This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json) Hash identifier: 7mYxhLTahF+1NDgGV5KeMWiINLK0oT6jNUm1v85wv0o= Subject key identifier: EA:1B:1A:C8:FB:DD:11:DF:E7:BA:29:AF:D9:EA:E6:E1:46:C9:78:E4 Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Certificate serial: 019B390EFDC26DE0A2B05B16EAA57623117C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft Manifest number: 0C78 Signing time: Sat 20 Dec 2025 00:00:42 +0000 Manifest this update: Sat 20 Dec 2025 00:00:42 +0000 Manifest next update: Sun 21 Dec 2025 00:00:42 +0000 Files and hashes: 1: 7h80oAq6-0uqLzdtJS4s8qdwpCY.roa (hash: eJDBrOUplTi27if7n3bxsCBNe2iqZverEfnOiGp+TQg=) 2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: Kohim6Avyauy8C49RFUY7losG9UJk7el6GLASZHd0ls=) 3: eLPR2xt3_0RsiIApeB-CxAAHX-E.roa (hash: Kh1tlq7JO+3DhDd+dYuSyDwlPe8pGbqQGLCDk0TVyHQ=) 4: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:fd:c2:6d:e0:a2:b0:5b:16:ea:a5:76:23:11:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Validity Not Before: Dec 20 00:00:42 2025 GMT Not After : Dec 21 00:00:42 2025 GMT Subject: CN=ea1b1ac8fbdd11dfe7ba29afd9eae6e146c978e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:9c:2d:05:8c:9c:62:8c:a6:bf:8d:3d:5c: b9:f3:a5:a8:89:06:b5:af:89:89:97:c3:f5:b2:49: 15:9c:7d:d0:df:a8:57:3e:eb:69:c6:0d:46:6c:b4: f9:49:34:7a:dc:9b:6b:6f:fe:fc:dc:fe:9d:58:f8: 44:c9:95:ce:51:5a:6d:7f:0a:af:e6:e8:e1:9a:35: 3e:36:ad:5b:c4:0b:06:27:29:79:a6:2d:bb:1c:6d: c6:67:e4:4c:c9:aa:f3:f6:52:0e:fd:16:8c:68:21: 8e:33:5a:1e:2e:c8:dd:2b:53:46:b3:1b:21:8f:9f: 50:48:bc:87:f3:7a:97:05:7d:45:eb:18:f8:44:22: 85:8e:64:10:e3:c5:4a:bb:16:b5:d7:62:6f:bb:a8: 03:97:bf:a9:e4:c4:b1:92:d4:f9:6d:ca:3c:10:23: d3:94:0d:eb:fe:c4:a9:da:2d:f9:3e:87:1b:0b:55: 13:05:7a:70:25:58:65:b1:dd:53:e6:f8:54:b1:71: 34:6f:49:1d:8b:27:5b:e9:76:14:f1:4d:1d:2e:7e: 1a:fc:14:6f:7a:77:0e:ae:30:63:78:09:3c:4e:ac: 0e:1c:ba:45:65:c3:c6:75:8c:e5:71:be:2a:c4:d3: 53:47:fc:c0:4f:43:cd:c5:04:32:d6:ea:83:47:22: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1B:1A:C8:FB:DD:11:DF:E7:BA:29:AF:D9:EA:E6:E1:46:C9:78:E4 X509v3 Authority Key Identifier: keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:62:5c:20:51:f7:9a:63:c4:2a:54:d4:1c:e1:84:77:09:3e: e5:e8:d9:c1:17:fa:2d:ae:1a:9b:a1:5e:6d:cf:f8:3a:3c:89: 48:0b:e5:d7:a3:93:df:e1:15:af:2d:ed:7d:b8:b5:c4:ab:a2: 53:97:4f:57:25:6e:47:c5:8b:87:7e:b8:e1:49:02:2d:fa:23: 0d:09:44:7f:e0:93:d5:00:7c:88:5f:bd:c7:03:04:48:be:0a: 67:3b:87:3d:ae:1e:75:a9:00:40:df:3a:c9:31:f3:3e:a0:dc: 30:5e:a3:7e:c4:ca:36:53:1c:ad:a9:11:50:ed:da:8c:43:da: f8:b5:43:f6:e1:a2:88:53:52:24:23:e6:de:c5:01:41:0a:c6: 55:aa:b7:9a:85:ae:3d:aa:70:c1:fc:e7:cb:00:c2:25:39:6a: df:2f:b9:3b:cf:46:61:a3:0b:90:1c:50:56:5c:0e:b1:80:03: 95:6e:7e:a6:b7:99:d0:15:6a:eb:03:79:42:ef:0f:e6:02:22: 45:25:2c:48:49:59:fe:7b:e0:40:45:91:d4:1a:10:5c:02:08: 34:42:5c:a2:24:7e:65:a4:fc:f0:6e:f4:55:74:da:65:e5:b7: b6:1d:e3:0c:bf:75:f9:7b:97:6f:18:9b:bb:08:ff:ad:74:d6: 1f:94:29:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dv3CbeCisFsW6qV2IxF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2 ZjYyZDYwHhcNMjUxMjIwMDAwMDQyWhcNMjUxMjIxMDAwMDQyWjAzMTEwLwYDVQQD EyhlYTFiMWFjOGZiZGQxMWRmZTdiYTI5YWZkOWVhZTZlMTQ2Yzk3OGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG6cLQWMnGKMpr+NPVy586WoiQa1 r4mJl8P1skkVnH3Q36hXPutpxg1GbLT5STR63Jtrb/783P6dWPhEyZXOUVptfwqv 5ujhmjU+Nq1bxAsGJyl5pi27HG3GZ+RMyarz9lIO/RaMaCGOM1oeLsjdK1NGsxsh j59QSLyH83qXBX1F6xj4RCKFjmQQ48VKuxa112Jvu6gDl7+p5MSxktT5bco8ECPT lA3r/sSp2i35PocbC1UTBXpwJVhlsd1T5vhUsXE0b0kdiydb6XYU8U0dLn4a/BRv encOrjBjeAk8TqwOHLpFZcPGdYzlcb4qxNNTR/zAT0PNxQQy1uqDRyJh9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOobGsj73RHf57opr9nq5uFGyXjkMB8GA1UdIwQY MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct NDAyMjM4NjM4ZWEzLzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGJcIFH3 mmPEKlTUHOGEdwk+5ejZwRf6La4am6Febc/4OjyJSAvl16OT3+EVry3tfbi1xKui U5dPVyVuR8WLh3644UkCLfojDQlEf+CT1QB8iF+9xwMESL4KZzuHPa4edakAQN86 yTHzPqDcMF6jfsTKNlMcrakRUO3ajEPa+LVD9uGiiFNSJCPm3sUBQQrGVaq3moWu PapwwfznywDCJTlq3y+5O89GYaMLkBxQVlwOsYADlW5+preZ0BVq6wN5Qu8P5gIi RSUsSElZ/nvgQEWR1BoQXAIINEJcoiR+ZaT88G70VXTaZeW3th3jDL91+XuXbxib uwj/rXTWH5QpFw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:24:12 2025 by rpki-client