This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json) Hash identifier: jS/IlGiVEIoJYk4sB5Zg6s7M3EA1iG2eDFyIsMJrWro= Subject key identifier: 7B:26:D7:34:16:C9:A1:BC:62:6F:7C:FA:D1:54:DF:D8:33:DE:8E:18 Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Certificate serial: 019B0E24B3049A458B965AC06B7788E1A88F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft Manifest number: 0C29 Signing time: Thu 11 Dec 2025 16:00:44 +0000 Manifest this update: Thu 11 Dec 2025 16:00:44 +0000 Manifest next update: Fri 12 Dec 2025 16:00:44 +0000 Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=) 2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: DaP+zTGnj86QzPzq9rUJIZ8jvJbbtVrBs5mwgC1f0CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:b3:04:9a:45:8b:96:5a:c0:6b:77:88:e1:a8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Validity Not Before: Dec 11 16:00:44 2025 GMT Not After : Dec 12 16:00:44 2025 GMT Subject: CN=7b26d73416c9a1bc626f7cfad154dfd833de8e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:62:c6:31:bc:6a:bd:eb:96:78:f5:21:47: ac:b6:d3:16:bf:2b:f8:15:f3:7e:e8:80:d2:49:a2: 50:a6:b0:6b:3b:e7:7a:fd:4a:02:de:2f:ef:b6:37: 20:87:cd:74:8a:08:9c:30:36:17:d4:2d:23:86:12: 67:74:c4:f7:2c:67:03:fb:82:76:d9:b0:e6:41:81: ed:45:b3:ae:5a:bd:88:0c:de:bb:d3:05:3b:26:67: 57:b9:07:8b:8c:76:74:bd:72:d5:c7:ae:a5:e6:b9: 13:9d:46:65:32:49:23:96:7d:7e:cf:68:1a:49:28: 19:5e:c6:ea:5e:06:ff:58:3a:8f:0d:53:96:ee:13: eb:1d:21:57:02:ed:de:01:cb:d6:a2:01:e6:4c:8c: 5f:99:54:87:b2:97:3a:9f:d7:87:57:07:83:9e:b9: 12:cc:d7:b6:8f:48:28:40:4d:96:ad:68:b8:85:db: 80:03:17:76:b6:ee:4e:29:f5:82:5f:2f:e4:bf:4a: 59:2e:1e:27:7e:f2:e6:48:80:ce:46:a8:a4:1e:7d: 2d:92:f3:10:8f:cd:c5:fa:b2:3d:27:15:63:4c:89: 85:d2:f0:c1:8f:ba:fd:c0:7d:ad:58:36:3e:ef:60: 0e:da:e4:42:33:6b:ef:0d:09:db:37:ff:3c:f4:cf: 30:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:26:D7:34:16:C9:A1:BC:62:6F:7C:FA:D1:54:DF:D8:33:DE:8E:18 X509v3 Authority Key Identifier: keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:18:a4:dc:6d:bb:8d:e4:0d:89:16:65:e9:67:bb:89:61:cf: 6c:9c:13:7b:1d:65:d5:1c:3b:e1:a4:e1:bb:40:be:52:19:5f: c0:46:20:5e:08:89:e3:d2:7b:17:37:4a:78:c5:fd:cc:a9:cf: 71:0e:19:5f:06:66:57:fb:84:fc:a0:30:a3:56:43:f4:ad:ce: 88:c7:14:ef:c9:cf:e7:f0:38:32:db:df:d5:2b:36:8e:cf:85: 8d:e7:84:a4:b6:f9:36:34:58:eb:ec:fe:3f:5f:6e:22:c5:8c: 90:fe:5b:79:e1:73:4a:61:0e:46:81:51:97:d9:4d:5b:47:80: d9:e1:a7:9c:b6:23:d4:1f:9d:3a:75:0b:ef:74:4a:90:be:c2: 6c:82:d2:9b:ff:9a:03:3f:05:01:f4:a4:e1:27:7f:0c:65:2e: 08:56:bd:cf:0a:52:4b:20:ce:69:3b:f3:31:7e:6d:50:a8:98: c8:4e:bc:cd:8a:51:a2:1d:98:e0:c4:d4:69:37:6a:97:5b:cc: 04:de:8a:d0:61:d0:73:09:86:c6:dd:f7:92:27:b5:90:49:65: 10:f3:3f:b2:6c:12:e9:65:0a:39:e4:56:49:36:e8:fc:d6:8c: 84:14:ac:99:84:61:86:de:80:8b:98:6e:e8:bd:9f:7f:63:c5: 82:81:f6:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJLMEmkWLllrAa3eI4aiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MjI0ZWE0NWQwODFkNDAyZmZkNmJmNGRkOTVlM2ZmNmYy ZGM0ODEwHhcNMjUxMjExMTYwMDQ0WhcNMjUxMjEyMTYwMDQ0WjAzMTEwLwYDVQQD Eyg3YjI2ZDczNDE2YzlhMWJjNjI2ZjdjZmFkMTU0ZGZkODMzZGU4ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHhixjG8ar3rlnj1IUesttMWvyv4 FfN+6IDSSaJQprBrO+d6/UoC3i/vtjcgh810igicMDYX1C0jhhJndMT3LGcD+4J2 2bDmQYHtRbOuWr2IDN670wU7JmdXuQeLjHZ0vXLVx66l5rkTnUZlMkkjln1+z2ga SSgZXsbqXgb/WDqPDVOW7hPrHSFXAu3eAcvWogHmTIxfmVSHspc6n9eHVweDnrkS zNe2j0goQE2WrWi4hduAAxd2tu5OKfWCXy/kv0pZLh4nfvLmSIDORqikHn0tkvMQ j83F+rI9JxVjTImF0vDBj7r9wH2tWDY+72AO2uRCM2vvDQnbN/889M8wjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsm1zQWyaG8Ym98+tFU39gz3o4YMB8GA1UdIwQY MBaAFMUiTqRdCB1AL/1r9N2V4/9vLcSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUt NTIzNTZjZDVkYTkwLzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUtNTIzNTZjZDVkYTkw LzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahik3G27 jeQNiRZl6We7iWHPbJwTex1l1Rw74aThu0C+UhlfwEYgXgiJ49J7FzdKeMX9zKnP cQ4ZXwZmV/uE/KAwo1ZD9K3OiMcU78nP5/A4Mtvf1Ss2js+FjeeEpLb5NjRY6+z+ P19uIsWMkP5beeFzSmEORoFRl9lNW0eA2eGnnLYj1B+dOnUL73RKkL7CbILSm/+a Az8FAfSk4Sd/DGUuCFa9zwpSSyDOaTvzMX5tUKiYyE68zYpRoh2Y4MTUaTdql1vM BN6K0GHQcwmGxt33kie1kEllEPM/smwS6WUKOeRWSTbo/NaMhBSsmYRhht6Ai5hu 6L2ff2PFgoH2Tg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:07 2025 by rpki-client