This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json) Hash identifier: UqDq6tzWUPWh689lJbLgPsUlCGnP/WVRKafdtHXK6sQ= Subject key identifier: 1A:73:8E:96:8A:0B:B3:13:D4:C3:65:65:38:F7:71:E5:68:32:B4:D0 Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38 Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38 Certificate serial: 019B6EB43B3E2D100CA44CE28471685D0675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft Manifest number: 0760 Signing time: Tue 30 Dec 2025 10:01:03 +0000 Manifest this update: Tue 30 Dec 2025 10:01:03 +0000 Manifest next update: Wed 31 Dec 2025 10:01:03 +0000 Files and hashes: 1: MjurembtvVeEftl3x1ofb2bHb8o.roa (hash: LMEfB1EahjyEN1vkkgX4Rq92rZ+ObZyJ1Ue8yFCn1Pk=) 2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: 3p+D0cxRt38EcDPK4bvvnlyi+9I8h06vKyVi/GFQ/tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:3b:3e:2d:10:0c:a4:4c:e2:84:71:68:5d:06:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38 Validity Not Before: Dec 30 10:01:03 2025 GMT Not After : Dec 31 10:01:03 2025 GMT Subject: CN=1a738e968a0bb313d4c3656538f771e56832b4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:6b:79:fb:7c:0e:bb:2b:e2:bb:ec:43:f4: 4c:63:f6:ac:a7:c5:68:b0:a4:29:9a:54:28:8b:9b: c8:b1:7a:c7:68:36:a4:f9:79:df:c2:4c:16:5b:6b: 37:58:09:fe:62:16:98:71:be:25:83:d5:66:6e:9e: 3e:f2:21:15:5c:61:aa:c5:ee:9a:84:b9:bd:2b:7c: a9:49:cd:79:81:a4:67:0b:95:57:39:47:0b:f6:88: c5:c4:2a:2a:f1:29:50:2f:e4:e4:f6:82:99:50:b0: f4:64:68:aa:2a:45:f7:fa:e8:fb:71:2f:78:66:c8: 87:54:1f:08:45:91:ab:41:19:98:6e:df:40:14:fb: d6:03:5c:e3:33:34:b3:4a:95:74:c6:b4:8b:3f:2d: 9f:9b:f4:f7:72:9e:ac:01:25:d2:26:58:af:59:b1: 57:13:18:fb:27:d6:0c:8a:e4:2d:59:69:cc:94:fa: 50:f5:79:37:d9:7d:2d:02:df:b0:df:8d:a1:51:20: 70:ae:aa:28:1b:12:f8:dc:3a:6a:a6:6d:ea:d9:b0: fe:cf:82:16:4c:60:fb:36:da:05:64:6d:4c:53:af: 0d:ae:7f:8f:17:d1:0f:0f:e0:ca:b8:28:ed:b0:25: fc:a0:1c:e1:4f:4a:0d:29:38:c3:6e:7f:72:87:ee: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:73:8E:96:8A:0B:B3:13:D4:C3:65:65:38:F7:71:E5:68:32:B4:D0 X509v3 Authority Key Identifier: keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ea:2b:f1:d8:61:a0:50:62:27:1d:15:1d:b1:e9:46:6d:68: 12:3a:61:20:d7:22:8e:b8:03:73:17:70:0f:22:53:94:cc:b1: 5c:59:14:a4:e7:de:c9:42:5c:11:23:30:b4:26:63:13:08:a7: 27:25:4c:32:61:6d:ba:58:af:09:c9:75:41:e8:b0:b0:c2:a4: 3a:af:07:b5:58:7b:f6:f4:95:23:92:67:47:73:54:f1:1f:35: d2:af:dd:99:70:fd:4e:fd:fc:ab:c0:69:14:d2:0a:d6:9b:23: e6:1d:53:ba:f5:04:0a:3a:91:f8:3b:54:2b:14:35:b5:f2:97: 30:05:86:f3:2f:f2:6b:fe:3e:c1:3e:c6:a7:d7:b7:cc:d6:2f: b6:1e:9e:77:1f:1e:6b:a6:a0:10:5b:79:66:90:b6:70:b5:c4: 5c:ea:86:f4:ce:d7:03:66:05:a8:44:70:8a:9a:dc:28:ad:8b: f5:b6:5b:1c:ad:1c:43:4f:28:b7:73:07:2a:a2:f4:a8:75:41: 32:8d:77:f9:3d:d6:d1:6b:e5:2c:8a:01:63:1c:e4:3b:15:89: 3b:66:39:be:53:f4:91:36:63:80:36:38:ed:a8:41:d9:3b:40: ee:ff:91:d2:c3:21:d2:f7:34:ec:03:36:16:4c:24:a1:11:92: b5:07:5e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutDs+LRAMpEzihHFoXQZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNGYxYTMyYTM3ZTA4MzkwMGFiYTU2MTcwOGU1MmFiMjM0 ZTNhMzgwHhcNMjUxMjMwMTAwMTAzWhcNMjUxMjMxMTAwMTAzWjAzMTEwLwYDVQQD EygxYTczOGU5NjhhMGJiMzEzZDRjMzY1NjUzOGY3NzFlNTY4MzJiNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNdreft8Drsr4rvsQ/RMY/asp8Vo sKQpmlQoi5vIsXrHaDak+XnfwkwWW2s3WAn+YhaYcb4lg9Vmbp4+8iEVXGGqxe6a hLm9K3ypSc15gaRnC5VXOUcL9ojFxCoq8SlQL+Tk9oKZULD0ZGiqKkX3+uj7cS94 ZsiHVB8IRZGrQRmYbt9AFPvWA1zjMzSzSpV0xrSLPy2fm/T3cp6sASXSJlivWbFX Exj7J9YMiuQtWWnMlPpQ9Xk32X0tAt+w342hUSBwrqooGxL43Dpqpm3q2bD+z4IW TGD7NtoFZG1MU68Nrn+PF9EPD+DKuCjtsCX8oBzhT0oNKTjDbn9yh+5jnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpzjpaKC7MT1MNlZTj3ceVoMrTQMB8GA1UdIwQY MBaAFF5PGjKjfgg5AKulYXCOUqsjTjo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQt NGMyYWNiNzgzMDllLzEvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQtNGMyYWNiNzgzMDll LzEvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeor8dhh oFBiJx0VHbHpRm1oEjphINcijrgDcxdwDyJTlMyxXFkUpOfeyUJcESMwtCZjEwin JyVMMmFtulivCcl1QeiwsMKkOq8HtVh79vSVI5JnR3NU8R810q/dmXD9Tv38q8Bp FNIK1psj5h1TuvUECjqR+DtUKxQ1tfKXMAWG8y/ya/4+wT7Gp9e3zNYvth6edx8e a6agEFt5ZpC2cLXEXOqG9M7XA2YFqERwiprcKK2L9bZbHK0cQ08ot3MHKqL0qHVB Mo13+T3W0WvlLIoBYxzkOxWJO2Y5vlP0kTZjgDY47ahB2TtA7v+R0sMh0vc07AM2 FkwkoRGStQde8Q== -----END CERTIFICATE-----Generated at Tue Dec 30 14:58:17 2025 by rpki-client