This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json) Hash identifier: sf1eVpIEp9hhlxPYImWyQcSLvVSw7j6g+37jZM0Ii3o= Subject key identifier: 80:83:0B:F4:10:AA:31:6B:12:10:3C:B2:BD:36:2F:A3:03:F2:4E:F4 Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019B39462663DBF486B900C0D6309A532CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft Manifest number: 08FA Signing time: Sat 20 Dec 2025 01:00:57 +0000 Manifest this update: Sat 20 Dec 2025 01:00:57 +0000 Manifest next update: Sun 21 Dec 2025 01:00:57 +0000 Files and hashes: 1: 03bpI-w18-fLfKrGneHS5OC3lK4.roa (hash: 015UeQCesyPqqo0lNLcoMmYZaU1tmuzuzIUUZ2FgF3o=) 2: EnIqlvcohGwr9_QO8UiJDynyMjg.roa (hash: 2SZOKpKm6p7U6uHMsa55SpuH60Kzn75O+euuKRFZlZM=) 3: gCeEg2-aKNA4NJwCq_wet9ZUHSo.roa (hash: c1XqtEHbwnDz4EEYbDLzjNU+kaoA7BLTobxYu0vC/Ec=) 4: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (hash: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=) 5: qbDVabYqJeYEqjBWj7Cv4XVl3xw.roa (hash: EKqAOb5Dbm7XycIewVU/Wv2fHJD/MJiV9ILVNO/5NdE=) 6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: pennwXr6t4IwBu5GR+qQWeFBbOoVwbfZWv2UzOYXV3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:26:63:db:f4:86:b9:00:c0:d6:30:9a:53:2c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Dec 20 01:00:57 2025 GMT Not After : Dec 21 01:00:57 2025 GMT Subject: CN=80830bf410aa316b12103cb2bd362fa303f24ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:2a:e8:02:34:66:1e:1b:b4:16:88:95:21: 03:cf:6d:bc:39:47:19:7c:5c:b5:50:e5:ba:a2:d5: c6:24:5a:3d:5e:0f:0a:a8:ec:e9:f5:6c:83:2f:81: 1d:3b:7a:e4:76:a8:d6:1b:ff:6c:66:3a:58:2e:5e: e5:5a:8e:74:57:1a:29:89:c3:d5:48:0c:0e:f3:18: 4b:e6:a3:09:0b:15:1e:75:f4:0e:57:8b:27:68:1b: 14:59:a3:5b:23:5a:42:f0:8b:e0:6f:94:be:34:15: 27:97:73:cd:8e:a3:d5:0b:0d:6a:e7:a5:25:f1:89: 62:09:0d:45:07:52:d2:8c:64:ec:87:eb:f8:aa:75: a9:dc:ef:d9:58:8e:ef:82:07:91:3b:69:7a:4c:10: 90:42:de:11:b8:d8:b6:fe:21:aa:22:4a:12:41:5f: 3c:95:16:80:33:68:15:d6:4e:a2:1c:b7:83:19:5f: 7b:ee:0e:0d:e3:d1:ea:b0:c7:a4:2b:0a:03:1e:82: 30:fc:9b:f3:b4:29:68:2c:8a:05:48:f4:4d:21:95: 97:88:12:1e:1a:7f:6b:29:14:b9:c5:ae:48:eb:e4: 29:b9:4c:2a:18:be:55:ea:9e:2a:55:05:4d:f6:8e: b5:4f:5c:ef:01:68:78:08:e5:d5:6a:72:4e:6e:b2: 73:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:83:0B:F4:10:AA:31:6B:12:10:3C:B2:BD:36:2F:A3:03:F2:4E:F4 X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:de:63:19:1c:92:00:9e:2d:75:98:50:49:4e:9d:bd:9a:c8: a3:82:5f:e7:6a:c7:81:e9:4c:f3:d3:42:ab:ad:53:71:70:84: e2:bd:e3:94:f6:ec:ad:d2:7c:d8:40:11:f1:1d:c3:89:16:ee: 13:34:e5:c7:ae:72:5f:df:83:aa:61:48:aa:fe:da:31:58:e9: 87:33:c9:6c:a1:f2:ad:37:89:30:d0:b3:b4:c2:0a:bf:ee:1c: 2c:25:62:c7:e4:34:1e:82:a7:eb:5c:9d:ed:71:8f:ca:48:90: 6e:32:7f:c9:8c:e9:31:30:fe:d2:ae:0a:fe:bf:0b:c7:24:92: 29:53:ab:a5:e2:53:ae:a5:ef:b9:9f:fb:25:8d:66:a9:10:36: 66:1e:dd:ee:f8:c6:2d:e1:77:8e:66:a3:c6:a0:39:a8:8b:65: 8a:22:0f:ab:48:37:ec:d9:6e:2e:fc:39:a2:83:03:a0:a2:9e: 11:a9:d6:fb:81:80:d9:2b:bd:22:b7:11:1c:d3:7e:83:07:69: 1d:e4:41:b8:ea:d4:d5:22:4d:32:79:6f:da:e9:2c:df:f8:e3: 7e:57:6f:61:42:b2:0c:d3:ab:70:b9:01:37:9f:2d:aa:e3:b0: ae:ae:dd:87:ff:99:fa:e2:2a:20:65:b0:25:42:09:ab:3e:b9: c9:42:74:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RiZj2/SGuQDA1jCaUyziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjUxMjIwMDEwMDU3WhcNMjUxMjIxMDEwMDU3WjAzMTEwLwYDVQQD Eyg4MDgzMGJmNDEwYWEzMTZiMTIxMDNjYjJiZDM2MmZhMzAzZjI0ZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3kq6AI0Zh4btBaIlSEDz228OUcZ fFy1UOW6otXGJFo9Xg8KqOzp9WyDL4EdO3rkdqjWG/9sZjpYLl7lWo50VxopicPV SAwO8xhL5qMJCxUedfQOV4snaBsUWaNbI1pC8Ivgb5S+NBUnl3PNjqPVCw1q56Ul 8YliCQ1FB1LSjGTsh+v4qnWp3O/ZWI7vggeRO2l6TBCQQt4RuNi2/iGqIkoSQV88 lRaAM2gV1k6iHLeDGV977g4N49HqsMekKwoDHoIw/JvztCloLIoFSPRNIZWXiBIe Gn9rKRS5xa5I6+QpuUwqGL5V6p4qVQVN9o61T1zvAWh4COXVanJObrJzHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICDC/QQqjFrEhA8sr02L6MD8k70MB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4d5jGRyS AJ4tdZhQSU6dvZrIo4Jf52rHgelM89NCq61TcXCE4r3jlPbsrdJ82EAR8R3DiRbu EzTlx65yX9+DqmFIqv7aMVjphzPJbKHyrTeJMNCztMIKv+4cLCVix+Q0HoKn61yd 7XGPykiQbjJ/yYzpMTD+0q4K/r8LxySSKVOrpeJTrqXvuZ/7JY1mqRA2Zh7d7vjG LeF3jmajxqA5qItliiIPq0g37NluLvw5ooMDoKKeEanW+4GA2Su9IrcRHNN+gwdp HeRBuOrU1SJNMnlv2uks3/jjfldvYUKyDNOrcLkBN58tquOwrq7dh/+Z+uIqIGWw JUIJqz65yUJ06g== -----END CERTIFICATE-----Generated at Sat Dec 20 08:00:40 2025 by rpki-client