This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft File: X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json) Hash identifier: qiDdVLHz1NJniVw47HNT3p5DL42BFz80o6vsE6XaTJk= Subject key identifier: E3:23:6B:0B:EB:55:F0:FD:A0:C6:1F:72:B3:AD:CC:49:91:57:FD:EB Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D Certificate issuer: /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d Certificate serial: 019B28C04EDA595964B3540DB0C5CE540D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft Manifest number: 0476 Signing time: Tue 16 Dec 2025 20:00:50 +0000 Manifest this update: Tue 16 Dec 2025 20:00:50 +0000 Manifest next update: Wed 17 Dec 2025 20:00:50 +0000 Files and hashes: 1: VYOhWlm2y2YZ6EHcFnibmzsOVGY.roa (hash: GJjtJqaW4pHP1Y4i0oHxZvwkAfFAfi2jd3zkxgKT3N8=) 2: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: UEePC3kvqdCN44bGNtdsiW9IEPYMz/29yOo9hzBnXJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:4e:da:59:59:64:b3:54:0d:b0:c5:ce:54:0d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d Validity Not Before: Dec 16 20:00:50 2025 GMT Not After : Dec 17 20:00:50 2025 GMT Subject: CN=e3236b0beb55f0fda0c61f72b3adcc499157fdeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:6e:9c:1d:ad:ae:b1:36:c0:f7:8e:38:0c: 6b:47:21:4c:50:68:9f:5d:1b:c1:d1:90:5a:c6:e3: 24:53:a0:86:17:f6:83:ca:dd:1d:35:ff:fe:e8:e0: 16:14:80:b4:a6:4a:2a:6c:34:8c:f2:1c:05:22:4a: 19:cd:0e:36:1c:f9:b3:02:d7:71:d0:f6:be:f8:7b: 04:35:81:6a:47:c8:54:45:91:31:7c:69:92:6e:84: 58:7e:2a:a2:c4:14:7f:66:ee:ec:ed:71:2a:65:e3: 92:ae:23:a9:f2:0b:86:d4:11:7f:b4:8d:b4:08:94: 8c:b0:df:20:b5:56:ac:d6:69:fa:bc:03:2e:b2:92: e2:29:8a:b9:ab:39:2b:b7:60:a4:80:0b:ed:d5:6d: 7e:ed:bf:64:70:24:01:75:e6:b6:d0:7d:c4:78:d0: 1a:9d:19:0a:ef:35:0a:c8:2d:b9:b7:c0:9a:26:8d: ce:07:a0:d6:cd:03:15:43:83:ee:02:e0:26:5d:77: 7a:27:d3:21:16:71:28:1a:97:b9:e4:ec:de:fd:a8: 25:85:f8:ba:7f:4c:b3:b6:83:b5:cd:86:45:9b:12: 63:5c:c9:3a:e7:e0:d5:6f:8d:2b:59:01:b5:7a:fd: a8:d0:05:fe:90:c0:76:32:41:7b:c1:d9:f4:5b:79: eb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:23:6B:0B:EB:55:F0:FD:A0:C6:1F:72:B3:AD:CC:49:91:57:FD:EB X509v3 Authority Key Identifier: keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e1:b4:d0:c1:fc:d0:3e:2a:fd:4f:39:b7:69:13:ae:51:42: 42:40:62:b1:e6:34:e5:56:a3:91:49:3a:39:55:f4:6d:43:07: 84:d2:88:d7:85:47:ef:d4:e6:2c:b3:19:60:b6:fc:3d:61:ae: 73:6f:f8:0d:0d:ea:22:8e:7d:31:5c:8f:e8:61:7f:8a:14:8b: 51:f6:3f:5c:32:a9:33:0c:b3:6e:ec:fa:42:e0:56:28:56:ac: 77:18:53:02:b0:3f:05:75:93:81:ad:f3:af:d3:c2:cd:13:a5: 6c:e9:aa:fa:e5:ac:bb:e4:d2:cb:cb:82:a1:a5:a4:63:41:c1: 3b:f4:5e:d4:e8:5f:6e:0b:d7:22:98:56:06:3f:a4:02:cf:f2: be:1f:19:94:6d:04:0a:ae:63:19:c5:90:ed:2c:09:b9:bb:15: 3f:d7:3e:2e:b8:13:d5:47:89:0d:10:8b:f7:97:44:4a:f3:23: 71:8a:a7:a1:af:e2:8b:31:97:d8:ab:1a:ce:ed:09:ef:13:70: c0:c0:cb:1b:f0:77:9d:f8:5d:51:9e:74:6f:e2:c0:5e:16:61: 5e:c6:bd:78:50:d2:e6:c3:24:38:b7:3d:31:9f:10:ec:ea:6b: d1:d5:7f:27:47:9b:e0:8a:31:b4:b2:a0:07:f9:e8:88:5a:9f: a0:29:a4:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowE7aWVlks1QNsMXOVA05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzIwZGVjNzE0YmI1NDYzYjE2NGUxNWE1ZjhhMTM5OGEy NTUwNWQwHhcNMjUxMjE2MjAwMDUwWhcNMjUxMjE3MjAwMDUwWjAzMTEwLwYDVQQD EyhlMzIzNmIwYmViNTVmMGZkYTBjNjFmNzJiM2FkY2M0OTkxNTdmZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD5unB2trrE2wPeOOAxrRyFMUGif XRvB0ZBaxuMkU6CGF/aDyt0dNf/+6OAWFIC0pkoqbDSM8hwFIkoZzQ42HPmzAtdx 0Pa++HsENYFqR8hURZExfGmSboRYfiqixBR/Zu7s7XEqZeOSriOp8guG1BF/tI20 CJSMsN8gtVas1mn6vAMuspLiKYq5qzkrt2CkgAvt1W1+7b9kcCQBdea20H3EeNAa nRkK7zUKyC25t8CaJo3OB6DWzQMVQ4PuAuAmXXd6J9MhFnEoGpe55Oze/aglhfi6 f0yztoO1zYZFmxJjXMk65+DVb40rWQG1ev2o0AX+kMB2MkF7wdn0W3nrZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMjawvrVfD9oMYfcrOtzEmRV/3rMB8GA1UdIwQY MBaAFF/CDexxS7VGOxZOFaX4oTmKJVBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhJTjdIRkx0VVk3Rms0VnBmaWhPWW9sVUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82Nzk3YTUtNTQxMC00YzBkLWI5Yjct ZDk5YjlmNDhkMGRjLzEvWDhJTjdIRkx0VVk3Rms0VnBmaWhPWW9sVUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82Nzk3YTUtNTQxMC00YzBkLWI5YjctZDk5YjlmNDhkMGRj LzEvWDhJTjdIRkx0VVk3Rms0VnBmaWhPWW9sVUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOG00MH8 0D4q/U85t2kTrlFCQkBiseY05VajkUk6OVX0bUMHhNKI14VH79TmLLMZYLb8PWGu c2/4DQ3qIo59MVyP6GF/ihSLUfY/XDKpMwyzbuz6QuBWKFasdxhTArA/BXWTga3z r9PCzROlbOmq+uWsu+TSy8uCoaWkY0HBO/Re1OhfbgvXIphWBj+kAs/yvh8ZlG0E Cq5jGcWQ7SwJubsVP9c+LrgT1UeJDRCL95dESvMjcYqnoa/iizGX2Ksazu0J7xNw wMDLG/B3nfhdUZ50b+LAXhZhXsa9eFDS5sMkOLc9MZ8Q7Opr0dV/J0eb4IoxtLKg B/noiFqfoCmkTA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:47:59 2025 by rpki-client