This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json) Hash identifier: c6Btb5akLMGt4/qV3wgUuxXXGWH2OCV+nTsVigoFoqQ= Subject key identifier: AD:21:A5:C8:50:95:E5:F8:5D:61:F9:F9:07:66:55:69:81:0B:51:FA Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Certificate serial: 019AF1D1D4CB6B640FC2DE022F57A00E7E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=) 2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=) 3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: f7NnYxdrRvXi5MdoQzsMy13dPntQcDWaBiE9skpSzOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d4:cb:6b:64:0f:c2:de:02:2f:57:a0:0e:7e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=ad21a5c85095e5f85d61f9f907665569810b51fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:4b:6b:e2:ac:0a:cb:d2:67:f3:b6:88:62: 3e:69:a6:64:d2:e1:29:6e:08:3e:2b:8b:4b:5a:3d: d1:f2:13:7e:55:b6:b6:f8:08:fb:8f:a7:2f:1d:e5: 75:d8:06:97:dd:ef:5a:8a:51:48:0f:3b:5a:7e:1c: 65:13:e1:61:3c:fb:04:38:a6:ce:69:f4:fd:75:e7: b8:6a:6a:2d:2b:a2:53:26:c6:d0:f3:13:70:97:4d: 61:30:92:eb:7e:6a:36:bb:43:12:11:7a:4a:95:8e: d1:f2:73:fd:11:c4:8c:a9:8e:7a:e4:5b:9b:02:f0: ad:9f:95:f9:dc:f8:40:4e:86:54:ff:d8:05:7b:9b: de:d0:04:61:9e:dd:88:13:12:d8:e5:9b:e2:d1:51: c3:77:ad:08:a6:2d:6c:98:3e:3c:b3:30:d5:80:29: 5a:99:f5:20:a1:5e:51:75:e2:bf:b4:ba:72:2f:73: a4:d9:32:6d:83:95:7f:18:05:77:fc:b0:4a:de:b0: b9:e6:ff:58:b4:a5:28:65:ec:96:8d:1b:86:c2:74: 22:b4:e4:7a:5c:23:c4:c3:14:46:98:ce:ed:ff:c1: d4:af:b7:89:09:eb:80:30:ea:ed:b7:b6:98:9b:b7: 60:0d:36:f6:2e:af:d6:24:2b:97:20:83:f6:bf:6c: 5d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:21:A5:C8:50:95:E5:F8:5D:61:F9:F9:07:66:55:69:81:0B:51:FA X509v3 Authority Key Identifier: keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1e:1c:9b:85:5d:19:b8:ec:a0:41:91:be:75:34:ca:ca:74: c8:95:9f:78:71:e8:d7:c0:4c:ec:f5:24:58:45:01:77:99:e7: 28:e1:2f:13:93:7f:44:6c:b1:51:17:04:e2:c5:e1:35:7b:92: e7:02:fd:11:f3:39:ba:12:e8:15:75:36:05:b1:be:65:d3:d6: 05:42:26:c6:3b:04:4b:61:0d:a5:20:9f:ea:65:c6:3e:f8:85: ae:81:f6:4e:a7:f0:98:87:94:fc:f6:27:7d:fe:97:33:89:68: 46:38:df:b6:15:e6:8b:fc:0d:5e:40:ae:36:78:85:26:64:05: 82:cc:58:bd:16:96:49:6f:16:2e:57:03:d5:17:2f:47:5a:08: 4b:6a:ea:d9:44:26:16:46:b9:a7:c6:d9:99:a7:78:9d:a5:14: eb:6b:92:41:55:99:6a:5f:b2:c6:2d:6d:5c:ac:dc:56:8b:6b: 45:7b:6c:e1:98:4f:0c:69:b6:7a:a7:5a:f2:ab:06:58:76:7e: ea:86:0d:13:1d:4a:ce:f4:66:21:d7:51:7a:ee:38:f7:40:39: 7d:b9:dc:ee:9f:9a:e3:f2:2c:f6:cc:1e:e5:6e:55:01:3c:53: 40:16:e7:4b:3c:c8:7b:e1:e9:3f:bb:72:62:b9:48:bf:bc:29: 07:0e:16:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dTLa2QPwt4CL1egDn5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YmZiZWYyNzliZjlkZWQ2ZTM2NTFlMDYyOGQzOWJhNzky OTRmNzgwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD EyhhZDIxYTVjODUwOTVlNWY4NWQ2MWY5ZjkwNzY2NTU2OTgxMGI1MWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc1La+KsCsvSZ/O2iGI+aaZk0uEp bgg+K4tLWj3R8hN+Vba2+Aj7j6cvHeV12AaX3e9ailFIDztafhxlE+FhPPsEOKbO afT9dee4amotK6JTJsbQ8xNwl01hMJLrfmo2u0MSEXpKlY7R8nP9EcSMqY565Fub AvCtn5X53PhAToZU/9gFe5ve0ARhnt2IExLY5Zvi0VHDd60Ipi1smD48szDVgCla mfUgoV5RdeK/tLpyL3Ok2TJtg5V/GAV3/LBK3rC55v9YtKUoZeyWjRuGwnQitOR6 XCPEwxRGmM7t/8HUr7eJCeuAMOrtt7aYm7dgDTb2Lq/WJCuXIIP2v2xdlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0hpchQleX4XWH5+QdmVWmBC1H6MB8GA1UdIwQY MBaAFMa/vvJ5v53tbjZR4GKNObp5KU94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQt YWRlNTMwZDdjNDFiLzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQtYWRlNTMwZDdjNDFi LzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANB4cm4Vd GbjsoEGRvnU0ysp0yJWfeHHo18BM7PUkWEUBd5nnKOEvE5N/RGyxURcE4sXhNXuS 5wL9EfM5uhLoFXU2BbG+ZdPWBUImxjsES2ENpSCf6mXGPviFroH2TqfwmIeU/PYn ff6XM4loRjjfthXmi/wNXkCuNniFJmQFgsxYvRaWSW8WLlcD1RcvR1oIS2rq2UQm Fka5p8bZmad4naUU62uSQVWZal+yxi1tXKzcVotrRXts4ZhPDGm2eqda8qsGWHZ+ 6oYNEx1KzvRmIddReu4490A5fbnc7p+a4/Is9swe5W5VATxTQBbnSzzIe+HpP7ty YrlIv7wpBw4WSg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:12 2025 by rpki-client