This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json) Hash identifier: DmgIaxVFKNedFbP2kr9zfkFyVfis2iR3sd3kdoyVGKE= Subject key identifier: 26:48:F6:BE:C8:06:13:40:A5:A3:39:D0:99:0D:35:40:01:0B:55:A4 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 019AF5E64128584EEF7B963AA108DFD3115B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft Manifest number: 0CE8 Signing time: Sat 06 Dec 2025 23:01:39 +0000 Manifest this update: Sat 06 Dec 2025 23:01:39 +0000 Manifest next update: Sun 07 Dec 2025 23:01:39 +0000 Files and hashes: 1: 1-Cyzwb2XQqDkpOsGwOgAeJVNVbQ.roa (hash: DumSU40J40K0zKa52TzMzNWl0OO8xKRPkll5x5+k/cY=) 2: CiSXDCdW3LMwjv8iJ3B2mY7zojU.roa (hash: xoZ4D0sXI5qWTDuig3N1rhh1l7zRYo3/rWNsiYjXVLw=) 3: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=) 4: Ip8huaIK21qXcV1uFM12bMRhsAc.roa (hash: +deXUeKbtAB4FcOD/Fpx9fIrQPH8oKg+/d89Ce9TGGY=) 5: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: b80XPwb2ef9PZRr/0rsugAcIrsY4z8CEU7CobxgiNWk=) 6: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=) 7: khLj3siTURlsY89-Vmgedp1s5K4.roa (hash: xKMxdzBhNZmeRr32A6V0s5rbV7HKraIiuV6YTmkyQCI=) 8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=) 9: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:41:28:58:4e:ef:7b:96:3a:a1:08:df:d3:11:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Dec 6 23:01:39 2025 GMT Not After : Dec 7 23:01:39 2025 GMT Subject: CN=2648f6bec8061340a5a339d0990d3540010b55a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:ff:a7:80:63:0a:19:d3:14:a6:da:cb:83: 4f:6b:64:14:87:62:59:c7:5f:93:a2:64:40:68:8a: 04:65:70:26:ab:95:2d:bf:a0:86:29:56:2c:11:69: fe:c7:99:d0:70:80:59:9f:9d:19:ab:a2:15:ba:b7: 62:e1:34:21:92:2d:68:99:a2:ad:57:e4:5c:a8:11: e5:ab:fe:c2:9d:7f:68:0e:e2:68:67:fd:d6:07:57: 1c:0f:25:2f:4c:ae:fb:1e:cb:89:0d:2c:8c:cb:79: 49:5b:ba:d6:7b:db:97:67:ab:02:cc:cf:27:4f:55: f1:b6:18:3f:fe:1d:73:e0:87:0a:5f:c7:2a:f5:68: 17:1d:52:22:b0:cc:38:26:a1:69:bb:0b:0a:86:03: da:af:65:bf:96:2b:ba:fc:f6:ee:27:19:10:62:14: bb:22:6a:ca:12:0e:29:de:de:d7:ab:3c:b7:93:b9: f8:3b:40:e7:43:b5:ef:71:88:26:74:c4:0c:3a:96: 57:ec:48:c0:30:fa:37:e1:20:57:a3:d5:e0:ff:b0: 6d:78:02:6d:f6:7a:ae:19:a2:52:0e:2c:46:08:eb: 57:57:8b:65:ef:04:f1:2d:1b:29:ea:c9:1a:3c:24: eb:1f:df:46:b2:13:07:66:3b:91:18:ae:eb:14:73: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:48:F6:BE:C8:06:13:40:A5:A3:39:D0:99:0D:35:40:01:0B:55:A4 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d4:53:cc:9f:e5:76:a6:1e:95:d0:ff:9a:94:2e:0b:75:87: 7f:ad:7e:b8:52:d4:16:20:a0:a7:4f:5d:5d:58:ed:fc:b3:75: 4d:9d:ac:7d:60:ce:3a:e3:7b:69:28:c8:c8:bd:6d:7c:bc:71: f8:83:c0:3a:eb:52:38:03:5c:0c:35:9a:63:40:2f:b9:ff:5c: b2:30:86:a3:d5:79:ff:db:d6:25:d9:53:86:f0:fe:4e:0f:f4: a3:6a:85:1a:12:d2:99:e1:16:b2:10:7c:d1:f6:7d:cb:1f:64: 19:57:bf:fd:e4:95:18:5f:98:d3:fe:4d:f5:9c:27:70:2f:3f: 63:de:59:25:29:c0:7c:72:69:77:5f:97:0c:9a:d7:fa:14:80: b5:5b:bc:ac:6e:2a:d2:a4:87:65:57:8c:82:01:88:5e:15:d0: 50:45:c4:b0:50:3b:29:a3:35:30:72:2b:29:3a:5d:e4:be:c1: 17:64:39:48:04:ed:df:56:cf:5b:a0:48:d3:42:3f:8a:3c:2a: 47:e2:e3:26:95:7f:35:a8:47:fb:22:28:9e:5b:2d:9e:58:97: db:95:36:51:25:92:f1:94:ee:dc:b4:f5:62:74:cf:a2:ba:6f: fd:62:2d:f9:bc:90:07:f8:57:3e:a4:b1:d3:b1:94:0c:c9:e3: 08:ba:43:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15kEoWE7ve5Y6oQjf0xFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjUxMjA2MjMwMTM5WhcNMjUxMjA3MjMwMTM5WjAzMTEwLwYDVQQD EygyNjQ4ZjZiZWM4MDYxMzQwYTVhMzM5ZDA5OTBkMzU0MDAxMGI1NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJj/p4BjChnTFKbay4NPa2QUh2JZ x1+TomRAaIoEZXAmq5Utv6CGKVYsEWn+x5nQcIBZn50Zq6IVurdi4TQhki1omaKt V+RcqBHlq/7CnX9oDuJoZ/3WB1ccDyUvTK77HsuJDSyMy3lJW7rWe9uXZ6sCzM8n T1Xxthg//h1z4IcKX8cq9WgXHVIisMw4JqFpuwsKhgPar2W/liu6/PbuJxkQYhS7 ImrKEg4p3t7Xqzy3k7n4O0DnQ7XvcYgmdMQMOpZX7EjAMPo34SBXo9Xg/7BteAJt 9nquGaJSDixGCOtXV4tl7wTxLRsp6skaPCTrH99GshMHZjuRGK7rFHM5CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZI9r7IBhNApaM50JkNNUABC1WkMB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatRTzJ/l dqYeldD/mpQuC3WHf61+uFLUFiCgp09dXVjt/LN1TZ2sfWDOOuN7aSjIyL1tfLxx +IPAOutSOANcDDWaY0Avuf9csjCGo9V5/9vWJdlThvD+Tg/0o2qFGhLSmeEWshB8 0fZ9yx9kGVe//eSVGF+Y0/5N9ZwncC8/Y95ZJSnAfHJpd1+XDJrX+hSAtVu8rG4q 0qSHZVeMggGIXhXQUEXEsFA7KaM1MHIrKTpd5L7BF2Q5SATt31bPW6BI00I/ijwq R+LjJpV/NahH+yIonlstnliX25U2USWS8ZTu3LT1YnTPorpv/WIt+byQB/hXPqSx 07GUDMnjCLpDqQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:04 2025 by rpki-client