This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json) Hash identifier: KVRHcGb1IAFUD29xVhjWaTS+1j+IE0drmqOZK/SZmMg= Subject key identifier: 1D:10:77:22:66:5B:E9:F6:36:81:4E:4E:6E:BD:CB:FD:D1:72:8D:E1 Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Certificate serial: 019B08FE5E9F32BECFD6C53C5F2AB22D26DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft Manifest number: 16FF Signing time: Wed 10 Dec 2025 16:00:46 +0000 Manifest this update: Wed 10 Dec 2025 16:00:46 +0000 Manifest next update: Thu 11 Dec 2025 16:00:46 +0000 Files and hashes: 1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=) 2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=) 3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=) 4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=) 5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: 0PbIWlUISYP2to3ujFXpums/72V7n6oqXhjd33NBSEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 16:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:5e:9f:32:be:cf:d6:c5:3c:5f:2a:b2:2d:26:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Validity Not Before: Dec 10 16:00:46 2025 GMT Not After : Dec 11 16:00:46 2025 GMT Subject: CN=1d107722665be9f636814e4e6ebdcbfdd1728de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:e7:ba:1a:e7:5b:84:37:a8:4a:d0:c1:81: 7f:4a:65:0d:79:d5:66:10:7d:4f:19:2e:05:99:e1: bc:e2:c4:94:df:e1:f1:ab:70:45:e8:4c:6c:3a:e2: b4:13:24:e5:3b:d5:47:03:7e:4a:99:e8:92:18:ac: 0f:70:b8:9a:5a:88:a5:65:5f:35:89:f6:28:2f:52: 13:d6:f3:1d:d4:85:b4:8a:3e:02:5e:15:5f:ae:a9: 86:00:fd:6c:19:42:9b:34:f7:d1:98:c0:fe:23:ca: 54:a0:16:da:fc:94:e7:30:d4:e5:21:0e:71:1b:c2: ef:fe:92:36:82:a9:71:aa:32:48:2b:8c:a4:1c:6b: 00:28:1d:be:71:9d:e2:8c:d8:56:ba:f6:a6:40:be: c8:1c:3e:f1:49:b0:8b:57:e1:8d:11:6c:16:38:eb: 98:98:50:01:96:34:05:09:a0:be:f4:cb:45:d0:f5: 8f:75:21:54:07:10:a3:95:9a:5c:37:d5:c6:16:ac: 4f:27:e3:3b:7c:b3:8c:b1:fc:19:7b:ed:c8:f6:84: 28:82:f3:10:2f:a2:66:0e:47:f6:df:47:60:f4:8b: 49:0a:6a:0d:e0:b4:13:56:a2:9f:4a:67:e3:7d:e3: 9d:fc:9b:ee:1f:ba:9a:e1:ff:d2:54:30:df:1e:5e: 7c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:10:77:22:66:5B:E9:F6:36:81:4E:4E:6E:BD:CB:FD:D1:72:8D:E1 X509v3 Authority Key Identifier: keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7b:59:2c:28:68:37:75:cd:5d:82:15:f8:98:32:de:1e:04: 10:ef:69:6c:0c:1e:f2:d3:b5:96:23:7f:65:1f:82:5a:4f:dd: b2:00:90:e1:ed:a2:1d:8c:98:07:c1:9d:e5:da:d6:49:56:bb: 26:0b:f7:ed:8c:00:aa:68:60:82:07:c2:fd:bf:04:ed:10:56: 7b:ed:0e:26:24:7c:0a:93:50:70:c3:0a:e8:de:50:5d:8c:f2: 91:6e:47:04:7b:69:af:c9:a1:48:09:dd:25:c2:50:39:8d:1d: a7:47:60:2b:86:98:99:6b:fe:b0:02:77:9c:33:db:38:43:3a: 3b:ae:ba:01:09:51:58:24:b3:9e:04:96:99:dc:a5:f7:0a:9b: 28:d5:51:e3:b8:d3:3c:16:b0:90:1e:05:67:d6:94:05:36:30: 98:64:96:33:7a:43:ba:82:ca:a8:be:18:25:91:43:0e:9b:8e: d8:e8:81:2e:f4:be:31:b2:8e:80:b6:b9:2c:6c:e3:da:79:ee: 1d:9b:2a:fe:7b:c0:1c:98:45:1a:b9:8a:21:47:a9:8d:ed:92: 1c:e2:ba:47:0f:2f:e9:0a:69:57:af:c2:e6:26:d2:4d:be:53: 5d:a6:04:7e:04:69:9b:9a:34:ce:5f:83:6a:82:5f:b1:5e:9d: c9:2a:96:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/l6fMr7P1sU8XyqyLSbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2 Zjg4MzIwHhcNMjUxMjEwMTYwMDQ2WhcNMjUxMjExMTYwMDQ2WjAzMTEwLwYDVQQD EygxZDEwNzcyMjY2NWJlOWY2MzY4MTRlNGU2ZWJkY2JmZGQxNzI4ZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHLnuhrnW4Q3qErQwYF/SmUNedVm EH1PGS4FmeG84sSU3+Hxq3BF6ExsOuK0EyTlO9VHA35KmeiSGKwPcLiaWoilZV81 ifYoL1IT1vMd1IW0ij4CXhVfrqmGAP1sGUKbNPfRmMD+I8pUoBba/JTnMNTlIQ5x G8Lv/pI2gqlxqjJIK4ykHGsAKB2+cZ3ijNhWuvamQL7IHD7xSbCLV+GNEWwWOOuY mFABljQFCaC+9MtF0PWPdSFUBxCjlZpcN9XGFqxPJ+M7fLOMsfwZe+3I9oQogvMQ L6JmDkf230dg9ItJCmoN4LQTVqKfSmfjfeOd/JvuH7qa4f/SVDDfHl58vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0QdyJmW+n2NoFOTm69y/3Rco3hMB8GA1UdIwQY MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt Y2I5ZTFlZDc3OWFjLzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWntZLCho N3XNXYIV+Jgy3h4EEO9pbAwe8tO1liN/ZR+CWk/dsgCQ4e2iHYyYB8Gd5drWSVa7 Jgv37YwAqmhgggfC/b8E7RBWe+0OJiR8CpNQcMMK6N5QXYzykW5HBHtpr8mhSAnd JcJQOY0dp0dgK4aYmWv+sAJ3nDPbOEM6O666AQlRWCSzngSWmdyl9wqbKNVR47jT PBawkB4FZ9aUBTYwmGSWM3pDuoLKqL4YJZFDDpuO2OiBLvS+MbKOgLa5LGzj2nnu HZsq/nvAHJhFGrmKIUepje2SHOK6Rw8v6QppV6/C5ibSTb5TXaYEfgRpm5o0zl+D aoJfsV6dySqWpg== -----END CERTIFICATE-----Generated at Wed Dec 10 22:33:35 2025 by rpki-client