This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json) Hash identifier: DnU6ccbsSWNUcuajgNdime6wxVUgpFvjfwVuzA7ID8g= Subject key identifier: 94:1F:C8:DC:1E:75:6D:7C:53:5C:CF:48:0F:6B:E0:88:B3:B0:8C:68 Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db Certificate serial: 019B5A516070441223E49A7D1A7E5A11A8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft Manifest number: 10B6 Signing time: Fri 26 Dec 2025 11:00:41 +0000 Manifest this update: Fri 26 Dec 2025 11:00:41 +0000 Manifest next update: Sat 27 Dec 2025 11:00:41 +0000 Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=) 2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: 8yHBgHtv2dlBYlr6SlUzgvKtHDYqFzmz5a31d81uQjQ=) 3: zR84EUjuhaa5ivFSjib2H6uqTAI.roa (hash: OvGw4b3tIigD4ZAweUVrQghHKdITbbX+aX8uLk9vlAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:60:70:44:12:23:e4:9a:7d:1a:7e:5a:11:a8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db Validity Not Before: Dec 26 11:00:41 2025 GMT Not After : Dec 27 11:00:41 2025 GMT Subject: CN=941fc8dc1e756d7c535ccf480f6be088b3b08c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:0f:ba:09:33:4f:ad:19:9f:19:3c:34:0f: a0:9a:ea:e8:12:51:ff:4f:b9:b4:9e:9e:55:13:57: 65:cd:6e:cf:a0:c1:ed:01:38:33:fb:94:36:01:ac: ae:fa:62:17:97:04:bd:ce:7c:ee:b7:3d:68:80:85: e7:77:62:3a:f3:e1:0a:49:8a:15:93:1d:23:90:3c: 69:dd:3e:a0:77:2b:b3:74:35:d5:39:f7:9a:9b:91: 46:6b:81:db:c4:13:0d:bf:ae:78:db:08:7d:8c:ff: 1c:26:71:de:d7:d9:bd:9c:54:8a:b0:56:34:d7:a2: 35:13:a6:8d:dd:8f:c6:05:29:a1:13:e0:07:e2:d9: 28:a5:b4:d5:43:48:36:32:1e:06:e6:d7:c0:6f:0a: c1:28:21:18:ca:d8:d2:13:0e:41:e5:15:0a:93:d1: 0a:8e:80:72:3e:42:0b:a4:b2:fc:89:20:5f:f8:7d: 4f:85:9f:6c:69:22:6d:de:d6:57:f9:d5:33:55:13: f7:f0:9d:fd:ae:f8:09:75:e6:41:52:6a:5a:6a:de: 68:d5:62:b5:2e:93:57:c3:9b:65:f5:65:12:0c:e5: 2f:b6:38:56:d0:34:f9:87:cb:ff:5d:c0:f8:91:f8: 5e:19:6c:4b:fc:dd:e5:6a:2a:dc:a0:46:88:62:f9: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1F:C8:DC:1E:75:6D:7C:53:5C:CF:48:0F:6B:E0:88:B3:B0:8C:68 X509v3 Authority Key Identifier: keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fc:ea:33:81:13:45:08:2d:41:32:81:69:44:4d:be:a9:87: f3:90:f3:80:74:08:3f:99:ca:a1:0f:1e:f4:03:43:df:3d:ce: d0:4e:f8:5a:42:f6:0b:d5:c4:98:20:31:d9:fa:f3:21:2e:6a: 17:93:d8:97:2c:87:7b:d1:3f:ba:90:7d:86:62:1d:4c:bd:b5: d6:77:28:6f:6e:85:38:4f:07:60:bd:0a:be:9f:ea:87:2b:99: 41:20:9a:17:c8:ea:55:0f:41:90:8f:49:8b:81:36:9e:ed:cc: 61:c8:b6:68:5c:4e:69:26:55:0c:84:be:7d:84:b7:18:cc:da: 3c:9b:bc:1e:df:8a:a3:16:2e:7c:15:5e:05:a7:fb:53:ef:8b: 0d:36:31:69:29:b7:42:48:ae:9d:31:ee:fd:0f:ff:91:4e:53: 4f:17:22:02:f9:46:7b:30:da:e8:57:0d:45:21:7b:93:a0:b2: 56:8d:c1:49:4e:a5:8f:cd:8a:46:51:9d:18:8d:16:d9:a7:7e: 01:d3:93:4b:8a:ca:f3:01:00:01:5c:fb:07:af:9a:e7:89:c1: a9:e1:4f:86:37:8c:02:2f:a8:b3:bf:d0:04:c0:ea:97:0c:32: c2:8c:a2:94:04:6d:a2:0c:10:47:32:73:8b:55:8b:04:13:90: 99:42:94:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWBwRBIj5Jp9Gn5aEai6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZWIwZWJkODc4Yjc3ZDQyZjJjYTlkZDA4ZjcwYzMyM2M1 ZDAzZGIwHhcNMjUxMjI2MTEwMDQxWhcNMjUxMjI3MTEwMDQxWjAzMTEwLwYDVQQD Eyg5NDFmYzhkYzFlNzU2ZDdjNTM1Y2NmNDgwZjZiZTA4OGIzYjA4YzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn24PugkzT60Znxk8NA+gmuroElH/ T7m0np5VE1dlzW7PoMHtATgz+5Q2Aayu+mIXlwS9znzutz1ogIXnd2I68+EKSYoV kx0jkDxp3T6gdyuzdDXVOfeam5FGa4HbxBMNv6542wh9jP8cJnHe19m9nFSKsFY0 16I1E6aN3Y/GBSmhE+AH4tkopbTVQ0g2Mh4G5tfAbwrBKCEYytjSEw5B5RUKk9EK joByPkILpLL8iSBf+H1PhZ9saSJt3tZX+dUzVRP38J39rvgJdeZBUmpaat5o1WK1 LpNXw5tl9WUSDOUvtjhW0DT5h8v/XcD4kfheGWxL/N3laircoEaIYvk6hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQfyNwedW18U1zPSA9r4IizsIxoMB8GA1UdIwQY MBaAFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEt OWMzNzQ3OGE1OTNmLzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEtOWMzNzQ3OGE1OTNm LzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPzqM4ET RQgtQTKBaURNvqmH85DzgHQIP5nKoQ8e9AND3z3O0E74WkL2C9XEmCAx2frzIS5q F5PYlyyHe9E/upB9hmIdTL211ncob26FOE8HYL0Kvp/qhyuZQSCaF8jqVQ9BkI9J i4E2nu3MYci2aFxOaSZVDIS+fYS3GMzaPJu8Ht+KoxYufBVeBaf7U++LDTYxaSm3 QkiunTHu/Q//kU5TTxciAvlGezDa6FcNRSF7k6CyVo3BSU6lj82KRlGdGI0W2ad+ AdOTS4rK8wEAAVz7B6+a54nBqeFPhjeMAi+os7/QBMDqlwwywoyilARtogwQRzJz i1WLBBOQmUKUJw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:51 2025 by rpki-client