This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json) Hash identifier: CRLxAloOL+bU2H/Ps+66evPdc6xDhw0HEKGebgRuniU= Subject key identifier: 95:62:8A:76:C5:FB:63:D8:EE:DB:66:0E:07:B7:87:1B:CC:A7:3E:3C Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a Certificate serial: 019B3A21976CBC1948E7294BEDB77A6E5D08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft Manifest number: 10CE Signing time: Sat 20 Dec 2025 05:00:38 +0000 Manifest this update: Sat 20 Dec 2025 05:00:38 +0000 Manifest next update: Sun 21 Dec 2025 05:00:38 +0000 Files and hashes: 1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=) 2: McmEoR42go_NL-e1B7HnbupLbKE.roa (hash: l0MQWVd1GEY0hlnVKUF+5hVPuDs45GKOy6rfNmqbWI0=) 3: cQbtoMzIsUrEiz2_R7FPTDe-83o.roa (hash: uIgSp+mYNVkKY/oukv2IXYpbIzAsJVvw3J0CKtfAk+0=) 4: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=) 5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: 6fDhcaxDopjgyidNzpc9bP83p3G3L4Rmg0xwgZQWYKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:97:6c:bc:19:48:e7:29:4b:ed:b7:7a:6e:5d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a Validity Not Before: Dec 20 05:00:38 2025 GMT Not After : Dec 21 05:00:38 2025 GMT Subject: CN=95628a76c5fb63d8eedb660e07b7871bcca73e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:9b:a9:2d:9a:73:bc:c0:9d:c2:21:2d:2d: 9f:fc:75:9b:b9:c6:7b:cb:ae:b0:be:67:77:fc:c6: ab:91:68:2c:70:33:87:7f:b2:25:87:4b:94:23:b4: e7:a8:be:23:52:84:b7:22:46:67:0f:fe:50:1f:22: 36:4d:20:72:6e:d8:eb:3a:b1:89:fc:84:ef:58:53: cd:f7:11:83:9d:25:22:23:94:67:82:d9:67:ce:e5: cc:9c:72:a4:fc:74:c9:c1:47:f4:07:7e:5b:10:51: 87:5a:9a:98:1c:e2:28:43:80:8c:61:09:de:9d:4d: 24:0f:57:cc:62:fb:b0:df:85:ee:f0:28:93:8b:22: fe:6e:bd:8d:b2:9f:60:43:7c:c1:92:b1:20:d5:da: 2e:aa:6b:e4:e1:6f:c2:88:45:80:51:ac:a1:3b:de: 80:6f:6e:ad:32:be:59:07:c5:15:81:dc:c3:13:be: 3f:db:2b:aa:99:c3:5b:51:20:5e:a8:77:a5:73:59: b6:1b:ff:aa:2e:1f:95:d3:47:f7:ab:6f:c4:09:d6: 64:8f:a4:c4:73:eb:9e:42:eb:27:18:8b:a9:b3:e7: e3:7d:37:b3:e8:1c:f5:df:4c:86:03:84:2e:4e:6c: c1:a8:fc:ba:5a:42:04:46:bb:fd:e5:a5:cf:2f:b8: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:8A:76:C5:FB:63:D8:EE:DB:66:0E:07:B7:87:1B:CC:A7:3E:3C X509v3 Authority Key Identifier: keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:68:d0:55:bf:27:1c:ca:87:de:b8:e3:40:ae:2a:3f:d4:0f: a5:60:a7:c8:1c:8c:33:f7:3c:e2:62:7f:d5:c4:4f:97:fe:54: e5:1f:5b:27:9d:54:80:db:ca:02:40:e2:2e:13:3b:a9:9e:dc: f4:43:24:da:c1:34:f6:af:ff:0c:9e:f1:78:44:16:e1:24:1c: 4b:87:cf:a2:98:82:31:7d:cb:77:6b:90:a3:87:e1:09:e5:2e: 27:e2:d5:15:81:bd:7b:f8:15:22:2a:2d:45:80:15:1a:df:df: 0d:7c:1f:e8:e1:18:bb:97:3b:85:2c:32:90:da:d4:2f:f9:ae: 7a:c7:e9:bf:e5:e4:ec:2d:0a:bd:82:b3:0d:5f:46:ed:87:e3: 4a:c0:39:99:2b:24:39:f0:27:87:17:5d:e0:16:43:da:df:b0: 97:12:74:3e:6a:ae:5b:16:c7:ac:17:b4:02:4b:b6:70:b0:47: fe:34:52:17:54:1b:b1:69:d9:72:ce:95:3d:61:c8:2c:87:b8: cf:e7:eb:36:44:f7:c2:f5:2b:e0:0e:3a:e6:a4:cf:1c:38:ca: 4b:b3:89:e5:e5:11:29:e1:e8:81:09:03:20:00:d3:fc:f4:67: f5:f2:e1:c4:2d:0e:99:95:15:63:8a:ec:25:9e:ec:8c:37:ff: a4:49:71:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZdsvBlI5ylL7bd6bl0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx MGU5MWEwHhcNMjUxMjIwMDUwMDM4WhcNMjUxMjIxMDUwMDM4WjAzMTEwLwYDVQQD Eyg5NTYyOGE3NmM1ZmI2M2Q4ZWVkYjY2MGUwN2I3ODcxYmNjYTczZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPGbqS2ac7zAncIhLS2f/HWbucZ7 y66wvmd3/MarkWgscDOHf7Ilh0uUI7TnqL4jUoS3IkZnD/5QHyI2TSBybtjrOrGJ /ITvWFPN9xGDnSUiI5RngtlnzuXMnHKk/HTJwUf0B35bEFGHWpqYHOIoQ4CMYQne nU0kD1fMYvuw34Xu8CiTiyL+br2Nsp9gQ3zBkrEg1douqmvk4W/CiEWAUayhO96A b26tMr5ZB8UVgdzDE74/2yuqmcNbUSBeqHelc1m2G/+qLh+V00f3q2/ECdZkj6TE c+ueQusnGIups+fjfTez6Bz130yGA4QuTmzBqPy6WkIERrv95aXPL7jpvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJViinbF+2PY7ttmDge3hxvMpz48MB8GA1UdIwQY MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGjQVb8n HMqH3rjjQK4qP9QPpWCnyByMM/c84mJ/1cRPl/5U5R9bJ51UgNvKAkDiLhM7qZ7c 9EMk2sE09q//DJ7xeEQW4SQcS4fPopiCMX3Ld2uQo4fhCeUuJ+LVFYG9e/gVIiot RYAVGt/fDXwf6OEYu5c7hSwykNrUL/muesfpv+Xk7C0KvYKzDV9G7YfjSsA5mSsk OfAnhxdd4BZD2t+wlxJ0PmquWxbHrBe0Aku2cLBH/jRSF1QbsWnZcs6VPWHILIe4 z+frNkT3wvUr4A465qTPHDjKS7OJ5eURKeHogQkDIADT/PRn9fLhxC0OmZUVY4rs JZ7sjDf/pElxHw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:34:21 2025 by rpki-client