This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json) Hash identifier: jkE+HOWf/xSGWwTDEDteaA9AhDpdikBohty+8d3kCio= Subject key identifier: 77:4A:74:F1:4C:D1:82:AA:87:E9:CE:8B:4A:D0:EC:DD:1B:74:45:B4 Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78 Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78 Certificate serial: 019B3343DB183693E9C177684D5EFAFC78E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft Manifest number: 0DEA Signing time: Thu 18 Dec 2025 21:00:43 +0000 Manifest this update: Thu 18 Dec 2025 21:00:43 +0000 Manifest next update: Fri 19 Dec 2025 21:00:43 +0000 Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=) 2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: 2LeGJEPoeqtLc4AGPJ1CUPIDJwnFVTXihK8YQ3hkHiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:db:18:36:93:e9:c1:77:68:4d:5e:fa:fc:78:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78 Validity Not Before: Dec 18 21:00:43 2025 GMT Not After : Dec 19 21:00:43 2025 GMT Subject: CN=774a74f14cd182aa87e9ce8b4ad0ecdd1b7445b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:f4:14:b3:d4:00:ba:62:b6:f7:d9:27:1e: dc:60:69:72:92:2c:b2:25:0c:03:3e:34:3d:2f:c8: 14:52:c5:e1:b8:1e:29:dd:ba:15:53:09:5c:e8:23: 50:2c:f7:1f:1a:c3:94:ee:a0:b1:7f:e6:72:ae:83: d8:7f:e7:f8:77:8c:ee:c9:ba:ba:80:21:17:7c:da: 8e:71:c8:3e:b5:41:56:79:05:55:98:e7:4a:c0:b1: 9e:fd:ce:6e:dc:a6:33:fc:e3:b4:4e:33:da:71:6b: 7d:ab:ec:33:66:a7:63:ab:45:d3:73:81:a5:5b:d9: 91:20:ff:d7:95:db:13:41:64:a0:be:83:69:c7:81: eb:42:ca:88:8a:52:a9:14:e5:29:47:55:06:06:4b: 45:e9:f3:1a:01:4e:d9:ec:84:59:86:81:c0:0c:0d: 8d:11:6a:cc:4c:3a:51:23:93:a9:7f:ee:dd:35:08: 2f:1f:f0:36:36:99:df:07:c9:90:7d:ee:bf:d1:39: d3:e1:a6:76:08:29:50:70:51:f2:cf:f5:b5:6c:b9: 73:40:20:73:b8:2e:4e:ca:f0:72:1a:1f:66:3c:ec: b6:28:1f:6b:f1:28:54:60:7f:75:27:8b:cf:86:07: fb:3e:a6:ac:71:1c:32:eb:71:05:6b:95:1e:70:60: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4A:74:F1:4C:D1:82:AA:87:E9:CE:8B:4A:D0:EC:DD:1B:74:45:B4 X509v3 Authority Key Identifier: keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c1:87:f8:55:61:1f:e5:68:69:02:3c:f5:e4:b3:b1:4c:01: 40:20:57:5d:36:37:3e:4f:af:43:60:5e:31:01:f8:a9:9d:43: cb:5b:d1:42:73:fc:48:d4:4d:60:e3:31:bd:b6:27:e2:16:b3: e7:b7:10:9e:e0:ab:9b:e7:e7:e5:0b:a7:4a:fd:d0:d3:58:aa: c6:00:77:c7:05:af:44:99:c4:fc:aa:72:2e:fe:05:45:52:75: 54:27:e0:4e:60:6c:28:fc:e2:36:e2:fa:e7:9e:b1:fb:07:b2: 26:a1:c5:ef:7d:df:73:a6:1f:72:54:00:f9:ff:4e:60:5b:a1: b1:93:33:78:04:de:d3:f8:cc:33:75:4d:cd:fa:5e:9f:fc:77: 5b:41:a8:00:a5:17:15:e5:87:a4:1f:1f:1f:5b:ce:a0:95:b0: df:83:d2:d8:90:cb:7a:a5:21:ec:8e:21:66:51:6d:36:f6:b3: 7e:0f:fb:79:1d:a5:55:d0:c8:0d:d3:95:e7:b2:30:98:10:c3: 33:51:e9:6c:50:f4:52:e3:61:80:3f:9d:b6:fc:29:97:ab:22: ce:34:52:78:49:2e:dd:06:09:d6:75:b5:5e:9c:fc:ca:9b:ca: e3:01:b3:52:5b:90:c5:4b:94:9a:cd:11:b2:6b:b2:d4:92:c9: 2c:2b:51:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ9sYNpPpwXdoTV76/HjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YzNiYzA1YWE1MmFiOWViNWQxODRmNTA4ODlmMWZmMGM5 MGNlNzgwHhcNMjUxMjE4MjEwMDQzWhcNMjUxMjE5MjEwMDQzWjAzMTEwLwYDVQQD Eyg3NzRhNzRmMTRjZDE4MmFhODdlOWNlOGI0YWQwZWNkZDFiNzQ0NWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4L0FLPUALpitvfZJx7cYGlykiyy JQwDPjQ9L8gUUsXhuB4p3boVUwlc6CNQLPcfGsOU7qCxf+ZyroPYf+f4d4zuybq6 gCEXfNqOccg+tUFWeQVVmOdKwLGe/c5u3KYz/OO0TjPacWt9q+wzZqdjq0XTc4Gl W9mRIP/XldsTQWSgvoNpx4HrQsqIilKpFOUpR1UGBktF6fMaAU7Z7IRZhoHADA2N EWrMTDpRI5Opf+7dNQgvH/A2NpnfB8mQfe6/0TnT4aZ2CClQcFHyz/W1bLlzQCBz uC5OyvByGh9mPOy2KB9r8ShUYH91J4vPhgf7PqascRwy63EFa5UecGDqEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdKdPFM0YKqh+nOi0rQ7N0bdEW0MB8GA1UdIwQY MBaAFMTDvAWqUquetdGE9QiJ8f8MkM54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE1POEJhcFNxNTYxMFlUMUNJbnhfd3lRem5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kMjM3ZmEtYjEwNS00MzJlLTgzY2It NmQzNWI3OTU2ZmNlLzEveE1POEJhcFNxNTYxMFlUMUNJbnhfd3lRem5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kMjM3ZmEtYjEwNS00MzJlLTgzY2ItNmQzNWI3OTU2ZmNl LzEveE1POEJhcFNxNTYxMFlUMUNJbnhfd3lRem5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8GH+FVh H+VoaQI89eSzsUwBQCBXXTY3Pk+vQ2BeMQH4qZ1Dy1vRQnP8SNRNYOMxvbYn4haz 57cQnuCrm+fn5QunSv3Q01iqxgB3xwWvRJnE/KpyLv4FRVJ1VCfgTmBsKPziNuL6 556x+weyJqHF733fc6YfclQA+f9OYFuhsZMzeATe0/jMM3VNzfpen/x3W0GoAKUX FeWHpB8fH1vOoJWw34PS2JDLeqUh7I4hZlFtNvazfg/7eR2lVdDIDdOV57IwmBDD M1HpbFD0UuNhgD+dtvwpl6sizjRSeEku3QYJ1nW1Xpz8ypvK4wGzUluQxUuUms0R smuy1JLJLCtRIw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:32 2025 by rpki-client