This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json) Hash identifier: djMUivcSXbmRj0U1ap1nRnbLYkffBQ9maJitKVDEtD8= Subject key identifier: A4:60:D1:FB:07:EA:8A:34:F4:C5:6D:FF:4A:9B:5F:56:2A:1B:89:DC Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c Certificate serial: 019B1081AC1357A777C08EEFFB8C13A4F93E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft Manifest number: 1770 Signing time: Fri 12 Dec 2025 03:01:32 +0000 Manifest this update: Fri 12 Dec 2025 03:01:32 +0000 Manifest next update: Sat 13 Dec 2025 03:01:32 +0000 Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=) 2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=) 3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: n1QIPeRUqxw6iFRdZrRDOAU6E8Y+cD+zm3rQjM+q5JE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:ac:13:57:a7:77:c0:8e:ef:fb:8c:13:a4:f9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c Validity Not Before: Dec 12 03:01:32 2025 GMT Not After : Dec 13 03:01:32 2025 GMT Subject: CN=a460d1fb07ea8a34f4c56dff4a9b5f562a1b89dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:60:50:c5:d7:69:e1:a2:6e:22:1c:93:56:97: c0:02:ad:f7:e7:66:37:17:9c:cb:5a:1e:82:5b:35: 93:5f:f8:a2:08:11:e4:4a:34:d3:04:21:da:c7:33: 53:3d:bc:63:5b:66:ed:c3:a3:8f:22:89:b7:44:ce: e5:48:5b:ee:b4:68:59:5b:ba:b8:35:af:98:f9:33: 5a:d6:24:e5:9c:e2:fd:af:34:40:91:b9:92:ab:6d: 51:60:c7:e6:8e:62:64:78:1e:05:8d:44:6c:d7:47: 60:58:3d:90:df:2c:ff:62:23:af:b8:5c:84:96:6f: d2:a7:53:87:a4:36:63:63:e0:93:fa:ad:4f:93:1d: df:ab:4c:95:0b:ff:6f:9c:cc:e8:9f:53:69:09:d3: 39:94:22:25:e1:8f:bf:0a:9b:7e:9b:30:da:59:04: 89:91:27:05:17:7f:11:49:ab:8c:64:8e:fa:8a:d5: 18:1d:24:97:a2:3f:63:17:a5:f9:41:61:3c:32:f4: 74:ef:dd:95:af:f3:85:5c:81:fa:0e:1e:06:ac:ba: c4:5b:63:2c:52:9a:44:93:66:3f:11:cf:1a:d5:5d: 9b:a7:2c:2a:9b:fe:a5:22:3d:3d:b4:73:52:c0:53: be:4e:72:a9:0b:e7:48:a1:48:42:b6:97:46:e2:b0: cb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:60:D1:FB:07:EA:8A:34:F4:C5:6D:FF:4A:9B:5F:56:2A:1B:89:DC X509v3 Authority Key Identifier: keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2f:04:6d:35:1b:1d:d8:52:f3:ed:67:86:1a:b7:81:39:d4: b2:e1:6e:5d:61:6e:ed:b7:33:a6:1b:4e:70:8a:3c:22:67:bb: 45:12:87:54:c6:9e:09:cb:ab:6b:c6:09:8b:89:9c:50:b3:e7: c4:32:b4:b3:dd:9a:77:92:c9:4d:58:f1:c8:fd:dd:fe:ba:7c: 93:87:aa:d0:65:21:45:9b:0f:6c:cd:78:f9:ae:a0:d7:8d:5a: 17:97:5b:60:51:1d:0c:1c:01:89:3f:12:8d:56:c8:67:5a:f2: 15:01:eb:70:a8:87:e1:f8:51:f2:d4:7c:7f:a0:80:5e:b2:7a: 87:af:ef:84:d7:67:f8:f6:b9:96:d4:7d:5d:2e:39:56:61:83: a1:19:26:de:b7:2a:2c:a5:62:4e:f0:72:53:de:5a:e9:1a:fc: 31:6d:1d:c6:ae:92:db:bd:2d:b9:6f:d1:26:40:bf:ec:a6:54: 8b:a2:69:9a:b6:1f:77:f9:5f:fe:f4:35:6b:39:a2:dd:7d:a8: d2:dd:23:1c:99:bc:ce:7d:23:4d:32:a8:7b:8b:6b:83:df:c7: 94:4f:36:a5:d7:36:a0:11:14:27:51:f0:78:d3:e7:d0:b7:d9: 3c:0e:39:17:f3:60:97:bd:f3:27:32:50:7d:f8:59:46:2b:b8: a2:a5:ff:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgawTV6d3wI7v+4wTpPk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj NzNiMWMwHhcNMjUxMjEyMDMwMTMyWhcNMjUxMjEzMDMwMTMyWjAzMTEwLwYDVQQD EyhhNDYwZDFmYjA3ZWE4YTM0ZjRjNTZkZmY0YTliNWY1NjJhMWI4OWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmBQxddp4aJuIhyTVpfAAq3352Y3 F5zLWh6CWzWTX/iiCBHkSjTTBCHaxzNTPbxjW2btw6OPIom3RM7lSFvutGhZW7q4 Na+Y+TNa1iTlnOL9rzRAkbmSq21RYMfmjmJkeB4FjURs10dgWD2Q3yz/YiOvuFyE lm/Sp1OHpDZjY+CT+q1Pkx3fq0yVC/9vnMzon1NpCdM5lCIl4Y+/Cpt+mzDaWQSJ kScFF38RSauMZI76itUYHSSXoj9jF6X5QWE8MvR0792Vr/OFXIH6Dh4GrLrEW2Ms UppEk2Y/Ec8a1V2bpywqm/6lIj09tHNSwFO+TnKpC+dIoUhCtpdG4rDLhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRg0fsH6oo09MVt/0qbX1YqG4ncMB8GA1UdIwQY MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbi8EbTUb HdhS8+1nhhq3gTnUsuFuXWFu7bczphtOcIo8Ime7RRKHVMaeCcura8YJi4mcULPn xDK0s92ad5LJTVjxyP3d/rp8k4eq0GUhRZsPbM14+a6g141aF5dbYFEdDBwBiT8S jVbIZ1ryFQHrcKiH4fhR8tR8f6CAXrJ6h6/vhNdn+Pa5ltR9XS45VmGDoRkm3rcq LKViTvByU95a6Rr8MW0dxq6S270tuW/RJkC/7KZUi6JpmrYfd/lf/vQ1azmi3X2o 0t0jHJm8zn0jTTKoe4trg9/HlE82pdc2oBEUJ1HweNPn0LfZPA45F/Ngl73zJzJQ ffhZRiu4oqX/dA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:04:25 2025 by rpki-client