This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json) Hash identifier: 9w3DuAl1+xagYayiGZa8s1APy4qH0OBHaiXMIBaT3SM= Subject key identifier: 78:21:90:9E:4B:B6:17:41:07:AE:6B:87:25:21:45:C9:FC:57:1D:AB Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Certificate serial: 019B32D657B0638AADE7D88B5F0C3E9A2862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft Manifest number: 1040 Signing time: Thu 18 Dec 2025 19:01:06 +0000 Manifest this update: Thu 18 Dec 2025 19:01:06 +0000 Manifest next update: Fri 19 Dec 2025 19:01:06 +0000 Files and hashes: 1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=) 2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: 3IvgnvscFs5pnFr1DW3odl06NxwjVW/kpGPEo+5lGt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:57:b0:63:8a:ad:e7:d8:8b:5f:0c:3e:9a:28:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Validity Not Before: Dec 18 19:01:06 2025 GMT Not After : Dec 19 19:01:06 2025 GMT Subject: CN=7821909e4bb6174107ae6b87252145c9fc571dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:02:f4:06:c7:e4:d1:63:b4:52:41:8c:41: 89:14:f0:32:d8:f4:d5:6f:88:34:99:6e:59:ca:66: d4:55:75:84:3a:c1:6a:75:47:c9:8b:6a:e0:a9:42: 00:af:83:5e:02:f8:bb:09:f8:bf:81:bc:1c:9c:12: f4:a7:38:4d:3e:34:43:86:60:56:21:48:f3:db:e6: c1:13:3e:80:0a:e3:7c:9e:e4:77:f3:46:23:40:8c: 62:17:0d:d6:17:b7:f1:01:04:51:73:78:90:13:95: c2:b1:39:3c:15:01:5b:5e:4b:f9:17:93:b8:58:40: 1d:6c:9b:90:2c:da:fd:3b:11:69:42:59:7d:22:9b: 37:f5:b0:a9:1a:67:4c:3c:6a:67:30:72:b3:c3:4e: 3a:de:94:87:c0:1e:10:a7:73:43:69:f7:f5:7a:46: 09:86:7c:38:26:7e:3e:a7:71:39:43:9e:bb:ab:5b: be:69:80:0e:81:34:94:51:37:6e:2f:f0:f4:a3:b5: c1:d5:d7:39:8a:89:a5:5c:db:5a:d1:aa:3a:b5:13: 46:49:3a:ad:6b:42:e1:74:35:04:c7:ee:de:5b:5c: 0d:e4:95:66:a1:86:1e:22:5c:7a:20:eb:e4:f3:f3: 8f:a9:b1:51:2b:e2:00:80:2e:c7:87:45:8c:99:00: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:21:90:9E:4B:B6:17:41:07:AE:6B:87:25:21:45:C9:FC:57:1D:AB X509v3 Authority Key Identifier: keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:62:da:17:c8:02:bc:f4:0a:8c:30:21:b3:f3:5b:33:8e:f4: 3f:f8:20:14:de:3a:75:3a:91:07:2d:58:53:a0:4f:86:81:8a: 75:23:0f:da:4f:5d:01:bb:f8:a7:29:a1:84:cf:5f:e7:3c:fd: 7b:ab:fe:3d:c2:66:cc:c0:e9:70:10:8c:79:a3:95:40:f4:89: 27:56:08:c9:af:4e:0d:16:c1:b0:f1:ec:f9:2e:b9:da:1a:13: da:5b:b5:fa:6f:fc:ef:a0:9a:b3:16:0d:74:76:2c:06:33:bb: ab:52:5a:68:13:4e:b6:49:90:00:3d:9b:0f:a2:59:34:a8:69: 62:52:12:2b:1b:18:f7:9d:c7:96:64:55:d8:5b:3f:0a:e2:24: 25:17:d4:c4:6b:ad:cf:41:ac:d6:a4:7d:21:87:83:28:1c:fd: 1f:92:a2:26:54:74:cc:c5:5b:7b:3a:2a:01:00:5c:c5:53:17: 6e:cb:e3:07:76:24:38:d0:68:03:99:78:35:bb:66:98:9b:72: 75:8b:e6:fe:03:7b:ea:55:93:88:36:88:ac:13:bb:ec:c0:c2: 79:54:c5:63:a0:76:60:44:06:8b:ae:83:87:6d:f5:69:c5:a3: bd:65:12:7a:77:3a:90:72:9c:f7:d0:b1:1e:e0:cd:2e:9b:92: 0d:29:8d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1lewY4qt59iLXww+mihiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGYxNjJhZmE3YmZkN2I4NDdjMWRkMGViNGFlYmVhOTNj NDY5Y2YwHhcNMjUxMjE4MTkwMTA2WhcNMjUxMjE5MTkwMTA2WjAzMTEwLwYDVQQD Eyg3ODIxOTA5ZTRiYjYxNzQxMDdhZTZiODcyNTIxNDVjOWZjNTcxZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqEC9AbH5NFjtFJBjEGJFPAy2PTV b4g0mW5ZymbUVXWEOsFqdUfJi2rgqUIAr4NeAvi7Cfi/gbwcnBL0pzhNPjRDhmBW IUjz2+bBEz6ACuN8nuR380YjQIxiFw3WF7fxAQRRc3iQE5XCsTk8FQFbXkv5F5O4 WEAdbJuQLNr9OxFpQll9Ips39bCpGmdMPGpnMHKzw0463pSHwB4Qp3NDaff1ekYJ hnw4Jn4+p3E5Q567q1u+aYAOgTSUUTduL/D0o7XB1dc5iomlXNta0ao6tRNGSTqt a0LhdDUEx+7eW1wN5JVmoYYeIlx6IOvk8/OPqbFRK+IAgC7Hh0WMmQDd0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHghkJ5LthdBB65rhyUhRcn8Vx2rMB8GA1UdIwQY MBaAFF8PFir6e/17hHwd0OtK6+qTxGnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEt Y2VlNGM1MTg3NzBkLzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEtY2VlNGM1MTg3NzBk LzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmLaF8gC vPQKjDAhs/NbM470P/ggFN46dTqRBy1YU6BPhoGKdSMP2k9dAbv4pymhhM9f5zz9 e6v+PcJmzMDpcBCMeaOVQPSJJ1YIya9ODRbBsPHs+S652hoT2lu1+m/876CasxYN dHYsBjO7q1JaaBNOtkmQAD2bD6JZNKhpYlISKxsY953HlmRV2Fs/CuIkJRfUxGut z0Gs1qR9IYeDKBz9H5KiJlR0zMVbezoqAQBcxVMXbsvjB3YkONBoA5l4NbtmmJty dYvm/gN76lWTiDaIrBO77MDCeVTFY6B2YEQGi66Dh231acWjvWUSenc6kHKc99Cx HuDNLpuSDSmNaQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:54 2025 by rpki-client