This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json) Hash identifier: kygvF9G6UAJ97WnK/VHEVnBZ4VIpIETc6Ua3i3LRYpI= Subject key identifier: 6F:F2:BE:31:8F:D3:33:7F:A6:F2:9A:11:7C:17:B9:38:0D:8F:B7:AF Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12 Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612 Certificate serial: 019B1013DE8120E6ED57EC8B2CA82854EECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft Manifest number: 1704 Signing time: Fri 12 Dec 2025 01:01:36 +0000 Manifest this update: Fri 12 Dec 2025 01:01:36 +0000 Manifest next update: Sat 13 Dec 2025 01:01:36 +0000 Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=) 2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: +x2ACsFFr3ZshXMK1FY/fojGebH5e1pjpqBApcT5nOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:de:81:20:e6:ed:57:ec:8b:2c:a8:28:54:ee:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612 Validity Not Before: Dec 12 01:01:36 2025 GMT Not After : Dec 13 01:01:36 2025 GMT Subject: CN=6ff2be318fd3337fa6f29a117c17b9380d8fb7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:dd:7e:fc:23:fc:c3:db:cf:6f:46:9e:5e: 3f:2c:24:35:bb:cc:ff:76:53:7b:c6:ce:f2:0e:f3: 56:56:be:9c:a8:dc:c8:cb:66:cd:c4:88:5c:f1:e6: 06:73:3c:a3:3d:80:4f:49:8e:ef:e2:d8:84:30:e6: 59:89:11:fd:fb:d1:37:93:f8:17:59:b3:36:a2:7c: d8:87:0a:01:69:ed:ce:2e:bb:4e:f1:5c:e7:2d:b5: 37:4c:32:e5:85:e0:1f:71:50:cd:f5:42:52:f1:4e: ff:8e:d1:7f:74:91:e5:43:6c:cc:8e:0e:4d:d0:70: 3d:51:a6:4d:60:35:7f:19:23:cf:b9:09:6a:a4:60: b7:a1:1b:09:00:7f:e6:7d:91:da:f3:2c:78:a9:30: 8c:b8:22:ed:4b:b5:cf:f0:19:e8:7e:11:ac:b5:7b: b3:5b:fe:1f:c5:7b:7e:5f:13:9c:be:39:5d:91:19: 5e:80:b3:87:09:03:55:e6:92:94:e7:18:27:cf:66: 38:d6:5b:88:1e:cd:f1:24:a4:86:da:80:cb:c9:b8: ec:be:b4:0f:9c:2b:34:9f:05:24:75:cb:3c:b2:6a: 94:09:89:5c:27:4a:f2:68:bd:fa:2a:a6:9c:dd:61: 49:2c:33:a4:02:f4:6a:30:ff:ec:7d:6f:7d:e9:a2: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F2:BE:31:8F:D3:33:7F:A6:F2:9A:11:7C:17:B9:38:0D:8F:B7:AF X509v3 Authority Key Identifier: keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:55:50:27:14:23:ba:5e:44:ac:05:14:f2:8e:d7:12:3e:35: 90:06:80:c9:44:fe:bd:f1:ab:d9:a8:ed:4e:8d:53:3b:bc:e0: 33:3c:39:6d:07:8a:37:aa:5a:0f:f8:73:49:4a:f5:49:67:e7: ea:c2:26:88:0a:4b:c2:19:5b:8e:6a:bb:b4:e6:e1:19:b4:29: 94:58:ab:87:38:45:b9:8f:22:c6:8a:32:d6:11:11:eb:26:9f: 8c:c6:14:9c:c6:df:46:72:c3:4b:bc:f4:13:8b:db:47:44:9e: 6e:d6:69:e6:bc:81:3e:1a:33:d0:2f:74:42:68:ad:77:05:5c: ac:81:48:47:42:4b:80:7b:37:62:5a:13:e5:77:c1:08:39:8c: 70:57:73:a1:36:ac:07:da:74:a8:cf:4a:75:ca:bb:df:55:40: b0:ff:77:02:c1:33:f1:22:aa:3d:8f:a1:4e:ae:c6:02:46:8b: 3c:8f:66:c2:23:be:5c:f1:f4:f2:3f:86:cb:08:b6:89:7e:47: 66:99:3a:61:1f:95:ca:dc:d9:ac:ac:59:d8:f4:b1:0d:05:3d: 11:5b:54:42:b3:e1:29:21:0b:9a:db:2b:29:b9:08:6e:36:ee: 2d:4f:9e:89:94:7a:ab:97:d6:1b:6b:b3:e4:ab:3c:2d:35:5b: 42:2a:a0:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE96BIObtV+yLLKgoVO7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMmYyMWU1YTRmYmUwMTUyMDVmNmNlZjg4YWZhZTE5Y2Qw NmE2MTIwHhcNMjUxMjEyMDEwMTM2WhcNMjUxMjEzMDEwMTM2WjAzMTEwLwYDVQQD Eyg2ZmYyYmUzMThmZDMzMzdmYTZmMjlhMTE3YzE3YjkzODBkOGZiN2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuendfvwj/MPbz29Gnl4/LCQ1u8z/ dlN7xs7yDvNWVr6cqNzIy2bNxIhc8eYGczyjPYBPSY7v4tiEMOZZiRH9+9E3k/gX WbM2onzYhwoBae3OLrtO8VznLbU3TDLlheAfcVDN9UJS8U7/jtF/dJHlQ2zMjg5N 0HA9UaZNYDV/GSPPuQlqpGC3oRsJAH/mfZHa8yx4qTCMuCLtS7XP8BnofhGstXuz W/4fxXt+XxOcvjldkRlegLOHCQNV5pKU5xgnz2Y41luIHs3xJKSG2oDLybjsvrQP nCs0nwUkdcs8smqUCYlcJ0ryaL36Kqac3WFJLDOkAvRqMP/sfW996aJlaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/yvjGP0zN/pvKaEXwXuTgNj7evMB8GA1UdIwQY MBaAFF0vIeWk++AVIF9s74ivrhnNBqYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWIt MjE0YTc2MjEwZmQ2LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWItMjE0YTc2MjEwZmQ2 LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVVQJxQj ul5ErAUU8o7XEj41kAaAyUT+vfGr2ajtTo1TO7zgMzw5bQeKN6paD/hzSUr1SWfn 6sImiApLwhlbjmq7tObhGbQplFirhzhFuY8ixooy1hER6yafjMYUnMbfRnLDS7z0 E4vbR0SebtZp5ryBPhoz0C90QmitdwVcrIFIR0JLgHs3YloT5XfBCDmMcFdzoTas B9p0qM9Kdcq731VAsP93AsEz8SKqPY+hTq7GAkaLPI9mwiO+XPH08j+Gywi2iX5H Zpk6YR+VytzZrKxZ2PSxDQU9EVtUQrPhKSELmtsrKbkIbjbuLU+eiZR6q5fWG2uz 5Ks8LTVbQiqgRg== -----END CERTIFICATE-----Generated at Fri Dec 12 07:58:58 2025 by rpki-client