This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json) Hash identifier: 32dOnef6OObFjVQcTlEuLttDrvD+gqPm+pHP740c9Sc= Subject key identifier: 31:75:65:E9:CE:FE:FA:81:3E:DD:E5:52:95:1E:43:5E:E1:A5:A6:0A Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e Certificate serial: 019B3D59E1B6CFFC38503A0DA90EA1B7C6A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft Manifest number: 1384 Signing time: Sat 20 Dec 2025 20:00:59 +0000 Manifest this update: Sat 20 Dec 2025 20:00:59 +0000 Manifest next update: Sun 21 Dec 2025 20:00:59 +0000 Files and hashes: 1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=) 2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: DRa4pSKUIASEQJmh8CJasaReJRtpBcTslvbV6P4He14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e1:b6:cf:fc:38:50:3a:0d:a9:0e:a1:b7:c6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e Validity Not Before: Dec 20 20:00:59 2025 GMT Not After : Dec 21 20:00:59 2025 GMT Subject: CN=317565e9cefefa813edde552951e435ee1a5a60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8a:e6:ef:c9:7c:6b:07:b9:ed:5c:02:e9:4a: 6f:a1:05:fc:bb:92:84:fc:18:2c:87:7f:f9:34:25: 07:e3:b3:6e:58:3e:aa:9b:c1:73:87:63:5d:1b:e5: c6:29:d0:19:36:ea:40:bd:d3:97:a6:6e:ae:88:3d: 0b:90:94:48:fd:95:86:44:aa:20:7e:69:f3:58:76: 54:c3:65:ee:97:67:2d:bd:85:a7:c4:d1:31:38:cf: cd:96:59:a1:92:80:ab:38:da:68:9c:8f:63:3d:b4: 68:f7:a3:83:6f:ac:5d:50:82:7a:03:6f:7d:9e:6a: 07:2e:ce:dd:d0:28:b3:be:c8:92:d0:4e:4e:4f:55: 76:f5:ea:bd:70:16:d9:62:62:80:ab:d1:d1:de:fa: 59:4b:06:f4:31:5a:be:06:29:9a:e8:3f:3f:0c:eb: d5:25:bd:12:4b:8d:99:bf:67:4b:f8:ed:7c:75:b4: 87:79:c5:c1:f1:53:bc:64:0f:16:2f:0e:28:37:4f: 97:e1:81:1c:f1:4c:34:6d:0b:9d:69:82:c0:f6:d3: 3a:f8:76:4a:e8:93:f9:a8:1d:0a:87:2e:d0:45:e8: b2:8f:9d:22:a8:cc:15:a5:92:e6:66:20:60:10:07: d9:5a:84:8d:79:26:96:6e:f1:79:7a:88:32:f4:3f: 2a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:75:65:E9:CE:FE:FA:81:3E:DD:E5:52:95:1E:43:5E:E1:A5:A6:0A X509v3 Authority Key Identifier: keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b2:ed:2b:2c:d5:99:1b:1a:ed:72:b8:00:4a:25:40:a5:6a: f9:06:f7:24:d4:1e:c6:e5:fa:a5:b9:ab:2c:48:a5:11:08:21: 35:59:15:d2:88:82:b6:54:fb:4b:e0:1c:a3:29:b9:f6:d5:a2: 2d:92:a8:0d:52:3a:86:eb:d3:1c:64:98:cb:53:80:52:72:8e: 4c:92:57:f1:04:4f:49:88:49:4b:30:bb:73:03:23:62:34:c9: 18:1a:bd:56:90:f5:b6:3e:57:b8:de:85:61:40:29:2e:97:34: 81:ee:da:f4:b4:7c:dc:00:6f:08:99:16:98:8c:c6:7e:d5:05: 51:69:1f:32:fb:e6:51:0c:a0:e3:4e:50:25:ef:a4:f8:f9:06: 86:e2:9c:cc:7c:0c:31:1d:33:8e:4a:c1:ad:75:00:03:ad:51: 05:6f:46:e6:02:70:44:89:3b:01:bd:c3:3b:2b:71:13:78:d2: a8:c9:50:cc:47:40:61:18:62:ae:b3:22:c6:3e:0f:74:6d:d4: ab:39:22:67:e2:6e:85:c1:18:2f:99:6a:19:76:35:ac:59:bd: 33:d6:a1:ad:66:18:26:2c:b0:95:b9:6f:a0:33:d6:e2:d3:a7: b3:ba:29:c6:5b:8d:19:34:9a:73:bd:b6:32:82:4c:0a:3d:0c: fc:71:07:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WeG2z/w4UDoNqQ6ht8akMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmYwODAzYzQyOThlMTU2ZDU2M2JkNGYyMDdjYjViODM2 MTAyNmUwHhcNMjUxMjIwMjAwMDU5WhcNMjUxMjIxMjAwMDU5WjAzMTEwLwYDVQQD EygzMTc1NjVlOWNlZmVmYTgxM2VkZGU1NTI5NTFlNDM1ZWUxYTVhNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14rm78l8awe57VwC6UpvoQX8u5KE /Bgsh3/5NCUH47NuWD6qm8Fzh2NdG+XGKdAZNupAvdOXpm6uiD0LkJRI/ZWGRKog fmnzWHZUw2Xul2ctvYWnxNExOM/NllmhkoCrONponI9jPbRo96ODb6xdUIJ6A299 nmoHLs7d0CizvsiS0E5OT1V29eq9cBbZYmKAq9HR3vpZSwb0MVq+Bima6D8/DOvV Jb0SS42Zv2dL+O18dbSHecXB8VO8ZA8WLw4oN0+X4YEc8Uw0bQudaYLA9tM6+HZK 6JP5qB0Khy7QReiyj50iqMwVpZLmZiBgEAfZWoSNeSaWbvF5eogy9D8q2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF1ZenO/vqBPt3lUpUeQ17hpaYKMB8GA1UdIwQY MBaAFMYvCAPEKY4VbVY71PIHy1uDYQJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWIt M2RlYmExNjY2ZTliLzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWItM2RlYmExNjY2ZTli LzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbLtKyzV mRsa7XK4AEolQKVq+Qb3JNQexuX6pbmrLEilEQghNVkV0oiCtlT7S+Acoym59tWi LZKoDVI6huvTHGSYy1OAUnKOTJJX8QRPSYhJSzC7cwMjYjTJGBq9VpD1tj5XuN6F YUApLpc0ge7a9LR83ABvCJkWmIzGftUFUWkfMvvmUQyg405QJe+k+PkGhuKczHwM MR0zjkrBrXUAA61RBW9G5gJwRIk7Ab3DOytxE3jSqMlQzEdAYRhirrMixj4PdG3U qzkiZ+JuhcEYL5lqGXY1rFm9M9ahrWYYJiywlblvoDPW4tOns7opxluNGTSac722 MoJMCj0M/HEHoA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:48 2025 by rpki-client