This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft File: xJkOwgER9C-2LzmoHHOSqSGVW_I.mft (raw, json) Hash identifier: lgmfMivWFa2IcUI/Y57/kIhDTcMD/ikRJvCv2yJGyUQ= Subject key identifier: 1F:01:5E:AB:23:8B:99:23:F2:B4:C4:7C:8C:54:99:1E:4A:E0:1C:91 Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2 Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2 Certificate serial: 019B3AFE2E942A73E84F40721CE686EFC3FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft Manifest number: 03E8 Signing time: Sat 20 Dec 2025 09:01:35 +0000 Manifest this update: Sat 20 Dec 2025 09:01:35 +0000 Manifest next update: Sun 21 Dec 2025 09:01:35 +0000 Files and hashes: 1: S6SgkEKXXupg9NGyg85ew2MKuNo.roa (hash: Ccy6wkPiSmvGfzLUcrIC/arlCjWDtB/tLTVQ150opBk=) 2: xJkOwgER9C-2LzmoHHOSqSGVW_I.crl (hash: 2kTktIykuLq5kZH9kdOiioOoXfqLlNRFo2lbpLg395Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:2e:94:2a:73:e8:4f:40:72:1c:e6:86:ef:c3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2 Validity Not Before: Dec 20 09:01:35 2025 GMT Not After : Dec 21 09:01:35 2025 GMT Subject: CN=1f015eab238b9923f2b4c47c8c54991e4ae01c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:6d:12:79:b6:5a:6c:05:e9:4a:a5:6c:16: 51:ea:c9:8b:2a:2a:10:fa:5a:c5:95:2f:2b:7c:fd: ae:d0:df:a5:42:05:16:8b:cf:6e:f3:00:67:26:53: b5:16:26:cb:99:f7:76:68:9a:d7:b7:61:81:5a:d6: fd:93:2b:7e:bf:72:7c:dc:69:dc:37:c4:a4:17:a6: b4:31:2e:d8:6d:85:22:30:d3:11:b4:7e:a8:6d:c2: ed:97:bf:c1:49:6e:c8:61:f9:79:1a:b8:0b:5d:3f: 50:2f:4f:27:f5:35:bd:13:f0:a5:2f:cc:2f:1e:fb: 91:be:50:dc:fc:05:34:24:3b:4b:c1:00:c3:65:71: fc:b3:3d:96:c8:c8:5f:fb:d7:a8:0a:30:7b:cb:aa: db:cd:7b:44:07:44:73:b6:35:02:9d:99:28:2d:18: d0:c1:a0:55:af:24:e3:e6:7b:73:ca:ea:59:a0:49: ab:a7:fe:b8:93:92:c3:77:7e:31:dc:2b:ba:3b:88: 6d:a0:1f:13:4e:98:38:83:3e:a1:38:ab:ff:01:ba: bb:3a:aa:f4:17:f7:46:e7:e6:23:a1:27:92:ee:93: 5b:8a:3a:db:0e:53:ad:30:1f:a2:b5:f4:68:d3:fd: 40:14:c9:7b:36:6b:7e:4a:ba:91:3c:1c:d6:ee:37: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:01:5E:AB:23:8B:99:23:F2:B4:C4:7C:8C:54:99:1E:4A:E0:1C:91 X509v3 Authority Key Identifier: keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9d:fe:49:71:84:9c:20:3c:98:a4:db:65:ca:69:2e:0e:63: 53:35:60:d5:4b:a9:25:c4:53:8b:f8:b0:b2:f7:d6:94:6e:1b: cb:69:d9:a0:c6:df:29:c9:6a:5e:81:64:02:2f:36:4f:af:e0: f3:8f:ea:cc:88:35:25:81:c4:27:28:52:5c:26:d1:12:5e:87: f0:50:3e:78:96:e2:6d:ec:dd:26:e8:33:76:07:88:b4:45:87: 6d:dd:99:8c:41:83:3a:0c:94:e1:b8:61:b2:59:e3:dd:54:a4: 8d:88:40:d2:00:c7:07:43:cb:10:68:05:ae:d0:9b:07:9b:e5: 26:0c:c4:30:32:c9:86:18:6b:87:92:91:66:62:f6:5a:00:42: 11:34:a5:a7:4e:62:2a:b2:98:87:20:49:3f:cf:c0:4f:75:9f: 78:6c:87:20:18:38:86:ca:dc:46:a2:37:cc:13:95:2f:03:87: 7d:cc:5d:f1:96:fa:5d:47:bc:29:90:1e:7c:f7:61:47:de:6f: 30:8c:73:7d:f8:16:43:36:79:9c:46:02:43:17:39:3e:25:bb: cc:fc:d3:33:2e:70:18:9e:ca:62:d2:02:db:f2:5e:2d:9b:15: 7f:18:bc:9e:0a:8e:9a:2e:bb:b8:19:72:45:67:a4:1e:40:eb: c3:53:fd:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/i6UKnPoT0ByHOaG78P8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OTkwZWMyMDExMWY0MmZiNjJmMzlhODFjNzM5MmE5MjE5 NTViZjIwHhcNMjUxMjIwMDkwMTM1WhcNMjUxMjIxMDkwMTM1WjAzMTEwLwYDVQQD EygxZjAxNWVhYjIzOGI5OTIzZjJiNGM0N2M4YzU0OTkxZTRhZTAxYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn1tEnm2WmwF6UqlbBZR6smLKioQ +lrFlS8rfP2u0N+lQgUWi89u8wBnJlO1FibLmfd2aJrXt2GBWtb9kyt+v3J83Gnc N8SkF6a0MS7YbYUiMNMRtH6obcLtl7/BSW7IYfl5GrgLXT9QL08n9TW9E/ClL8wv HvuRvlDc/AU0JDtLwQDDZXH8sz2WyMhf+9eoCjB7y6rbzXtEB0RztjUCnZkoLRjQ waBVryTj5ntzyupZoEmrp/64k5LDd34x3Cu6O4htoB8TTpg4gz6hOKv/Abq7Oqr0 F/dG5+YjoSeS7pNbijrbDlOtMB+itfRo0/1AFMl7Nmt+SrqRPBzW7jcteQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8BXqsji5kj8rTEfIxUmR5K4ByRMB8GA1UdIwQY MBaAFMSZDsIBEfQvti85qBxzkqkhlVvyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEprT3dnRVI5Qy0yTHptb0hIT1NxU0dWV19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85YzdjZTQtMmNkNC00ODU0LTg4NDAt YjBmZTkyMjFlZmI3LzEveEprT3dnRVI5Qy0yTHptb0hIT1NxU0dWV19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85YzdjZTQtMmNkNC00ODU0LTg4NDAtYjBmZTkyMjFlZmI3 LzEveEprT3dnRVI5Qy0yTHptb0hIT1NxU0dWV19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZ3+SXGE nCA8mKTbZcppLg5jUzVg1UupJcRTi/iwsvfWlG4by2nZoMbfKclqXoFkAi82T6/g 84/qzIg1JYHEJyhSXCbREl6H8FA+eJbibezdJugzdgeItEWHbd2ZjEGDOgyU4bhh slnj3VSkjYhA0gDHB0PLEGgFrtCbB5vlJgzEMDLJhhhrh5KRZmL2WgBCETSlp05i KrKYhyBJP8/AT3WfeGyHIBg4hsrcRqI3zBOVLwOHfcxd8Zb6XUe8KZAefPdhR95v MIxzffgWQzZ5nEYCQxc5PiW7zPzTMy5wGJ7KYtIC2/JeLZsVfxi8ngqOmi67uBly RWekHkDrw1P9rQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:15:34 2025 by rpki-client