This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft File: xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json) Hash identifier: mSr3ytP5ff9jTiR4TtLwJAuCpbxRAR5qV9PyWZbY3H4= Subject key identifier: 4E:06:3B:6C:FF:9E:75:C1:2E:F7:5F:75:89:AF:14:CD:6E:33:8D:57 Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Certificate serial: 019B39EAB256E2990D35D2D98672998C7418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft Manifest number: 08B7 Signing time: Sat 20 Dec 2025 04:00:40 +0000 Manifest this update: Sat 20 Dec 2025 04:00:40 +0000 Manifest next update: Sun 21 Dec 2025 04:00:40 +0000 Files and hashes: 1: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (hash: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=) 2: V3wGcwOVhN0tAMoLaOO8eyDkTKY.roa (hash: LoyanmiphfJJ/rxmnZ49vq4eY1guWePbQk/rQBxZgok=) 3: c0033PUKHcK0RGnP2G-A-PBcvHI.roa (hash: 2Ou36KzazZ/RW5paKom4FLZjeLVkyhsmjYIVTfOC2XI=) 4: eqHQLvrEyFem_zOL2dGPtQbOrHE.roa (hash: xkijKwZrCJTocpD11ugimO21ZJdJ5XVb/oBsAvogKmM=) 5: kPNpqlKlXSRN44fbkT0lmJ0OXx0.roa (hash: FyhtVVwzpFsgGl1UF2q6lWuO2wd0bFbhXtZPTezLBtQ=) 6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: NY1lenpcwCviqX1zVmM3dYmCyNuDqlZ2GsAsUbk0f+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:b2:56:e2:99:0d:35:d2:d9:86:72:99:8c:74:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Validity Not Before: Dec 20 04:00:40 2025 GMT Not After : Dec 21 04:00:40 2025 GMT Subject: CN=4e063b6cff9e75c12ef75f7589af14cd6e338d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:c3:ad:f9:98:48:3e:60:89:a0:de:e6:c8: bf:77:5e:2e:59:da:1d:36:9a:ab:e6:a2:0c:27:06: 0e:26:c1:c7:b4:4f:ca:30:c2:88:56:09:42:7a:22: 38:dd:91:da:cb:e1:14:99:11:da:67:07:54:4b:b6: 74:1e:e1:fe:48:f2:e0:da:79:e3:55:da:6a:95:ff: 58:0c:f3:37:fa:10:26:14:49:0c:37:1d:90:e2:95: 62:8f:45:b9:35:3f:e3:93:6c:6d:f3:ae:ed:15:90: 77:5f:b5:76:79:df:ac:d9:5c:e0:37:c1:93:6e:44: ab:cb:1c:57:02:34:fb:3e:ee:80:52:3e:38:d2:87: 31:db:64:35:df:c8:f8:62:4d:11:69:29:bd:50:9d: 18:1c:a5:2e:8b:9e:81:dc:d3:f3:ef:9a:38:25:1f: 4b:b3:fe:34:7d:74:21:a3:9e:27:da:82:cb:06:ca: d4:e7:39:47:3d:1c:a5:52:2e:06:22:cc:8b:32:c5: a1:5b:b1:d0:8f:be:f0:b6:c7:55:aa:88:7f:0e:61: dd:ce:d8:b6:61:d7:0f:a6:e6:f1:80:c4:db:9d:c9: 55:23:44:e7:29:4b:a1:a5:98:1f:36:49:24:ab:52: 0b:e0:8f:4e:49:26:6a:c1:78:89:f5:26:c5:a6:91: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:06:3B:6C:FF:9E:75:C1:2E:F7:5F:75:89:AF:14:CD:6E:33:8D:57 X509v3 Authority Key Identifier: keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:59:07:17:6f:3b:0e:11:c7:4c:ea:2f:6a:d5:5f:ea:84:e9: 23:54:4d:76:ec:d0:b9:be:1a:74:05:a8:fd:d8:f0:90:42:9b: 21:92:e9:cb:af:7f:6b:13:85:0f:02:bd:0b:77:ee:63:32:c5: 77:3f:e2:be:38:e4:ab:9d:74:49:f3:37:62:0b:21:ef:59:02: a6:f6:90:d7:49:73:32:74:9d:89:22:3a:b9:1f:88:18:33:a5: 34:fd:5c:45:03:d8:3a:1d:02:7e:e0:ce:f9:50:11:2f:6a:da: 67:4a:76:6b:b9:f7:7c:df:ae:18:a7:6b:3f:ce:ae:a7:80:c1: 6a:53:6c:ca:24:4f:fe:b4:71:20:ce:e9:16:09:bd:93:4c:34: 60:05:d2:81:c0:47:5a:4c:b2:cc:38:49:2d:44:0e:30:e6:93: 1c:6f:8a:43:4d:0c:7a:80:8c:aa:aa:eb:e1:87:5a:aa:57:28: 49:17:8e:03:49:ca:cc:81:79:bd:bf:f3:f0:3f:34:5e:08:90: 88:7c:c0:19:10:b5:30:c4:01:db:60:a4:c4:f7:f4:b6:97:f0: f8:88:52:db:af:eb:94:cd:ae:2e:a3:d4:d7:25:a1:ef:61:ab: e4:5f:58:57:4a:4c:58:31:19:9f:72:b5:af:77:fa:2d:1d:ef: f4:a7:96:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56rJW4pkNNdLZhnKZjHQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj NjgxMzcwHhcNMjUxMjIwMDQwMDQwWhcNMjUxMjIxMDQwMDQwWjAzMTEwLwYDVQQD Eyg0ZTA2M2I2Y2ZmOWU3NWMxMmVmNzVmNzU4OWFmMTRjZDZlMzM4ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy7DrfmYSD5giaDe5si/d14uWdod Npqr5qIMJwYOJsHHtE/KMMKIVglCeiI43ZHay+EUmRHaZwdUS7Z0HuH+SPLg2nnj Vdpqlf9YDPM3+hAmFEkMNx2Q4pVij0W5NT/jk2xt867tFZB3X7V2ed+s2VzgN8GT bkSryxxXAjT7Pu6AUj440ocx22Q138j4Yk0RaSm9UJ0YHKUui56B3NPz75o4JR9L s/40fXQho54n2oLLBsrU5zlHPRylUi4GIsyLMsWhW7HQj77wtsdVqoh/DmHdzti2 YdcPpubxgMTbnclVI0TnKUuhpZgfNkkkq1IL4I9OSSZqwXiJ9SbFppG5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4GO2z/nnXBLvdfdYmvFM1uM41XMB8GA1UdIwQY MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct OTBlYTM3MjljNTc0LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0 LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVkHF287 DhHHTOovatVf6oTpI1RNduzQub4adAWo/djwkEKbIZLpy69/axOFDwK9C3fuYzLF dz/ivjjkq510SfM3Ygsh71kCpvaQ10lzMnSdiSI6uR+IGDOlNP1cRQPYOh0CfuDO +VARL2raZ0p2a7n3fN+uGKdrP86up4DBalNsyiRP/rRxIM7pFgm9k0w0YAXSgcBH WkyyzDhJLUQOMOaTHG+KQ00MeoCMqqrr4YdaqlcoSReOA0nKzIF5vb/z8D80XgiQ iHzAGRC1MMQB22CkxPf0tpfw+IhS26/rlM2uLqPU1yWh72Gr5F9YV0pMWDEZn3K1 r3f6LR3v9KeWzA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:14:30 2025 by rpki-client