This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json) Hash identifier: tKEZsHO9hizZjj1m84vL0NvykxXz6zineleWSW18Img= Subject key identifier: 6F:1A:FE:7A:57:7E:16:3A:41:FA:68:E3:D0:EE:DA:5E:B7:9D:3E:82 Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Certificate serial: 019B3AC6A875B7500773D47E7EE1516AB569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft Manifest number: 0BAE Signing time: Sat 20 Dec 2025 08:00:56 +0000 Manifest this update: Sat 20 Dec 2025 08:00:56 +0000 Manifest next update: Sun 21 Dec 2025 08:00:56 +0000 Files and hashes: 1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=) 2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=) 3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=) 4: TO_SSwf6-eWoLaY3pBc8ewOhpiA.roa (hash: ee63RZitNOPdcRNyJ4aJ7hmGttuUOvT0FBG6CRMod/s=) 5: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: jQHL4Mm1x5cST/iSVwPe8ChgCIQdn+gJRGh+cKeSGUY=) 6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=) 7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:a8:75:b7:50:07:73:d4:7e:7e:e1:51:6a:b5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Validity Not Before: Dec 20 08:00:56 2025 GMT Not After : Dec 21 08:00:56 2025 GMT Subject: CN=6f1afe7a577e163a41fa68e3d0eeda5eb79d3e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:b6:56:b0:7c:be:75:7c:87:4b:72:de:8d: 63:c2:8a:33:23:5c:2f:0a:7f:31:c9:8f:fc:0f:1f: f4:44:6d:3e:1d:83:c3:3a:be:2d:bb:0a:a4:14:c5: 41:ec:5b:98:4f:50:ea:2d:86:1c:24:76:91:6e:2f: d8:52:27:62:67:00:0e:bb:a6:0f:98:60:d4:ae:59: d3:66:b7:39:4f:ab:e9:12:da:b0:2c:eb:34:a4:40: 23:48:f4:1e:e1:0a:91:b8:f9:d3:4b:da:88:1b:77: 93:67:fb:b2:e9:fd:6c:4c:83:34:77:da:aa:3c:cd: 3a:38:05:fa:60:6c:e1:05:99:77:87:57:f8:bf:18: 18:3d:93:24:49:92:94:46:87:e5:0e:91:4c:b5:55: a7:65:1b:15:1d:73:af:39:bf:06:12:89:9d:0d:bf: fe:34:dc:37:90:f1:fd:bc:60:64:12:9f:dc:63:eb: 43:42:fa:58:5f:fa:6e:92:73:7a:0f:1f:f0:44:a2: fe:d0:b0:a7:64:5d:0d:16:d8:3e:e7:ce:01:c1:15: a3:e6:b1:f1:27:76:64:29:59:8f:94:d5:d7:97:a7: 45:61:da:72:a9:f3:ac:df:c0:36:84:15:fe:7b:52: 3f:a7:5c:70:f2:2e:c0:0f:bf:87:a4:d8:38:70:c0: 10:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1A:FE:7A:57:7E:16:3A:41:FA:68:E3:D0:EE:DA:5E:B7:9D:3E:82 X509v3 Authority Key Identifier: keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:11:d1:27:96:3f:51:e4:57:11:0e:f2:cd:3f:d0:86:9e:f5: 12:42:43:33:78:c4:ed:5e:e1:01:9f:f7:4e:2d:36:b5:85:37: df:37:9f:ea:db:95:2b:37:32:76:bc:c7:b0:e4:db:70:b6:bf: 29:f2:88:88:40:ba:84:d8:2d:0d:1c:ba:e0:79:74:5b:99:b9: 6b:4e:4f:fc:1f:ad:d9:05:0b:86:fa:ed:4b:d5:aa:e3:dc:fd: d5:fb:b6:4b:8d:44:5f:8a:a8:e5:d8:fe:b4:4f:10:c7:e5:c6: b6:13:8f:a3:4e:69:0e:c7:1b:ec:94:12:e1:00:22:1c:05:b7: 6a:c4:78:bc:08:32:bf:86:42:24:b5:60:29:d8:e8:fb:6f:f0: bc:da:56:64:87:e3:f9:f6:d6:4e:24:32:f8:b9:61:6b:af:3e: 74:fd:ea:9c:8e:51:65:9e:f8:69:b9:ba:a2:fb:2a:43:d5:09: 65:a6:0e:32:e0:35:09:40:87:07:7f:ba:c2:84:d7:fd:43:e3: 4c:f4:3a:f2:51:a7:44:f6:f2:5a:6e:35:d5:cb:99:af:dd:95: 81:a9:e5:55:d8:47:79:98:11:83:62:6b:e8:a7:6b:1b:72:d8: 06:dd:2a:04:f8:bd:c3:9f:8e:e5:19:ce:e7:f9:c4:d3:94:ff: 49:e5:63:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xqh1t1AHc9R+fuFRarVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDY5ZDlmNzQ5NjMwZjAyNTZjZjBjZWFiNTg4MzZiNDkx YTU4ZjYwHhcNMjUxMjIwMDgwMDU2WhcNMjUxMjIxMDgwMDU2WjAzMTEwLwYDVQQD Eyg2ZjFhZmU3YTU3N2UxNjNhNDFmYTY4ZTNkMGVlZGE1ZWI3OWQzZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Eq2VrB8vnV8h0ty3o1jwoozI1wv Cn8xyY/8Dx/0RG0+HYPDOr4tuwqkFMVB7FuYT1DqLYYcJHaRbi/YUidiZwAOu6YP mGDUrlnTZrc5T6vpEtqwLOs0pEAjSPQe4QqRuPnTS9qIG3eTZ/uy6f1sTIM0d9qq PM06OAX6YGzhBZl3h1f4vxgYPZMkSZKURoflDpFMtVWnZRsVHXOvOb8GEomdDb/+ NNw3kPH9vGBkEp/cY+tDQvpYX/puknN6Dx/wRKL+0LCnZF0NFtg+584BwRWj5rHx J3ZkKVmPlNXXl6dFYdpyqfOs38A2hBX+e1I/p1xw8i7AD7+HpNg4cMAQUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8a/npXfhY6Qfpo49Du2l63nT6CMB8GA1UdIwQY MBaAFF3WnZ90ljDwJWzwzqtYg2tJGlj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWIt ZjNmZDY0MzMxNzA5LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWItZjNmZDY0MzMxNzA5 LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBHRJ5Y/ UeRXEQ7yzT/Qhp71EkJDM3jE7V7hAZ/3Ti02tYU33zef6tuVKzcydrzHsOTbcLa/ KfKIiEC6hNgtDRy64Hl0W5m5a05P/B+t2QULhvrtS9Wq49z91fu2S41EX4qo5dj+ tE8Qx+XGthOPo05pDscb7JQS4QAiHAW3asR4vAgyv4ZCJLVgKdjo+2/wvNpWZIfj +fbWTiQy+Llha68+dP3qnI5RZZ74abm6ovsqQ9UJZaYOMuA1CUCHB3+6woTX/UPj TPQ68lGnRPbyWm411cuZr92VganlVdhHeZgRg2Jr6KdrG3LYBt0qBPi9w5+O5RnO 5/nE05T/SeVjhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:15:20 2025 by rpki-client