This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json) Hash identifier: I2N89l3I3hAgrHP41ffpeaVowxUd0UDXZKlqPBMy4Ys= Subject key identifier: 69:34:A2:9F:F6:9E:95:BA:21:2E:19:23:10:7A:E3:06:50:D3:2B:A6 Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Certificate serial: 019B59E36B25F9A33A871F3753F216E2BCB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft Manifest number: 0C89 Signing time: Fri 26 Dec 2025 09:00:34 +0000 Manifest this update: Fri 26 Dec 2025 09:00:34 +0000 Manifest next update: Sat 27 Dec 2025 09:00:34 +0000 Files and hashes: 1: 7h80oAq6-0uqLzdtJS4s8qdwpCY.roa (hash: eJDBrOUplTi27if7n3bxsCBNe2iqZverEfnOiGp+TQg=) 2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: Au0nR0RBF7bltDRj08UGH01HOS/ASzdsHLL851W7u8o=) 3: eLPR2xt3_0RsiIApeB-CxAAHX-E.roa (hash: Kh1tlq7JO+3DhDd+dYuSyDwlPe8pGbqQGLCDk0TVyHQ=) 4: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:6b:25:f9:a3:3a:87:1f:37:53:f2:16:e2:bc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Validity Not Before: Dec 26 09:00:34 2025 GMT Not After : Dec 27 09:00:34 2025 GMT Subject: CN=6934a29ff69e95ba212e1923107ae30650d32ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:b1:c3:d5:a5:75:dc:73:46:41:4f:91:63: 18:d2:92:3b:e8:ce:02:2d:2d:ca:1f:b7:62:2b:b7: 3d:44:1f:e1:c7:24:f3:b4:2e:c0:b4:f3:d6:45:7d: 53:ec:98:e7:88:db:8b:2d:b0:70:cd:5e:b6:ee:03: 60:8e:18:3f:21:06:90:6c:44:c5:f4:e9:8b:9f:68: 4b:55:81:c0:88:d4:d4:ca:ea:cf:7c:6a:9d:2e:06: df:98:91:04:2b:f3:ba:0f:d5:c9:49:e5:90:f2:b2: 49:7c:ea:c3:1c:97:9c:a4:79:7f:3e:ed:e0:58:01: 5b:92:7e:3c:ac:7b:f4:e6:ff:7a:f9:4b:0e:0f:53: a7:7a:c6:e3:8f:92:54:45:bf:3a:7c:88:30:e0:b1: b7:8a:1f:51:2a:63:4b:2c:dd:b2:52:09:95:80:61: d7:30:04:02:26:c1:2e:75:9e:af:5e:8a:7e:65:e7: 3d:1e:83:d0:e2:dc:aa:87:aa:96:0f:b8:b5:c2:d6: a9:85:d7:76:b1:22:83:22:d1:5c:a9:ad:f5:25:57: 8c:2d:f6:ec:af:31:9c:be:7b:c2:cd:4b:e8:d7:f2: 15:c0:45:1a:3a:22:d9:72:ca:3e:7d:cb:16:53:8e: 8f:90:3b:29:2f:13:80:ab:49:52:78:87:0d:d8:e0: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:34:A2:9F:F6:9E:95:BA:21:2E:19:23:10:7A:E3:06:50:D3:2B:A6 X509v3 Authority Key Identifier: keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:84:f8:ac:5b:79:1b:e3:eb:c0:5f:97:9c:08:38:40:5b:03: 84:61:b9:fc:bc:be:08:a3:43:b8:e7:bc:24:fa:3f:b8:69:90: e1:82:1c:39:35:2c:97:40:7c:2b:ac:68:ff:76:01:47:fa:62: 8e:f5:2a:c5:cb:2b:c1:ab:d7:5f:33:2e:4d:3d:62:e9:5f:b0: fe:97:69:25:f8:e7:28:5d:3b:fc:b0:7c:f6:9a:52:01:12:54: cc:90:03:ec:d7:63:2d:56:80:05:a4:a7:f9:1f:80:55:81:c5: 60:a9:b2:6d:c5:6e:6d:4f:ed:45:db:2b:cd:57:a1:00:2a:44: 11:29:19:af:5a:e9:3e:67:67:4a:e5:88:7b:8f:4c:e6:c1:25: cd:f9:29:a3:56:81:71:5f:17:6b:fb:ce:3f:61:74:58:13:9c: e9:85:a4:3e:b9:57:47:a1:79:1c:6c:dc:41:30:c2:d3:77:90: de:7f:3d:06:85:44:84:b7:57:8c:7b:9c:23:8f:71:4c:4c:23: cb:b6:97:0c:cb:5d:36:64:2f:59:0b:71:81:24:7b:de:6d:27: 1b:bd:cc:8b:06:8f:4b:4c:91:8e:56:1b:ff:09:d4:c1:3b:c9: 6b:41:de:4c:f3:6d:3e:d1:88:2e:75:9c:c7:5b:a4:b6:ca:7c: d6:68:f2:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ42sl+aM6hx83U/IW4ryyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2 ZjYyZDYwHhcNMjUxMjI2MDkwMDM0WhcNMjUxMjI3MDkwMDM0WjAzMTEwLwYDVQQD Eyg2OTM0YTI5ZmY2OWU5NWJhMjEyZTE5MjMxMDdhZTMwNjUwZDMyYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3qxw9WlddxzRkFPkWMY0pI76M4C LS3KH7diK7c9RB/hxyTztC7AtPPWRX1T7JjniNuLLbBwzV627gNgjhg/IQaQbETF 9OmLn2hLVYHAiNTUyurPfGqdLgbfmJEEK/O6D9XJSeWQ8rJJfOrDHJecpHl/Pu3g WAFbkn48rHv05v96+UsOD1Onesbjj5JURb86fIgw4LG3ih9RKmNLLN2yUgmVgGHX MAQCJsEudZ6vXop+Zec9HoPQ4tyqh6qWD7i1wtaphdd2sSKDItFcqa31JVeMLfbs rzGcvnvCzUvo1/IVwEUaOiLZcso+fcsWU46PkDspLxOAq0lSeIcN2OA/+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGk0op/2npW6IS4ZIxB64wZQ0yumMB8GA1UdIwQY MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct NDAyMjM4NjM4ZWEzLzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIT4rFt5 G+PrwF+XnAg4QFsDhGG5/Ly+CKNDuOe8JPo/uGmQ4YIcOTUsl0B8K6xo/3YBR/pi jvUqxcsrwavXXzMuTT1i6V+w/pdpJfjnKF07/LB89ppSARJUzJAD7NdjLVaABaSn +R+AVYHFYKmybcVubU/tRdsrzVehACpEESkZr1rpPmdnSuWIe49M5sElzfkpo1aB cV8Xa/vOP2F0WBOc6YWkPrlXR6F5HGzcQTDC03eQ3n89BoVEhLdXjHucI49xTEwj y7aXDMtdNmQvWQtxgSR73m0nG73MiwaPS0yRjlYb/wnUwTvJa0HeTPNtPtGILnWc x1uktsp81mjyhA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:53 2025 by rpki-client