This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json) Hash identifier: zC9Yat5MyXhyNkz8rEpc4DlMeaVw+W4NphTWoO6Z7HU= Subject key identifier: 38:58:DA:59:4A:07:59:33:6F:99:CD:D6:77:93:71:A6:16:F9:CA:F8 Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Certificate serial: 019B0E25C08278BA974A3E9BB341E0CEF9FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft Manifest number: 16D2 Signing time: Thu 11 Dec 2025 16:01:53 +0000 Manifest this update: Thu 11 Dec 2025 16:01:53 +0000 Manifest next update: Fri 12 Dec 2025 16:01:53 +0000 Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=) 2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=) 3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=) 4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=) 5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=) 6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=) 7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=) 8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: Ho2HTWdXA9XCxZQA+E+To19lX8DQgE50iK5vencur4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:c0:82:78:ba:97:4a:3e:9b:b3:41:e0:ce:f9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Validity Not Before: Dec 11 16:01:53 2025 GMT Not After : Dec 12 16:01:53 2025 GMT Subject: CN=3858da594a0759336f99cdd6779371a616f9caf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:9f:b2:08:d8:1a:40:e9:a0:ab:f1:dd:67: 18:3e:27:6f:b2:dd:f2:c3:96:53:d0:58:e8:68:64: 1a:19:62:0c:77:09:fc:93:a2:ae:fa:28:a7:79:88: ee:58:4b:0f:ed:32:5f:37:18:0a:c1:b9:b1:ca:20: 2d:b2:11:d3:c6:f4:bc:fd:a6:76:47:84:07:6c:89: 32:b6:bb:ec:8f:8d:5f:29:13:2b:4b:95:9d:95:1b: e8:e0:2c:57:44:bc:95:64:6f:c0:50:cc:2b:69:c0: 28:db:ff:bb:18:f9:0a:83:40:12:78:63:d2:6a:42: 93:53:74:9c:c7:96:52:6a:cc:c8:6f:3c:ef:50:c5: fd:6e:95:b6:bd:30:05:6f:08:fe:f4:30:14:93:36: 8e:56:1a:3a:ca:08:4f:04:26:b2:ea:be:8f:6f:60: a2:46:ad:99:c0:06:9a:4e:1d:d7:27:0d:f7:fa:be: 61:65:37:fb:bf:af:b4:6c:cb:05:8f:a0:c7:93:f4: 78:aa:c0:d4:a7:be:21:b6:85:0a:dd:e0:75:44:7a: b8:a5:e6:73:cc:38:d1:cf:22:1d:13:df:e5:71:6e: a9:8f:c7:45:85:2f:6c:db:94:d4:ed:51:2e:e1:a7: af:5e:ba:92:00:55:30:52:73:dd:b7:ee:ed:86:b5: aa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:58:DA:59:4A:07:59:33:6F:99:CD:D6:77:93:71:A6:16:F9:CA:F8 X509v3 Authority Key Identifier: keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3d:0e:9f:ee:d5:ab:8b:f2:16:ce:66:04:77:33:c4:23:74: 99:8c:07:fc:7f:09:57:19:a6:a1:1c:29:34:bb:46:5d:c4:d6: 57:40:b9:03:a1:28:f3:63:dd:c0:62:b1:9a:b3:1c:ef:21:76: cf:a5:54:60:c9:60:50:01:dd:0c:8e:e8:50:7f:2f:6c:52:45: 54:63:ed:86:b3:51:c6:49:06:15:c2:75:bc:58:c1:e0:0a:95: b3:7e:fb:8e:95:95:55:86:73:cb:42:f8:b0:9e:bf:d6:08:05: a8:75:37:07:75:ac:ad:08:52:b7:ac:50:87:8d:3e:a8:41:0d: 30:5f:0e:0a:85:b4:af:07:0a:28:07:06:63:51:b3:7b:81:8b: be:79:aa:7d:a4:b3:1b:5c:0a:75:13:31:57:d5:2a:02:06:22: f3:8f:76:a3:a3:15:0e:4f:a3:a7:43:5c:d2:5e:fd:57:24:92: 71:4a:e6:30:24:e6:d2:6f:c3:ea:7b:bf:24:82:de:0f:0a:06: ab:16:21:04:28:dd:14:05:81:10:c0:b5:fe:e6:3f:82:98:70: 74:97:97:4f:0f:6d:ed:5f:52:fe:aa:0e:77:e9:2c:eb:20:cb: 52:d4:a0:5d:95:d0:2f:87:92:0b:11:21:53:bd:f7:20:63:e3: 62:f8:ab:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJcCCeLqXSj6bs0Hgzvn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw ZDVkZDkwHhcNMjUxMjExMTYwMTUzWhcNMjUxMjEyMTYwMTUzWjAzMTEwLwYDVQQD EygzODU4ZGE1OTRhMDc1OTMzNmY5OWNkZDY3NzkzNzFhNjE2ZjljYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycSfsgjYGkDpoKvx3WcYPidvst3y w5ZT0FjoaGQaGWIMdwn8k6Ku+iineYjuWEsP7TJfNxgKwbmxyiAtshHTxvS8/aZ2 R4QHbIkytrvsj41fKRMrS5WdlRvo4CxXRLyVZG/AUMwracAo2/+7GPkKg0ASeGPS akKTU3Scx5ZSaszIbzzvUMX9bpW2vTAFbwj+9DAUkzaOVho6yghPBCay6r6Pb2Ci Rq2ZwAaaTh3XJw33+r5hZTf7v6+0bMsFj6DHk/R4qsDUp74htoUK3eB1RHq4peZz zDjRzyIdE9/lcW6pj8dFhS9s25TU7VEu4aevXrqSAFUwUnPdt+7thrWqvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhY2llKB1kzb5nN1neTcaYW+cr4MB8GA1UdIwQY MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt OTkzMGYyMTk0YTBlLzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWT0On+7V q4vyFs5mBHczxCN0mYwH/H8JVxmmoRwpNLtGXcTWV0C5A6Eo82PdwGKxmrMc7yF2 z6VUYMlgUAHdDI7oUH8vbFJFVGPthrNRxkkGFcJ1vFjB4AqVs377jpWVVYZzy0L4 sJ6/1ggFqHU3B3WsrQhSt6xQh40+qEENMF8OCoW0rwcKKAcGY1Gze4GLvnmqfaSz G1wKdRMxV9UqAgYi8492o6MVDk+jp0Nc0l79VySScUrmMCTm0m/D6nu/JILeDwoG qxYhBCjdFAWBEMC1/uY/gphwdJeXTw9t7V9S/qoOd+ks6yDLUtSgXZXQL4eSCxEh U733IGPjYvirVQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:53 2025 by rpki-client