This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json) Hash identifier: BwYN86iWMFdlEA3IPZS79CgaQCI/5tUfk/KDB3z5FAM= Subject key identifier: D7:AE:FF:F5:C1:6D:36:3E:D2:FF:4E:B1:A4:5F:76:F8:83:63:29:B0 Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a Certificate serial: 019AF49BB6D6E6D949560B234748CEF27F57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft Manifest number: 10AA Signing time: Sat 06 Dec 2025 17:00:36 +0000 Manifest this update: Sat 06 Dec 2025 17:00:36 +0000 Manifest next update: Sun 07 Dec 2025 17:00:36 +0000 Files and hashes: 1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=) 2: McmEoR42go_NL-e1B7HnbupLbKE.roa (hash: l0MQWVd1GEY0hlnVKUF+5hVPuDs45GKOy6rfNmqbWI0=) 3: cQbtoMzIsUrEiz2_R7FPTDe-83o.roa (hash: uIgSp+mYNVkKY/oukv2IXYpbIzAsJVvw3J0CKtfAk+0=) 4: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=) 5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: MRy3o+yyZeFOSx9DEDtrko/fNEqvE3/wGO8TF7s6eNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b6:d6:e6:d9:49:56:0b:23:47:48:ce:f2:7f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a Validity Not Before: Dec 6 17:00:36 2025 GMT Not After : Dec 7 17:00:36 2025 GMT Subject: CN=d7aefff5c16d363ed2ff4eb1a45f76f8836329b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:ce:53:6a:47:e3:b6:2c:15:83:ae:90:23: c4:59:d8:35:e4:88:e0:40:69:30:d8:58:18:56:19: 73:24:d5:cd:2f:7b:f8:4f:c4:c2:9f:f7:e0:41:f3: d1:fa:48:60:20:65:1f:c9:0c:48:a1:c8:44:1d:47: 23:91:4e:84:85:78:92:40:e1:f1:a5:fb:47:ee:16: ac:af:e3:f4:8c:17:ed:50:32:a3:df:53:59:70:28: b5:ef:7e:5c:02:cc:6a:7f:1b:e6:c0:f1:11:b3:da: 14:c4:31:a4:7f:9e:43:39:b2:56:e7:09:85:60:85: a1:df:4d:93:43:79:da:14:d6:25:4f:52:2b:df:7f: 13:45:b4:b8:bf:7a:37:a2:de:46:be:5f:cc:63:01: 48:d9:03:2a:6c:ae:09:a5:e0:f1:e7:25:65:b1:28: 06:5f:79:a7:14:d5:96:fc:3f:13:cb:9c:96:f7:76: 75:a9:19:96:13:d3:21:39:65:bf:e8:8a:eb:d4:9d: a7:4b:f8:07:3f:e6:7c:74:8d:9b:71:cd:fa:21:2b: 0c:20:a8:f2:fb:2b:33:78:b1:e2:62:19:55:37:d7: 52:5e:99:fa:42:03:a3:6b:c4:be:fb:e8:78:d0:21: 33:01:56:3b:4c:a2:6a:72:52:2e:96:5a:2f:b5:52: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AE:FF:F5:C1:6D:36:3E:D2:FF:4E:B1:A4:5F:76:F8:83:63:29:B0 X509v3 Authority Key Identifier: keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:e4:21:eb:0c:31:9b:ff:4e:5f:be:cf:1b:68:17:3d:76:75: 86:f6:52:c3:52:c1:d7:e8:80:f2:36:2a:4f:43:6f:f1:d0:56: cd:8d:fc:d0:2c:f7:96:36:d5:06:82:65:7d:e8:96:d9:c6:73: 08:92:15:20:d5:5d:f7:e5:1a:63:2f:65:55:78:63:91:e0:25: 66:32:41:d7:67:09:c7:0f:00:18:cf:f6:b2:d8:5b:7e:70:29: 1f:c1:2c:6a:47:66:3e:5d:35:ca:03:04:b6:d6:74:44:36:b1: 1b:fa:08:35:69:e7:58:2e:ce:de:85:d8:68:6e:3d:8a:fe:e6: ad:ad:46:a1:3e:2c:24:97:56:6b:05:3f:95:83:30:62:b9:49: 67:ba:9d:86:f4:66:cb:fd:dd:bd:9b:17:7a:99:cc:a7:3b:ca: 5b:05:aa:fb:fe:b5:88:f4:2f:f6:07:25:eb:0e:a3:f8:4c:cd: 5e:34:ce:6c:7b:b7:e2:96:77:5e:37:02:01:78:de:3c:7a:6f: 30:fe:46:64:a6:45:ad:1d:c5:18:59:d2:1d:61:b5:46:c8:96: 45:c7:cf:23:15:38:a7:06:b4:18:85:e0:ff:3a:99:fc:f3:64: a0:6a:4c:33:ec:12:ed:f6:53:d7:98:60:72:4a:4f:a1:5d:a8: 6c:a6:85:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7bW5tlJVgsjR0jO8n9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx MGU5MWEwHhcNMjUxMjA2MTcwMDM2WhcNMjUxMjA3MTcwMDM2WjAzMTEwLwYDVQQD EyhkN2FlZmZmNWMxNmQzNjNlZDJmZjRlYjFhNDVmNzZmODgzNjMyOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijDOU2pH47YsFYOukCPEWdg15Ijg QGkw2FgYVhlzJNXNL3v4T8TCn/fgQfPR+khgIGUfyQxIochEHUcjkU6EhXiSQOHx pftH7hasr+P0jBftUDKj31NZcCi1735cAsxqfxvmwPERs9oUxDGkf55DObJW5wmF YIWh302TQ3naFNYlT1Ir338TRbS4v3o3ot5Gvl/MYwFI2QMqbK4JpeDx5yVlsSgG X3mnFNWW/D8Ty5yW93Z1qRmWE9MhOWW/6Irr1J2nS/gHP+Z8dI2bcc36ISsMIKjy +yszeLHiYhlVN9dSXpn6QgOja8S+++h40CEzAVY7TKJqclIullovtVKv+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeu//XBbTY+0v9OsaRfdviDYymwMB8GA1UdIwQY MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyeQh6wwx m/9OX77PG2gXPXZ1hvZSw1LB1+iA8jYqT0Nv8dBWzY380Cz3ljbVBoJlfeiW2cZz CJIVINVd9+UaYy9lVXhjkeAlZjJB12cJxw8AGM/2sthbfnApH8EsakdmPl01ygME ttZ0RDaxG/oINWnnWC7O3oXYaG49iv7mra1GoT4sJJdWawU/lYMwYrlJZ7qdhvRm y/3dvZsXepnMpzvKWwWq+/61iPQv9gcl6w6j+EzNXjTObHu34pZ3XjcCAXjePHpv MP5GZKZFrR3FGFnSHWG1RsiWRcfPIxU4pwa0GIXg/zqZ/PNkoGpMM+wS7fZT15hg ckpPoV2obKaF7g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:27 2025 by rpki-client