This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json) Hash identifier: Qqyt2QM0l4ni3KGxGcIOkF9GrL9bkY7WIDtXghd8Mig= Subject key identifier: 33:30:6F:5B:07:C6:EF:2B:C5:3F:BE:BC:C3:A5:B8:46:9D:50:51:DE Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50 Certificate serial: 019B22BDF8C79DB4DA100B3744B4B682400F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft Manifest number: 168E Signing time: Mon 15 Dec 2025 16:00:33 +0000 Manifest this update: Mon 15 Dec 2025 16:00:33 +0000 Manifest next update: Tue 16 Dec 2025 16:00:33 +0000 Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=) 2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=) 3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=) 4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: N0FzZsvvmipaHAa24VUUVuQIEEeBMTjGn6Bobi/XrKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:bd:f8:c7:9d:b4:da:10:0b:37:44:b4:b6:82:40:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50 Validity Not Before: Dec 15 16:00:33 2025 GMT Not After : Dec 16 16:00:33 2025 GMT Subject: CN=33306f5b07c6ef2bc53fbebcc3a5b8469d5051de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:0a:e0:13:c7:d5:7d:0e:5a:6e:f8:55:19: c6:21:99:b7:eb:aa:6b:cb:75:8c:a5:17:23:b1:7c: 6f:0d:e8:d3:c8:a3:ae:7c:ff:b2:9d:c4:7f:75:7c: be:5f:20:31:a6:31:ba:32:c3:0d:4e:ac:86:03:02: 11:89:cc:a1:6a:1b:47:e4:52:e9:0d:37:9a:60:b4: fe:d3:f5:9c:9f:54:39:b3:55:02:ca:cc:e6:81:ee: 5a:db:d6:39:39:45:fd:36:52:31:21:a7:03:0e:db: 9d:8a:46:c1:3d:cd:f3:76:41:15:3e:da:2e:4e:60: ca:1f:68:7b:12:3d:42:bb:1f:fc:32:63:16:a0:2f: d2:a7:e7:83:01:7f:9b:2f:b3:c2:e6:9d:0e:f7:7c: 93:86:d2:e5:44:1f:b2:4d:7a:da:00:1f:06:4e:8f: eb:c3:bf:83:99:b1:63:02:f7:d2:45:cd:f7:cd:d7: 00:99:89:c7:41:91:fc:74:06:61:f7:21:7f:00:b0: 5f:68:4f:fa:05:21:c2:77:2f:4e:59:5d:c6:99:3d: 50:1a:f9:6d:55:ef:89:40:6e:26:7a:56:49:13:41: 3f:2c:c8:8c:2b:64:b0:98:25:a1:cf:84:52:d5:c5: 5f:a3:6e:40:22:24:06:c8:d6:fd:d3:ae:b2:81:b7: 15:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:30:6F:5B:07:C6:EF:2B:C5:3F:BE:BC:C3:A5:B8:46:9D:50:51:DE X509v3 Authority Key Identifier: keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:80:a0:fd:cf:e2:42:fb:08:b3:f3:78:c5:4a:b7:5f:8d:0b: 6e:2f:a1:e7:f5:cc:63:0d:ff:88:6f:80:3b:d6:bf:5b:5d:17: 12:d0:67:1d:5c:de:fa:a2:4a:ff:9d:f6:38:6a:d9:a2:9c:27: f6:6d:5e:26:c5:a8:1b:1c:30:55:66:eb:4f:64:e3:03:43:da: 1f:6a:67:ee:be:37:f0:e6:fb:57:14:15:7c:81:47:b2:a7:0b: 6c:70:09:67:9a:ed:e9:95:40:a8:5a:4f:c4:68:64:0d:44:68: 42:87:8b:d2:74:73:d2:13:51:08:09:67:16:22:bd:66:5f:a7: e5:a9:ea:ca:83:bf:24:d6:26:f6:9a:b0:a4:51:4e:82:be:12: a9:e6:5f:ed:39:1e:03:59:a9:34:4c:0e:2e:3b:af:8e:a9:c4: 71:1c:17:6f:a0:0f:a9:a4:d6:95:34:e4:94:72:3b:86:21:db: fc:23:91:3e:88:7f:51:b8:5e:db:25:86:3b:5d:27:21:7f:b9: 8a:47:45:e7:55:47:ca:38:a0:4d:7c:0d:30:71:de:c5:17:4b: 53:23:b2:5f:d7:24:ea:95:ec:4e:8e:20:55:02:36:9c:11:2b: c4:48:b7:84:ff:17:ea:07:3e:d4:e8:44:7f:2c:7a:7f:cf:57: 7a:ab:5a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivfjHnbTaEAs3RLS2gkAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzJhOTI1YzU1ZjFkNGU2ZTQwYzEwZjRlOGUwMTliNDgz YzFkNTAwHhcNMjUxMjE1MTYwMDMzWhcNMjUxMjE2MTYwMDMzWjAzMTEwLwYDVQQD EygzMzMwNmY1YjA3YzZlZjJiYzUzZmJlYmNjM2E1Yjg0NjlkNTA1MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHQK4BPH1X0OWm74VRnGIZm366pr y3WMpRcjsXxvDejTyKOufP+yncR/dXy+XyAxpjG6MsMNTqyGAwIRicyhahtH5FLp DTeaYLT+0/Wcn1Q5s1UCyszmge5a29Y5OUX9NlIxIacDDtudikbBPc3zdkEVPtou TmDKH2h7Ej1Cux/8MmMWoC/Sp+eDAX+bL7PC5p0O93yThtLlRB+yTXraAB8GTo/r w7+DmbFjAvfSRc33zdcAmYnHQZH8dAZh9yF/ALBfaE/6BSHCdy9OWV3GmT1QGvlt Ve+JQG4melZJE0E/LMiMK2SwmCWhz4RS1cVfo25AIiQGyNb9066ygbcV6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMwb1sHxu8rxT++vMOluEadUFHeMB8GA1UdIwQY MBaAFFwyqSXFXx1ObkDBD06OAZtIPB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjIt NDUzNzc0MThmYmIyLzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjItNDUzNzc0MThmYmIy LzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYCg/c/i QvsIs/N4xUq3X40Lbi+h5/XMYw3/iG+AO9a/W10XEtBnHVze+qJK/532OGrZopwn 9m1eJsWoGxwwVWbrT2TjA0PaH2pn7r438Ob7VxQVfIFHsqcLbHAJZ5rt6ZVAqFpP xGhkDURoQoeL0nRz0hNRCAlnFiK9Zl+n5anqyoO/JNYm9pqwpFFOgr4SqeZf7Tke A1mpNEwOLjuvjqnEcRwXb6APqaTWlTTklHI7hiHb/CORPoh/Ubhe2yWGO10nIX+5 ikdF51VHyjigTXwNMHHexRdLUyOyX9ck6pXsTo4gVQI2nBErxEi3hP8X6gc+1OhE fyx6f89Xeqtaeg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:58:13 2025 by rpki-client