This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json) Hash identifier: 2weIPZE7YtI0uxqe/D4Nu3/ir80S3+ERztx+2XKpZvA= Subject key identifier: 3C:0D:AF:89:11:62:C7:45:02:F9:18:73:A9:5A:85:32:18:EF:95:78 Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Certificate serial: 019B3D5A06C1DA27D058EC9F4EBD339B33D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft Manifest number: 08F4 Signing time: Sat 20 Dec 2025 20:01:08 +0000 Manifest this update: Sat 20 Dec 2025 20:01:08 +0000 Manifest next update: Sun 21 Dec 2025 20:01:08 +0000 Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=) 2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: vKtDssFCZh8ABMrjsHnNX2FRyYR+Fp1UaQAnYwb0zZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:06:c1:da:27:d0:58:ec:9f:4e:bd:33:9b:33:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Validity Not Before: Dec 20 20:01:08 2025 GMT Not After : Dec 21 20:01:08 2025 GMT Subject: CN=3c0daf891162c74502f91873a95a853218ef9578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:24:f6:86:90:52:94:9b:c0:ac:13:ac:d6: 97:d4:bd:b6:ac:30:7a:67:7b:b3:4b:0f:c8:4c:ae: 0e:ab:ec:49:a6:5b:b7:be:2f:8c:07:e0:71:90:71: c7:b6:ee:97:c0:21:82:8f:67:c7:37:69:c9:75:4a: a3:af:1c:b0:54:f9:d4:62:85:71:1b:38:5b:f4:e8: 32:6e:ca:cd:4d:b3:91:03:c8:44:1b:47:7e:ae:5d: 93:3e:73:46:ae:20:17:41:83:b0:3e:5f:32:5e:53: 50:25:d8:dc:39:93:49:b5:97:c9:3e:a9:ce:ed:13: 76:38:0a:b1:af:dc:2c:7c:fe:0e:ce:cf:9b:bd:d8: 94:91:bd:2d:6a:4c:bb:1e:59:a1:ba:43:1c:06:b3: ad:4d:90:3e:c9:89:a4:b8:1c:8d:b8:2f:08:40:b6: 81:c6:c6:f4:78:c7:51:ac:49:4c:4e:e0:14:93:d6: d1:29:cb:03:d1:68:bb:60:3e:b6:78:f8:94:24:04: 8c:c2:77:2d:ee:1e:cf:8e:64:25:6e:e0:21:67:68: 42:76:10:6a:9f:29:d6:5c:62:2f:b8:0a:d7:4a:ab: 80:49:13:b5:5c:71:85:42:d1:3f:90:be:a9:8f:03: 05:ef:17:fe:eb:9c:5b:a2:be:31:ca:6b:3a:52:3e: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0D:AF:89:11:62:C7:45:02:F9:18:73:A9:5A:85:32:18:EF:95:78 X509v3 Authority Key Identifier: keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c6:61:31:72:08:98:8b:52:02:d1:89:e7:ce:02:b5:62:6b: 29:7c:c7:0f:3b:18:a3:35:b2:ac:05:e1:bd:f3:57:51:b4:22: 6b:b9:c7:41:8d:22:36:89:aa:28:3f:e7:c3:c1:2e:f9:91:c1: 40:af:e2:93:9f:08:35:5e:85:7c:a2:30:c2:17:b4:5a:b9:05: 72:29:13:11:94:e6:2d:9d:07:24:98:ef:04:6a:e4:77:34:e1: cc:a4:d7:c9:f4:31:c4:52:1c:58:fd:82:9c:7c:5f:09:86:49: 11:c7:45:6c:db:0d:65:b0:25:99:b2:7f:9c:4a:12:52:89:b4: 81:8c:b1:1e:ed:72:95:e8:33:59:d6:c7:a6:d4:16:9a:ad:3d: 1e:c1:d1:e4:c2:f5:d3:30:31:b5:3a:2f:c7:a2:16:fd:ce:2d: 63:d4:ff:61:8a:8d:90:28:4c:fe:00:6f:75:12:78:13:35:31: 26:09:10:c5:77:3a:49:0a:4a:5e:fc:9a:07:f2:29:4f:40:11: bf:0e:49:c8:3f:80:73:5f:9e:fd:f1:dc:11:f6:f8:81:0b:d3: f9:95:ee:93:b0:66:27:00:ca:99:e6:d8:f5:3d:00:8a:1d:87: 2b:84:bd:a3:31:6d:fd:a1:a9:03:b0:8f:36:97:45:f1:30:8f: 6e:44:52:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgbB2ifQWOyfTr0zmzPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZjFmMjE0ZmIyMmNjNTM2MTI4ZjVkZTRhYTAxN2E4Nzg4 MGYyODUwHhcNMjUxMjIwMjAwMTA4WhcNMjUxMjIxMjAwMTA4WjAzMTEwLwYDVQQD EygzYzBkYWY4OTExNjJjNzQ1MDJmOTE4NzNhOTVhODUzMjE4ZWY5NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvok9oaQUpSbwKwTrNaX1L22rDB6 Z3uzSw/ITK4Oq+xJplu3vi+MB+BxkHHHtu6XwCGCj2fHN2nJdUqjrxywVPnUYoVx Gzhb9OgybsrNTbORA8hEG0d+rl2TPnNGriAXQYOwPl8yXlNQJdjcOZNJtZfJPqnO 7RN2OAqxr9wsfP4Ozs+bvdiUkb0taky7HlmhukMcBrOtTZA+yYmkuByNuC8IQLaB xsb0eMdRrElMTuAUk9bRKcsD0Wi7YD62ePiUJASMwnct7h7PjmQlbuAhZ2hCdhBq nynWXGIvuArXSquASRO1XHGFQtE/kL6pjwMF7xf+65xbor4xyms6Uj5+GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwNr4kRYsdFAvkYc6lahTIY75V4MB8GA1UdIwQY MBaAFMTx8hT7IsxTYSj13kqgF6h4gPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAt ZWNmNGY0MjBjOThhLzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAtZWNmNGY0MjBjOThh LzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksZhMXII mItSAtGJ584CtWJrKXzHDzsYozWyrAXhvfNXUbQia7nHQY0iNomqKD/nw8Eu+ZHB QK/ik58INV6FfKIwwhe0WrkFcikTEZTmLZ0HJJjvBGrkdzThzKTXyfQxxFIcWP2C nHxfCYZJEcdFbNsNZbAlmbJ/nEoSUom0gYyxHu1ylegzWdbHptQWmq09HsHR5ML1 0zAxtTovx6IW/c4tY9T/YYqNkChM/gBvdRJ4EzUxJgkQxXc6SQpKXvyaB/IpT0AR vw5JyD+Ac1+e/fHcEfb4gQvT+ZXuk7BmJwDKmebY9T0Aih2HK4S9ozFt/aGpA7CP NpdF8TCPbkRS0Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:21 2025 by rpki-client