This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json) Hash identifier: EJkje5iztRsSPDUnupzyUylqisGWL5foJrLIeeJ+cGU= Subject key identifier: 9C:3E:B3:01:B5:2A:D3:C4:83:85:7A:C3:FA:2F:CD:D5:74:1D:D2:6C Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019AF1D1AEB17796B2D1D07207322420C2B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft Manifest number: 08D5 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: 03bpI-w18-fLfKrGneHS5OC3lK4.roa (hash: 015UeQCesyPqqo0lNLcoMmYZaU1tmuzuzIUUZ2FgF3o=) 2: EnIqlvcohGwr9_QO8UiJDynyMjg.roa (hash: 2SZOKpKm6p7U6uHMsa55SpuH60Kzn75O+euuKRFZlZM=) 3: gCeEg2-aKNA4NJwCq_wet9ZUHSo.roa (hash: c1XqtEHbwnDz4EEYbDLzjNU+kaoA7BLTobxYu0vC/Ec=) 4: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (hash: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=) 5: qbDVabYqJeYEqjBWj7Cv4XVl3xw.roa (hash: EKqAOb5Dbm7XycIewVU/Wv2fHJD/MJiV9ILVNO/5NdE=) 6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: SgFU+qSxHInNVOwjYoIg2N/HXxQATSCSiAlLQ5U8OtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ae:b1:77:96:b2:d1:d0:72:07:32:24:20:c2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=9c3eb301b52ad3c483857ac3fa2fcdd5741dd26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3f:41:2b:d0:f5:b0:24:a4:63:bf:eb:4b:6b: db:85:31:20:08:12:44:fe:64:39:1e:c5:3a:b4:2e: b6:f4:9b:89:c4:22:e2:bd:26:79:61:36:0c:ac:ec: 4e:02:10:bc:db:17:3b:bb:3e:66:e2:d6:e0:c9:be: 2b:ad:b1:02:bf:98:bc:87:13:d7:17:c8:94:8f:71: 6e:97:48:d2:39:8f:0a:31:28:d5:93:69:31:f7:3c: 47:a7:54:3c:23:b3:e1:80:65:ee:f9:63:70:5a:fc: 80:56:37:c2:7b:b2:9e:54:90:37:cc:a3:06:3d:07: 4d:b7:17:5d:ca:a1:00:24:18:79:fd:b5:5d:62:5e: 16:4c:24:c0:8e:2f:9b:c7:07:4f:de:e9:96:d1:7f: 1e:71:75:8f:71:d0:8e:53:da:61:0d:10:08:12:c0: 38:d8:0d:2a:05:86:e2:33:3f:c8:66:39:95:f6:61: f7:49:f8:51:fa:b9:84:f6:c2:a2:fe:b1:39:62:4f: b3:1b:e5:4a:8c:da:a4:73:fb:97:3e:13:5f:62:81: e3:ff:b5:d1:42:7b:11:fa:fb:7e:18:28:72:61:79: 27:55:00:a1:f3:e0:2b:87:d6:4b:2b:a7:1b:2a:0b: c3:97:32:2a:27:f1:d0:f9:cd:6d:1f:c7:f0:e6:ec: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3E:B3:01:B5:2A:D3:C4:83:85:7A:C3:FA:2F:CD:D5:74:1D:D2:6C X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f7:d5:70:c2:97:4f:22:21:b5:32:6a:31:18:32:d6:53:55: 6b:7a:7d:91:4b:0f:c6:f9:a7:1f:43:9c:bd:b0:9f:e3:01:5c: 93:bc:d0:b3:0d:cc:9f:f7:7c:f8:85:66:e8:bb:78:b8:be:33: 06:ea:f6:1c:61:f1:5a:9c:37:00:05:48:39:65:3e:94:11:e7: 83:f1:f2:bc:55:65:e2:0c:3e:27:67:82:7c:00:53:08:d2:b0: 21:49:1b:f8:95:fa:34:8c:f2:c0:32:6a:b4:54:4e:12:db:75: 2e:17:e4:9c:ba:7e:93:8e:db:54:7c:90:34:c9:8e:31:39:4d: e0:6b:54:29:84:dd:ba:3c:aa:c6:6b:67:aa:b3:66:c5:e5:b6: 5e:3d:53:dc:17:b0:a9:dd:d9:f2:93:0c:5d:e4:8a:e9:33:6f: 68:b9:e7:6a:90:79:70:18:77:ad:40:64:29:82:c4:78:f2:26: d6:e5:a6:88:a4:ac:ce:4b:bd:0c:aa:4a:eb:6c:1b:f6:3c:61: 0a:72:a0:1d:03:19:9a:e6:fc:68:e2:71:a1:8d:13:17:e0:f0: 91:4b:31:a7:96:fc:1f:a9:7c:5c:54:2c:9a:d1:1d:a8:3f:9a: cb:89:e7:30:96:13:29:26:f2:5c:48:c1:9d:61:18:fe:cc:45: d0:c2:24:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a6xd5ay0dByBzIkIMK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD Eyg5YzNlYjMwMWI1MmFkM2M0ODM4NTdhYzNmYTJmY2RkNTc0MWRkMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz9BK9D1sCSkY7/rS2vbhTEgCBJE /mQ5HsU6tC629JuJxCLivSZ5YTYMrOxOAhC82xc7uz5m4tbgyb4rrbECv5i8hxPX F8iUj3Ful0jSOY8KMSjVk2kx9zxHp1Q8I7PhgGXu+WNwWvyAVjfCe7KeVJA3zKMG PQdNtxddyqEAJBh5/bVdYl4WTCTAji+bxwdP3umW0X8ecXWPcdCOU9phDRAIEsA4 2A0qBYbiMz/IZjmV9mH3SfhR+rmE9sKi/rE5Yk+zG+VKjNqkc/uXPhNfYoHj/7XR QnsR+vt+GChyYXknVQCh8+Arh9ZLK6cbKgvDlzIqJ/HQ+c1tH8fw5uzJiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw+swG1KtPEg4V6w/ovzdV0HdJsMB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPfVcMKX TyIhtTJqMRgy1lNVa3p9kUsPxvmnH0OcvbCf4wFck7zQsw3Mn/d8+IVm6Lt4uL4z Bur2HGHxWpw3AAVIOWU+lBHng/HyvFVl4gw+J2eCfABTCNKwIUkb+JX6NIzywDJq tFROEtt1LhfknLp+k47bVHyQNMmOMTlN4GtUKYTdujyqxmtnqrNmxeW2Xj1T3Bew qd3Z8pMMXeSK6TNvaLnnapB5cBh3rUBkKYLEePIm1uWmiKSszku9DKpK62wb9jxh CnKgHQMZmub8aOJxoY0TF+DwkUsxp5b8H6l8XFQsmtEdqD+ay4nnMJYTKSbyXEjB nWEY/sxF0MIk0w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:40 2025 by rpki-client