This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json) Hash identifier: 1FMzBlE7xhsyvKY6bgSUvPo3H+o9N9h5461vTYu0fLs= Subject key identifier: 29:59:73:66:65:5B:B3:80:96:ED:A1:EF:86:15:C9:74:03:2D:5B:E3 Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Certificate serial: 019B4AA7BFCDEB8DBAFA833C5B74997F9202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 10:01:06 +0000 Manifest this update: Tue 23 Dec 2025 10:01:06 +0000 Manifest next update: Wed 24 Dec 2025 10:01:06 +0000 Files and hashes: 1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=) 2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=) 3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=) 4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=) 5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: +WAfQyXTIlMDYEWD+6OCvbk1flFL1CZ8CtHgFualFIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:bf:cd:eb:8d:ba:fa:83:3c:5b:74:99:7f:92:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Validity Not Before: Dec 23 10:01:06 2025 GMT Not After : Dec 24 10:01:06 2025 GMT Subject: CN=29597366655bb38096eda1ef8615c974032d5be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:22:ad:9f:d4:3c:fc:9c:8f:ce:3b:59:95: 48:74:fa:d7:29:f5:61:7a:9d:d7:8b:f3:2f:fa:aa: 57:33:77:09:7d:64:bd:db:11:10:c1:75:e5:ad:e0: 31:32:bc:31:1a:37:c1:53:71:37:28:7a:14:04:a5: ac:24:f5:45:45:11:38:3d:13:5a:d0:fd:74:15:f0: 7e:c3:97:b9:e5:2b:7f:dc:28:25:fc:a3:74:b9:89: 3b:27:e6:17:35:4a:05:4a:79:6a:08:8d:c6:4c:56: 89:6c:0c:46:aa:ea:00:7d:1b:5f:35:b5:aa:5f:9f: bc:ab:1e:b3:31:a8:69:59:8b:e5:5d:3a:54:4b:47: 7b:1f:c4:c4:23:65:13:df:7c:26:85:8c:70:f2:0a: 99:12:18:dc:9c:d1:fe:1c:10:1a:0b:86:33:86:c1: 46:66:94:38:39:3d:a4:e1:17:74:67:e5:5a:37:35: 0d:55:db:98:cf:39:00:a1:d8:e1:50:a3:7d:f3:33: 49:48:24:b2:c6:c6:50:e8:26:9a:e4:30:36:ee:31: f4:11:43:54:6c:55:a9:72:95:78:f9:07:97:0e:c4: 44:41:2a:94:d8:5c:41:25:bd:b4:62:b9:79:0d:c2: 5f:ec:cb:ce:0f:80:72:6c:16:21:1e:b9:cd:40:c2: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:59:73:66:65:5B:B3:80:96:ED:A1:EF:86:15:C9:74:03:2D:5B:E3 X509v3 Authority Key Identifier: keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e7:08:71:fd:28:62:29:32:81:d9:75:9c:7a:8b:a2:1c:86: 3c:bd:c3:d8:69:af:80:2a:5f:f3:53:d9:95:a1:da:24:59:78: ee:90:af:d6:79:4c:31:fb:50:fe:70:92:1c:e7:b1:75:3a:1b: d4:10:50:46:68:9a:2b:dd:1f:a1:41:0e:a0:2e:9b:c3:e4:e2: a4:5c:9f:ea:ad:30:33:b4:e1:bb:60:a9:1b:70:d1:0e:6e:e6: 16:b4:64:20:15:4b:2c:d2:e2:e7:15:71:33:1d:14:29:ec:be: fe:3e:05:1a:fc:85:60:5a:a9:d5:ba:3b:58:05:4c:3f:d3:15: 8b:94:dd:cb:fe:c8:15:a5:5d:c2:7e:28:7c:ec:a6:4f:f9:94: 7a:46:1a:3f:31:15:5b:6f:e5:b6:0f:48:49:7a:32:17:d7:a7: c1:2b:53:0e:69:78:4b:65:ce:44:1d:58:59:49:5d:d3:3c:1b: d5:d6:f4:ea:11:3b:87:31:26:9b:57:cc:ad:16:6c:69:e2:df: 28:39:df:9b:5d:d9:c0:f8:3c:e4:6a:08:41:e0:14:12:85:d1: 77:5e:00:67:7d:b6:55:c1:d9:ec:5d:5f:76:11:a9:03:5b:a9: 53:62:45:9c:2d:8b:38:0c:60:69:0d:b6:a8:43:e4:1e:f3:dc: fb:9d:98:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp7/N6426+oM8W3SZf5ICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2 Zjg4MzIwHhcNMjUxMjIzMTAwMTA2WhcNMjUxMjI0MTAwMTA2WjAzMTEwLwYDVQQD EygyOTU5NzM2NjY1NWJiMzgwOTZlZGExZWY4NjE1Yzk3NDAzMmQ1YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttkirZ/UPPycj847WZVIdPrXKfVh ep3Xi/Mv+qpXM3cJfWS92xEQwXXlreAxMrwxGjfBU3E3KHoUBKWsJPVFRRE4PRNa 0P10FfB+w5e55St/3Cgl/KN0uYk7J+YXNUoFSnlqCI3GTFaJbAxGquoAfRtfNbWq X5+8qx6zMahpWYvlXTpUS0d7H8TEI2UT33wmhYxw8gqZEhjcnNH+HBAaC4YzhsFG ZpQ4OT2k4Rd0Z+VaNzUNVduYzzkAodjhUKN98zNJSCSyxsZQ6Caa5DA27jH0EUNU bFWpcpV4+QeXDsREQSqU2FxBJb20Yrl5DcJf7MvOD4BybBYhHrnNQMJaFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClZc2ZlW7OAlu2h74YVyXQDLVvjMB8GA1UdIwQY MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt Y2I5ZTFlZDc3OWFjLzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOcIcf0o Yikygdl1nHqLohyGPL3D2GmvgCpf81PZlaHaJFl47pCv1nlMMftQ/nCSHOexdTob 1BBQRmiaK90foUEOoC6bw+TipFyf6q0wM7Thu2CpG3DRDm7mFrRkIBVLLNLi5xVx Mx0UKey+/j4FGvyFYFqp1bo7WAVMP9MVi5Tdy/7IFaVdwn4ofOymT/mUekYaPzEV W2/ltg9ISXoyF9enwStTDml4S2XORB1YWUld0zwb1db06hE7hzEmm1fMrRZsaeLf KDnfm13ZwPg85GoIQeAUEoXRd14AZ322VcHZ7F1fdhGpA1upU2JFnC2LOAxgaQ22 qEPkHvPc+52YrA== -----END CERTIFICATE-----Generated at Tue Dec 23 16:28:41 2025 by rpki-client