This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft File: Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json) Hash identifier: 9mZz8tClQdkOlCGnmD/AFtqXpq3IMdaTlmvKJ2Pg394= Subject key identifier: 8F:8C:00:E4:73:01:45:B0:13:63:8D:59:15:4F:4F:D3:BC:6F:65:37 Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Certificate serial: 019B1B054A1F2C85C59F8EAAD5026DB61EBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft Manifest number: 1A95 Signing time: Sun 14 Dec 2025 04:01:29 +0000 Manifest this update: Sun 14 Dec 2025 04:01:29 +0000 Manifest next update: Mon 15 Dec 2025 04:01:29 +0000 Files and hashes: 1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=) 2: J_uC0dJQDqHEPt-d--Cb9t-urwM.roa (hash: e8u82xuHOyBw07V/g8e5280CWEkS/COcM0hM2MysMng=) 3: VG4xIVkdQXvIBcbjF-qIleQeFQU.roa (hash: 3ZhPa5QvI899PPev68OnAKhMJe5JSCL/NlPH0ZqPF/k=) 4: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: Vk0737DH/D++E3E7oALf0uN6Q+B4foDAB4QRZsm0qzk=) 5: ZfGgxOD9oKOLO00K2AU9JKrI1kQ.roa (hash: MxwT8vbLLXhabuxFnu//UYyIHp8dV7WQm7/O2tItwaI=) 6: okmt1S4hd7NrbW4f-tCxGrBU2rY.roa (hash: 7cs3FirAxa0B9mH+9gI5rKR6WF9kuQy/8mCwxNj88sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:4a:1f:2c:85:c5:9f:8e:aa:d5:02:6d:b6:1e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Validity Not Before: Dec 14 04:01:29 2025 GMT Not After : Dec 15 04:01:29 2025 GMT Subject: CN=8f8c00e4730145b013638d59154f4fd3bc6f6537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:d9:52:6a:ba:17:fd:fc:45:63:33:51:a2: ba:82:f2:81:a3:bd:fc:4d:c0:63:73:9e:9b:dc:77: 76:b0:b1:c8:2e:36:41:48:2d:be:8e:cc:1d:39:6a: 04:d9:b1:3c:b6:6d:d7:9b:08:92:be:82:d7:34:9f: f4:1e:f8:3a:c2:9d:f6:80:0a:95:20:9e:d7:d9:39: dd:41:7f:50:c0:fc:17:8b:85:da:9e:c7:6b:89:09: 78:14:45:35:f5:3b:8d:fa:c5:c8:8d:77:0a:cb:ee: f3:c8:63:ae:47:c3:46:d6:83:b8:13:d8:33:e3:4d: 2a:f1:1a:59:b2:14:70:56:a9:40:3f:79:08:e9:16: bd:3a:ee:de:cf:c9:38:cb:6c:6d:da:18:83:75:6c: 09:22:99:9e:ad:26:51:73:a1:20:36:20:a1:bd:bd: 52:7c:a2:9d:df:1f:40:dc:c9:ee:f8:fd:e9:31:82: e0:23:b7:e4:65:4a:94:cf:02:9a:a7:d9:5b:3b:3b: 5f:92:8d:3c:ab:06:87:3a:9b:31:52:18:e5:3c:57: 65:66:24:12:cf:6d:b0:21:83:d7:82:d3:6b:82:7f: ba:b3:7f:40:f3:76:95:fc:2c:10:55:f7:49:cc:1c: 59:91:c8:d8:6c:c8:69:b0:85:0b:03:90:3b:b3:66: 14:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8C:00:E4:73:01:45:B0:13:63:8D:59:15:4F:4F:D3:BC:6F:65:37 X509v3 Authority Key Identifier: keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:95:f9:e9:8e:28:39:9b:20:17:b8:b6:a4:19:89:97:48:eb: 7e:1d:ce:0d:00:6b:ba:bf:bc:10:f8:ee:20:a1:9a:90:72:08: 4f:fc:13:39:29:5f:98:8a:8d:0c:91:f3:46:80:a2:2b:38:9d: fb:f6:49:9a:4a:9e:f9:3c:21:b7:d1:42:67:6e:82:5f:da:5c: 3d:bf:eb:5a:8b:ce:8a:d2:1e:81:14:73:6f:f9:1a:6d:c3:ff: 70:2a:a9:87:11:13:20:4b:b4:29:e5:05:81:1c:c8:72:48:a3: 2d:45:92:0d:68:62:bc:0f:fc:0e:d4:c9:04:f4:20:ee:92:cf: f0:83:9b:3d:8c:c8:76:cb:cc:05:29:9d:22:be:4f:ac:c2:b1: c1:0b:f2:8b:af:a6:18:36:5f:22:9c:83:c8:31:33:de:71:76: 5d:df:ea:73:bb:6a:5d:a6:3d:1a:1a:03:19:f6:8f:c2:52:dc: 5b:57:5f:88:4b:35:79:4c:b0:8f:4c:88:e2:27:a2:3f:91:53: f4:85:53:78:bf:90:4e:0f:46:ec:e2:22:16:5b:c0:39:0d:4e: 6e:9f:68:85:a4:6d:6b:9b:1f:8c:14:1e:8d:26:fd:c2:ae:8b: 4d:fe:71:c4:75:67:cc:f2:0b:07:bd:7c:8b:9d:e4:6c:e9:e5: 3a:7d:34:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBUofLIXFn46q1QJtth6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk ZjNlMWUwHhcNMjUxMjE0MDQwMTI5WhcNMjUxMjE1MDQwMTI5WjAzMTEwLwYDVQQD Eyg4ZjhjMDBlNDczMDE0NWIwMTM2MzhkNTkxNTRmNGZkM2JjNmY2NTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnvZUmq6F/38RWMzUaK6gvKBo738 TcBjc56b3Hd2sLHILjZBSC2+jswdOWoE2bE8tm3XmwiSvoLXNJ/0Hvg6wp32gAqV IJ7X2TndQX9QwPwXi4XansdriQl4FEU19TuN+sXIjXcKy+7zyGOuR8NG1oO4E9gz 400q8RpZshRwVqlAP3kI6Ra9Ou7ez8k4y2xt2hiDdWwJIpmerSZRc6EgNiChvb1S fKKd3x9A3Mnu+P3pMYLgI7fkZUqUzwKap9lbOztfko08qwaHOpsxUhjlPFdlZiQS z22wIYPXgtNrgn+6s39A83aV/CwQVfdJzBxZkcjYbMhpsIULA5A7s2YURwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+MAORzAUWwE2ONWRVPT9O8b2U3MB8GA1UdIwQY MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt YjU5MDk1N2Q5NDE1LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1 LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpX56Y4o OZsgF7i2pBmJl0jrfh3ODQBrur+8EPjuIKGakHIIT/wTOSlfmIqNDJHzRoCiKzid +/ZJmkqe+Twht9FCZ26CX9pcPb/rWovOitIegRRzb/kabcP/cCqphxETIEu0KeUF gRzIckijLUWSDWhivA/8DtTJBPQg7pLP8IObPYzIdsvMBSmdIr5PrMKxwQvyi6+m GDZfIpyDyDEz3nF2Xd/qc7tqXaY9GhoDGfaPwlLcW1dfiEs1eUywj0yI4ieiP5FT 9IVTeL+QTg9G7OIiFlvAOQ1Obp9ohaRta5sfjBQejSb9wq6LTf5xxHVnzPILB718 i53kbOnlOn00EQ== -----END CERTIFICATE-----Generated at Sun Dec 14 11:52:38 2025 by rpki-client