This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json) Hash identifier: 4b5JiMgHHb9u6f8vciqL6M1BHwnmBu8/UZJg453j5g8= Subject key identifier: 5D:E7:96:55:91:E6:71:9B:E6:C7:3E:18:37:68:97:17:20:2C:B7:B6 Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Certificate serial: 019B4E4D3C05252470DD7E9E9670E3D0FB6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft Manifest number: 0C83 Signing time: Wed 24 Dec 2025 03:00:42 +0000 Manifest this update: Wed 24 Dec 2025 03:00:42 +0000 Manifest next update: Thu 25 Dec 2025 03:00:42 +0000 Files and hashes: 1: 7h80oAq6-0uqLzdtJS4s8qdwpCY.roa (hash: eJDBrOUplTi27if7n3bxsCBNe2iqZverEfnOiGp+TQg=) 2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: CKHWkIcJEe4uIzAhttMTF2ju2rRFDgNHA04E0Qsl8TQ=) 3: eLPR2xt3_0RsiIApeB-CxAAHX-E.roa (hash: Kh1tlq7JO+3DhDd+dYuSyDwlPe8pGbqQGLCDk0TVyHQ=) 4: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:3c:05:25:24:70:dd:7e:9e:96:70:e3:d0:fb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6 Validity Not Before: Dec 24 03:00:42 2025 GMT Not After : Dec 25 03:00:42 2025 GMT Subject: CN=5de7965591e6719be6c73e1837689717202cb7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:3a:e8:50:91:e4:0f:37:1a:f5:95:0f:cb: 99:65:e3:cd:aa:cf:8e:4d:ad:10:c8:95:65:85:be: 36:d1:c6:39:e9:04:7a:78:64:78:e4:a9:96:dd:38: 76:d3:b0:d2:e7:26:4c:bc:6e:bc:7f:d3:50:a1:48: 39:6e:c7:e5:31:44:81:40:eb:e1:b9:08:7b:31:31: 36:b9:a9:d9:07:21:c6:89:8d:4e:25:7b:a4:03:02: 57:52:8c:9f:f5:51:14:f5:e0:a5:95:08:3d:2e:d5: 1f:87:c1:f7:f1:99:a3:5e:0a:56:8c:f0:a7:54:30: a8:25:cd:5c:58:0b:fd:39:87:74:f5:3a:c6:eb:4b: 78:b2:70:02:e1:e2:75:64:7e:4a:37:2e:95:16:53: 55:aa:c0:db:90:04:a2:48:60:23:be:83:e7:65:55: 7c:a5:92:ad:44:e4:88:b9:1d:8f:a3:5d:6a:c6:45: 62:7d:be:19:51:79:9e:9c:6b:4c:7d:bc:07:74:7f: 21:d0:ef:02:df:99:6d:68:d7:6c:b3:cc:01:01:2b: 7f:43:43:cb:71:90:d6:82:34:c2:4f:1e:24:a8:e7: f7:1c:1b:ee:ef:f3:32:2b:c3:db:45:57:21:4a:bc: 84:9c:d5:38:29:0d:93:53:dd:e7:88:f6:82:31:77: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E7:96:55:91:E6:71:9B:E6:C7:3E:18:37:68:97:17:20:2C:B7:B6 X509v3 Authority Key Identifier: keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f9:79:1f:20:ba:d3:a4:e9:cc:50:e5:d5:95:e8:8e:84:a6: 00:13:2f:bd:5b:cb:9e:b6:d9:44:ff:40:c9:23:13:55:a3:de: ab:12:f3:87:d5:64:60:d9:ab:54:fe:63:f1:6c:02:15:54:6b: 94:f9:e0:43:44:d5:17:f7:66:6b:c7:0a:a8:f5:b9:ba:16:eb: 46:b8:19:4b:5b:95:9f:4c:62:88:9a:8f:21:38:4e:7f:6d:db: 79:e3:f6:72:f0:39:c7:33:f1:53:33:5f:31:00:1c:5b:5e:c2: 62:72:98:a8:83:47:21:ff:59:c7:f8:a4:67:90:cf:93:74:e9: 2f:b6:68:bd:5d:87:9a:b8:d0:15:c0:41:a1:a0:f2:a9:ae:db: 6b:87:78:d8:cc:1b:62:e3:c8:a4:e6:a5:ac:9d:e4:cf:80:0b: 10:b0:e2:14:c9:67:a7:67:6e:46:be:7b:be:ab:df:1d:46:81: df:24:fb:db:da:75:13:1d:6c:43:94:76:bc:d1:1f:b7:c4:99: 82:5f:8b:7b:53:54:97:87:2c:fb:5c:59:5e:15:97:f8:be:54: cc:44:24:9d:4b:30:9e:09:1e:52:17:ef:dd:ad:d8:68:2f:b4: 77:f9:9f:d9:a1:78:77:c3:05:83:db:97:63:40:9f:20:5f:0b: 88:f5:c9:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTTwFJSRw3X6elnDj0PttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2 ZjYyZDYwHhcNMjUxMjI0MDMwMDQyWhcNMjUxMjI1MDMwMDQyWjAzMTEwLwYDVQQD Eyg1ZGU3OTY1NTkxZTY3MTliZTZjNzNlMTgzNzY4OTcxNzIwMmNiN2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cs66FCR5A83GvWVD8uZZePNqs+O Ta0QyJVlhb420cY56QR6eGR45KmW3Th207DS5yZMvG68f9NQoUg5bsflMUSBQOvh uQh7MTE2uanZByHGiY1OJXukAwJXUoyf9VEU9eCllQg9LtUfh8H38ZmjXgpWjPCn VDCoJc1cWAv9OYd09TrG60t4snAC4eJ1ZH5KNy6VFlNVqsDbkASiSGAjvoPnZVV8 pZKtROSIuR2Po11qxkVifb4ZUXmenGtMfbwHdH8h0O8C35ltaNdss8wBASt/Q0PL cZDWgjTCTx4kqOf3HBvu7/MyK8PbRVchSryEnNU4KQ2TU93niPaCMXewPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3nllWR5nGb5sc+GDdolxcgLLe2MB8GA1UdIwQY MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct NDAyMjM4NjM4ZWEzLzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPl5HyC6 06TpzFDl1ZXojoSmABMvvVvLnrbZRP9AySMTVaPeqxLzh9VkYNmrVP5j8WwCFVRr lPngQ0TVF/dma8cKqPW5uhbrRrgZS1uVn0xiiJqPIThOf23beeP2cvA5xzPxUzNf MQAcW17CYnKYqINHIf9Zx/ikZ5DPk3TpL7ZovV2HmrjQFcBBoaDyqa7ba4d42Mwb YuPIpOalrJ3kz4ALELDiFMlnp2duRr57vqvfHUaB3yT729p1Ex1sQ5R2vNEft8SZ gl+Le1NUl4cs+1xZXhWX+L5UzEQknUswngkeUhfv3a3YaC+0d/mf2aF4d8MFg9uX Y0CfIF8LiPXJMg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:51:59 2025 by rpki-client