This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json) Hash identifier: vvjoeloauq77JtCQf1vbLpg2XOLnPyb8Aw9F3b756Ro= Subject key identifier: A2:58:BA:89:2B:4B:86:2A:52:79:21:99:2E:2A:96:2E:95:2D:C2:B2 Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85 Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285 Certificate serial: 019AF208E20BEB32B2C6EFC64377C2AA4BFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft Manifest number: 165F Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: 7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa (hash: AgQ4cj261uo6E9KSd61RuHIpkNasVN9RKxcJv5djL7w=) 2: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: DfsIxyuoMaUuwiQW/kI/bZGQGs3ctqDBPC6XHju4nDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e2:0b:eb:32:b2:c6:ef:c6:43:77:c2:aa:4b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=a258ba892b4b862a527921992e2a962e952dc2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:66:0f:e5:fc:39:97:3a:a9:ba:87:40:d5: a0:db:81:ea:83:b1:ad:18:5e:ae:4c:de:40:38:08: 91:f9:05:90:a0:52:59:49:02:60:47:8e:5f:bc:3e: 52:e9:9b:52:40:6a:3e:00:c4:e6:c1:b0:13:d2:da: d5:fe:c0:24:6f:5d:b2:e8:2a:de:75:09:82:5f:c0: e1:f6:53:ef:fd:e7:f2:c8:30:37:a5:f9:a8:cc:2e: 4f:38:80:ff:eb:92:65:10:ed:07:97:8f:97:6d:28: 07:25:ea:73:88:bb:0d:3c:72:aa:20:d8:e4:82:b4: 0a:ec:4c:d2:14:66:f9:db:15:29:bf:c2:9e:79:32: 91:71:f2:cd:d2:53:34:84:bf:7f:38:da:de:56:92: 51:25:a0:ed:e8:77:74:2a:15:1f:ae:6c:56:0b:1b: 97:eb:19:67:c2:07:e3:60:50:96:44:71:9f:5f:e7: 8c:c1:a6:65:18:b4:ae:2e:07:a9:09:b7:0d:7e:cb: 7f:5f:d9:5a:14:24:d8:38:81:31:a0:c1:60:85:5b: 2a:91:8f:c9:ba:5d:25:fb:70:20:ec:ba:9b:0f:e0: f7:1b:9b:d8:10:59:40:2d:64:1c:c9:b2:cd:82:55: 1a:69:31:55:a5:c8:86:a4:3f:53:f2:22:29:dc:a9: 48:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:58:BA:89:2B:4B:86:2A:52:79:21:99:2E:2A:96:2E:95:2D:C2:B2 X509v3 Authority Key Identifier: keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:60:f6:7e:05:6f:1a:e1:3a:15:f0:20:6b:40:25:d4:a6:e1: 99:1c:63:d6:f2:3b:05:c4:7e:ac:5a:b1:28:0a:e7:b8:d6:b2: 70:e5:6e:00:9f:9a:96:35:01:84:86:e7:00:c8:79:6a:35:c9: 04:a7:95:a7:a7:d8:ea:82:7c:7d:8e:b6:20:6e:8f:38:14:da: 44:61:3a:dc:2a:18:92:68:85:be:ed:57:fb:ec:c4:fc:e5:24: 91:f0:e5:e2:fd:15:4b:9a:7a:ea:87:25:69:26:ed:1e:9a:26: 38:e1:43:47:63:e8:68:97:3f:f5:34:7c:ff:92:9b:d5:49:c4: 2c:d9:eb:7e:12:c5:d9:05:28:74:67:f3:87:c7:69:df:17:99: 50:b9:3f:bc:6c:e3:77:d4:09:94:d9:1f:b5:59:d6:71:e9:ae: bc:67:bc:19:03:92:32:83:89:cb:de:9e:12:e1:b0:1d:67:57: 79:e7:17:e5:73:61:8e:f3:39:c4:2a:bc:90:20:6a:2a:ff:1e: 33:23:a6:54:00:78:04:47:66:fc:7a:13:83:59:f4:38:a7:9a: 03:a5:fc:b3:57:de:b0:90:8b:db:b7:59:52:cd:92:34:bd:aa: 08:fe:40:5e:6f:b2:d6:1d:aa:7f:11:83:ab:7f:b4:1f:22:c3: b0:1c:ba:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOIL6zKyxu/GQ3fCqkv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1N2UwYzA2OThhYmMxOWE1NjhhZmVjZTZiMTkwY2VkMDMz YTcyODUwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EyhhMjU4YmE4OTJiNGI4NjJhNTI3OTIxOTkyZTJhOTYyZTk1MmRjMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YlmD+X8OZc6qbqHQNWg24Hqg7Gt GF6uTN5AOAiR+QWQoFJZSQJgR45fvD5S6ZtSQGo+AMTmwbAT0trV/sAkb12y6Cre dQmCX8Dh9lPv/efyyDA3pfmozC5POID/65JlEO0Hl4+XbSgHJepziLsNPHKqINjk grQK7EzSFGb52xUpv8KeeTKRcfLN0lM0hL9/ONreVpJRJaDt6Hd0KhUfrmxWCxuX 6xlnwgfjYFCWRHGfX+eMwaZlGLSuLgepCbcNfst/X9laFCTYOIExoMFghVsqkY/J ul0l+3Ag7LqbD+D3G5vYEFlALWQcybLNglUaaTFVpciGpD9T8iIp3KlIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJYuokrS4YqUnkhmS4qli6VLcKyMB8GA1UdIwQY MBaAFMV+DAaYq8GaVor+zmsZDO0DOnKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTkt MTcwOWY3YzdkNWU4LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80YThkMmEtNjY0Yi00NDY0LWE0ZTktMTcwOWY3YzdkNWU4 LzEveFg0TUJwaXJ3WnBXaXY3T2F4a003UU02Y29VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGD2fgVv GuE6FfAga0Al1KbhmRxj1vI7BcR+rFqxKArnuNaycOVuAJ+aljUBhIbnAMh5ajXJ BKeVp6fY6oJ8fY62IG6POBTaRGE63CoYkmiFvu1X++zE/OUkkfDl4v0VS5p66ocl aSbtHpomOOFDR2PoaJc/9TR8/5Kb1UnELNnrfhLF2QUodGfzh8dp3xeZULk/vGzj d9QJlNkftVnWcemuvGe8GQOSMoOJy96eEuGwHWdXeecX5XNhjvM5xCq8kCBqKv8e MyOmVAB4BEdm/HoTg1n0OKeaA6X8s1fesJCL27dZUs2SNL2qCP5AXm+y1h2qfxGD q3+0HyLDsBy6Eg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:55 2025 by rpki-client