This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json) Hash identifier: IzbEpJtrZQQc0NyFG+/R2WIvhYYh2POoqPM7TiQTCps= Subject key identifier: C6:87:FA:8A:0E:42:7F:D6:7B:3D:10:0C:57:54:55:51:42:CA:36:7E Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95 Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95 Certificate serial: 019B3F118DC7DECFA65C873FA29397C2EB15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft Manifest number: 05A2 Signing time: Sun 21 Dec 2025 04:01:13 +0000 Manifest this update: Sun 21 Dec 2025 04:01:13 +0000 Manifest next update: Mon 22 Dec 2025 04:01:13 +0000 Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: P83nMS/LO+m+ygEVhW2At3quGoUsp/fKMr7q0YsuNVk=) 2: ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa (hash: LkPu7W8d8SU9QHrC15AzmgPhWHRle+7DN15uGWx+c9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:8d:c7:de:cf:a6:5c:87:3f:a2:93:97:c2:eb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95 Validity Not Before: Dec 21 04:01:13 2025 GMT Not After : Dec 22 04:01:13 2025 GMT Subject: CN=c687fa8a0e427fd67b3d100c5754555142ca367e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e8:39:67:30:18:fe:d0:53:0e:a9:22:ea:03: 14:d8:cd:4c:83:97:d1:8c:1d:23:42:06:a0:36:fc: e5:31:ff:49:df:b3:7c:40:7f:0b:05:08:a8:4d:fe: 29:a9:01:7a:7b:2f:d4:47:27:b6:b5:1b:3a:aa:53: 31:f5:52:ba:23:8e:2c:4b:32:26:38:ac:11:67:73: 10:07:1c:1b:73:5a:fa:57:46:93:4d:05:df:22:93: 33:2e:6a:f9:94:34:4d:90:f4:4d:72:70:94:12:af: 12:5f:39:2a:e7:a0:35:71:88:41:4a:e6:ff:85:40: db:4c:1c:b0:61:c0:de:73:93:af:67:a6:90:dc:2b: d8:a0:b7:92:68:0d:19:54:8c:24:39:bd:d0:06:97: 98:5c:20:a3:e4:bf:a7:07:4b:7c:20:4c:c6:23:dd: ad:9b:b2:53:0e:45:cf:12:ea:75:5e:d4:09:ae:f6: b7:2e:96:d0:4b:ea:26:ab:52:42:96:00:f2:7d:89: 5d:ea:0f:38:ef:7b:c1:dc:66:cc:e5:59:cb:94:a4: 07:9c:54:ef:75:a1:74:d2:ba:d2:48:ee:8c:4c:c4: da:b3:f4:a6:cf:1f:fe:d4:42:ea:5c:e3:67:62:45: ae:ae:80:70:57:75:2c:2b:89:1e:7e:21:30:43:15: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:87:FA:8A:0E:42:7F:D6:7B:3D:10:0C:57:54:55:51:42:CA:36:7E X509v3 Authority Key Identifier: keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:44:dd:12:9c:2c:c9:ec:5d:91:e7:8b:45:ab:c3:34:b8:c6: a3:fd:53:4c:3b:7b:87:7c:e7:9a:b5:12:00:ea:7a:ac:38:d0: 02:36:52:1d:bc:b8:59:f3:8f:1a:85:98:a8:fc:5d:c1:3f:b6: 1e:41:5a:0b:45:4a:82:c9:bb:ea:c6:75:68:55:a2:a3:b6:ea: 62:aa:d8:7c:7d:ac:8f:c7:e8:07:6e:17:28:5c:93:96:c7:ad: 14:2a:18:6e:b1:2e:39:d3:85:c0:36:cd:84:2f:45:77:49:e0: d0:80:2b:91:2e:4f:22:83:ba:32:7e:44:d3:4e:fe:59:20:57: 60:9b:59:97:2d:9f:e9:d1:aa:29:ef:66:11:64:ec:83:d5:19: f5:41:4c:12:3d:44:e2:4b:91:0c:74:0f:0d:0d:84:dc:65:da: cb:2b:fc:03:8a:a2:1f:d4:98:56:cc:b9:23:49:04:51:c3:8b: ce:c2:82:9d:a3:df:0f:c7:78:4f:99:c6:01:bc:48:da:02:d4: 16:84:c4:7f:4d:3f:5b:a6:e0:28:18:bb:ef:3a:7b:0a:cd:e3: 21:4c:ed:dc:fc:0d:07:6f:3a:fc:bb:cc:26:36:c8:17:d9:ad: 1c:c5:60:e4:ea:7f:4a:20:60:5f:00:97:df:71:83:d5:fd:5a: cf:35:ca:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EY3H3s+mXIc/opOXwusVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWEwYTc1NTQzODU3MDM5NzRhZTE1ZWY5NDdiYzU0YzBi ODljOTUwHhcNMjUxMjIxMDQwMTEzWhcNMjUxMjIyMDQwMTEzWjAzMTEwLwYDVQQD EyhjNjg3ZmE4YTBlNDI3ZmQ2N2IzZDEwMGM1NzU0NTU1MTQyY2EzNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ug5ZzAY/tBTDqki6gMU2M1Mg5fR jB0jQgagNvzlMf9J37N8QH8LBQioTf4pqQF6ey/URye2tRs6qlMx9VK6I44sSzIm OKwRZ3MQBxwbc1r6V0aTTQXfIpMzLmr5lDRNkPRNcnCUEq8SXzkq56A1cYhBSub/ hUDbTBywYcDec5OvZ6aQ3CvYoLeSaA0ZVIwkOb3QBpeYXCCj5L+nB0t8IEzGI92t m7JTDkXPEup1XtQJrva3LpbQS+omq1JClgDyfYld6g8473vB3GbM5VnLlKQHnFTv daF00rrSSO6MTMTas/Smzx/+1ELqXONnYkWuroBwV3UsK4kefiEwQxXcvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaH+ooOQn/Wez0QDFdUVVFCyjZ+MB8GA1UdIwQY MBaAFP8aCnVUOFcDl0rhXvlHvFTAuJyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAt Mjc1NTBiMjE5NTA3LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAtMjc1NTBiMjE5NTA3 LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0TdEpws yexdkeeLRavDNLjGo/1TTDt7h3znmrUSAOp6rDjQAjZSHby4WfOPGoWYqPxdwT+2 HkFaC0VKgsm76sZ1aFWio7bqYqrYfH2sj8foB24XKFyTlsetFCoYbrEuOdOFwDbN hC9Fd0ng0IArkS5PIoO6Mn5E007+WSBXYJtZly2f6dGqKe9mEWTsg9UZ9UFMEj1E 4kuRDHQPDQ2E3GXayyv8A4qiH9SYVsy5I0kEUcOLzsKCnaPfD8d4T5nGAbxI2gLU FoTEf00/W6bgKBi77zp7Cs3jIUzt3PwNB286/LvMJjbIF9mtHMVg5Op/SiBgXwCX 33GD1f1azzXKkQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:54:38 2025 by rpki-client