This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: zxBspExoJkhjngE7MkoZsB0NExCzpmW/GSsE2isW2dY= Subject key identifier: 78:B0:D2:78:0F:8C:67:52:78:BE:77:BD:5F:94:6C:0D:04:97:A7:9D Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019AF31B66E150246FAE998EF814BA6DE415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1771 Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: qPTUAB/YJ8H8dBV9HsnGnMH4YoUs/GL8Nu+/NjWAPBQ=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:66:e1:50:24:6f:ae:99:8e:f8:14:ba:6d:e4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=78b0d2780f8c675278be77bd5f946c0d0497a79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:f8:2b:1e:a9:e9:d4:ff:60:5d:16:8d:8d: 23:fc:a7:9d:09:f8:86:9a:8e:b9:13:16:50:9b:6f: f0:e8:7c:36:0e:80:f5:c3:cf:90:b1:12:78:d1:79: 5d:5d:22:77:b0:36:ba:c1:30:d6:f9:68:4f:d1:b5: 8b:71:db:4b:31:0a:39:2b:d4:3d:56:51:bd:e6:8b: fd:e7:98:28:75:1b:4a:c5:3b:68:fb:19:43:69:ab: ec:4c:d2:ba:40:df:e3:56:6f:7e:d7:24:4c:55:ea: 80:bf:00:11:55:b5:6d:9e:0b:28:d2:dc:1d:69:6f: d1:b2:50:3c:4b:c1:d0:6f:69:5a:6b:a7:7f:e2:80: 49:2d:93:df:26:81:24:8c:cc:5c:94:38:48:2d:18: 13:1b:a1:f9:40:0b:a9:53:a1:2a:c7:c8:95:b2:0f: b3:cd:33:bf:e7:cf:5f:ca:5d:05:f1:22:d3:a3:47: e2:1e:87:09:80:8c:a1:bd:fc:e3:e6:67:e5:49:27: 38:c5:0a:33:0d:15:34:69:56:b4:c3:47:f4:36:95: 11:c6:90:a4:69:6f:b4:3c:ed:a5:32:b1:62:86:da: c7:17:eb:2b:5e:14:34:16:37:b2:4f:39:39:2c:c6: 39:6a:b8:f5:44:2e:a1:72:15:f0:7d:97:24:c1:5f: 39:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B0:D2:78:0F:8C:67:52:78:BE:77:BD:5F:94:6C:0D:04:97:A7:9D X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:55:dc:0d:f9:95:1d:5f:4d:d0:3e:be:0b:37:81:df:f2:75: d8:42:9d:8d:fa:66:5d:f1:63:f8:2d:2c:fb:7d:aa:77:cf:67: af:f0:81:ef:30:11:ed:76:0c:14:69:9c:54:db:da:f7:e3:e4: fa:2b:ce:0e:02:cd:b4:d4:5f:3d:c1:eb:28:39:c8:2d:9e:45: 9c:bf:1e:58:86:56:7d:d9:c5:ba:ed:3d:ed:5d:96:01:43:e1: 32:b7:e2:50:c4:2f:b4:b7:06:59:03:01:2a:b7:1c:68:b6:2f: 2f:21:4c:eb:e2:86:aa:db:f2:bb:48:91:24:a6:1f:7a:78:33: 16:d1:61:96:0b:b5:f0:f3:43:06:df:66:63:7e:31:f1:43:9b: 08:d2:ef:91:f2:85:58:5c:b9:69:d9:09:33:e3:d0:3f:3e:d6: 52:b2:bd:9f:70:d1:9f:17:9a:25:12:73:db:f6:b2:8c:22:fd: d2:e0:9f:a4:88:ee:1c:be:2f:0d:e4:bd:08:50:e8:96:87:a3: 19:c4:6a:e0:1c:dc:71:34:7e:fa:1b:9f:82:49:ee:d3:94:c9: 80:83:79:f7:85:23:ff:ec:cd:c6:d3:c3:5b:46:c5:90:6b:3d: ab:7d:12:4b:36:ab:0a:18:70:c8:0a:8d:03:c4:3d:ee:ac:d2: 9f:3a:c4:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2bhUCRvrpmO+BS6beQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD Eyg3OGIwZDI3ODBmOGM2NzUyNzhiZTc3YmQ1Zjk0NmMwZDA0OTdhNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBX4Kx6p6dT/YF0WjY0j/KedCfiG mo65ExZQm2/w6Hw2DoD1w8+QsRJ40XldXSJ3sDa6wTDW+WhP0bWLcdtLMQo5K9Q9 VlG95ov955godRtKxTto+xlDaavsTNK6QN/jVm9+1yRMVeqAvwARVbVtngso0twd aW/RslA8S8HQb2laa6d/4oBJLZPfJoEkjMxclDhILRgTG6H5QAupU6Eqx8iVsg+z zTO/589fyl0F8SLTo0fiHocJgIyhvfzj5mflSSc4xQozDRU0aVa0w0f0NpURxpCk aW+0PO2lMrFihtrHF+srXhQ0FjeyTzk5LMY5arj1RC6hchXwfZckwV85AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiw0ngPjGdSeL53vV+UbA0El6edMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1XcDfmV HV9N0D6+CzeB3/J12EKdjfpmXfFj+C0s+32qd89nr/CB7zAR7XYMFGmcVNva9+Pk +ivODgLNtNRfPcHrKDnILZ5FnL8eWIZWfdnFuu097V2WAUPhMrfiUMQvtLcGWQMB KrccaLYvLyFM6+KGqtvyu0iRJKYfengzFtFhlgu18PNDBt9mY34x8UObCNLvkfKF WFy5adkJM+PQPz7WUrK9n3DRnxeaJRJz2/ayjCL90uCfpIjuHL4vDeS9CFDoloej GcRq4BzccTR++hufgknu05TJgIN594Uj/+zNxtPDW0bFkGs9q30SSzarChhwyAqN A8Q97qzSnzrERg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:56 2025 by rpki-client