This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json) Hash identifier: zt3dcz47ZXPUgS0BoMGATwmbxy54pkGM7SJhJjFFbzk= Subject key identifier: C1:4A:D9:A8:4E:E4:2B:70:2A:4E:6B:94:28:14:14:55:E2:F0:DB:0E Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Certificate serial: 019AF163D9E4AD360C934BEBA10FB3A3D645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft Manifest number: 0B88 Signing time: Sat 06 Dec 2025 02:00:44 +0000 Manifest this update: Sat 06 Dec 2025 02:00:44 +0000 Manifest next update: Sun 07 Dec 2025 02:00:44 +0000 Files and hashes: 1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=) 2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=) 3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=) 4: TO_SSwf6-eWoLaY3pBc8ewOhpiA.roa (hash: ee63RZitNOPdcRNyJ4aJ7hmGttuUOvT0FBG6CRMod/s=) 5: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: de9CayeZstBNmX2V4PndXq0cazrqhpcpTIZlWBN/gqI=) 6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=) 7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d9:e4:ad:36:0c:93:4b:eb:a1:0f:b3:a3:d6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Validity Not Before: Dec 6 02:00:44 2025 GMT Not After : Dec 7 02:00:44 2025 GMT Subject: CN=c14ad9a84ee42b702a4e6b9428141455e2f0db0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:70:67:bd:0b:a6:3d:6c:e9:60:76:e8:1a: 25:09:f0:59:7d:99:d2:f8:28:ba:34:85:77:c5:c2: 46:57:6b:bc:fb:b1:76:92:d0:3b:02:ee:a2:4d:0c: f3:b6:4e:6e:71:9a:54:be:4a:d3:58:17:e6:a9:b2: 71:ae:96:25:44:cc:63:ba:53:6a:af:e3:0c:d3:4c: 82:84:85:0e:cc:9e:19:d3:1d:b5:47:d9:bc:ac:d0: 96:73:34:27:89:48:49:8f:34:4f:b9:ed:87:7d:93: 85:74:23:c8:93:f2:e4:e0:b8:31:df:c2:ca:e9:16: e9:48:7e:33:c7:24:2a:2f:d4:fa:2e:b3:fa:f9:dc: 06:e0:a0:b8:cd:0b:9b:90:6f:97:ba:d0:ff:19:d7: 58:e3:61:d6:c8:09:82:95:f3:53:a3:cb:71:29:2d: ae:43:db:76:ca:80:ca:b7:ca:c7:fc:c5:b5:01:2d: 7e:1a:6d:dc:05:02:af:e4:fd:16:f0:45:28:11:6f: 1c:45:b3:47:1f:98:a0:2e:0e:be:f7:cc:9a:d1:43: d9:aa:b1:ff:a4:4e:18:22:20:c5:59:11:11:b8:e4: 5c:89:d4:0d:9d:50:60:9a:00:78:12:b0:f4:98:09: 05:b9:24:fa:ee:4f:37:16:aa:5e:b5:2c:79:5a:a4: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4A:D9:A8:4E:E4:2B:70:2A:4E:6B:94:28:14:14:55:E2:F0:DB:0E X509v3 Authority Key Identifier: keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:97:b6:b0:80:e8:33:48:16:b9:07:a0:3c:cd:07:b8:fb:df: ba:1c:90:3c:9d:aa:f3:5b:30:4d:07:94:2a:40:70:19:2c:02: 81:6d:c1:c7:70:97:ee:56:e2:19:84:9c:c3:db:fe:05:96:21: 83:d3:89:85:e9:b5:46:f0:98:37:36:36:3d:13:26:86:d3:9d: 58:e7:62:c1:fa:7a:cf:25:6d:8b:9d:73:7f:79:99:29:78:58: 29:f0:1d:eb:20:8e:a1:e6:cb:b5:74:2a:8e:ad:25:98:b7:5f: 31:ce:e4:8a:2d:06:bb:83:21:87:cb:2b:7b:06:b1:38:6c:18: 24:88:c5:7e:c6:32:d3:00:53:d8:02:20:47:2f:4a:aa:49:62: 3a:17:07:31:e4:56:33:64:15:25:55:17:6c:e6:fa:aa:7b:04: 8b:d4:a1:cd:84:a6:70:1b:b5:78:c6:db:e4:51:77:dd:3c:ca: 2d:ae:a7:57:e8:1b:10:7a:9c:07:10:10:19:87:27:90:a6:7c: 61:fc:56:b7:e9:03:d2:72:a5:37:76:1e:64:3e:ee:db:17:0b: 8e:05:ba:9e:80:77:14:07:a3:13:11:d5:7c:59:fc:18:ce:c1: c6:cb:3b:68:e1:e7:25:6c:3b:46:71:41:5d:ff:42:4a:96:20: b3:9b:86:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9nkrTYMk0vroQ+zo9ZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDY5ZDlmNzQ5NjMwZjAyNTZjZjBjZWFiNTg4MzZiNDkx YTU4ZjYwHhcNMjUxMjA2MDIwMDQ0WhcNMjUxMjA3MDIwMDQ0WjAzMTEwLwYDVQQD EyhjMTRhZDlhODRlZTQyYjcwMmE0ZTZiOTQyODE0MTQ1NWUyZjBkYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SdwZ70Lpj1s6WB26BolCfBZfZnS +Ci6NIV3xcJGV2u8+7F2ktA7Au6iTQzztk5ucZpUvkrTWBfmqbJxrpYlRMxjulNq r+MM00yChIUOzJ4Z0x21R9m8rNCWczQniUhJjzRPue2HfZOFdCPIk/Lk4Lgx38LK 6RbpSH4zxyQqL9T6LrP6+dwG4KC4zQubkG+XutD/GddY42HWyAmClfNTo8txKS2u Q9t2yoDKt8rH/MW1AS1+Gm3cBQKv5P0W8EUoEW8cRbNHH5igLg6+98ya0UPZqrH/ pE4YIiDFWRERuORcidQNnVBgmgB4ErD0mAkFuST67k83FqpetSx5WqRQNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFK2ahO5CtwKk5rlCgUFFXi8NsOMB8GA1UdIwQY MBaAFF3WnZ90ljDwJWzwzqtYg2tJGlj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWIt ZjNmZDY0MzMxNzA5LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWItZjNmZDY0MzMxNzA5 LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpe2sIDo M0gWuQegPM0HuPvfuhyQPJ2q81swTQeUKkBwGSwCgW3Bx3CX7lbiGYScw9v+BZYh g9OJhem1RvCYNzY2PRMmhtOdWOdiwfp6zyVti51zf3mZKXhYKfAd6yCOoebLtXQq jq0lmLdfMc7kii0Gu4Mhh8srewaxOGwYJIjFfsYy0wBT2AIgRy9KqkliOhcHMeRW M2QVJVUXbOb6qnsEi9ShzYSmcBu1eMbb5FF33TzKLa6nV+gbEHqcBxAQGYcnkKZ8 YfxWt+kD0nKlN3YeZD7u2xcLjgW6noB3FAejExHVfFn8GM7Bxss7aOHnJWw7RnFB Xf9CSpYgs5uGrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:21 2025 by rpki-client