This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json) Hash identifier: 23PYSFMrUdlc5HMmTuo3irIcYDBA5z/Jc7+RQdVrnDI= Subject key identifier: F3:99:CB:81:18:C2:10:60:75:71:D9:17:A5:95:70:26:E2:A4:3F:79 Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Certificate serial: 019B243EFED8EEF74B1850543B870E1BA206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft Manifest number: 08E7 Signing time: Mon 15 Dec 2025 23:01:06 +0000 Manifest this update: Mon 15 Dec 2025 23:01:06 +0000 Manifest next update: Tue 16 Dec 2025 23:01:06 +0000 Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=) 2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: d27KF6rrNWWzzSxV5d2mJUh+MEaF4OtfUnpxlj8IkKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:fe:d8:ee:f7:4b:18:50:54:3b:87:0e:1b:a2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Validity Not Before: Dec 15 23:01:06 2025 GMT Not After : Dec 16 23:01:06 2025 GMT Subject: CN=f399cb8118c210607571d917a5957026e2a43f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:79:26:a3:76:41:42:1b:01:5d:43:11:1d: 5d:0f:d6:bd:13:45:4b:7d:d1:37:b6:60:4d:8b:2c: 09:f9:69:5f:8b:52:78:4b:ad:14:22:16:e3:8f:f7: c5:01:5b:33:94:17:1e:f3:67:e5:5c:88:49:b4:55: e6:69:ed:0e:c2:2e:a4:81:0a:fb:3e:0f:c3:d4:61: db:8f:62:af:0f:56:f2:72:de:37:ec:7d:14:6f:99: 55:41:d2:08:d0:b8:38:fa:2d:d4:ba:ca:bc:ed:e9: 9a:d9:e0:f5:e4:1c:89:c3:c7:95:21:68:cf:80:99: 49:7c:45:c3:26:fa:08:a7:24:65:e6:ff:bb:7b:b9: 4f:93:a3:c1:f2:01:ac:51:bf:3c:bc:9f:f5:13:39: 31:c4:1e:d6:33:ce:d9:e5:7a:67:74:8e:43:90:0a: 2f:ac:57:70:cd:c6:9d:d4:b7:3f:6f:0e:30:06:d2: 8a:42:97:83:5d:ae:84:66:99:3c:e5:dc:7e:ef:2c: 43:af:eb:fa:01:ae:3c:1e:94:f1:50:68:cd:2f:60: 7b:25:1d:a6:ad:8f:23:25:d3:7f:f6:0e:65:06:66: 88:2b:80:69:4a:b8:c7:16:64:cc:f4:af:04:79:c7: 37:9b:83:5b:cf:9e:77:73:a1:82:41:42:4c:ce:13: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:99:CB:81:18:C2:10:60:75:71:D9:17:A5:95:70:26:E2:A4:3F:79 X509v3 Authority Key Identifier: keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b4:56:9a:c4:d6:f6:6a:93:75:db:1d:ef:a0:45:2c:fd:fb: a3:59:26:c5:3c:65:81:6a:12:65:3e:00:5b:9c:5d:3e:1f:49: a2:55:2e:86:dc:d9:20:39:be:cc:85:34:0e:42:e9:1b:fd:30: 00:38:ea:9d:2d:4d:cb:cf:6b:9b:08:8b:b7:b6:3a:ed:ca:6a: 22:2a:49:32:80:77:4b:f8:2f:d7:c1:80:d3:8a:55:12:7d:47: 41:4f:5c:55:7a:c8:c7:85:bb:36:6a:a2:fd:a9:60:67:7e:ae: 7a:c3:1c:45:08:6e:10:76:2c:0c:21:c7:5c:24:04:25:38:eb: 9b:cc:64:1c:60:9b:85:f1:de:73:01:69:2e:4b:80:aa:30:d0: b7:ff:ca:70:a7:84:29:ba:5c:fc:e4:15:76:a2:ef:bd:2e:a8: 83:0e:dd:d5:63:18:71:bd:87:92:be:cd:04:17:78:49:c5:85: 09:66:b9:90:8f:44:14:3d:9f:b6:1d:55:2b:c8:09:e0:33:12: 59:58:10:74:cb:73:37:04:72:fc:d3:1e:ab:18:fe:24:4f:0a: cc:0b:3b:ee:be:84:53:b5:81:98:ae:71:7f:f5:08:8e:ab:39: 77:4f:7e:89:09:93:a1:20:a3:11:1b:70:4d:a1:4c:e3:25:52: e3:20:b4:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPv7Y7vdLGFBUO4cOG6IGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZjFmMjE0ZmIyMmNjNTM2MTI4ZjVkZTRhYTAxN2E4Nzg4 MGYyODUwHhcNMjUxMjE1MjMwMTA2WhcNMjUxMjE2MjMwMTA2WjAzMTEwLwYDVQQD EyhmMzk5Y2I4MTE4YzIxMDYwNzU3MWQ5MTdhNTk1NzAyNmUyYTQzZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvx5JqN2QUIbAV1DER1dD9a9E0VL fdE3tmBNiywJ+Wlfi1J4S60UIhbjj/fFAVszlBce82flXIhJtFXmae0Owi6kgQr7 Pg/D1GHbj2KvD1byct437H0Ub5lVQdII0Lg4+i3Uusq87ema2eD15ByJw8eVIWjP gJlJfEXDJvoIpyRl5v+7e7lPk6PB8gGsUb88vJ/1EzkxxB7WM87Z5XpndI5DkAov rFdwzcad1Lc/bw4wBtKKQpeDXa6EZpk85dx+7yxDr+v6Aa48HpTxUGjNL2B7JR2m rY8jJdN/9g5lBmaIK4BpSrjHFmTM9K8Eecc3m4Nbz553c6GCQUJMzhNoHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOZy4EYwhBgdXHZF6WVcCbipD95MB8GA1UdIwQY MBaAFMTx8hT7IsxTYSj13kqgF6h4gPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAt ZWNmNGY0MjBjOThhLzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAtZWNmNGY0MjBjOThh LzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbRWmsTW 9mqTddsd76BFLP37o1kmxTxlgWoSZT4AW5xdPh9JolUuhtzZIDm+zIU0DkLpG/0w ADjqnS1Ny89rmwiLt7Y67cpqIipJMoB3S/gv18GA04pVEn1HQU9cVXrIx4W7Nmqi /algZ36uesMcRQhuEHYsDCHHXCQEJTjrm8xkHGCbhfHecwFpLkuAqjDQt//KcKeE Kbpc/OQVdqLvvS6ogw7d1WMYcb2Hkr7NBBd4ScWFCWa5kI9EFD2fth1VK8gJ4DMS WVgQdMtzNwRy/NMeqxj+JE8KzAs77r6EU7WBmK5xf/UIjqs5d09+iQmToSCjERtw TaFM4yVS4yC0sg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:26:45 2025 by rpki-client