This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: R3rBpWHxr/JcQCD8Ls4jct9eLIItmGvke0itJwCctfM= Subject key identifier: F5:E8:61:D6:44:27:9C:89:68:6B:20:50:B0:19:69:EA:F4:88:F5:37 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B390F7559CE0F300DFB170CBD1E195052 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0FE7 Signing time: Sat 20 Dec 2025 00:01:12 +0000 Manifest this update: Sat 20 Dec 2025 00:01:12 +0000 Manifest next update: Sun 21 Dec 2025 00:01:12 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=) 12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: /7B3gYR1APlEEht8vCko/3UFOBwz8iFQH7kVjgcFPV8=) 15: YwT_q4Kig3_g-NeH9DT3auGxCgo.roa (hash: ZaE3qib+0ral12KqqE3Ve01vVTpIeV1MSx94xxKpbME=) 16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:75:59:ce:0f:30:0d:fb:17:0c:bd:1e:19:50:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Dec 20 00:01:12 2025 GMT Not After : Dec 21 00:01:12 2025 GMT Subject: CN=f5e861d644279c89686b2050b01969eaf488f537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:8e:40:72:4e:5a:10:6e:4a:54:af:0a:51: 44:77:78:1b:26:28:8f:9d:71:17:b2:fd:8b:fe:6c: 40:76:ed:b7:1c:59:eb:c3:ed:b1:79:24:56:19:9b: 48:e0:91:ca:24:14:ac:ab:20:bf:5f:52:a9:7b:25: 2d:16:c2:39:de:5f:d7:67:1e:7d:0f:49:dd:36:90: fb:60:ed:27:38:75:a0:d5:4d:15:76:9d:1a:72:e0: 80:54:35:fc:a5:33:81:98:d9:c2:74:36:96:57:65: 3c:00:11:ba:4c:f8:b6:ef:87:bd:c5:86:e4:f3:7a: 73:55:70:51:78:9a:d9:3b:4a:13:2f:03:bf:ae:08: 13:cc:98:cb:b1:75:37:48:3a:15:98:d4:be:54:71: ee:65:1f:7c:b1:eb:df:b5:b2:45:12:d6:d9:2b:9c: 9d:5a:8f:a7:b6:92:0f:6f:7c:b6:ff:ed:e0:ed:5e: 5d:33:b4:cf:a9:aa:51:cb:c2:4a:a4:cf:00:a3:fb: 7f:6a:c2:bc:52:bc:4f:6c:84:df:ae:39:eb:8a:de: 7f:cd:88:5c:6a:4d:4e:96:f5:38:b5:87:4d:09:9c: 43:c6:ea:61:4b:cf:b9:d0:29:df:4c:e4:cd:bb:1b: 8e:ae:76:b3:4a:89:79:21:5b:1b:b2:8e:29:77:3f: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E8:61:D6:44:27:9C:89:68:6B:20:50:B0:19:69:EA:F4:88:F5:37 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:1b:68:0e:ee:ed:3b:3b:33:c1:5a:25:98:16:d0:93:fd:8e: ef:cf:04:79:9c:c5:0d:c7:18:7c:c2:45:fa:4c:45:55:86:29: b9:7b:25:50:42:27:15:55:d6:14:ad:dc:d7:e2:8b:6a:e0:bc: 86:2d:d8:cd:21:ec:9e:54:5b:10:8d:2c:60:9f:8e:60:34:f4: 8b:0c:e0:5b:f5:ee:8c:9f:bb:ac:b6:5d:97:e2:a9:6c:ac:19: cf:96:4d:a5:e6:c4:24:b1:fe:b9:d0:2b:6e:4c:df:c2:28:02: 42:e4:5b:7f:bf:f2:5a:7f:2a:0f:4c:f6:14:31:2e:61:eb:38: 17:c5:b4:28:40:5d:96:3c:00:1e:0b:8d:19:34:63:c7:87:d2: 49:a0:d7:a7:fe:82:44:69:e7:dc:fb:18:7c:5c:c5:57:e9:5e: 1f:0d:c6:d8:3b:07:c1:d2:8b:c5:83:2a:44:0c:d9:33:72:a2: b4:ea:71:f9:1a:40:59:ec:6b:a1:23:17:0f:2c:06:45:4e:16: 98:8e:78:ae:7f:91:07:55:27:8a:79:53:8c:b8:7f:4f:92:c2: c6:71:5a:74:7d:4f:6b:1e:ce:8b:28:09:ea:96:5d:05:9f:45: 5d:da:57:84:e5:cf:19:57:ac:32:23:fd:a1:fb:5f:d1:55:9c: 15:3f:44:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D3VZzg8wDfsXDL0eGVBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUxMjIwMDAwMTEyWhcNMjUxMjIxMDAwMTEyWjAzMTEwLwYDVQQD EyhmNWU4NjFkNjQ0Mjc5Yzg5Njg2YjIwNTBiMDE5NjllYWY0ODhmNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK6OQHJOWhBuSlSvClFEd3gbJiiP nXEXsv2L/mxAdu23HFnrw+2xeSRWGZtI4JHKJBSsqyC/X1KpeyUtFsI53l/XZx59 D0ndNpD7YO0nOHWg1U0Vdp0acuCAVDX8pTOBmNnCdDaWV2U8ABG6TPi274e9xYbk 83pzVXBReJrZO0oTLwO/rggTzJjLsXU3SDoVmNS+VHHuZR98sevftbJFEtbZK5yd Wo+ntpIPb3y2/+3g7V5dM7TPqapRy8JKpM8Ao/t/asK8UrxPbITfrjnrit5/zYhc ak1OlvU4tYdNCZxDxuphS8+50CnfTOTNuxuOrnazSol5IVsbso4pdz9yNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXoYdZEJ5yJaGsgULAZaer0iPU3MB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBtoDu7t OzszwVolmBbQk/2O788EeZzFDccYfMJF+kxFVYYpuXslUEInFVXWFK3c1+KLauC8 hi3YzSHsnlRbEI0sYJ+OYDT0iwzgW/XujJ+7rLZdl+KpbKwZz5ZNpebEJLH+udAr bkzfwigCQuRbf7/yWn8qD0z2FDEuYes4F8W0KEBdljwAHguNGTRjx4fSSaDXp/6C RGnn3PsYfFzFV+leHw3G2DsHwdKLxYMqRAzZM3KitOpx+RpAWexroSMXDywGRU4W mI54rn+RB1UninlTjLh/T5LCxnFadH1Pax7OiygJ6pZdBZ9FXdpXhOXPGVesMiP9 oftf0VWcFT9EOA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:02:16 2025 by rpki-client