This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json) Hash identifier: GrAxadkMmkJ+ZyS7+kXGHp4AwhxlAf6+3rnrDVemKig= Subject key identifier: AC:6E:00:D8:D6:03:3B:8A:04:7F:95:CD:A7:9C:78:0E:B5:FA:1E:E3 Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Certificate serial: 019AF31CB333588A0D2C5E29605AA69FBB23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft Manifest number: 0C1B Signing time: Sat 06 Dec 2025 10:02:15 +0000 Manifest this update: Sat 06 Dec 2025 10:02:15 +0000 Manifest next update: Sun 07 Dec 2025 10:02:15 +0000 Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=) 2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: rxoHfr17jAlBke9v0ZNbI0q6U9Mj35Sb/ScWAnGHYDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b3:33:58:8a:0d:2c:5e:29:60:5a:a6:9f:bb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481 Validity Not Before: Dec 6 10:02:15 2025 GMT Not After : Dec 7 10:02:15 2025 GMT Subject: CN=ac6e00d8d6033b8a047f95cda79c780eb5fa1ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:db:a6:ce:66:f0:6e:03:c8:e3:6d:72:df:b5: fc:c0:20:e6:e4:9a:aa:17:e9:e9:32:3e:d0:0d:2d: c1:d0:03:14:dc:e5:64:14:2f:8c:e3:dd:e9:5f:7c: af:bd:12:f7:9e:5f:0b:2c:e1:f7:42:5b:d6:a3:40: 58:28:14:07:ba:7e:06:38:ba:31:16:2f:8b:d8:1d: 53:eb:70:98:1c:64:7b:6e:c8:a3:64:6f:29:d2:7b: ae:4c:09:21:da:0c:b2:45:66:b5:f7:79:01:54:45: 53:02:cc:54:eb:c5:f8:7a:fd:7c:23:5f:1f:6f:b2: 16:d4:79:ef:c0:a2:9d:fd:45:ee:18:6c:bf:15:5b: e1:62:d4:19:d1:bc:84:ff:3f:68:79:8a:2f:88:34: ba:f8:f8:30:1c:ea:aa:78:d0:dd:ee:41:d0:45:fa: 82:01:a2:21:c0:59:a2:aa:ac:38:4c:33:e2:6a:24: 66:36:a8:b7:37:5b:cd:e5:f8:fd:fe:73:18:59:79: 33:dd:1d:14:90:c8:41:f5:3b:ab:94:d8:56:32:55: 46:ca:47:d0:55:26:6a:36:e5:07:aa:3e:52:f1:e7: 35:b4:4c:c7:db:23:10:99:7a:7d:72:0c:a3:29:f2: 17:36:f7:7a:3c:49:9a:71:09:5b:55:1d:5c:e4:75: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6E:00:D8:D6:03:3B:8A:04:7F:95:CD:A7:9C:78:0E:B5:FA:1E:E3 X509v3 Authority Key Identifier: keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:df:f7:29:6a:d2:e6:6e:a7:d8:a1:b8:9b:a6:eb:67:c3:97: 28:86:21:72:61:31:1b:30:d3:18:a9:35:87:2b:a2:a5:1c:2a: 83:35:79:c4:34:02:42:08:3e:ef:77:29:9b:99:a5:42:40:27: 86:7c:f5:c2:69:3b:e6:35:e0:d7:ed:1e:48:6d:18:d1:c2:7d: 83:ae:96:8b:91:f9:80:b6:33:10:81:d9:3e:d0:e8:c7:1f:e5: fa:c0:31:7e:ed:9e:4f:a5:02:fa:70:92:54:7f:71:c0:c5:4e: 86:a8:91:85:0a:73:1d:48:76:ec:ed:24:59:3d:68:8d:9d:fc: c4:57:99:ca:cd:8e:9e:af:f7:d3:65:28:67:55:c6:8a:c8:71: ef:08:12:d7:bd:32:fe:bd:c7:27:1a:58:a0:f6:86:dd:36:11: 8f:28:e8:50:7d:5b:ab:49:67:c2:d6:3a:83:67:bb:d3:d7:f2: 01:39:f7:29:a3:33:b2:95:3d:81:dd:78:b7:66:ee:47:ca:b3: 0c:2e:9b:81:2e:ec:fd:a9:aa:b9:05:59:2c:6d:e3:96:2b:3e: eb:07:c8:3c:cf:7c:7f:b6:a1:a2:28:da:ff:b5:dc:17:55:48: e9:cf:ec:13:a1:55:9d:02:69:02:6e:0d:ac:97:94:6b:1b:fa: 28:78:28:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLMzWIoNLF4pYFqmn7sjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MjI0ZWE0NWQwODFkNDAyZmZkNmJmNGRkOTVlM2ZmNmYy ZGM0ODEwHhcNMjUxMjA2MTAwMjE1WhcNMjUxMjA3MTAwMjE1WjAzMTEwLwYDVQQD EyhhYzZlMDBkOGQ2MDMzYjhhMDQ3Zjk1Y2RhNzljNzgwZWI1ZmExZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dumzmbwbgPI421y37X8wCDm5Jqq F+npMj7QDS3B0AMU3OVkFC+M493pX3yvvRL3nl8LLOH3QlvWo0BYKBQHun4GOLox Fi+L2B1T63CYHGR7bsijZG8p0nuuTAkh2gyyRWa193kBVEVTAsxU68X4ev18I18f b7IW1HnvwKKd/UXuGGy/FVvhYtQZ0byE/z9oeYoviDS6+PgwHOqqeNDd7kHQRfqC AaIhwFmiqqw4TDPiaiRmNqi3N1vN5fj9/nMYWXkz3R0UkMhB9TurlNhWMlVGykfQ VSZqNuUHqj5S8ec1tEzH2yMQmXp9cgyjKfIXNvd6PEmacQlbVR1c5HWt1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxuANjWAzuKBH+VzaeceA61+h7jMB8GA1UdIwQY MBaAFMUiTqRdCB1AL/1r9N2V4/9vLcSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUt NTIzNTZjZDVkYTkwLzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MTU0ZTMtMjg2Yi00NmEzLWI4YTUtNTIzNTZjZDVkYTkw LzEveFNKT3BGMElIVUF2X1d2MDNaWGpfMjh0eElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9/3KWrS 5m6n2KG4m6brZ8OXKIYhcmExGzDTGKk1hyuipRwqgzV5xDQCQgg+73cpm5mlQkAn hnz1wmk75jXg1+0eSG0Y0cJ9g66Wi5H5gLYzEIHZPtDoxx/l+sAxfu2eT6UC+nCS VH9xwMVOhqiRhQpzHUh27O0kWT1ojZ38xFeZys2Onq/302UoZ1XGishx7wgS170y /r3HJxpYoPaG3TYRjyjoUH1bq0lnwtY6g2e709fyATn3KaMzspU9gd14t2buR8qz DC6bgS7s/amquQVZLG3jlis+6wfIPM98f7ahoija/7XcF1VI6c/sE6FVnQJpAm4N rJeUaxv6KHgowA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:59 2025 by rpki-client