This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json) Hash identifier: 4RmUuLCdnTi7iXo9v8OvSodiqM7Oc8d+u1vK2vPuQSM= Subject key identifier: 8E:7B:7D:FE:56:5C:F8:9A:C9:70:58:55:7F:44:BB:29:53:0B:89:6C Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e Certificate serial: 019B0AECAB40251F19A76EFF63EA1FAC9DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft Manifest number: 177F Signing time: Thu 11 Dec 2025 01:00:40 +0000 Manifest this update: Thu 11 Dec 2025 01:00:40 +0000 Manifest next update: Fri 12 Dec 2025 01:00:40 +0000 Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=) 2: exq4u1SZfA7x1zIrKqzjzge4W3E.roa (hash: 6hKC5aSxn1eYqBHCVJ0qgpvsfeNY0GeupedGw9IKcyA=) 3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: bYpYJcK45YKktpQBMYqN5dden21Pb8z4LjBtQxLHgu8=) 4: zIANn_XjTHpNl_tFmNq6MbPyZNE.roa (hash: b1/JePGfEJmKChck6onI1sptZi1SnAwXlnetMtXFNvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:ec:ab:40:25:1f:19:a7:6e:ff:63:ea:1f:ac:9d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e Validity Not Before: Dec 11 01:00:40 2025 GMT Not After : Dec 12 01:00:40 2025 GMT Subject: CN=8e7b7dfe565cf89ac97058557f44bb29530b896c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:fe:e3:12:60:fa:38:d2:aa:06:68:e5:d5: 78:ab:83:dd:76:45:c5:00:4d:99:d7:12:2c:13:99: 13:6a:c7:16:41:43:2f:69:6f:a5:f5:d0:0f:f9:c9: d9:fe:35:96:fd:3e:ff:6d:b3:a4:74:fb:14:af:bc: 4d:b2:ce:51:3d:84:38:77:5e:24:10:d8:60:9c:82: 7f:ee:92:80:93:58:20:76:4f:b8:e5:6a:43:2c:be: 0e:a9:3e:64:23:ca:c2:31:d9:4e:6e:a7:ed:13:b4: ba:2d:a4:dc:20:9e:87:be:9d:e0:ba:3c:6a:d6:f0: d0:24:9c:7b:6c:a5:e3:a2:0e:0f:93:5b:e8:37:ce: 69:94:56:89:67:49:ff:f3:78:43:a8:8a:26:a3:bc: fb:08:34:e7:50:54:00:38:2d:ba:68:7d:69:5f:e6: 65:46:f5:05:d4:a8:64:e0:5c:c4:83:d6:e3:75:2f: 37:cf:2c:e9:92:f1:8b:5c:17:9d:7f:15:9c:0d:c8: 5c:a9:62:71:29:88:ae:6f:fa:10:b6:27:7d:40:99: c9:b3:c2:5e:6a:a5:2d:b8:f4:6c:35:62:59:30:7e: 08:ed:ef:1d:65:ad:da:8f:4c:db:c5:70:95:a7:eb: 78:b9:4a:3e:41:ef:7f:27:d4:97:68:06:7a:0b:9a: f2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7B:7D:FE:56:5C:F8:9A:C9:70:58:55:7F:44:BB:29:53:0B:89:6C X509v3 Authority Key Identifier: keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2b:3d:f5:6a:4f:05:1e:ee:d9:fe:97:7d:d9:d2:7c:3a:d1: 07:7f:14:46:37:87:8a:8c:c7:01:70:f0:56:56:a4:e6:3d:72: 61:5a:a8:96:a0:11:a3:5e:6e:92:b3:d6:8d:41:9f:67:06:d2: 22:9b:0f:8a:d3:d5:37:47:9f:58:18:eb:ac:b9:e3:ea:e6:1e: c5:5b:11:95:67:15:31:2b:79:e1:e8:45:1a:8e:41:c9:a7:27: 3b:bb:8e:57:7c:8e:b2:7e:dd:9c:d8:f8:a8:c0:69:0f:9b:c8: e3:b6:98:1d:a0:91:1c:d1:ff:4f:5c:d8:16:5e:85:6c:8c:0a: 3b:65:1c:12:83:8e:31:56:d2:5f:50:2f:77:be:7e:8b:95:a1: 19:f1:fe:59:65:47:df:25:25:e6:f5:e3:3e:d6:49:70:f2:61: 17:4c:88:18:8e:fe:49:3e:00:0d:49:5e:25:ef:01:d7:4d:78: ca:de:95:35:a2:38:cb:ea:7b:78:cb:bd:b5:a4:75:03:c6:ac: d3:4f:02:b8:db:7d:30:31:90:e8:fb:b3:4a:9d:d5:85:4a:27: 11:f9:95:3d:0c:a0:98:8e:0d:75:1c:7e:9b:aa:82:62:86:eb: 1f:01:5c:af:a3:6b:eb:45:a7:98:34:3c:e9:a7:bf:3c:3f:11: f2:8e:98:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsK7KtAJR8Zp27/Y+ofrJ3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh Y2VjNmUwHhcNMjUxMjExMDEwMDQwWhcNMjUxMjEyMDEwMDQwWjAzMTEwLwYDVQQD Eyg4ZTdiN2RmZTU2NWNmODlhYzk3MDU4NTU3ZjQ0YmIyOTUzMGI4OTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUz+4xJg+jjSqgZo5dV4q4PddkXF AE2Z1xIsE5kTascWQUMvaW+l9dAP+cnZ/jWW/T7/bbOkdPsUr7xNss5RPYQ4d14k ENhgnIJ/7pKAk1ggdk+45WpDLL4OqT5kI8rCMdlObqftE7S6LaTcIJ6Hvp3gujxq 1vDQJJx7bKXjog4Pk1voN85plFaJZ0n/83hDqIomo7z7CDTnUFQAOC26aH1pX+Zl RvUF1Khk4FzEg9bjdS83zyzpkvGLXBedfxWcDchcqWJxKYiub/oQtid9QJnJs8Je aqUtuPRsNWJZMH4I7e8dZa3aj0zbxXCVp+t4uUo+Qe9/J9SXaAZ6C5ryFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI57ff5WXPiayXBYVX9EuylTC4lsMB8GA1UdIwQY MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt YmEzNzUxMTQwNGMyLzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSs99WpP BR7u2f6XfdnSfDrRB38URjeHiozHAXDwVlak5j1yYVqolqARo15ukrPWjUGfZwbS IpsPitPVN0efWBjrrLnj6uYexVsRlWcVMSt54ehFGo5ByacnO7uOV3yOsn7dnNj4 qMBpD5vI47aYHaCRHNH/T1zYFl6FbIwKO2UcEoOOMVbSX1Avd75+i5WhGfH+WWVH 3yUl5vXjPtZJcPJhF0yIGI7+ST4ADUleJe8B1014yt6VNaI4y+p7eMu9taR1A8as 008CuNt9MDGQ6PuzSp3VhUonEfmVPQygmI4NdRx+m6qCYobrHwFcr6Nr60WnmDQ8 6ae/PD8R8o6YgQ== -----END CERTIFICATE-----Generated at Thu Dec 11 05:38:35 2025 by rpki-client