This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json) Hash identifier: AjTTab2DXBvOCaAqnDD7iMB9iDQbQsTf6+dbUNwPay8= Subject key identifier: E4:C0:01:15:A5:50:51:DA:DB:49:B4:A2:D4:16:FC:54:FB:B6:8C:C6 Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Certificate serial: 019B6CC70BBB6F3F4C7FDB406F67DA3CF48E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft Manifest number: 105E Signing time: Tue 30 Dec 2025 01:02:22 +0000 Manifest this update: Tue 30 Dec 2025 01:02:22 +0000 Manifest next update: Wed 31 Dec 2025 01:02:22 +0000 Files and hashes: 1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=) 2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: HYvChr4P7Uz34sbbiypVKRl47bUvAl3TR6jav6VbOsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c7:0b:bb:6f:3f:4c:7f:db:40:6f:67:da:3c:f4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Validity Not Before: Dec 30 01:02:22 2025 GMT Not After : Dec 31 01:02:22 2025 GMT Subject: CN=e4c00115a55051dadb49b4a2d416fc54fbb68cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:0f:b2:a8:4a:c4:b3:75:61:65:73:bf:cf: 91:ad:04:ef:e9:9a:02:66:33:23:17:72:35:ea:72: 11:25:bb:da:e3:01:7d:b4:50:19:29:ac:95:00:ab: 9f:a5:3d:61:7e:7f:92:f0:48:a9:5d:ad:b5:e0:be: da:2a:18:73:c8:9f:0e:67:d3:a7:18:d1:ca:51:b1: ae:14:7f:13:d0:ec:cd:e3:79:6a:2a:cf:3f:db:ec: d3:b9:bf:15:5f:8f:e1:f9:12:92:32:4d:19:19:13: ef:0c:bd:67:7b:61:29:60:db:f7:4c:9b:39:8f:6b: 53:3f:cb:97:c8:74:14:67:8f:8a:ca:6a:5c:88:4b: 68:95:90:8f:8c:f9:af:c8:b1:bd:cf:87:c1:c2:28: de:54:5a:25:5d:64:6f:b7:5e:31:3f:4c:af:4d:f0: f7:97:c0:19:9a:9d:c3:09:bb:d5:1d:d0:0f:ed:58: db:c3:1c:4b:06:97:3b:a8:f1:d0:d5:04:e3:15:72: f1:28:38:4d:bd:92:a0:fd:6a:0b:e4:bb:09:8d:b5: 4a:26:78:db:31:04:41:ac:1e:b2:05:58:0b:00:4e: 46:d3:3b:7d:63:39:54:26:03:20:5a:13:a7:95:53: 2c:78:cf:69:6a:8e:1e:1a:27:1c:a8:43:f3:d6:4a: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C0:01:15:A5:50:51:DA:DB:49:B4:A2:D4:16:FC:54:FB:B6:8C:C6 X509v3 Authority Key Identifier: keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:73:70:ee:4d:fe:85:ec:2e:c1:b6:d2:fd:54:60:f2:4f:1f: 63:3e:f4:9a:d5:f3:31:67:f5:8e:12:ca:c0:3e:e0:2e:80:15: ea:6d:53:52:44:67:d3:14:bb:10:04:b6:63:02:20:f6:78:8b: dd:d8:96:63:38:49:95:8b:74:03:af:89:f3:9b:83:33:25:b1: 56:e5:e5:3f:74:1f:3c:4f:57:8a:38:9b:4a:13:ce:ff:57:0b: 43:8a:67:99:7f:e0:a3:aa:f9:c8:7c:51:ef:cd:a3:48:98:88: ad:ec:71:68:c8:81:3d:d8:3a:f7:49:22:86:68:07:1d:d5:df: ce:ff:a3:95:66:64:a6:da:5b:4c:8c:d9:ec:85:24:77:00:8c: 0b:94:9f:14:0d:0d:49:a4:9a:19:c5:f4:fa:1d:05:89:d0:06: 53:11:d7:2f:34:c7:db:aa:7f:95:b9:42:d3:23:5e:04:53:78: 1c:c1:72:b2:52:97:43:22:9c:08:18:c3:83:29:8c:2a:ba:0b: 0f:2e:75:1c:f9:b4:40:c3:5b:b5:45:ba:09:5d:e7:eb:70:8a: 38:6b:24:19:3b:08:b5:89:bd:92:9b:e4:26:a3:9a:bc:d0:3b: a7:46:64:ec:ad:07:70:46:cd:02:cc:02:e5:ef:e4:10:af:2b: 42:5a:7b:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxwu7bz9Mf9tAb2faPPSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGYxNjJhZmE3YmZkN2I4NDdjMWRkMGViNGFlYmVhOTNj NDY5Y2YwHhcNMjUxMjMwMDEwMjIyWhcNMjUxMjMxMDEwMjIyWjAzMTEwLwYDVQQD EyhlNGMwMDExNWE1NTA1MWRhZGI0OWI0YTJkNDE2ZmM1NGZiYjY4Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK4PsqhKxLN1YWVzv8+RrQTv6ZoC ZjMjF3I16nIRJbva4wF9tFAZKayVAKufpT1hfn+S8EipXa214L7aKhhzyJ8OZ9On GNHKUbGuFH8T0OzN43lqKs8/2+zTub8VX4/h+RKSMk0ZGRPvDL1ne2EpYNv3TJs5 j2tTP8uXyHQUZ4+KympciEtolZCPjPmvyLG9z4fBwijeVFolXWRvt14xP0yvTfD3 l8AZmp3DCbvVHdAP7VjbwxxLBpc7qPHQ1QTjFXLxKDhNvZKg/WoL5LsJjbVKJnjb MQRBrB6yBVgLAE5G0zt9YzlUJgMgWhOnlVMseM9pao4eGiccqEPz1kpLQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTAARWlUFHa20m0otQW/FT7tozGMB8GA1UdIwQY MBaAFF8PFir6e/17hHwd0OtK6+qTxGnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEt Y2VlNGM1MTg3NzBkLzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEtY2VlNGM1MTg3NzBk LzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3Nw7k3+ hewuwbbS/VRg8k8fYz70mtXzMWf1jhLKwD7gLoAV6m1TUkRn0xS7EAS2YwIg9niL 3diWYzhJlYt0A6+J85uDMyWxVuXlP3QfPE9XijibShPO/1cLQ4pnmX/go6r5yHxR 782jSJiIrexxaMiBPdg690kihmgHHdXfzv+jlWZkptpbTIzZ7IUkdwCMC5SfFA0N SaSaGcX0+h0FidAGUxHXLzTH26p/lblC0yNeBFN4HMFyslKXQyKcCBjDgymMKroL Dy51HPm0QMNbtUW6CV3n63CKOGskGTsItYm9kpvkJqOavNA7p0Zk7K0HcEbNAswC 5e/kEK8rQlp7mQ== -----END CERTIFICATE-----Generated at Tue Dec 30 04:33:59 2025 by rpki-client