This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json) Hash identifier: z10JXBXvYzmnBQ6c/zICpSLIh5iD2BeqejfgSkJjMOs= Subject key identifier: 2B:19:1E:20:9A:72:EC:15:4B:A0:62:4E:57:56:0B:7C:37:1D:A4:89 Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c Certificate serial: 019B541872F4506058DAA9DE04F779377EE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft Manifest number: 018B Signing time: Thu 25 Dec 2025 06:00:46 +0000 Manifest this update: Thu 25 Dec 2025 06:00:46 +0000 Manifest next update: Fri 26 Dec 2025 06:00:46 +0000 Files and hashes: 1: gQKk2z-Dzs3tKEuXLdAqCr54-7I.roa (hash: BNZlAShTvOe5X3GGCboQNUQf+60pqpGUzqwC+woTCuQ=) 2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: vco6W0Wuvs6yyQNXnSA0hRmXWnRDmGZETV8n6Y2vraA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:72:f4:50:60:58:da:a9:de:04:f7:79:37:7e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c Validity Not Before: Dec 25 06:00:46 2025 GMT Not After : Dec 26 06:00:46 2025 GMT Subject: CN=2b191e209a72ec154ba0624e57560b7c371da489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:b9:74:18:76:51:54:a7:27:22:1d:4a:b8: c0:40:56:e2:0f:de:1c:ef:af:67:7a:a9:ba:f5:a4: f8:54:72:a4:94:33:e8:26:a4:42:68:a8:9c:6e:07: 8b:fd:99:28:2c:96:ec:6d:d9:80:17:fe:6a:92:52: 42:03:ba:3d:ce:08:9b:12:8e:40:dc:05:0f:5c:2d: 5a:90:48:8e:15:81:bc:ab:9c:0a:44:32:bf:9d:c9: a7:c1:68:c0:a5:1a:fd:7c:f3:c9:2d:86:04:ec:29: 31:a5:84:68:18:80:f7:84:d5:af:3c:37:85:1c:77: 97:ec:17:66:d6:f6:ef:4f:62:26:55:33:b8:be:f7: a3:24:2f:95:2c:60:1e:98:9a:e8:05:3f:b2:a1:58: b9:44:f2:4e:b2:80:58:93:93:67:0f:d2:20:56:68: 8b:50:8b:fb:c6:70:78:e7:1e:f0:4f:5f:c1:e4:42: 92:9b:92:41:5f:7a:d2:84:2b:c2:a1:fd:03:77:0d: 9b:b1:c0:7e:fa:49:7a:fd:dc:76:1a:1e:3b:6c:eb: ae:72:c9:5d:5d:66:8e:f2:b4:bb:c4:4f:fb:9c:d4: f3:ef:f7:98:c1:a4:8c:70:a0:ce:ce:cc:3d:d6:11: 48:04:33:23:bb:2b:f8:e3:a1:48:2f:13:e2:2b:c2: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:19:1E:20:9A:72:EC:15:4B:A0:62:4E:57:56:0B:7C:37:1D:A4:89 X509v3 Authority Key Identifier: keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:bc:63:4e:e4:25:3f:22:eb:ae:3f:14:b8:5e:f5:2d:06:69: 18:72:b0:fd:62:99:60:bd:31:7f:55:d7:63:34:fb:4a:d2:0f: 0c:b5:42:e7:2a:97:31:b2:1d:c6:17:f6:37:65:0e:12:e2:e4: 8d:a9:ae:28:93:5e:b1:bb:ce:fb:b0:74:ce:9d:6c:fe:1b:e5: 3c:61:59:a7:80:eb:f8:4b:1f:da:b4:13:f1:e8:3f:e2:d7:d1: 6b:02:d5:bb:c0:f0:fc:ea:fb:49:e3:da:88:9d:23:ae:58:8a: c6:87:12:27:3d:24:a4:85:91:0a:7a:a0:ec:5d:0e:e1:a7:0e: d5:f1:ef:2f:3c:39:83:03:5f:e3:ab:a0:de:27:d9:65:78:ac: 5a:0d:d6:fd:f2:52:17:f8:67:1b:5b:c2:8c:aa:ee:dd:e1:f9: 6f:4e:e3:76:17:76:1f:46:e8:ba:6a:24:23:5c:4b:f7:99:01: 34:b3:81:0c:8e:b2:d4:a6:86:26:82:85:e8:54:55:35:82:53: 04:e5:d0:a5:90:27:87:36:a0:0e:e7:c9:3f:5e:03:03:7e:c4: 98:13:19:de:bd:98:ea:e7:9d:39:54:4f:16:41:be:26:a2:c9: 6b:cc:d1:a8:c0:bd:68:bd:cf:2f:c1:31:a1:d0:49:8b:2c:33: 1e:ca:a3:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGHL0UGBY2qneBPd5N37kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZTEwYzdjYmZmZDc0ODhhOTZhMDJkNWM5MTJmOWY5MjU2 NGJiNWMwHhcNMjUxMjI1MDYwMDQ2WhcNMjUxMjI2MDYwMDQ2WjAzMTEwLwYDVQQD EygyYjE5MWUyMDlhNzJlYzE1NGJhMDYyNGU1NzU2MGI3YzM3MWRhNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6u5dBh2UVSnJyIdSrjAQFbiD94c 769neqm69aT4VHKklDPoJqRCaKicbgeL/ZkoLJbsbdmAF/5qklJCA7o9zgibEo5A 3AUPXC1akEiOFYG8q5wKRDK/ncmnwWjApRr9fPPJLYYE7CkxpYRoGID3hNWvPDeF HHeX7Bdm1vbvT2ImVTO4vvejJC+VLGAemJroBT+yoVi5RPJOsoBYk5NnD9IgVmiL UIv7xnB45x7wT1/B5EKSm5JBX3rShCvCof0Ddw2bscB++kl6/dx2Gh47bOuucsld XWaO8rS7xE/7nNTz7/eYwaSMcKDOzsw91hFIBDMjuyv446FILxPiK8KdkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsZHiCacuwVS6BiTldWC3w3HaSJMB8GA1UdIwQY MBaAFMThDHy//XSIqWoC1ckS+fklZLtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUt NDU4YmY1OTY4ZGQxLzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUtNDU4YmY1OTY4ZGQx LzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbxjTuQl PyLrrj8UuF71LQZpGHKw/WKZYL0xf1XXYzT7StIPDLVC5yqXMbIdxhf2N2UOEuLk jamuKJNesbvO+7B0zp1s/hvlPGFZp4Dr+Esf2rQT8eg/4tfRawLVu8Dw/Or7SePa iJ0jrliKxocSJz0kpIWRCnqg7F0O4acO1fHvLzw5gwNf46ug3ifZZXisWg3W/fJS F/hnG1vCjKru3eH5b07jdhd2H0boumokI1xL95kBNLOBDI6y1KaGJoKF6FRVNYJT BOXQpZAnhzagDufJP14DA37EmBMZ3r2Y6uedOVRPFkG+JqLJa8zRqMC9aL3PL8Ex odBJiywzHsqjww== -----END CERTIFICATE-----Generated at Thu Dec 25 12:48:24 2025 by rpki-client