This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: 47iSOlgVM9j7K7Zc3MUHnGBdl6bLAUMmZG7zEQM7XPI= Subject key identifier: 43:91:F4:96:C1:68:3B:62:22:41:A1:29:F4:1E:07:E3:C4:34:90:65 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019B0E24F0869767C4D029F0C4BFFF546BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 177F Signing time: Thu 11 Dec 2025 16:01:00 +0000 Manifest this update: Thu 11 Dec 2025 16:01:00 +0000 Manifest next update: Fri 12 Dec 2025 16:01:00 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: +z3vTjresYY6vYnGDbj9rTGfmvrQMKmjfeEZ9tTvM2I=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:f0:86:97:67:c4:d0:29:f0:c4:bf:ff:54:6b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Dec 11 16:01:00 2025 GMT Not After : Dec 12 16:01:00 2025 GMT Subject: CN=4391f496c1683b622241a129f41e07e3c4349065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:2a:e0:a6:1d:5c:96:7b:32:30:d2:15:09: aa:81:bc:75:29:d6:ec:92:3e:3c:d8:e7:91:7d:67: 01:f8:0a:3b:0e:1b:ad:50:72:5b:af:43:a1:ab:c5: 03:d6:84:25:d2:e8:24:a7:d4:a0:28:ca:5b:88:9c: 11:e9:ac:ab:46:65:c7:ac:19:3c:0b:10:02:9a:55: c6:82:85:5f:8c:d5:e1:f9:e7:c0:cd:9a:b3:0d:53: 2a:2a:f3:bd:88:56:f4:cc:33:c4:bf:1c:18:91:0e: ae:a7:27:0e:7b:37:d1:07:7b:2b:89:36:63:ed:05: f0:90:53:ef:f3:04:58:ec:4e:0f:26:08:bf:00:03: d8:da:6a:38:df:36:2f:70:5a:5a:dc:c0:35:fd:b8: a1:4f:d9:55:27:4b:ef:6d:67:dd:87:0b:2d:54:46: 70:f2:e4:c9:66:b8:4c:7a:88:b7:01:d3:64:ae:f0: 15:4e:8c:76:0e:a5:bb:8a:51:c5:93:8a:d4:1a:a6: 34:b1:7c:6a:fc:7a:89:1b:43:d8:f5:c5:49:18:ac: 15:26:ae:5d:c7:61:09:7c:1a:5e:09:f7:9b:37:4d: 50:db:b8:dc:61:8b:ff:6e:0e:c9:90:55:1b:9e:02: 2b:67:6a:72:c1:fd:69:5e:4a:56:50:be:10:4f:cc: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:91:F4:96:C1:68:3B:62:22:41:A1:29:F4:1E:07:E3:C4:34:90:65 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c0:00:56:5e:77:39:5c:36:78:3f:96:b3:76:de:fe:46:71: eb:ec:a2:7e:9f:d3:9b:a7:63:bc:cf:f4:76:4c:3d:8c:bc:c3: bb:e3:05:a2:37:34:40:7f:8c:55:a8:ff:80:d3:d2:af:82:1e: 20:40:e1:7e:b6:a6:b0:29:45:6d:77:05:f5:58:78:1c:79:aa: 02:aa:6b:d8:61:00:af:54:a8:e2:5b:be:68:fa:ff:4d:99:ac: 8d:47:29:79:a8:36:38:df:77:f6:11:f0:81:38:0f:7f:0d:0d: d4:ae:bd:cf:dd:73:84:83:ef:24:c9:95:36:7c:4a:67:51:d1: 16:ef:c9:78:63:c9:ea:db:06:76:75:27:c1:13:be:f7:ae:33: 65:23:c7:c5:7b:95:b6:8c:6f:e5:28:aa:11:89:15:d0:ae:0b: 41:d5:bf:cb:85:5a:28:a1:8c:0c:88:a3:33:0c:3d:8f:d8:49: 2c:53:9e:62:f5:43:33:bf:31:a4:38:76:c8:22:b5:7d:76:4d: df:40:c1:c5:80:67:8e:91:35:20:df:a8:2d:f0:cc:c6:90:a5: 6b:c4:66:3b:65:27:69:ff:fb:b4:f8:12:f6:82:32:de:41:05: 34:7d:1f:dc:ad:0a:1c:3e:8d:47:56:16:e4:b6:29:85:55:03: fa:2d:d8:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJPCGl2fE0CnwxL//VGu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUxMjExMTYwMTAwWhcNMjUxMjEyMTYwMTAwWjAzMTEwLwYDVQQD Eyg0MzkxZjQ5NmMxNjgzYjYyMjI0MWExMjlmNDFlMDdlM2M0MzQ5MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz0q4KYdXJZ7MjDSFQmqgbx1Kdbs kj482OeRfWcB+Ao7DhutUHJbr0Ohq8UD1oQl0ugkp9SgKMpbiJwR6ayrRmXHrBk8 CxACmlXGgoVfjNXh+efAzZqzDVMqKvO9iFb0zDPEvxwYkQ6upycOezfRB3sriTZj 7QXwkFPv8wRY7E4PJgi/AAPY2mo43zYvcFpa3MA1/bihT9lVJ0vvbWfdhwstVEZw 8uTJZrhMeoi3AdNkrvAVTox2DqW7ilHFk4rUGqY0sXxq/HqJG0PY9cVJGKwVJq5d x2EJfBpeCfebN01Q27jcYYv/bg7JkFUbngIrZ2pywf1pXkpWUL4QT8z6lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOR9JbBaDtiIkGhKfQeB+PENJBlMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecAAVl53 OVw2eD+Ws3be/kZx6+yifp/Tm6djvM/0dkw9jLzDu+MFojc0QH+MVaj/gNPSr4Ie IEDhframsClFbXcF9Vh4HHmqAqpr2GEAr1So4lu+aPr/TZmsjUcpeag2ON939hHw gTgPfw0N1K69z91zhIPvJMmVNnxKZ1HRFu/JeGPJ6tsGdnUnwRO+964zZSPHxXuV toxv5SiqEYkV0K4LQdW/y4VaKKGMDIijMww9j9hJLFOeYvVDM78xpDh2yCK1fXZN 30DBxYBnjpE1IN+oLfDMxpCla8RmO2Unaf/7tPgS9oIy3kEFNH0f3K0KHD6NR1YW 5LYphVUD+i3YNQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:25:54 2025 by rpki-client