This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json) Hash identifier: 9RX+G/w8fgHkVfGGhvVjB2jVMg/BZEUUZ8W28CFkDLM= Subject key identifier: 49:68:4D:54:73:61:F0:A8:7D:F4:10:56:D3:9A:D5:42:BC:BC:60:21 Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Certificate serial: 019B3E6DBD1F57C976C076DD1405E1AF7DA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft Manifest number: 0C42 Signing time: Sun 21 Dec 2025 01:02:17 +0000 Manifest this update: Sun 21 Dec 2025 01:02:17 +0000 Manifest next update: Mon 22 Dec 2025 01:02:17 +0000 Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=) 2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: d39Excd9fBS6+6pzFt3VZWL2p9tjdnR3Q3N5OiL6HKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:bd:1f:57:c9:76:c0:76:dd:14:05:e1:af:7d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Validity Not Before: Dec 21 01:02:17 2025 GMT Not After : Dec 22 01:02:17 2025 GMT Subject: CN=49684d547361f0a87df41056d39ad542bcbc6021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:69:86:6b:6c:37:7d:2e:96:f5:f7:93:0b: 8f:76:21:72:09:15:81:8b:3f:1d:4f:be:de:16:6b: 01:2d:50:80:e6:5e:c5:33:ba:eb:2e:d4:dd:55:5d: b2:0e:8f:1d:c7:12:81:0c:54:9a:86:58:f2:81:97: 01:78:97:8b:31:17:ed:bd:ce:91:e1:26:45:72:1f: 80:42:ff:22:c5:7f:a1:59:7e:d2:9d:3c:e3:51:dc: ca:e2:00:38:87:4f:e9:82:d1:4c:ea:5b:da:63:74: 5c:af:07:85:89:24:b1:ff:2c:22:78:9c:30:97:92: 9d:8b:aa:32:6e:51:2d:a5:10:40:93:74:13:44:ef: e7:a9:1b:22:29:1f:21:a7:92:30:02:41:25:04:59: e4:3e:0c:7b:74:4c:c9:e3:57:e0:5a:f6:ca:4c:1e: 6d:ac:b5:37:88:03:ea:24:28:a3:e3:43:b5:62:9f: 53:e2:be:5a:31:b6:51:52:19:e0:cc:b8:fa:88:83: d2:a9:4f:92:c4:da:36:d2:44:83:c1:92:7b:30:7f: 16:fb:67:1b:b8:e3:9f:e9:37:99:de:92:33:db:30: 4c:43:3e:27:8e:62:5c:bb:fe:5b:8e:ea:a2:01:3c: 32:b5:5a:27:4c:2f:2f:8f:8c:c8:98:b7:45:c7:0a: 06:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:68:4D:54:73:61:F0:A8:7D:F4:10:56:D3:9A:D5:42:BC:BC:60:21 X509v3 Authority Key Identifier: keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:85:9c:6f:5b:08:6a:b0:64:c2:a1:0b:96:24:5a:cc:9a:ab: 54:0d:6d:f8:4d:5d:89:d4:47:39:e0:7f:71:ee:32:34:c2:af: 44:db:49:9d:28:a9:84:85:e7:cf:b9:6c:d1:e3:bb:38:03:82: 28:ed:48:81:1c:6c:fd:67:20:6f:82:29:97:44:99:7d:36:5f: f9:a2:00:50:3e:7d:7d:13:53:e4:00:62:4d:42:7e:02:8c:bb: 50:74:69:e0:be:0a:6a:e7:d8:ef:39:ce:59:9d:3f:eb:dc:2e: 94:77:b3:09:4d:76:05:20:a1:04:a8:4b:7f:d8:73:08:51:d0: 79:c0:70:69:9d:76:4c:ac:a5:bd:c3:59:24:89:23:bb:99:23: ff:83:5c:2f:83:cf:05:19:3f:5e:1a:b9:4c:ed:91:c5:9a:9e: 43:b3:c0:b0:73:e3:32:df:3b:16:a6:e6:e5:09:0f:c5:f3:87: 0a:2f:d8:ec:c4:bf:5d:0e:e2:f0:39:ee:db:0e:e2:f7:d1:57: d7:f7:9b:60:29:5d:82:47:b3:26:f4:a2:15:07:0c:08:7d:d7: 5f:ab:16:24:ad:f9:b7:77:fe:83:95:78:ca:15:49:5b:51:9e: 30:91:dd:a0:f2:9b:26:44:fb:05:d9:9f:e3:5b:88:25:97:31: 4d:e9:70:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bb0fV8l2wHbdFAXhr32kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MjI0ZWE0NWQwODFkNDAyZmZkNmJmNGRkOTVlM2ZmNmYy ZGM0ODEwHhcNMjUxMjIxMDEwMjE3WhcNMjUxMjIyMDEwMjE3WjAzMTEwLwYDVQQD Eyg0OTY4NGQ1NDczNjFmMGE4N2RmNDEwNTZkMzlhZDU0MmJjYmM2MDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgpphmtsN30ulvX3kwuPdiFyCRWB iz8dT77eFmsBLVCA5l7FM7rrLtTdVV2yDo8dxxKBDFSahljygZcBeJeLMRftvc6R 4SZFch+AQv8ixX+hWX7SnTzjUdzK4gA4h0/pgtFM6lvaY3RcrweFiSSx/ywieJww l5Kdi6oyblEtpRBAk3QTRO/nqRsiKR8hp5IwAkElBFnkPgx7dEzJ41fgWvbKTB5t rLU3iAPqJCij40O1Yp9T4r5aMbZRUhngzLj6iIPSqU+SxNo20kSDwZJ7MH8W+2cb uOOf6TeZ3pIz2zBMQz4njmJcu/5bjuqiATwytVonTC8vj4zImLdFxwoG4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEloTVRzYfCoffQQVtOa1UK8vGAhMB8GA1UdIwQY MBaAFMUiTqRdCB1AL/1r9N2V4/9vLcSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUt NTIzNTZjZDVkYTkwLzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUtNTIzNTZjZDVkYTkw LzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIWcb1sI arBkwqELliRazJqrVA1t+E1didRHOeB/ce4yNMKvRNtJnSiphIXnz7ls0eO7OAOC KO1IgRxs/Wcgb4Ipl0SZfTZf+aIAUD59fRNT5ABiTUJ+Aoy7UHRp4L4KaufY7znO WZ0/69wulHezCU12BSChBKhLf9hzCFHQecBwaZ12TKylvcNZJIkju5kj/4NcL4PP BRk/Xhq5TO2RxZqeQ7PAsHPjMt87Fqbm5QkPxfOHCi/Y7MS/XQ7i8Dnu2w7i99FX 1/ebYCldgkezJvSiFQcMCH3XX6sWJK35t3f+g5V4yhVJW1GeMJHdoPKbJkT7Bdmf 41uIJZcxTelw+w== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:56 2025 by rpki-client