This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json) Hash identifier: lC/2x4VVf2z/azaaClt7V9APNuILU1jd7qj1QjNLj0E= Subject key identifier: 09:48:FA:8C:28:BE:4A:F6:0B:CD:ED:6C:EA:D0:4B:3C:FF:61:E9:EA Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Certificate serial: 019B39463DCB235E5183024FAD91E6F818A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft Manifest number: 1718 Signing time: Sat 20 Dec 2025 01:01:03 +0000 Manifest this update: Sat 20 Dec 2025 01:01:03 +0000 Manifest next update: Sun 21 Dec 2025 01:01:03 +0000 Files and hashes: 1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=) 2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=) 3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=) 4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=) 5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: V6+VTpgXaWrajjdD0SIxWYHb44zbYiz2fewMyK5wPXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:3d:cb:23:5e:51:83:02:4f:ad:91:e6:f8:18:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Validity Not Before: Dec 20 01:01:03 2025 GMT Not After : Dec 21 01:01:03 2025 GMT Subject: CN=0948fa8c28be4af60bcded6cead04b3cff61e9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:5b:7e:bb:7f:6a:1b:b8:98:77:8f:bb:f7: 1c:8e:7c:53:8e:85:04:ad:cb:c0:c1:6b:52:4c:4e: 6a:19:0a:30:e3:60:45:35:c0:87:4f:e7:f6:1e:b6: c4:1d:c8:65:12:dc:af:94:85:fb:2c:b6:94:b3:4e: c7:13:b0:cf:53:26:0e:0c:c8:69:7b:1a:8f:32:ec: ab:a8:fd:a1:75:8b:f0:c8:a7:38:77:77:43:59:76: 98:74:5c:32:cc:70:37:ee:8b:d3:34:83:67:e1:78: 6e:8f:82:86:7d:85:76:d3:ce:ee:a6:a9:a1:17:06: 19:09:03:7e:03:57:3b:73:4f:40:b9:68:ce:13:47: d1:47:06:10:b2:37:b3:71:05:d7:ed:bc:f4:0b:3a: 61:8a:61:44:e5:ba:d3:98:dd:02:e0:b8:09:80:ec: 0c:ab:a1:cd:69:02:ea:ce:9d:92:f6:7f:f7:7e:1a: be:f1:22:f4:a8:69:33:a2:d9:7c:c6:04:8e:ac:05: 21:88:10:21:fe:4d:d6:17:a4:99:50:dd:3a:b2:08: 5e:74:49:cc:c5:8a:b3:15:c7:24:59:a9:88:75:14: 7d:37:d3:eb:f9:da:62:db:59:a0:96:48:a9:73:66: f6:e4:3b:1a:3b:37:af:0e:a4:49:a8:1d:98:a3:16: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:48:FA:8C:28:BE:4A:F6:0B:CD:ED:6C:EA:D0:4B:3C:FF:61:E9:EA X509v3 Authority Key Identifier: keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7a:0e:86:aa:a7:30:75:2d:c7:03:72:6f:69:95:5d:58:8e: ea:15:32:79:14:cc:1f:4f:05:e8:f0:c7:bd:a8:35:fd:74:c2: 8e:81:f0:34:16:35:15:c9:fd:a6:e2:48:7e:0d:96:d4:12:9e: 65:d0:c0:99:17:24:2a:d4:36:eb:53:0a:02:51:3c:ad:71:76: e3:4d:3c:f2:88:e6:90:42:ab:9e:d2:8e:1a:8f:51:27:f8:76: 87:04:48:61:8a:69:af:e5:53:b8:87:06:55:d4:5f:ed:ca:4e: 00:8b:d9:1a:9b:52:06:e4:3b:f8:c9:8d:52:e8:e3:32:9e:48: 98:4f:19:9c:b5:02:06:b1:bd:61:70:a5:bf:0a:69:8c:63:ba: 5d:63:5a:c0:79:b7:2f:c0:27:a6:2e:7b:eb:8d:db:21:06:73: f8:b6:f5:41:2f:cd:d0:c7:c8:c6:59:f8:c5:2e:ed:d3:9d:e0: 0d:42:be:18:3c:54:28:23:a7:88:fe:4f:ec:e1:44:25:87:78: 45:ae:be:3e:a3:31:f4:90:b7:98:83:de:83:19:7b:ea:3b:8e: b6:af:26:8d:7c:0f:35:42:87:e7:3e:1f:97:f9:72:05:a7:e8: 04:69:f6:d1:af:88:57:cf:0b:fd:61:e7:85:55:9a:8e:13:f7: a2:9b:7d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rj3LI15RgwJPrZHm+BilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2 Zjg4MzIwHhcNMjUxMjIwMDEwMTAzWhcNMjUxMjIxMDEwMTAzWjAzMTEwLwYDVQQD EygwOTQ4ZmE4YzI4YmU0YWY2MGJjZGVkNmNlYWQwNGIzY2ZmNjFlOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Nbfrt/ahu4mHePu/ccjnxTjoUE rcvAwWtSTE5qGQow42BFNcCHT+f2HrbEHchlEtyvlIX7LLaUs07HE7DPUyYODMhp exqPMuyrqP2hdYvwyKc4d3dDWXaYdFwyzHA37ovTNINn4Xhuj4KGfYV2087upqmh FwYZCQN+A1c7c09AuWjOE0fRRwYQsjezcQXX7bz0CzphimFE5brTmN0C4LgJgOwM q6HNaQLqzp2S9n/3fhq+8SL0qGkzotl8xgSOrAUhiBAh/k3WF6SZUN06sghedEnM xYqzFcckWamIdRR9N9Pr+dpi21mglkipc2b25DsaOzevDqRJqB2YoxZ6rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlI+owovkr2C83tbOrQSzz/YenqMB8GA1UdIwQY MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt Y2I5ZTFlZDc3OWFjLzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHoOhqqn MHUtxwNyb2mVXViO6hUyeRTMH08F6PDHvag1/XTCjoHwNBY1Fcn9puJIfg2W1BKe ZdDAmRckKtQ261MKAlE8rXF240088ojmkEKrntKOGo9RJ/h2hwRIYYppr+VTuIcG VdRf7cpOAIvZGptSBuQ7+MmNUujjMp5ImE8ZnLUCBrG9YXClvwppjGO6XWNawHm3 L8Anpi57643bIQZz+Lb1QS/N0MfIxln4xS7t053gDUK+GDxUKCOniP5P7OFEJYd4 Ra6+PqMx9JC3mIPegxl76juOtq8mjXwPNUKH5z4fl/lyBafoBGn20a+IV88L/WHn hVWajhP3opt9Qg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:31:46 2025 by rpki-client