This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json) Hash identifier: +T2KLaCWhIGpOPIPEErYxIrNHYPInINQo+IHesjh6rw= Subject key identifier: AF:D6:45:C5:03:ED:B5:5E:07:60:37:E8:43:3F:26:FE:C3:74:02:24 Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019B337AF7B63E003CE1770ACAECCBB72B26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft Manifest number: 08F7 Signing time: Thu 18 Dec 2025 22:00:55 +0000 Manifest this update: Thu 18 Dec 2025 22:00:55 +0000 Manifest next update: Fri 19 Dec 2025 22:00:55 +0000 Files and hashes: 1: 03bpI-w18-fLfKrGneHS5OC3lK4.roa (hash: 015UeQCesyPqqo0lNLcoMmYZaU1tmuzuzIUUZ2FgF3o=) 2: EnIqlvcohGwr9_QO8UiJDynyMjg.roa (hash: 2SZOKpKm6p7U6uHMsa55SpuH60Kzn75O+euuKRFZlZM=) 3: gCeEg2-aKNA4NJwCq_wet9ZUHSo.roa (hash: c1XqtEHbwnDz4EEYbDLzjNU+kaoA7BLTobxYu0vC/Ec=) 4: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (hash: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=) 5: qbDVabYqJeYEqjBWj7Cv4XVl3xw.roa (hash: EKqAOb5Dbm7XycIewVU/Wv2fHJD/MJiV9ILVNO/5NdE=) 6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: VkWHQ6p6JDzcSMCCDJnlUrL2EiZEAS+PNcNBrJaBvNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:f7:b6:3e:00:3c:e1:77:0a:ca:ec:cb:b7:2b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Dec 18 22:00:55 2025 GMT Not After : Dec 19 22:00:55 2025 GMT Subject: CN=afd645c503edb55e076037e8433f26fec3740224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:2d:cb:e5:76:6f:3f:91:a8:b9:11:bf:4b: ff:b6:bf:1e:33:f8:8f:dc:c9:10:8f:ae:c5:fe:83: 1c:f6:2b:1d:5c:8e:42:9a:f8:67:b1:1d:1b:43:cf: cd:ad:a1:74:50:97:63:2a:d4:8c:57:f4:1e:6b:b1: ee:5b:e1:2e:c4:0f:4e:b4:14:e9:06:28:a4:10:84: 2b:c7:ae:79:5a:4d:8e:e8:89:50:18:6c:20:e0:98: 6c:8a:bb:b5:98:2e:e6:d4:42:7f:5f:3f:2e:83:88: e0:fb:ec:b3:dc:8d:8a:61:18:7f:80:ba:51:6e:c1: 84:0f:74:fd:8f:0e:2d:68:bf:c7:2a:b4:71:14:1a: dd:a9:40:64:69:c2:a8:ff:39:d1:86:b0:92:24:a7: 97:09:27:2f:ff:56:51:2b:99:6c:c8:28:50:7c:77: bc:0f:1b:42:1d:e2:71:ac:37:de:c8:54:35:0c:87: 22:d8:c8:64:21:9f:ea:1c:dd:8e:0c:2b:e7:0a:f6: d3:ea:2c:60:d8:fb:7e:0c:15:e7:e5:eb:bf:9e:4e: f1:18:bd:b2:07:50:62:f1:b8:78:f5:68:e4:b4:eb: 0a:ba:4d:0c:dc:37:b6:92:af:ca:71:3c:c6:17:52: 52:89:1d:72:5f:3a:82:dd:4d:58:8a:d2:76:51:94: 99:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D6:45:C5:03:ED:B5:5E:07:60:37:E8:43:3F:26:FE:C3:74:02:24 X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:76:81:3e:18:83:5b:ed:26:07:85:b0:2d:54:78:65:9a:55: d9:f3:dc:87:3d:f3:b3:21:ac:bf:87:ef:9c:dd:6d:59:89:f3: ff:5b:af:bf:67:6f:d3:61:27:ff:34:d0:49:15:0f:4b:91:62: f4:40:6c:24:7f:d6:43:e1:e1:f2:31:de:1d:cf:60:1f:05:6f: 90:e7:72:f1:44:2f:52:d4:6e:5e:79:11:38:0d:7d:7d:1c:92: bd:dc:5c:b9:f0:34:04:18:82:dc:06:0c:d7:d1:c5:94:d9:40: 05:b0:2e:b3:a2:85:54:92:7f:96:c1:32:cb:10:f9:f2:c1:ac: 7a:63:03:15:eb:36:7e:ce:15:9c:8e:31:34:e7:fa:1b:d8:82: d3:76:05:5d:ac:aa:f5:d9:13:60:4f:46:87:1c:2c:f4:15:dd: e9:3c:ad:bc:e3:14:8d:18:0d:6c:04:5a:bf:80:0b:c7:0e:ac: 32:d2:38:cf:3f:85:b5:03:70:aa:9c:d5:2b:d6:46:8a:8e:10: 14:d8:f0:86:81:d5:44:5d:04:54:15:af:46:b3:eb:5b:ee:da: 1d:7e:90:fc:bc:b8:fa:32:75:6a:ac:45:0c:f7:f4:45:59:2b: 5b:ba:70:c8:aa:e3:35:b3:63:66:bb:ef:6b:3f:e0:4b:b3:55: 3a:43:34:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeve2PgA84XcKyuzLtysmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjUxMjE4MjIwMDU1WhcNMjUxMjE5MjIwMDU1WjAzMTEwLwYDVQQD EyhhZmQ2NDVjNTAzZWRiNTVlMDc2MDM3ZTg0MzNmMjZmZWMzNzQwMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1poty+V2bz+RqLkRv0v/tr8eM/iP 3MkQj67F/oMc9isdXI5CmvhnsR0bQ8/NraF0UJdjKtSMV/Qea7HuW+EuxA9OtBTp BiikEIQrx655Wk2O6IlQGGwg4Jhsiru1mC7m1EJ/Xz8ug4jg++yz3I2KYRh/gLpR bsGED3T9jw4taL/HKrRxFBrdqUBkacKo/znRhrCSJKeXCScv/1ZRK5lsyChQfHe8 DxtCHeJxrDfeyFQ1DIci2MhkIZ/qHN2ODCvnCvbT6ixg2Pt+DBXn5eu/nk7xGL2y B1Bi8bh49WjktOsKuk0M3De2kq/KcTzGF1JSiR1yXzqC3U1YitJ2UZSZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/WRcUD7bVeB2A36EM/Jv7DdAIkMB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3aBPhiD W+0mB4WwLVR4ZZpV2fPchz3zsyGsv4fvnN1tWYnz/1uvv2dv02En/zTQSRUPS5Fi 9EBsJH/WQ+Hh8jHeHc9gHwVvkOdy8UQvUtRuXnkROA19fRySvdxcufA0BBiC3AYM 19HFlNlABbAus6KFVJJ/lsEyyxD58sGsemMDFes2fs4VnI4xNOf6G9iC03YFXayq 9dkTYE9Ghxws9BXd6TytvOMUjRgNbARav4ALxw6sMtI4zz+FtQNwqpzVK9ZGio4Q FNjwhoHVRF0EVBWvRrPrW+7aHX6Q/Ly4+jJ1aqxFDPf0RVkrW7pwyKrjNbNjZrvv az/gS7NVOkM0IA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:17:25 2025 by rpki-client