This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: CNItYkl9I+9Iopdw6sbkTWfIWTmhtf+QOay3cZnTVwQ= Subject key identifier: D9:DB:CF:AA:FE:9F:03:1E:59:87:32:F0:D5:57:F9:DC:E8:FD:9B:D7 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019AF38990AA177E211AF5CB042941F65D08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0FC3 Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=) 12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: a4EVkpFGlwGxwv2Kq0T/gleldOcaOn3WPxHysjHeobY=) 15: YwT_q4Kig3_g-NeH9DT3auGxCgo.roa (hash: ZaE3qib+0ral12KqqE3Ve01vVTpIeV1MSx94xxKpbME=) 16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:90:aa:17:7e:21:1a:f5:cb:04:29:41:f6:5d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=d9dbcfaafe9f031e598732f0d557f9dce8fd9bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:91:ba:b8:d2:8a:28:3b:90:4e:55:6b:3d: 42:95:c5:0a:46:03:d2:81:c8:8a:e8:61:ca:58:5a: 72:9d:9a:54:da:97:33:03:fc:e6:d4:13:1a:13:08: ec:9d:25:d9:f2:59:ef:80:23:a2:ea:6d:05:86:0f: c5:3d:68:3f:8c:56:b3:5e:be:a0:38:e2:de:aa:2f: 05:19:0b:c0:31:31:55:b4:bb:d7:9d:ee:68:c7:5b: a3:0a:8f:5d:77:5e:4c:74:00:e1:88:80:a7:6b:45: 1f:ff:74:45:53:25:d4:c6:3f:96:09:a2:d5:46:01: 66:3f:d1:2a:e5:4e:20:8c:48:d7:47:08:a2:4a:1f: 7b:5d:0c:a8:e0:a9:6d:0d:a1:d2:66:8a:15:ef:0c: eb:3f:09:d6:05:ec:d3:09:f9:60:0c:77:08:a1:d8: ad:d9:6c:59:41:85:c1:ac:7d:dc:c7:34:12:31:92: ab:48:3d:45:b2:1e:27:a0:71:56:ae:93:cf:26:f1: 95:d0:27:3f:7d:36:0d:aa:df:ac:91:64:f0:db:42: c8:46:c7:bc:71:8e:06:dc:55:6a:e9:50:87:34:3f: 38:43:08:c4:5e:32:0f:90:b3:9c:7c:49:09:03:5c: ee:9e:39:90:41:c0:37:a6:ab:64:a3:02:be:61:4c: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DB:CF:AA:FE:9F:03:1E:59:87:32:F0:D5:57:F9:DC:E8:FD:9B:D7 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:90:99:7d:d1:44:cd:90:b2:57:96:a1:18:32:9e:e4:cc:76: 38:fc:38:23:33:49:86:fd:8f:fc:db:de:ec:39:44:a8:a3:c6: 8b:38:7a:c2:c7:04:1a:5e:56:12:b2:1e:ef:d1:47:de:59:bb: 7f:ac:a0:e0:f1:bc:9a:f4:43:30:27:2b:04:1c:54:d1:82:a2: 7d:fd:9b:ab:cf:22:f1:44:dc:a2:9c:f4:5d:3d:37:de:f2:89: 59:e6:f4:8b:3f:66:78:f7:50:7b:5c:c0:f2:70:dc:d9:9b:bf: 82:ab:ea:0f:1c:ed:09:5c:9d:09:b0:ae:bd:32:cb:9b:72:1f: 22:18:da:35:a9:46:3d:22:b6:4e:f4:d9:65:e2:db:cc:a0:78: 4c:87:fa:b6:da:2a:24:39:96:98:cd:3f:ec:d0:a8:4d:cb:f3: 6a:45:55:48:ea:b7:69:15:42:e6:11:7b:af:da:17:86:a4:a0: 76:fb:b3:41:5f:8e:bc:5e:35:c9:28:a5:16:88:73:f9:4e:3e: d2:73:ea:a1:05:09:47:e2:58:2c:84:23:50:e0:2f:e4:e2:22: 87:eb:d6:51:2b:9e:26:8a:0e:29:72:d0:4e:c6:02:83:e6:e2: 7b:3b:d9:5b:7e:50:7d:d5:c9:d2:5a:9e:82:67:38:96:39:78: 7a:b1:61:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZCqF34hGvXLBClB9l0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD EyhkOWRiY2ZhYWZlOWYwMzFlNTk4NzMyZjBkNTU3ZjlkY2U4ZmQ5YmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuCRurjSiig7kE5Vaz1ClcUKRgPS gciK6GHKWFpynZpU2pczA/zm1BMaEwjsnSXZ8lnvgCOi6m0Fhg/FPWg/jFazXr6g OOLeqi8FGQvAMTFVtLvXne5ox1ujCo9dd15MdADhiICna0Uf/3RFUyXUxj+WCaLV RgFmP9Eq5U4gjEjXRwiiSh97XQyo4KltDaHSZooV7wzrPwnWBezTCflgDHcIodit 2WxZQYXBrH3cxzQSMZKrSD1Fsh4noHFWrpPPJvGV0Cc/fTYNqt+skWTw20LIRse8 cY4G3FVq6VCHND84QwjEXjIPkLOcfEkJA1zunjmQQcA3pqtkowK+YUwguQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnbz6r+nwMeWYcy8NVX+dzo/ZvXMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJCZfdFE zZCyV5ahGDKe5Mx2OPw4IzNJhv2P/Nve7DlEqKPGizh6wscEGl5WErIe79FH3lm7 f6yg4PG8mvRDMCcrBBxU0YKiff2bq88i8UTcopz0XT033vKJWeb0iz9mePdQe1zA 8nDc2Zu/gqvqDxztCVydCbCuvTLLm3IfIhjaNalGPSK2TvTZZeLbzKB4TIf6ttoq JDmWmM0/7NCoTcvzakVVSOq3aRVC5hF7r9oXhqSgdvuzQV+OvF41ySilFohz+U4+ 0nPqoQUJR+JYLIQjUOAv5OIih+vWUSueJooOKXLQTsYCg+biezvZW35QfdXJ0lqe gmc4ljl4erFhvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:16:24 2025 by rpki-client