This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft File: xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json) Hash identifier: ES8bCgoslQ6nKHmaFNfhKYQZNExGr3O8SqlJYtV1DCI= Subject key identifier: 7E:2A:4D:7F:F1:BD:77:30:73:B4:30:F7:52:2D:88:EE:51:0D:82:1B Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Certificate serial: 019B458170D00D8F31DC2132BE9D85FB8EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft Manifest number: 08BD Signing time: Mon 22 Dec 2025 10:01:09 +0000 Manifest this update: Mon 22 Dec 2025 10:01:09 +0000 Manifest next update: Tue 23 Dec 2025 10:01:09 +0000 Files and hashes: 1: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (hash: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=) 2: V3wGcwOVhN0tAMoLaOO8eyDkTKY.roa (hash: LoyanmiphfJJ/rxmnZ49vq4eY1guWePbQk/rQBxZgok=) 3: c0033PUKHcK0RGnP2G-A-PBcvHI.roa (hash: 2Ou36KzazZ/RW5paKom4FLZjeLVkyhsmjYIVTfOC2XI=) 4: eqHQLvrEyFem_zOL2dGPtQbOrHE.roa (hash: xkijKwZrCJTocpD11ugimO21ZJdJ5XVb/oBsAvogKmM=) 5: kPNpqlKlXSRN44fbkT0lmJ0OXx0.roa (hash: FyhtVVwzpFsgGl1UF2q6lWuO2wd0bFbhXtZPTezLBtQ=) 6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: pQVUs6tz7TdS+wXQt7g1nIm+pGa5N1zJ/QQ5HjUF/hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:70:d0:0d:8f:31:dc:21:32:be:9d:85:fb:8e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Validity Not Before: Dec 22 10:01:09 2025 GMT Not After : Dec 23 10:01:09 2025 GMT Subject: CN=7e2a4d7ff1bd773073b430f7522d88ee510d821b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:9b:4c:e1:be:bf:80:6e:ca:70:8d:34:c5: 5b:18:f7:88:25:59:65:14:24:a1:af:dd:a4:6a:3d: 43:c7:99:0d:d2:9f:8a:e3:61:50:32:cf:ea:bc:a6: 1b:04:a1:90:06:f7:47:cd:8a:2f:24:3c:c7:8b:71: 45:d4:51:44:c9:42:2f:c8:d2:93:94:ae:25:83:3e: ef:e7:f8:40:b9:66:28:d4:29:88:74:f3:ba:7e:98: 62:ed:59:de:92:9d:cb:e9:11:57:ed:79:27:1c:6f: ab:7d:cd:e3:7e:0b:44:9e:d9:b5:69:55:ad:d5:d9: 77:2c:4b:2d:99:5a:24:89:98:44:f2:89:07:89:ac: 4a:49:13:f2:d0:13:f3:3f:c5:1f:8a:e5:59:61:ff: d6:63:e4:94:00:58:da:f8:d4:7b:f9:51:97:cc:3e: 73:77:1e:45:5b:1e:c3:74:54:b6:de:b0:fb:23:d5: d8:d3:2f:28:68:0c:a5:ee:19:83:0e:bd:15:d6:bf: 15:36:38:39:a2:87:82:04:4d:09:55:ab:81:3f:07: a4:a2:0f:a5:03:6d:0d:fa:c9:1b:35:3c:80:5d:1e: 21:a7:15:25:9b:94:5a:cf:65:e4:43:60:cf:c6:5d: ce:7d:03:dc:3b:44:d0:93:cb:2c:c8:42:70:bd:37: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2A:4D:7F:F1:BD:77:30:73:B4:30:F7:52:2D:88:EE:51:0D:82:1B X509v3 Authority Key Identifier: keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:56:4a:86:3d:cb:32:14:36:71:b8:82:44:4e:88:1a:66:40: 83:2f:86:cf:6a:48:be:85:6e:59:8b:9a:ff:0f:0c:47:8b:0a: 92:f1:c1:7c:d6:83:0b:bc:da:5b:89:70:7d:58:83:b6:48:b7: 64:08:cf:d8:f1:f9:8d:36:d6:66:03:ea:56:f4:d5:c9:3d:4a: 1f:4a:76:07:68:1b:8a:fb:af:6e:94:f9:07:aa:7f:4d:96:9f: 48:38:4a:17:ab:7a:b7:e3:54:fd:78:a0:39:4f:ca:1f:f5:d4: a3:db:8f:c1:6a:36:ba:68:97:45:74:04:c9:de:ed:1d:ac:10: 93:e1:bf:52:3b:0a:55:11:b2:f6:d4:fb:fc:46:9d:ed:ee:d8: 53:c2:06:f9:1b:52:58:06:8b:ed:88:03:b0:74:0e:ff:b0:2a: 68:c3:2d:50:dd:ea:02:a6:91:47:7a:f3:8b:45:f2:a1:15:7a: 0c:67:6a:f8:d4:7f:95:00:51:e9:25:7d:c2:a9:bc:7a:8d:0f: e9:af:89:f5:77:a2:f6:01:ec:04:fb:9d:7f:29:6f:51:80:aa: c5:b7:8f:52:03:ee:44:98:10:66:24:aa:e5:25:7d:dc:51:42: 3e:08:a9:fc:03:26:b1:1d:be:7b:44:41:80:c9:76:98:5e:02: fc:a7:36:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgXDQDY8x3CEyvp2F+469MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj NjgxMzcwHhcNMjUxMjIyMTAwMTA5WhcNMjUxMjIzMTAwMTA5WjAzMTEwLwYDVQQD Eyg3ZTJhNGQ3ZmYxYmQ3NzMwNzNiNDMwZjc1MjJkODhlZTUxMGQ4MjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZebTOG+v4BuynCNNMVbGPeIJVll FCShr92kaj1Dx5kN0p+K42FQMs/qvKYbBKGQBvdHzYovJDzHi3FF1FFEyUIvyNKT lK4lgz7v5/hAuWYo1CmIdPO6fphi7Vnekp3L6RFX7XknHG+rfc3jfgtEntm1aVWt 1dl3LEstmVokiZhE8okHiaxKSRPy0BPzP8UfiuVZYf/WY+SUAFja+NR7+VGXzD5z dx5FWx7DdFS23rD7I9XY0y8oaAyl7hmDDr0V1r8VNjg5ooeCBE0JVauBPwekog+l A20N+skbNTyAXR4hpxUlm5Raz2XkQ2DPxl3OfQPcO0TQk8ssyEJwvTf9YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4qTX/xvXcwc7Qw91ItiO5RDYIbMB8GA1UdIwQY MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct OTBlYTM3MjljNTc0LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0 LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblZKhj3L MhQ2cbiCRE6IGmZAgy+Gz2pIvoVuWYua/w8MR4sKkvHBfNaDC7zaW4lwfViDtki3 ZAjP2PH5jTbWZgPqVvTVyT1KH0p2B2gbivuvbpT5B6p/TZafSDhKF6t6t+NU/Xig OU/KH/XUo9uPwWo2umiXRXQEyd7tHawQk+G/UjsKVRGy9tT7/Ead7e7YU8IG+RtS WAaL7YgDsHQO/7AqaMMtUN3qAqaRR3rzi0XyoRV6DGdq+NR/lQBR6SV9wqm8eo0P 6a+J9Xei9gHsBPudfylvUYCqxbePUgPuRJgQZiSq5SV93FFCPgip/AMmsR2+e0RB gMl2mF4C/Kc27A== -----END CERTIFICATE-----Generated at Mon Dec 22 11:46:59 2025 by rpki-client