This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft File: Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json) Hash identifier: 535eo2iX3YQV5hr8euGTPFwpmY0bm9j1Ka9vIqq4XZ0= Subject key identifier: 6D:61:11:71:5C:6E:AE:3A:4F:E6:66:AA:EE:74:40:48:ED:02:0B:89 Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69 Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169 Certificate serial: 019B35698654D4B84DDC7E59D8A3BE329DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 07:01:06 +0000 Manifest this update: Fri 19 Dec 2025 07:01:06 +0000 Manifest next update: Sat 20 Dec 2025 07:01:06 +0000 Files and hashes: 1: 1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa (hash: NgyRH1HoSM4A0oGw3/Fq5tCBEmQWMjuDp+Z3SYU6zV0=) 2: H6gjp969pDik2dbvAHkeDvA39EU.roa (hash: uTBwtnz4xC6ZHA5AOiAmoUrvWCrVfYHdQ+TO4uHFF8M=) 3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: BJ/NZ6torkuGkPu/vs6J1w927fq5+Qx/q6x2Ucq1OQs=) 4: lZXduURQIAy8fdzIUaz-JWRizD4.roa (hash: vA2TeloqgyuxxL+VT++WEALS/lCOLQ2+y5IcVHn+2Aw=) 5: oM8IOquHIgB1YBWLpM1pmBbc7O8.roa (hash: IV7XgqctfzxaP5G+ON8fYqKcchsupNcGfIWY1I+WU3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:86:54:d4:b8:4d:dc:7e:59:d8:a3:be:32:9d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169 Validity Not Before: Dec 19 07:01:06 2025 GMT Not After : Dec 20 07:01:06 2025 GMT Subject: CN=6d6111715c6eae3a4fe666aaee744048ed020b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:72:c0:46:98:2f:05:a5:a6:11:57:ea:0d: a8:cd:a2:b5:59:00:08:20:07:c9:c6:d4:06:98:8a: 83:b5:14:1c:de:1b:8c:43:f5:e2:3b:cb:0c:d9:2d: 65:46:25:39:3b:6f:0a:f3:7b:58:8b:48:a5:f9:27: d2:f2:8f:b8:6e:cb:20:41:ad:24:c6:06:86:33:c0: c6:cc:24:c3:81:15:28:af:6e:54:92:5e:8e:9c:0f: ad:5d:c7:9e:02:97:b1:b5:70:d6:23:2c:35:70:92: 0e:70:c7:8c:c9:4e:cc:2e:24:89:ce:03:9a:8a:33: c6:e6:86:4c:f5:94:b3:2c:ae:5c:1b:78:fd:e1:2b: d0:d5:09:6c:21:ac:8f:f3:88:86:91:03:01:70:23: 9f:87:a3:f4:05:38:2d:0b:61:79:76:19:8b:15:2e: db:87:8d:35:ae:38:00:79:33:2a:8d:df:27:0d:7f: 21:66:64:ee:b8:07:f8:f7:70:55:ee:8f:04:df:5f: 24:98:1d:4b:76:a5:14:8e:2c:96:d4:62:03:86:5e: a5:e8:bc:af:1d:bd:1c:fd:be:4d:f7:c1:a8:9f:ee: 69:39:81:ea:b4:27:0f:6d:96:99:0e:cc:0a:fc:31: cc:ae:c4:3c:51:f9:24:f8:33:72:45:59:25:8d:59: 84:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:61:11:71:5C:6E:AE:3A:4F:E6:66:AA:EE:74:40:48:ED:02:0B:89 X509v3 Authority Key Identifier: keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:59:3e:c6:75:5b:d1:00:9a:a6:c9:ea:47:f8:73:7a:d0:04: d5:53:ea:4b:ef:64:d4:92:98:0c:bb:87:e5:e3:73:b4:43:a8: 5a:50:d0:00:59:b0:dd:83:fd:1f:3b:2d:bf:1b:e4:6b:d5:f1: c1:32:6c:f9:fb:15:36:55:c2:2b:22:31:03:e0:5f:b6:1a:ec: f2:83:fa:4a:0e:07:bf:08:6d:16:54:94:ee:6a:23:18:13:70: 6c:8c:c6:21:71:8d:c9:70:3e:77:4d:6f:f1:eb:39:7d:cb:72: 64:a8:a1:1f:91:80:c3:17:a5:00:bf:69:bc:6f:52:83:88:f6: db:cf:0f:e5:c4:f5:46:a4:5b:45:79:73:80:0e:27:4d:1d:90: 64:67:ce:fd:7f:ab:f6:23:57:4a:1c:77:2e:04:d2:6c:1e:bb: 9b:fe:c9:d9:cc:40:df:b6:35:df:6e:ed:cf:90:66:96:c4:87: a7:f7:9b:2a:61:06:a9:1f:d3:8c:02:b2:50:b1:46:31:64:8d: a8:9a:63:c2:ec:29:50:73:f1:c2:4f:60:44:4d:58:48:22:e2: 3b:19:13:00:87:e5:d3:66:58:ad:fe:aa:3e:c6:05:ee:1c:0e: e9:6e:52:1b:5c:60:04:e8:35:8e:b0:cb:58:38:7f:87:57:b4: 86:da:e0:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aYZU1LhN3H5Z2KO+Mp3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGQzYzBiNjQxNGM5Yzg2ZTNjOTRhNzE0ZGZiMjY5Y2I1 ZTkxNjkwHhcNMjUxMjE5MDcwMTA2WhcNMjUxMjIwMDcwMTA2WjAzMTEwLwYDVQQD Eyg2ZDYxMTE3MTVjNmVhZTNhNGZlNjY2YWFlZTc0NDA0OGVkMDIwYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hFywEaYLwWlphFX6g2ozaK1WQAI IAfJxtQGmIqDtRQc3huMQ/XiO8sM2S1lRiU5O28K83tYi0il+SfS8o+4bssgQa0k xgaGM8DGzCTDgRUor25Ukl6OnA+tXceeApextXDWIyw1cJIOcMeMyU7MLiSJzgOa ijPG5oZM9ZSzLK5cG3j94SvQ1QlsIayP84iGkQMBcCOfh6P0BTgtC2F5dhmLFS7b h401rjgAeTMqjd8nDX8hZmTuuAf493BV7o8E318kmB1LdqUUjiyW1GIDhl6l6Lyv Hb0c/b5N98Gon+5pOYHqtCcPbZaZDswK/DHMrsQ8Ufkk+DNyRVkljVmEUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1hEXFcbq46T+Zmqu50QEjtAguJMB8GA1UdIwQY MBaAFF6NPAtkFMnIbjyUpxTfsmnLXpFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYzM1MzEtODJmOC00YjRkLWI1OTAt MjM0MzA5NTA2MDljLzEvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYzM1MzEtODJmOC00YjRkLWI1OTAtMjM0MzA5NTA2MDlj LzEvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlk+xnVb 0QCapsnqR/hzetAE1VPqS+9k1JKYDLuH5eNztEOoWlDQAFmw3YP9Hzstvxvka9Xx wTJs+fsVNlXCKyIxA+Bfthrs8oP6Sg4HvwhtFlSU7mojGBNwbIzGIXGNyXA+d01v 8es5fctyZKihH5GAwxelAL9pvG9Sg4j2288P5cT1RqRbRXlzgA4nTR2QZGfO/X+r 9iNXShx3LgTSbB67m/7J2cxA37Y1327tz5BmlsSHp/ebKmEGqR/TjAKyULFGMWSN qJpjwuwpUHPxwk9gRE1YSCLiOxkTAIfl02ZYrf6qPsYF7hwO6W5SG1xgBOg1jrDL WDh/h1e0htrgvw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:42:49 2025 by rpki-client