This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json) Hash identifier: cmQ1SF8xNjWpxEGgEzMwQdwNEP+ovAE7CRjkqGqo+9g= Subject key identifier: 77:47:93:70:44:12:3D:8D:F8:BB:C7:52:C8:C5:E0:12:B6:A5:8F:14 Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Certificate serial: 019B3C7DD44B6ECF0101843E27E84065FE2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft Manifest number: 16EA Signing time: Sat 20 Dec 2025 16:00:37 +0000 Manifest this update: Sat 20 Dec 2025 16:00:37 +0000 Manifest next update: Sun 21 Dec 2025 16:00:37 +0000 Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=) 2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=) 3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=) 4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=) 5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=) 6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=) 7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=) 8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: EgSwm4HVSPuwTZzYNtv8rqvoBw6kj4CRjR8Fibh3gPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:d4:4b:6e:cf:01:01:84:3e:27:e8:40:65:fe:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Validity Not Before: Dec 20 16:00:37 2025 GMT Not After : Dec 21 16:00:37 2025 GMT Subject: CN=7747937044123d8df8bbc752c8c5e012b6a58f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:df:51:66:4e:3a:90:e8:17:6d:50:93:b3: 0d:0e:a6:a5:b4:5e:1b:6e:88:72:86:6d:7d:2e:50: 30:c4:1d:26:85:22:45:17:aa:d8:6c:b7:cc:63:82: 53:1f:3a:5e:e5:3f:ec:7a:06:ed:ab:d3:bb:47:f6: 7b:1d:8d:02:23:ba:b9:17:49:1e:f1:2d:d5:d5:ff: 78:a8:3f:80:fb:6d:b2:6e:40:88:45:c9:9a:5c:98: 9f:93:bb:5c:de:b9:95:b6:ec:23:fe:a5:47:f7:b6: 3e:34:da:29:f2:91:12:9c:d3:2d:b5:62:b1:a8:e4: 48:8f:84:51:ea:96:d5:57:8c:09:6a:2b:db:b6:64: 90:97:e1:45:73:d9:a5:d8:d7:81:53:be:76:d6:53: 56:2b:d5:64:bd:90:37:10:e8:03:eb:57:ff:6f:d3: b0:cf:88:e7:0b:e6:89:8d:86:fa:54:03:35:f0:97: c5:25:c7:d2:3b:71:b3:a4:ee:cc:c2:bc:6e:90:65: 1a:ca:35:be:04:df:6d:d7:46:96:80:55:ea:6b:f5: ae:30:2d:86:bf:a9:1b:c3:91:12:bb:4e:6b:73:17: a5:f1:76:c0:5f:de:1c:a9:24:b1:3f:4c:88:49:6c: 88:7d:a6:58:04:bf:80:76:17:c0:ed:8c:2f:71:e5: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:47:93:70:44:12:3D:8D:F8:BB:C7:52:C8:C5:E0:12:B6:A5:8F:14 X509v3 Authority Key Identifier: keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:10:67:3b:f8:23:6f:85:bf:c6:d8:fd:7a:1e:7f:33:30:40: 48:e9:b2:7d:4c:18:04:1f:34:14:3f:9b:4e:8f:b2:9d:73:02: 23:a2:c0:18:29:c5:91:31:de:9c:f9:2c:25:58:89:18:9b:b6: 01:ad:c1:fd:52:bc:3b:3d:0e:ab:fa:be:55:fb:d7:62:dc:b4: 15:a7:95:49:ef:6b:80:eb:b2:02:40:bf:80:4c:e6:40:f9:e6: 82:4b:00:85:28:9e:e3:6b:58:d8:50:c7:b9:6e:a8:c0:58:89: 07:c3:f8:b9:ed:40:9c:4f:a3:4d:f7:5a:1a:d3:fc:e1:2c:9c: 26:fb:0e:67:b5:c1:b9:1a:b6:6e:06:d3:88:49:95:0f:dd:3c: 83:26:94:ac:e3:32:77:77:7e:ff:4a:64:10:5f:ce:a8:74:81: 94:00:4b:a6:96:79:f8:f5:b1:e9:e9:d4:a7:77:33:b3:63:d2: d3:53:83:0f:7d:4d:ac:72:65:35:e0:50:26:22:91:a0:5c:7b: 04:5b:2d:f3:cb:9a:41:38:6e:6c:02:a9:69:78:f7:27:51:a0: 19:ee:f0:07:bf:16:49:82:5b:42:04:f4:af:44:49:68:bf:5f: e0:bc:da:9c:60:a9:e7:49:08:30:1a:41:3a:ef:f9:74:aa:ea: 13:21:d6:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fdRLbs8BAYQ+J+hAZf4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw ZDVkZDkwHhcNMjUxMjIwMTYwMDM3WhcNMjUxMjIxMTYwMDM3WjAzMTEwLwYDVQQD Eyg3NzQ3OTM3MDQ0MTIzZDhkZjhiYmM3NTJjOGM1ZTAxMmI2YTU4ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+3fUWZOOpDoF21Qk7MNDqaltF4b bohyhm19LlAwxB0mhSJFF6rYbLfMY4JTHzpe5T/segbtq9O7R/Z7HY0CI7q5F0ke 8S3V1f94qD+A+22ybkCIRcmaXJifk7tc3rmVtuwj/qVH97Y+NNop8pESnNMttWKx qORIj4RR6pbVV4wJaivbtmSQl+FFc9ml2NeBU7521lNWK9VkvZA3EOgD61f/b9Ow z4jnC+aJjYb6VAM18JfFJcfSO3GzpO7MwrxukGUayjW+BN9t10aWgFXqa/WuMC2G v6kbw5ESu05rcxel8XbAX94cqSSxP0yISWyIfaZYBL+AdhfA7YwvceULJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdHk3BEEj2N+LvHUsjF4BK2pY8UMB8GA1UdIwQY MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt OTkzMGYyMTk0YTBlLzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRBnO/gj b4W/xtj9eh5/MzBASOmyfUwYBB80FD+bTo+ynXMCI6LAGCnFkTHenPksJViJGJu2 Aa3B/VK8Oz0Oq/q+VfvXYty0FaeVSe9rgOuyAkC/gEzmQPnmgksAhSie42tY2FDH uW6owFiJB8P4ue1AnE+jTfdaGtP84SycJvsOZ7XBuRq2bgbTiEmVD908gyaUrOMy d3d+/0pkEF/OqHSBlABLppZ5+PWx6enUp3czs2PS01ODD31NrHJlNeBQJiKRoFx7 BFst88uaQThubAKpaXj3J1GgGe7wB78WSYJbQgT0r0RJaL9f4LzanGCp50kIMBpB Ou/5dKrqEyHWaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:20 2025 by rpki-client