This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json) Hash identifier: y4E0rTnl8oU3I/rWbvLG8j8w+wB9QuPDADIvFxe6Yvc= Subject key identifier: 75:36:59:33:09:3F:5D:44:85:24:1B:23:AF:AF:DB:05:AF:01:7B:B4 Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c Certificate serial: 019B3F7F94325A1B9C0B0C47792BCAACB689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft Manifest number: 0EAF Signing time: Sun 21 Dec 2025 06:01:24 +0000 Manifest this update: Sun 21 Dec 2025 06:01:24 +0000 Manifest next update: Mon 22 Dec 2025 06:01:24 +0000 Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=) 2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: wlMK1VeVU/vOIhvGvD518g5bToVhtFBmt7gJqoG25aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:94:32:5a:1b:9c:0b:0c:47:79:2b:ca:ac:b6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c Validity Not Before: Dec 21 06:01:24 2025 GMT Not After : Dec 22 06:01:24 2025 GMT Subject: CN=75365933093f5d4485241b23afafdb05af017bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:95:b3:99:72:b1:f1:57:4e:b5:f0:ed:5f: 8a:4c:50:5f:08:8d:1d:5b:d5:6c:aa:d1:7d:34:45: 4c:e3:44:2d:15:51:c4:79:c5:7a:f1:f6:02:6c:f9: 5d:5d:de:64:98:1b:00:36:5f:5a:39:b9:a2:cb:73: 58:47:a9:ce:95:62:2e:66:84:26:a0:62:3e:9f:4e: 78:d8:0f:aa:56:a5:f8:fe:2c:c5:b9:0d:9f:77:9d: 4c:43:fc:38:09:ca:0d:85:b7:9a:2a:02:fb:e6:92: d6:97:2b:f7:a2:60:db:d9:ec:ca:c5:95:00:fc:71: 56:fc:e8:32:10:1e:8d:94:4b:77:b7:38:b5:6b:19: 69:eb:99:e6:f1:85:61:c8:6e:9c:59:82:cf:d4:5f: d5:af:b6:ea:0d:a9:80:7b:b1:b5:3c:8d:10:22:9f: 4f:44:65:ae:a0:45:0f:92:04:68:2a:67:a4:06:71: a8:ea:6b:48:56:f3:2a:70:58:99:a1:75:d9:19:33: bf:ae:d4:ae:5e:69:a3:77:db:8d:83:9f:3f:18:b0: 2e:c4:d0:a5:f3:52:b0:45:42:de:c5:dc:20:b4:2e: f6:57:c3:0b:00:f1:13:3e:b3:e4:75:c3:a9:66:b8: ce:db:3d:09:e5:32:1a:05:af:71:c0:0e:44:b8:8c: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:36:59:33:09:3F:5D:44:85:24:1B:23:AF:AF:DB:05:AF:01:7B:B4 X509v3 Authority Key Identifier: keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:cc:03:ad:c7:99:00:a0:49:ed:54:bc:60:67:9b:8d:29:03: 55:98:88:38:53:63:d0:d2:8a:ab:56:b5:88:52:95:4b:25:4f: d2:2a:d6:d5:fb:fe:a1:2f:94:7a:e2:57:c7:75:ca:18:29:ce: 5d:c7:0b:6b:89:1b:59:d8:1b:61:31:7a:8a:68:d1:db:bb:ae: 93:bf:eb:d1:e1:01:5c:cb:44:67:4b:c4:24:6d:69:e8:9b:2d: cf:df:76:fb:58:71:d5:72:7f:69:bc:da:e5:2b:c9:00:73:31: 53:6e:bd:fd:85:ad:ff:9f:17:7a:b7:1b:16:bf:3b:9d:73:60: f1:a0:17:5b:53:67:4d:be:56:b7:9a:35:c9:da:80:95:d4:d2: 2b:4e:a8:87:ae:0c:c4:9b:17:62:31:b7:66:32:fa:70:3d:f5: 77:21:97:31:78:10:00:7f:1b:7b:58:0d:33:41:ea:1e:0f:9f: 04:1e:f5:bf:b5:50:4a:15:3e:74:bf:2d:86:bc:c6:0f:0a:fe: 1f:12:36:90:35:a7:99:5b:5c:2a:2f:36:43:dd:82:e4:f5:3c: ea:09:74:43:a4:2c:17:dd:89:fb:0f:44:e4:11:81:49:ed:c7: 67:53:c8:82:d7:01:e5:4a:75:c3:5b:89:cc:26:0e:f1:01:b3: 26:80:9d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f5QyWhucCwxHeSvKrLaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NDg1ZTI5ZjExOGMwMWJlODZjMTllNjY4ZmFjZmE0ODVk ZTcxOGMwHhcNMjUxMjIxMDYwMTI0WhcNMjUxMjIyMDYwMTI0WjAzMTEwLwYDVQQD Eyg3NTM2NTkzMzA5M2Y1ZDQ0ODUyNDFiMjNhZmFmZGIwNWFmMDE3YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppOVs5lysfFXTrXw7V+KTFBfCI0d W9VsqtF9NEVM40QtFVHEecV68fYCbPldXd5kmBsANl9aObmiy3NYR6nOlWIuZoQm oGI+n0542A+qVqX4/izFuQ2fd51MQ/w4CcoNhbeaKgL75pLWlyv3omDb2ezKxZUA /HFW/OgyEB6NlEt3tzi1axlp65nm8YVhyG6cWYLP1F/Vr7bqDamAe7G1PI0QIp9P RGWuoEUPkgRoKmekBnGo6mtIVvMqcFiZoXXZGTO/rtSuXmmjd9uNg58/GLAuxNCl 81KwRULexdwgtC72V8MLAPETPrPkdcOpZrjO2z0J5TIaBa9xwA5EuIzR9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU2WTMJP11EhSQbI6+v2wWvAXu0MB8GA1UdIwQY MBaAFMdIXinxGMAb6GwZ5mj6z6SF3nGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQt NTdmOWJjNmE1YzMwLzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQtNTdmOWJjNmE1YzMw LzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8wDrceZ AKBJ7VS8YGebjSkDVZiIOFNj0NKKq1a1iFKVSyVP0irW1fv+oS+UeuJXx3XKGCnO XccLa4kbWdgbYTF6imjR27uuk7/r0eEBXMtEZ0vEJG1p6Jstz992+1hx1XJ/abza 5SvJAHMxU269/YWt/58XercbFr87nXNg8aAXW1NnTb5Wt5o1ydqAldTSK06oh64M xJsXYjG3ZjL6cD31dyGXMXgQAH8be1gNM0HqHg+fBB71v7VQShU+dL8thrzGDwr+ HxI2kDWnmVtcKi82Q92C5PU86gl0Q6QsF92J+w9E5BGBSe3HZ1PIgtcB5Up1w1uJ zCYO8QGzJoCddg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:31:54 2025 by rpki-client