This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json) Hash identifier: +IgcpV4giJjae/iR/DAA4Y43WTPwDLjeVWEBg2D1hIU= Subject key identifier: 9D:01:26:F9:29:15:D5:29:C6:DA:3D:C6:99:E8:18:65:40:10:C6:C3 Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea Certificate serial: 019B0F37C7AC64CDDD2CCDBDE243AA787BFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft Manifest number: 16E1 Signing time: Thu 11 Dec 2025 21:01:12 +0000 Manifest this update: Thu 11 Dec 2025 21:01:12 +0000 Manifest next update: Fri 12 Dec 2025 21:01:12 +0000 Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=) 2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=) 3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: JLqYWPufULnDb6VHIlIMZ1VvGB7VkP64Ek3OA0S2M+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:c7:ac:64:cd:dd:2c:cd:bd:e2:43:aa:78:7b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea Validity Not Before: Dec 11 21:01:12 2025 GMT Not After : Dec 12 21:01:12 2025 GMT Subject: CN=9d0126f92915d529c6da3dc699e818654010c6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:cc:d1:fd:21:17:8a:1b:2f:5c:4e:9f:f6: f7:86:44:f4:26:fd:0c:d9:3e:1d:41:92:c4:d9:43: cd:eb:bc:9e:3d:56:23:7d:89:04:e5:b3:88:4e:5c: 32:31:6a:5b:2e:69:42:2e:c9:fc:af:7d:36:34:25: be:34:c3:01:3d:87:b4:93:0f:dd:1d:21:78:e3:75: 18:79:67:49:f2:ee:c4:eb:b9:16:19:12:a4:91:f1: 28:1a:f6:2e:cb:8a:e2:67:9a:ed:b1:64:c2:42:b7: 98:fd:95:99:a6:a4:96:7a:f1:64:fd:40:13:51:db: c9:5e:95:8e:86:4d:5d:95:3e:f1:56:92:d5:25:91: 8b:26:75:38:df:f5:ca:56:0c:44:0d:08:f7:d3:ff: f1:96:c9:93:c1:db:ec:40:a2:f8:fc:d9:90:8e:b7: 12:9c:7a:51:c2:39:96:61:ae:62:26:98:d0:53:45: 9a:5a:0f:24:b6:75:7b:64:03:a1:a6:51:e8:e5:80: 85:33:1a:af:2d:a7:e2:28:cc:45:4e:e8:ae:37:41: d1:6c:fd:f2:ab:90:1f:32:0d:7a:34:60:f5:27:2b: c9:70:f9:77:3c:e4:44:63:f9:88:23:fb:88:d8:85: bd:8c:fe:5e:ee:7d:84:40:21:50:6e:18:ee:84:9b: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:01:26:F9:29:15:D5:29:C6:DA:3D:C6:99:E8:18:65:40:10:C6:C3 X509v3 Authority Key Identifier: keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:08:dc:8e:0a:52:42:1d:7e:30:68:ed:43:c2:3a:7e:49:44: 87:2b:5e:b2:ac:a4:0b:57:1e:b6:f0:fd:e3:f6:92:3f:20:c6: b5:fb:00:13:b2:52:81:f9:c1:9b:c2:fd:74:4a:6b:1e:df:e1: 3b:c3:b7:ff:0f:c0:af:bf:a6:26:15:a1:58:8c:ec:f6:53:9d: ef:62:f3:4a:ae:25:17:b7:17:98:ef:a0:10:e4:65:3e:25:06: 35:93:5e:42:3e:61:f1:2f:03:70:ad:78:c7:d1:b7:4f:35:82: 3c:ed:3e:96:57:c6:c0:21:77:ff:07:32:07:7e:e1:7c:c7:26: 95:2d:8d:bc:5e:db:50:73:fe:73:51:61:86:5f:f6:43:20:3b: ee:b6:4e:5c:ba:4d:1d:14:84:b0:7e:77:27:a2:8a:94:14:32: d6:63:82:6e:37:dc:25:91:16:be:2f:a7:d6:cd:a4:e9:35:07: 82:d7:dd:b0:d3:ba:48:08:7b:d3:cd:14:a8:31:10:af:eb:da: ae:6b:7f:80:78:ee:13:90:26:40:38:59:f6:6e:7f:c1:b3:47: e2:55:ff:28:5f:77:ae:df:94:94:6d:62:90:e2:7d:0d:e3:26: 9d:f4:ce:d0:35:d0:c0:d7:aa:fa:b2:55:84:04:02:4d:9c:ac: 99:77:e3:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN8esZM3dLM294kOqeHv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMTRhNGU2NTU4YmFiODlkMzZlM2JhMjFjOTVlMmFmZGQ2 OGZiZWEwHhcNMjUxMjExMjEwMTEyWhcNMjUxMjEyMjEwMTEyWjAzMTEwLwYDVQQD Eyg5ZDAxMjZmOTI5MTVkNTI5YzZkYTNkYzY5OWU4MTg2NTQwMTBjNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstHM0f0hF4obL1xOn/b3hkT0Jv0M 2T4dQZLE2UPN67yePVYjfYkE5bOITlwyMWpbLmlCLsn8r302NCW+NMMBPYe0kw/d HSF443UYeWdJ8u7E67kWGRKkkfEoGvYuy4riZ5rtsWTCQreY/ZWZpqSWevFk/UAT UdvJXpWOhk1dlT7xVpLVJZGLJnU43/XKVgxEDQj30//xlsmTwdvsQKL4/NmQjrcS nHpRwjmWYa5iJpjQU0WaWg8ktnV7ZAOhplHo5YCFMxqvLafiKMxFTuiuN0HRbP3y q5AfMg16NGD1JyvJcPl3POREY/mII/uI2IW9jP5e7n2EQCFQbhjuhJs6yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0BJvkpFdUpxto9xpnoGGVAEMbDMB8GA1UdIwQY MBaAFF8UpOZVi6uJ0247ohyV4q/daPvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQt ZGE4MWYwOGY2MDAxLzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQtZGE4MWYwOGY2MDAx LzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQjcjgpS Qh1+MGjtQ8I6fklEhytesqykC1cetvD94/aSPyDGtfsAE7JSgfnBm8L9dEprHt/h O8O3/w/Ar7+mJhWhWIzs9lOd72LzSq4lF7cXmO+gEORlPiUGNZNeQj5h8S8DcK14 x9G3TzWCPO0+llfGwCF3/wcyB37hfMcmlS2NvF7bUHP+c1Fhhl/2QyA77rZOXLpN HRSEsH53J6KKlBQy1mOCbjfcJZEWvi+n1s2k6TUHgtfdsNO6SAh7080UqDEQr+va rmt/gHjuE5AmQDhZ9m5/wbNH4lX/KF93rt+UlG1ikOJ9DeMmnfTO0DXQwNeq+rJV hAQCTZysmXfjZA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:13:50 2025 by rpki-client