This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft File: _XBhwg1PCXYTrAMTI3pt8rsstdw.mft (raw, json) Hash identifier: BJES3gfBNXJYf+ojTYJVQSGYELMVcEIUQSvLFTL++9k= Subject key identifier: 0F:5E:36:C2:A8:C9:C8:84:3B:19:DA:A9:3B:BC:E5:1D:55:D2:24:55 Authority key identifier: FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC Certificate issuer: /CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc Certificate serial: 019B318CC02C838DF397E945CE98A1219112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft Manifest number: 0318 Signing time: Thu 18 Dec 2025 13:01:06 +0000 Manifest this update: Thu 18 Dec 2025 13:01:06 +0000 Manifest next update: Fri 19 Dec 2025 13:01:06 +0000 Files and hashes: 1: _XBhwg1PCXYTrAMTI3pt8rsstdw.crl (hash: X8EKTNHjeD8iqIMpfxybFxbWEZLrNNBgO+BtL+RiPlY=) 2: bIh6rb6KgAadfuO3R9Ubbeh6oaY.roa (hash: u3cvjQO/JSlrsYEw7MORRhOpl1pZlSv4+pYCjFsW1wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:c0:2c:83:8d:f3:97:e9:45:ce:98:a1:21:91:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc Validity Not Before: Dec 18 13:01:06 2025 GMT Not After : Dec 19 13:01:06 2025 GMT Subject: CN=0f5e36c2a8c9c8843b19daa93bbce51d55d22455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:70:cc:11:a2:8c:72:40:ae:11:65:bb:8a: 8f:f5:05:68:17:e6:d0:3d:61:e9:2a:a5:f4:0d:ae: 0b:69:3d:cd:55:28:7f:ca:b8:37:7f:51:17:9d:63: 9f:7d:ac:9e:43:70:83:74:7a:76:8d:9b:93:97:56: 8d:43:7e:3b:11:08:f1:f4:1b:8f:0a:0b:a2:d0:ec: 2f:90:78:40:43:53:35:ab:fa:0f:64:3c:ba:d0:fd: 22:03:9f:c3:b7:d5:f4:45:8a:50:07:4f:07:ba:86: 81:ab:37:c8:b0:aa:33:43:58:e3:ef:85:d5:dc:22: f4:a7:dc:f5:6d:ca:7f:37:5b:10:49:ec:8c:42:03: a7:07:4c:21:78:a0:ed:e1:c3:73:46:09:65:4b:5e: 68:7d:ec:98:a3:90:71:d0:f2:11:1a:33:6e:9b:aa: 2e:e9:02:89:f6:35:85:89:b6:6a:2b:48:a6:ef:3c: bb:25:8f:8d:a9:07:d1:ee:0d:1b:5b:96:29:63:3f: 9f:3c:af:de:b8:2e:a0:2b:c8:79:12:77:8e:a8:65: 67:e9:80:1d:d7:f1:34:99:be:25:0b:9b:bc:e1:09: e2:be:8a:0c:09:75:d9:0b:53:e6:22:78:40:9f:2b: f3:c4:a9:ef:bb:e8:21:25:42:df:91:c4:37:99:0d: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5E:36:C2:A8:C9:C8:84:3B:19:DA:A9:3B:BC:E5:1D:55:D2:24:55 X509v3 Authority Key Identifier: keyid:FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:93:e6:64:c4:a6:4a:de:65:62:ac:81:6e:18:02:aa:7c:5b: 00:e6:54:92:96:a2:1a:98:d7:17:3d:35:2c:b5:a5:3d:6d:20: 1c:07:0b:58:04:aa:d4:da:f9:42:63:a4:5a:60:02:92:e2:a1: c4:fb:99:49:1f:64:f9:1e:c0:60:f3:fa:c6:be:b1:04:20:12: 6e:37:4e:43:33:74:ea:49:e8:9c:e2:60:39:43:a1:77:75:61: a5:10:37:71:26:4b:27:9e:48:11:29:cb:4d:4d:37:40:46:ce: 07:bb:b6:f1:c2:b8:00:57:c6:07:1f:2a:98:a3:7d:4e:0d:2c: ee:aa:cd:48:7c:4d:b4:ac:31:bc:ae:ef:66:22:69:38:9d:37: ba:2c:5e:5b:f0:dc:df:00:c0:cb:cb:d9:5e:f1:31:a1:f4:c7: e9:96:56:e7:b8:4c:86:80:55:a7:be:f6:bd:be:ad:74:ff:a6: b2:71:1d:5c:30:ce:a0:fa:13:d1:29:3c:fe:4d:23:43:f0:b8: 84:82:cb:62:29:05:53:d9:8d:0f:6a:13:2a:bc:0d:77:47:42: 89:a9:ac:7f:8b:53:08:39:d8:ce:78:4d:ef:64:8c:4e:3e:3f: 10:d9:41:5a:fb:b9:55:0e:56:e9:45:a1:4e:21:b2:08:78:da: e4:c5:ff:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjMAsg43zl+lFzpihIZESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNzA2MWMyMGQ0ZjA5NzYxM2FjMDMxMzIzN2E2ZGYyYmIy Y2I1ZGMwHhcNMjUxMjE4MTMwMTA2WhcNMjUxMjE5MTMwMTA2WjAzMTEwLwYDVQQD EygwZjVlMzZjMmE4YzljODg0M2IxOWRhYTkzYmJjZTUxZDU1ZDIyNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLxwzBGijHJArhFlu4qP9QVoF+bQ PWHpKqX0Da4LaT3NVSh/yrg3f1EXnWOffayeQ3CDdHp2jZuTl1aNQ347EQjx9BuP Cgui0OwvkHhAQ1M1q/oPZDy60P0iA5/Dt9X0RYpQB08HuoaBqzfIsKozQ1jj74XV 3CL0p9z1bcp/N1sQSeyMQgOnB0wheKDt4cNzRgllS15ofeyYo5Bx0PIRGjNum6ou 6QKJ9jWFibZqK0im7zy7JY+NqQfR7g0bW5YpYz+fPK/euC6gK8h5EneOqGVn6YAd 1/E0mb4lC5u84QnivooMCXXZC1PmInhAnyvzxKnvu+ghJULfkcQ3mQ0D/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9eNsKoyciEOxnaqTu85R1V0iRVMB8GA1UdIwQY MBaAFP1wYcINTwl2E6wDEyN6bfK7LLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1hCaHdnMVBDWFlUckFNVEkzcHQ4cnNzdGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zMmUzZDMtOWE4ZC00NjUzLTk0ZmEt YTIwMTk5ODgzMzBmLzEvX1hCaHdnMVBDWFlUckFNVEkzcHQ4cnNzdGR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zMmUzZDMtOWE4ZC00NjUzLTk0ZmEtYTIwMTk5ODgzMzBm LzEvX1hCaHdnMVBDWFlUckFNVEkzcHQ4cnNzdGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA25PmZMSm St5lYqyBbhgCqnxbAOZUkpaiGpjXFz01LLWlPW0gHAcLWASq1Nr5QmOkWmACkuKh xPuZSR9k+R7AYPP6xr6xBCASbjdOQzN06knonOJgOUOhd3VhpRA3cSZLJ55IESnL TU03QEbOB7u28cK4AFfGBx8qmKN9Tg0s7qrNSHxNtKwxvK7vZiJpOJ03uixeW/Dc 3wDAy8vZXvExofTH6ZZW57hMhoBVp772vb6tdP+msnEdXDDOoPoT0Sk8/k0jQ/C4 hILLYikFU9mND2oTKrwNd0dCiamsf4tTCDnYznhN72SMTj4/ENlBWvu5VQ5W6UWh TiGyCHja5MX/pA== -----END CERTIFICATE-----Generated at Thu Dec 18 17:30:13 2025 by rpki-client