This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json) Hash identifier: jY2FPEnK301NJbz7YQ2pN0WqaztrKwsDkUhBbrDntns= Subject key identifier: BB:28:41:5A:BC:CE:CE:75:DE:28:A4:53:2B:1D:27:6F:B1:BD:23:CE Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e Certificate serial: 019AF2099F9FE939D9E820CD7FAF88E59E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft Manifest number: 135D Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=) 2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: +fPRpENl8T8u5CGoBqe0ykIRgSIhhzYre9pKE81nVg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9f:9f:e9:39:d9:e8:20:cd:7f:af:88:e5:9e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=bb28415abccece75de28a4532b1d276fb1bd23ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:df:dc:66:a7:07:5b:b0:48:0d:e6:4b:26: cd:9d:86:a9:81:c9:9e:37:dd:5e:ae:71:c4:93:9e: 1b:55:72:fd:7f:7f:e6:67:3b:23:9e:30:d6:17:b8: 43:70:f2:46:fc:ef:81:25:16:22:6f:8a:62:a4:33: 3a:79:d4:57:aa:e7:40:42:f0:5a:f9:16:b7:b0:42: dc:77:7b:b3:9f:42:ad:d4:ef:78:27:81:8a:b5:5c: 2a:86:f1:ae:07:8f:3b:13:86:15:ba:2e:de:5f:ee: 63:aa:c8:bb:cc:95:6c:cd:a7:4a:c9:50:a9:ae:52: c8:52:ef:ee:18:c4:03:3d:88:24:b3:8c:10:0f:41: de:d9:2e:69:8f:a7:0a:d0:60:7d:f5:c4:30:9e:61: 09:16:13:fe:76:fc:56:f1:ab:10:ea:44:6b:f9:ff: 0d:50:39:d0:99:fd:fe:3b:d3:7f:81:28:ff:7d:6c: 57:7a:0b:71:dc:d3:bc:b9:b2:a8:88:81:60:89:96: 5c:72:83:76:8b:70:3f:21:f9:4f:d6:7f:4e:e8:54: 6d:ba:d1:fb:74:63:d5:34:f0:ff:fd:15:52:2c:07: 3b:2e:ea:e2:fb:07:87:15:b6:b8:0f:e9:b8:f2:82: ae:8c:1f:bc:bc:21:ff:ce:41:ab:3d:5e:75:35:cd: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:28:41:5A:BC:CE:CE:75:DE:28:A4:53:2B:1D:27:6F:B1:BD:23:CE X509v3 Authority Key Identifier: keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:07:37:b7:82:a9:68:8b:30:04:49:32:52:00:22:b5:4b:e7: ca:85:6f:fa:7c:cd:79:83:ad:ef:0d:10:08:68:28:ab:82:d3: 77:15:6d:ec:f3:e2:9e:e5:fa:f5:c7:8b:c8:87:7b:2a:14:4e: 53:14:07:59:5b:25:ee:dc:ec:42:5d:9c:83:a7:fa:67:c2:1c: d0:7e:ba:65:3c:73:58:6c:f4:44:14:ea:bc:16:eb:fd:1a:94: 7d:35:cd:08:29:5c:2e:7c:a9:75:e1:82:d1:6b:73:4a:9c:e9: 2d:5a:fc:dd:5a:1e:cb:14:c3:83:55:2a:0f:76:43:78:24:27: 0b:ec:45:af:4b:9f:c8:25:93:13:6e:7d:7a:f7:de:c0:81:e7: 6d:35:7d:c1:28:0e:44:a8:da:6b:dc:b5:f8:0b:8f:31:11:e1: 5d:ed:c1:97:84:b0:31:d7:8c:2e:a1:10:77:20:7e:7d:c1:a3: ed:a0:9e:bb:31:9e:81:09:89:d7:6c:af:5d:56:1f:72:e1:81: d7:b7:d4:61:f8:18:1d:e8:ec:4d:48:bf:dd:73:46:2b:72:0d: fc:0c:7e:39:01:20:1d:65:02:e0:65:37:22:2b:b9:a7:83:16: f1:e1:69:da:5d:00:4b:e0:97:de:8f:c7:be:d1:b7:69:e4:fe: 21:fb:15:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ+f6TnZ6CDNf6+I5Z4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmYwODAzYzQyOThlMTU2ZDU2M2JkNGYyMDdjYjViODM2 MTAyNmUwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD EyhiYjI4NDE1YWJjY2VjZTc1ZGUyOGE0NTMyYjFkMjc2ZmIxYmQyM2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjXf3GanB1uwSA3mSybNnYapgcme N91ernHEk54bVXL9f3/mZzsjnjDWF7hDcPJG/O+BJRYib4pipDM6edRXqudAQvBa +Ra3sELcd3uzn0Kt1O94J4GKtVwqhvGuB487E4YVui7eX+5jqsi7zJVszadKyVCp rlLIUu/uGMQDPYgks4wQD0He2S5pj6cK0GB99cQwnmEJFhP+dvxW8asQ6kRr+f8N UDnQmf3+O9N/gSj/fWxXegtx3NO8ubKoiIFgiZZccoN2i3A/IflP1n9O6FRtutH7 dGPVNPD//RVSLAc7Luri+weHFba4D+m48oKujB+8vCH/zkGrPV51Nc12QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsoQVq8zs513iikUysdJ2+xvSPOMB8GA1UdIwQY MBaAFMYvCAPEKY4VbVY71PIHy1uDYQJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWIt M2RlYmExNjY2ZTliLzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWItM2RlYmExNjY2ZTli LzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwc3t4Kp aIswBEkyUgAitUvnyoVv+nzNeYOt7w0QCGgoq4LTdxVt7PPinuX69ceLyId7KhRO UxQHWVsl7tzsQl2cg6f6Z8Ic0H66ZTxzWGz0RBTqvBbr/RqUfTXNCClcLnypdeGC 0WtzSpzpLVr83VoeyxTDg1UqD3ZDeCQnC+xFr0ufyCWTE259evfewIHnbTV9wSgO RKjaa9y1+AuPMRHhXe3Bl4SwMdeMLqEQdyB+fcGj7aCeuzGegQmJ12yvXVYfcuGB 17fUYfgYHejsTUi/3XNGK3IN/Ax+OQEgHWUC4GU3Iiu5p4MW8eFp2l0AS+CX3o/H vtG3aeT+IfsVXA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:28 2025 by rpki-client