This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json) Hash identifier: W/Oy0J/+hHLuaGht0YfeZPRwKfkojy+SrISysjSNss8= Subject key identifier: E9:4B:1B:1B:D7:1E:A8:7E:2B:74:92:04:C5:00:77:98:8C:31:0F:E5 Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Certificate serial: 019B46CACD00BBAE09464DEFE753D597E036 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 16:00:54 +0000 Manifest this update: Mon 22 Dec 2025 16:00:54 +0000 Manifest next update: Tue 23 Dec 2025 16:00:54 +0000 Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=) 2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=) 3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: FKgfoaAIEfftrk0tgzY0hLmSfmq9sRAzc+a0QVV4huc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 16:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:cd:00:bb:ae:09:46:4d:ef:e7:53:d5:97:e0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Validity Not Before: Dec 22 16:00:54 2025 GMT Not After : Dec 23 16:00:54 2025 GMT Subject: CN=e94b1b1bd71ea87e2b749204c50077988c310fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:90:17:13:6f:88:e5:da:c3:48:c0:8a:1b: 7e:cd:af:b4:83:76:0a:3c:ae:6c:34:8d:d0:f0:26: e7:26:46:b1:b1:d9:fb:7e:ba:c9:16:36:d4:96:97: 0c:48:9c:e2:7f:33:b8:04:6d:14:7c:63:07:c1:ee: fd:eb:46:14:9e:3c:51:a5:eb:8b:55:f5:70:ec:94: 34:f7:c0:9e:31:da:9d:ec:61:77:03:ee:13:8c:17: 46:d0:f2:dc:be:c5:2e:db:0d:66:03:b3:81:d8:85: 65:b9:85:a0:7f:d3:92:7b:4a:6c:90:c5:62:d8:22: 13:35:7f:80:bd:e7:a5:3d:fd:29:69:75:9d:94:c9: 10:8e:ba:e2:fb:54:c2:c0:46:46:24:9e:3f:36:fa: 86:f7:f0:46:10:25:3c:33:d3:0b:c7:64:e6:76:95: e0:a5:bd:1e:f9:b7:7c:d4:71:7f:5f:42:59:f4:12: 87:26:6c:3a:af:9e:17:67:ea:5f:27:b9:ad:e8:6a: 2a:12:1d:b7:8f:6a:39:52:63:ab:15:7a:37:bc:d1: dd:b9:f5:3a:85:86:db:97:02:cf:fe:f9:10:92:16: ec:7e:d4:29:e1:b0:f5:39:35:18:50:41:d7:d6:6e: 22:29:3a:36:46:03:0c:b7:e6:79:f0:6b:98:dd:9d: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4B:1B:1B:D7:1E:A8:7E:2B:74:92:04:C5:00:77:98:8C:31:0F:E5 X509v3 Authority Key Identifier: keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:78:76:73:f5:80:46:52:24:27:f7:9b:08:28:b1:af:bf:e4: 60:b4:38:6c:51:70:6b:ae:3e:78:2c:e2:57:66:83:9f:85:3c: 85:74:36:5f:e4:2f:fe:a3:d1:aa:a4:ec:3c:81:75:60:8c:d7: 14:68:9c:14:21:58:22:1d:0b:b7:c1:e3:97:1c:3c:40:69:b1: 56:f5:3a:05:85:2c:76:2e:d6:dd:ec:56:bb:0b:51:fe:0b:a3: 2b:5d:a4:3e:40:b7:64:1e:a7:a9:b1:2b:d1:14:57:84:6e:bc: 9c:72:90:49:28:6c:65:7a:a4:75:a4:3d:24:83:51:fd:82:78: c8:16:f4:89:df:6a:f6:e1:ed:05:e0:a6:17:4e:b8:95:5f:8b: ed:5d:02:3a:5f:98:eb:65:9d:b5:9d:2a:86:72:15:f2:52:99: a1:dd:28:34:5b:7f:0f:28:ac:76:b1:2c:b6:fb:15:8c:48:ea: 2a:8e:eb:81:77:35:a8:4b:7b:f8:f6:1c:65:d2:c3:4c:77:98: bf:0d:f5:90:b5:f4:ff:2c:50:3f:c1:9e:80:b7:c1:8c:32:f7: 88:1b:5d:78:42:d4:e4:81:63:47:b5:9c:0f:ff:6a:6a:ed:fa: fd:2c:66:3a:fc:a2:21:95:7a:65:52:20:ee:68:2c:1b:b6:d7: b6:ba:04:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGys0Au64JRk3v51PVl+A2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YmZiZWYyNzliZjlkZWQ2ZTM2NTFlMDYyOGQzOWJhNzky OTRmNzgwHhcNMjUxMjIyMTYwMDU0WhcNMjUxMjIzMTYwMDU0WjAzMTEwLwYDVQQD EyhlOTRiMWIxYmQ3MWVhODdlMmI3NDkyMDRjNTAwNzc5ODhjMzEwZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7iQFxNviOXaw0jAiht+za+0g3YK PK5sNI3Q8CbnJkaxsdn7frrJFjbUlpcMSJzifzO4BG0UfGMHwe7960YUnjxRpeuL VfVw7JQ098CeMdqd7GF3A+4TjBdG0PLcvsUu2w1mA7OB2IVluYWgf9OSe0pskMVi 2CITNX+AveelPf0paXWdlMkQjrri+1TCwEZGJJ4/NvqG9/BGECU8M9MLx2TmdpXg pb0e+bd81HF/X0JZ9BKHJmw6r54XZ+pfJ7mt6GoqEh23j2o5UmOrFXo3vNHdufU6 hYbblwLP/vkQkhbsftQp4bD1OTUYUEHX1m4iKTo2RgMMt+Z58GuY3Z2XtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlLGxvXHqh+K3SSBMUAd5iMMQ/lMB8GA1UdIwQY MBaAFMa/vvJ5v53tbjZR4GKNObp5KU94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQt YWRlNTMwZDdjNDFiLzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQtYWRlNTMwZDdjNDFi LzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnh2c/WA RlIkJ/ebCCixr7/kYLQ4bFFwa64+eCziV2aDn4U8hXQ2X+Qv/qPRqqTsPIF1YIzX FGicFCFYIh0Lt8Hjlxw8QGmxVvU6BYUsdi7W3exWuwtR/gujK12kPkC3ZB6nqbEr 0RRXhG68nHKQSShsZXqkdaQ9JINR/YJ4yBb0id9q9uHtBeCmF064lV+L7V0COl+Y 62WdtZ0qhnIV8lKZod0oNFt/DyisdrEstvsVjEjqKo7rgXc1qEt7+PYcZdLDTHeY vw31kLX0/yxQP8GegLfBjDL3iBtdeELU5IFjR7WcD/9qau36/SxmOvyiIZV6ZVIg 7mgsG7bXtroEWQ== -----END CERTIFICATE-----Generated at Tue Dec 23 01:25:31 2025 by rpki-client