This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json) Hash identifier: EiAWzCtGXTSQrf41dK09Zqu7jrswZNsW7W/sGoA/HoQ= Subject key identifier: E8:81:BA:72:36:79:CF:84:FD:17:16:FC:D4:32:DD:CD:0B:68:2C:5C Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Certificate serial: 019AF0BF9C7A0B7AFF974F29159B3ED8D36F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft Manifest number: 176E Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (hash: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=) 2: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (hash: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=) 3: kJyTZGrKIJP-guAGkQfidQemnN0.roa (hash: 5VNjlZQ2lTGQgsP/MAa7aAdGIHpHVpDviDdJ3Ul/giI=) 4: oZ13AtjecChXKw5f_3lLaOPw8Ks.roa (hash: /XejTxxPIA/m0yG5qUhn06Ei20l/pmuOP7i6MWx0h1U=) 5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: I9NWaEQSqlL1dmj3zAXMjf9LPR2todIyxsUTkkeRKJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9c:7a:0b:7a:ff:97:4f:29:15:9b:3e:d8:d3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=e881ba723679cf84fd1716fcd432ddcd0b682c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:06:6f:37:80:5e:e6:98:eb:ad:62:66:04: a8:77:ed:e3:c0:ba:13:8f:0f:d5:71:03:53:e9:f4: 25:75:4b:2d:9b:f2:ba:1c:01:01:d0:59:bb:f9:be: 26:b0:0c:89:54:11:cf:ae:23:08:2e:53:8e:0b:45: aa:39:4c:30:87:9c:99:c3:6f:d5:1c:76:4b:f3:36: 25:f8:60:54:53:35:e3:41:b7:ea:6a:e0:d7:f1:60: ec:10:cc:ed:02:9d:7d:c1:40:bf:b0:e1:61:b4:cd: fc:05:5b:fa:bb:3f:d3:a7:0f:4e:d8:53:7a:b8:b4: 8a:07:f8:61:e4:01:ba:8f:34:02:76:64:eb:f2:f5: 69:da:91:56:66:f1:87:54:b4:f3:ab:ff:5d:2f:b7: e5:60:a9:9a:78:b0:85:ba:89:b2:73:09:bf:a8:dd: e6:b2:f0:18:56:11:69:7e:85:7f:48:6b:14:41:fe: 8c:0e:cd:9b:cb:f0:de:b0:38:6a:c8:38:3b:de:ba: 6b:cc:e1:82:0a:c0:37:5b:47:6f:c7:f0:3c:b8:69: ff:b3:84:1a:9f:5d:19:25:e8:92:79:0d:5e:bc:9f: 6d:71:af:c5:05:ec:d4:3e:c6:5a:49:ce:5c:da:70: 85:55:04:72:12:26:4a:58:7d:a9:99:e1:e4:cb:24: 5f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:81:BA:72:36:79:CF:84:FD:17:16:FC:D4:32:DD:CD:0B:68:2C:5C X509v3 Authority Key Identifier: keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:88:a9:e8:83:20:4e:ea:e2:da:46:1f:3f:6d:60:70:80:39: 00:37:10:1c:6d:b7:46:1a:eb:4b:84:c0:3a:f0:94:94:11:34: b4:f3:b7:f6:43:05:30:68:3e:03:2a:6b:7d:7d:28:52:9e:19: 01:2a:dd:4d:44:d0:67:32:0e:c0:72:9e:e8:53:fb:b9:4f:a0: cb:43:7f:e7:e4:b9:05:ff:7c:c2:0d:27:33:ad:b3:29:9d:36: 59:63:9a:8d:cb:25:96:94:d7:b6:4a:f5:3b:e5:7e:c1:6c:5c: da:ee:ea:a5:ea:d8:10:44:d3:36:a2:56:4e:72:5f:a3:fc:c5: f1:19:9d:37:48:ed:d8:b5:ba:a9:d8:c6:66:ef:98:72:8d:3a: 9a:1b:21:d2:ff:c9:18:3b:1f:f3:0a:55:20:44:9d:48:80:7c: 90:08:42:e1:55:5d:ea:35:64:e4:4f:f8:d1:24:69:49:07:2a: 46:96:0e:f1:ce:ae:36:35:e4:06:d0:49:2d:90:e3:90:df:81: dd:be:15:47:d7:2f:e1:d1:60:e9:70:f5:b5:b0:72:30:47:02: 49:59:98:d9:2c:d6:c7:25:4a:e7:39:8c:b1:c5:bd:87:51:dd: 7a:e8:10:09:85:b9:0d:29:dc:95:48:e8:45:c9:3d:96:55:bf: 64:86:70:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5x6C3r/l08pFZs+2NNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0 NmVlMDUwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD EyhlODgxYmE3MjM2NzljZjg0ZmQxNzE2ZmNkNDMyZGRjZDBiNjgyYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvEGbzeAXuaY661iZgSod+3jwLoT jw/VcQNT6fQldUstm/K6HAEB0Fm7+b4msAyJVBHPriMILlOOC0WqOUwwh5yZw2/V HHZL8zYl+GBUUzXjQbfqauDX8WDsEMztAp19wUC/sOFhtM38BVv6uz/Tpw9O2FN6 uLSKB/hh5AG6jzQCdmTr8vVp2pFWZvGHVLTzq/9dL7flYKmaeLCFuomycwm/qN3m svAYVhFpfoV/SGsUQf6MDs2by/DesDhqyDg73rprzOGCCsA3W0dvx/A8uGn/s4Qa n10ZJeiSeQ1evJ9tca/FBezUPsZaSc5c2nCFVQRyEiZKWH2pmeHkyyRfYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiBunI2ec+E/RcW/NQy3c0LaCxcMB8GA1UdIwQY MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3 LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4ip6IMg Turi2kYfP21gcIA5ADcQHG23RhrrS4TAOvCUlBE0tPO39kMFMGg+AyprfX0oUp4Z ASrdTUTQZzIOwHKe6FP7uU+gy0N/5+S5Bf98wg0nM62zKZ02WWOajcsllpTXtkr1 O+V+wWxc2u7qperYEETTNqJWTnJfo/zF8RmdN0jt2LW6qdjGZu+Yco06mhsh0v/J GDsf8wpVIESdSIB8kAhC4VVd6jVk5E/40SRpSQcqRpYO8c6uNjXkBtBJLZDjkN+B 3b4VR9cv4dFg6XD1tbByMEcCSVmY2SzWxyVK5zmMscW9h1HdeugQCYW5DSnclUjo Rck9llW/ZIZwog== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:32 2025 by rpki-client