This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json) Hash identifier: 46cKHcTmSuN145t4zV5vCCJXklySkJG6k8i/gHvvHPI= Subject key identifier: A8:98:CD:B3:55:57:76:0E:05:01:22:DA:E0:E7:31:0B:A7:B5:A7:CC Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a Certificate serial: 019AE716DC3F741DF0E0752E08074AB3D1F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft Manifest number: 10A3 Signing time: Thu 04 Dec 2025 02:00:26 +0000 Manifest this update: Thu 04 Dec 2025 02:00:26 +0000 Manifest next update: Fri 05 Dec 2025 02:00:26 +0000 Files and hashes: 1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=) 2: McmEoR42go_NL-e1B7HnbupLbKE.roa (hash: l0MQWVd1GEY0hlnVKUF+5hVPuDs45GKOy6rfNmqbWI0=) 3: cQbtoMzIsUrEiz2_R7FPTDe-83o.roa (hash: uIgSp+mYNVkKY/oukv2IXYpbIzAsJVvw3J0CKtfAk+0=) 4: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=) 5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: HEVFg9dFjDHLiCR7SNJqp4D2yttJr72QBFagYTRQr8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:16:dc:3f:74:1d:f0:e0:75:2e:08:07:4a:b3:d1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a Validity Not Before: Dec 4 02:00:26 2025 GMT Not After : Dec 5 02:00:26 2025 GMT Subject: CN=a898cdb35557760e050122dae0e7310ba7b5a7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:4c:83:7d:df:c7:98:24:0f:16:fc:97:19: 0a:08:3f:68:44:ff:3e:1e:76:d4:60:5d:d1:21:fe: 6f:1f:bf:a4:62:b0:97:20:4f:f9:4d:72:68:51:d8: f7:83:ff:61:08:3f:78:0f:76:ee:fb:4b:d7:5e:62: 78:86:db:54:9a:c6:0d:69:e6:85:7c:1f:74:f7:9c: c8:46:41:57:35:d7:fe:b4:92:1d:7f:37:ab:f5:ab: 5d:77:69:b6:ea:af:e9:9a:e5:23:96:35:a7:f4:94: 84:0e:0a:4f:58:68:0f:9e:ee:e7:80:ca:93:50:48: 1c:69:cf:d1:d1:45:0d:9f:c2:f2:f3:c6:ab:72:71: cd:51:c5:e9:67:a2:06:9b:80:99:07:53:72:4a:8d: 28:93:02:6b:63:ea:22:49:8b:9d:df:74:01:d3:19: 37:c4:45:34:61:ba:1e:d4:2f:31:68:e7:35:31:2b: 2e:55:cd:e2:8c:5c:f1:35:18:e4:93:1e:0a:9f:1f: 77:60:22:1b:69:72:11:1b:ea:e9:c3:ae:68:84:96: 73:79:7b:90:b8:39:d1:47:23:60:bf:de:da:d6:e2: a7:cc:02:d3:5a:62:5f:57:88:c8:89:6f:36:0d:90: 6b:12:9e:3e:e7:ac:25:74:c8:aa:e1:d6:dc:0b:92: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:CD:B3:55:57:76:0E:05:01:22:DA:E0:E7:31:0B:A7:B5:A7:CC X509v3 Authority Key Identifier: keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:7f:7a:38:22:c9:da:1d:a9:d8:8e:84:79:8f:40:19:8e:90: 11:2b:b5:fd:9a:78:d3:5d:4d:e0:e7:8c:84:6a:4f:40:8c:45: b9:b6:21:1a:6b:6c:72:83:ae:0a:76:2f:e1:0f:0a:11:ac:4c: 0f:71:b4:9a:d7:cd:66:c1:7e:9e:cb:87:89:c4:b6:d2:e2:79: 7c:fb:14:a6:b5:d7:84:88:d1:b6:fe:9a:42:b1:39:d2:ef:d1: 07:cc:26:d8:5c:d3:75:24:3f:5e:c0:db:f0:b1:f9:6b:0a:37: a9:c9:94:5f:e0:76:ce:87:1d:54:b7:d2:65:09:23:6a:0d:8c: 88:88:09:ca:ff:9d:88:10:21:d3:ca:53:9b:33:0b:63:a4:66: 6d:d7:7a:03:58:fc:7e:6f:08:d3:cb:d4:38:22:4e:ee:49:96: d1:ad:81:d0:fe:e8:a5:a4:4f:e0:d0:51:93:56:df:31:11:f4: 44:79:e8:a4:d1:ab:85:f0:32:e6:72:ff:6b:af:71:09:43:ab: 2d:3a:3f:40:6d:62:99:5e:53:c1:6e:3b:c3:1a:f7:ec:e1:ca: 57:f6:b6:ca:b9:4b:6c:46:a6:a7:ba:80:90:d1:c4:87:a5:15: 55:46:31:ce:b9:d7:9a:3d:6e:2f:c1:7d:6b:0f:ee:bb:ad:16: e9:cb:cb:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnFtw/dB3w4HUuCAdKs9H0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx MGU5MWEwHhcNMjUxMjA0MDIwMDI2WhcNMjUxMjA1MDIwMDI2WjAzMTEwLwYDVQQD EyhhODk4Y2RiMzU1NTc3NjBlMDUwMTIyZGFlMGU3MzEwYmE3YjVhN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYtMg33fx5gkDxb8lxkKCD9oRP8+ HnbUYF3RIf5vH7+kYrCXIE/5TXJoUdj3g/9hCD94D3bu+0vXXmJ4httUmsYNaeaF fB9095zIRkFXNdf+tJIdfzer9atdd2m26q/pmuUjljWn9JSEDgpPWGgPnu7ngMqT UEgcac/R0UUNn8Ly88arcnHNUcXpZ6IGm4CZB1NySo0okwJrY+oiSYud33QB0xk3 xEU0Yboe1C8xaOc1MSsuVc3ijFzxNRjkkx4Knx93YCIbaXIRG+rpw65ohJZzeXuQ uDnRRyNgv97a1uKnzALTWmJfV4jIiW82DZBrEp4+56wldMiq4dbcC5KIbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiYzbNVV3YOBQEi2uDnMQuntafMMB8GA1UdIwQY MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz396OCLJ 2h2p2I6EeY9AGY6QESu1/Zp4011N4OeMhGpPQIxFubYhGmtscoOuCnYv4Q8KEaxM D3G0mtfNZsF+nsuHicS20uJ5fPsUprXXhIjRtv6aQrE50u/RB8wm2FzTdSQ/XsDb 8LH5awo3qcmUX+B2zocdVLfSZQkjag2MiIgJyv+diBAh08pTmzMLY6Rmbdd6A1j8 fm8I08vUOCJO7kmW0a2B0P7opaRP4NBRk1bfMRH0RHnopNGrhfAy5nL/a69xCUOr LTo/QG1imV5TwW47wxr37OHKV/a2yrlLbEamp7qAkNHEh6UVVUYxzrnXmj1uL8F9 aw/uu60W6cvLKA== -----END CERTIFICATE-----Generated at Thu Dec 4 08:30:53 2025 by rpki-client