This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json) Hash identifier: lL6jHiUNqnYF3325rO0HwFXDiTrsWRZzeDty3w33yLI= Subject key identifier: E9:16:C1:66:95:02:E0:8B:E2:F9:EC:22:7E:7F:FC:05:4E:D2:93:39 Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Certificate serial: 019B397DB6D0369049DBC4F36A0D14BFA79C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft Manifest number: 129B Signing time: Sat 20 Dec 2025 02:01:38 +0000 Manifest this update: Sat 20 Dec 2025 02:01:38 +0000 Manifest next update: Sun 21 Dec 2025 02:01:38 +0000 Files and hashes: 1: 6Cj8H-p47dvCNhMHuB2pJCnFujI.roa (hash: etPYOFcz4B7xl7Yvi1fe6awoP2aM1hrkcXjgzl1XW2c=) 2: iNe91R6y78p-QSDXxoxxAjDA_Og.roa (hash: HR8YO++Y/qB7B+dcbqN5/SgR3c8dd7aULLQGyyrd4j8=) 3: tK6dqORitjCE9QSeqzn0Dd8QVZY.roa (hash: d9AZ6zPbtFV6hygn8HjICm+c22UNHE83e16IdW/3Zl4=) 4: uHPtlU3qdVrOCAD4M6mdiGrDzqE.roa (hash: AeMGCTul+AJixElOuUQNIP59RKHExeTwQIkWiWRzSzs=) 5: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: vOIfI1j8n8JFUWxKjpNDPCBNKniRLDI0JwT84lWBp58=) 6: ydG33gjsDAOMifL-LMV8iBUmj5I.roa (hash: mGme2Sxc1/UzWWlnkXXzLuxU/TszYoE3oiJl3a+U4Tg=) 7: z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa (hash: Z5tMUZHaMA8Bu87tPX511k88Z6BiQWZ5tSalbDOuIEw=) 8: zbII4RxH17JoDR9ukyJuiEde7IM.roa (hash: xBWfldiZFP31dGe7bTsuSEU+4Mx9LEr9W5jDRfUDGfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:b6:d0:36:90:49:db:c4:f3:6a:0d:14:bf:a7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Validity Not Before: Dec 20 02:01:38 2025 GMT Not After : Dec 21 02:01:38 2025 GMT Subject: CN=e916c1669502e08be2f9ec227e7ffc054ed29339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:cf:b5:45:9c:59:21:69:6c:23:cc:be:d5: 1a:3c:07:5f:2e:bb:a8:62:77:10:a6:aa:8b:73:3c: 16:0b:73:5a:e0:f5:a3:3d:25:9a:c8:c1:2e:c9:3a: 6c:70:73:6d:5d:67:15:50:19:d2:1f:bf:d8:1d:45: 09:e2:df:80:6f:16:0e:57:56:ce:f3:f4:af:bb:2a: 5b:08:79:b5:2d:5a:33:f9:81:cf:28:85:40:00:22: 9b:bb:40:66:72:c0:e0:a3:40:cf:3d:8c:94:65:96: 43:15:6d:5e:80:9b:b0:c4:87:ff:75:fd:f8:68:49: 7b:45:a9:f3:c8:54:a4:55:da:ba:08:68:21:36:77: 7c:66:d3:c8:35:22:e1:7e:21:aa:7a:8a:7f:c2:2a: 2b:c0:bd:a0:92:02:94:4f:22:c8:c4:d2:48:95:38: db:18:a1:1e:b8:4f:34:ec:d5:47:af:c0:0d:04:91: 24:9e:b0:6d:96:70:8a:39:ec:5d:e2:8e:8e:cc:ae: 89:24:77:cd:b4:c4:23:a1:c2:43:de:48:16:58:c6: 19:da:84:ab:59:f7:3a:b6:6a:13:8a:05:52:ab:2d: ee:4f:92:ba:fc:84:2c:89:3d:6b:70:93:38:8c:ca: 40:36:5f:8c:bf:60:fc:d7:7f:fc:3b:5a:60:04:b3: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:16:C1:66:95:02:E0:8B:E2:F9:EC:22:7E:7F:FC:05:4E:D2:93:39 X509v3 Authority Key Identifier: keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1f:08:0b:61:97:34:30:94:51:73:46:7d:cc:a4:e5:8b:25: 53:fd:8a:4e:ba:50:85:0d:34:8c:44:fe:9d:f3:85:61:30:d5: c3:19:2a:1c:5f:b9:ad:2a:c2:a0:55:b7:12:6a:d8:8d:58:b8: 8d:aa:91:b0:24:fe:56:42:56:7c:0e:c6:a7:86:da:0d:82:8f: f3:8f:8b:ea:82:3f:e4:b6:c7:eb:b1:d5:e6:15:29:db:66:a4: f2:e9:57:31:ac:37:fd:74:6b:7c:53:9b:0e:85:a4:2b:71:07: 8f:27:e7:c5:e4:0c:f4:91:4a:a1:13:a4:5e:3a:03:e3:a8:0f: 23:25:15:9c:4b:af:77:ba:60:a6:3a:21:74:76:b0:9e:63:c8: ba:8a:ac:6c:46:7a:5b:19:b8:be:16:2c:1a:da:20:eb:34:ab: 79:88:71:eb:8f:52:cd:33:10:83:a3:d2:c5:c4:b3:9b:b7:73: e8:f8:37:4d:23:7a:63:07:dd:c2:90:e6:66:dd:13:11:fe:fc: c5:58:e2:a8:39:0c:b9:7d:63:34:f2:57:1a:fc:3b:dc:92:9d: c4:81:7d:0c:6a:b3:cf:21:ae:56:9d:00:eb:a4:38:43:8e:f6: b6:5f:ad:29:b8:21:6f:aa:3c:5a:72:b6:b9:13:84:a9:c5:a5: 15:d3:18:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fbbQNpBJ28Tzag0Uv6ecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk NTBhNjMwHhcNMjUxMjIwMDIwMTM4WhcNMjUxMjIxMDIwMTM4WjAzMTEwLwYDVQQD EyhlOTE2YzE2Njk1MDJlMDhiZTJmOWVjMjI3ZTdmZmMwNTRlZDI5MzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPnPtUWcWSFpbCPMvtUaPAdfLruo YncQpqqLczwWC3Na4PWjPSWayMEuyTpscHNtXWcVUBnSH7/YHUUJ4t+AbxYOV1bO 8/SvuypbCHm1LVoz+YHPKIVAACKbu0BmcsDgo0DPPYyUZZZDFW1egJuwxIf/df34 aEl7RanzyFSkVdq6CGghNnd8ZtPINSLhfiGqeop/wiorwL2gkgKUTyLIxNJIlTjb GKEeuE807NVHr8ANBJEknrBtlnCKOexd4o6OzK6JJHfNtMQjocJD3kgWWMYZ2oSr Wfc6tmoTigVSqy3uT5K6/IQsiT1rcJM4jMpANl+Mv2D813/8O1pgBLOlcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkWwWaVAuCL4vnsIn5//AVO0pM5MB8GA1UdIwQY MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt ZWQ1ZDZjZThkN2U4LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4 LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVx8IC2GX NDCUUXNGfcyk5YslU/2KTrpQhQ00jET+nfOFYTDVwxkqHF+5rSrCoFW3EmrYjVi4 jaqRsCT+VkJWfA7Gp4baDYKP84+L6oI/5LbH67HV5hUp22ak8ulXMaw3/XRrfFOb DoWkK3EHjyfnxeQM9JFKoROkXjoD46gPIyUVnEuvd7pgpjohdHawnmPIuoqsbEZ6 Wxm4vhYsGtog6zSreYhx649SzTMQg6PSxcSzm7dz6Pg3TSN6YwfdwpDmZt0TEf78 xVjiqDkMuX1jNPJXGvw73JKdxIF9DGqzzyGuVp0A66Q4Q472tl+tKbghb6o8WnK2 uROEqcWlFdMYew== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:43 2025 by rpki-client