This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json) Hash identifier: tGThlR5jecPwx/OQeN06DRfIgzqopyqIg9NvFL0HnlM= Subject key identifier: 40:CA:B9:01:A3:7A:76:10:39:4A:36:88:CE:31:DE:FF:F2:89:B9:5D Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28 Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128 Certificate serial: 019AF12DCC4B2F0D786F93737F0750FEB444 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft Manifest number: 0AD4 Signing time: Sat 06 Dec 2025 01:01:41 +0000 Manifest this update: Sat 06 Dec 2025 01:01:41 +0000 Manifest next update: Sun 07 Dec 2025 01:01:41 +0000 Files and hashes: 1: LGIjR37T32om32PNGVlywqITYQM.roa (hash: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=) 2: h3E3zuaVe9Fd-K2eeSfreUoqzxE.roa (hash: zkBB1N0MG6XqITCSMbDyxtWFtXhvrbfgV/J1jxkBcRM=) 3: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: IS6LbcUeqdNjQC7bbDjhI/8a6DczCttxNMyjn4un94k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:cc:4b:2f:0d:78:6f:93:73:7f:07:50:fe:b4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128 Validity Not Before: Dec 6 01:01:41 2025 GMT Not After : Dec 7 01:01:41 2025 GMT Subject: CN=40cab901a37a7610394a3688ce31defff289b95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:cb:5f:7c:cc:33:f5:0e:ba:4b:5f:35:06: 50:e7:ad:8d:19:ff:b6:ef:11:eb:6c:a6:ff:c0:15: c1:b0:8c:f4:b1:a4:b2:d0:13:50:5d:bc:a0:95:c1: 82:6e:e2:0c:73:10:3e:ff:5d:6a:76:5a:30:a9:b4: aa:dd:86:9e:c9:23:53:43:89:58:37:cf:85:0a:ec: 12:2e:ca:9c:fb:81:25:a7:a5:a6:f1:ce:85:5e:f1: 9c:74:ff:1e:e7:88:06:6f:70:1f:4b:e4:32:2f:aa: e4:d3:e1:8d:65:18:c8:c0:78:c1:fd:0c:d4:7a:e2: dd:71:5f:98:97:b8:da:18:72:2c:df:4d:12:71:c8: 3d:4e:79:21:a2:7e:e8:d7:21:b3:f4:34:4f:b3:f1: f5:b5:de:37:ac:a6:0b:6a:67:b5:a0:5b:8b:a2:fd: ba:1d:3e:6d:aa:6e:99:69:f8:05:27:85:2a:cf:48: dc:4e:a2:bd:d9:5f:70:43:f6:9d:73:62:05:2b:00: 1b:9c:f1:ee:d7:20:d8:91:b9:3b:e2:5e:46:46:ca: 50:6c:0e:6f:5c:42:c0:1d:6a:c2:fb:9b:dc:10:e4: cc:88:a9:7c:3e:5b:71:e4:1b:78:15:95:34:92:18: 45:2b:c1:9c:e6:b1:27:2e:3a:10:4a:a1:08:fa:33: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CA:B9:01:A3:7A:76:10:39:4A:36:88:CE:31:DE:FF:F2:89:B9:5D X509v3 Authority Key Identifier: keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:fe:75:e7:97:cd:56:3d:02:8c:42:46:6b:2c:7a:59:2d:e7: 43:eb:d1:9b:41:40:8d:89:35:f3:d1:56:e4:9e:64:09:ac:e4: f2:3b:b8:8f:b1:d8:8f:72:62:ae:e0:29:cf:92:f3:4d:24:01: a6:23:36:2f:72:c3:80:42:6a:b6:c2:a1:b0:76:89:35:17:92: a7:40:a5:be:12:b7:7d:62:5f:ad:51:f9:de:f2:5f:ed:38:4a: 07:07:06:36:29:51:6b:b4:2c:8b:ea:00:3d:8c:ae:b8:00:18: 79:64:a6:7d:9d:79:b3:19:38:f8:d8:ab:d5:18:3c:01:a0:70: cd:78:8a:b4:3e:1d:77:d2:4c:a3:cf:a6:d7:60:16:40:86:26: 3a:0d:b1:c7:aa:52:0d:75:38:89:e8:af:98:28:ec:27:d8:05: b8:0c:60:a3:c4:5e:46:2d:d0:f7:0b:de:78:53:6e:26:61:d4: 95:86:4b:80:5b:7a:e7:79:0e:5b:fd:2d:42:d3:d8:91:77:38: 0a:75:cf:26:0b:57:44:0c:1d:dd:71:8c:31:2d:68:e9:c2:66: e9:16:32:23:0d:8e:c6:56:88:59:92:cd:ce:a1:00:38:1c:11: 73:1e:36:81:c6:d9:8b:05:fe:e6:d3:b6:8f:bd:71:60:f6:46: 2a:5f:67:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcxLLw14b5NzfwdQ/rREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmQyMTU0ZWQ1M2I2MjlkODcyYjJhMzhkOWNkMDQxYmRi NGIxMjgwHhcNMjUxMjA2MDEwMTQxWhcNMjUxMjA3MDEwMTQxWjAzMTEwLwYDVQQD Eyg0MGNhYjkwMWEzN2E3NjEwMzk0YTM2ODhjZTMxZGVmZmYyODliOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD3LX3zMM/UOuktfNQZQ562NGf+2 7xHrbKb/wBXBsIz0saSy0BNQXbyglcGCbuIMcxA+/11qdlowqbSq3YaeySNTQ4lY N8+FCuwSLsqc+4Elp6Wm8c6FXvGcdP8e54gGb3AfS+QyL6rk0+GNZRjIwHjB/QzU euLdcV+Yl7jaGHIs300Sccg9Tnkhon7o1yGz9DRPs/H1td43rKYLame1oFuLov26 HT5tqm6ZafgFJ4Uqz0jcTqK92V9wQ/adc2IFKwAbnPHu1yDYkbk74l5GRspQbA5v XELAHWrC+5vcEOTMiKl8Pltx5Bt4FZU0khhFK8Gc5rEnLjoQSqEI+jMGQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDKuQGjenYQOUo2iM4x3v/yibldMB8GA1UdIwQY MBaAFMVtIVTtU7Yp2HKyo42c0EG9tLEoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAt N2I0MTBiNzgxZGVmLzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAtN2I0MTBiNzgxZGVm LzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf5155fN Vj0CjEJGayx6WS3nQ+vRm0FAjYk189FW5J5kCazk8ju4j7HYj3JiruApz5LzTSQB piM2L3LDgEJqtsKhsHaJNReSp0ClvhK3fWJfrVH53vJf7ThKBwcGNilRa7Qsi+oA PYyuuAAYeWSmfZ15sxk4+Nir1Rg8AaBwzXiKtD4dd9JMo8+m12AWQIYmOg2xx6pS DXU4ieivmCjsJ9gFuAxgo8ReRi3Q9wveeFNuJmHUlYZLgFt653kOW/0tQtPYkXc4 CnXPJgtXRAwd3XGMMS1o6cJm6RYyIw2OxlaIWZLNzqEAOBwRcx42gcbZiwX+5tO2 j71xYPZGKl9nCg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:24 2025 by rpki-client