzE4U9 ILb0muxhOgTDWi+BNA3qB3WNdfd0XGrIb7RYhJ7hkWganMUXtxFjUnPwrYGo+evZ NN2mGZSMtl2HNQ== -----END CERTIFICATE-----Generated at Wed Dec 10 07:12:40 2025 by rpki-client