This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json) Hash identifier: owuFQ+1JaTV37nwdtIe8JaBtvTpEZz1j9zg4QZud9hE= Subject key identifier: 41:0C:13:D1:BE:5E:16:12:AD:FF:69:70:CE:FB:01:83:99:4E:3D:AD Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c Certificate serial: 019AF3891FE23D6B5836CC6F30F42DD42103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft Manifest number: 0159 Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: gQKk2z-Dzs3tKEuXLdAqCr54-7I.roa (hash: BNZlAShTvOe5X3GGCboQNUQf+60pqpGUzqwC+woTCuQ=) 2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: WrjVnCDSAyOzTiHfvXFe+edHqcI7T1G+VxuafF2sBv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1f:e2:3d:6b:58:36:cc:6f:30:f4:2d:d4:21:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=410c13d1be5e1612adff6970cefb0183994e3dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:99:59:73:37:9f:7e:6f:be:f5:6c:c6:49: 8d:dc:8b:cb:8d:51:46:a6:98:36:f3:9b:f1:8a:52: 6f:48:9b:26:bf:2c:72:f2:04:52:74:2b:90:e8:e3: c5:c4:19:74:44:a6:da:e6:e6:c1:b2:57:4f:b9:ca: ac:88:c0:95:7d:ec:91:51:8d:67:28:46:79:ec:e5: a6:c2:73:6d:a8:86:cf:00:bb:85:e7:51:0a:62:bc: 5a:7e:5c:db:9f:a3:ba:ea:75:cc:4a:6e:e0:06:e4: f2:0b:e4:0e:15:d3:82:df:f9:f9:7e:1c:46:ec:6d: 55:9f:1f:0e:c5:bd:21:50:17:1b:ba:94:1a:98:9a: 3a:5a:bf:fd:03:04:d0:b5:6e:2a:59:22:c5:44:56: ed:6a:b6:88:5c:7c:34:ac:2a:db:3b:8d:e0:ff:55: 7c:ac:2c:13:a5:d4:d0:e5:c2:f2:cd:83:dd:91:47: e2:25:61:ab:24:98:a7:de:d4:90:61:48:14:be:6a: f8:ba:73:52:56:31:9e:0d:a9:fd:82:5e:65:ad:dd: 5b:f5:08:9f:9f:77:b6:d2:49:37:e6:a6:be:2e:8a: 4f:34:da:90:37:84:b0:3f:9c:ed:ec:f2:11:96:cc: b7:c8:fd:51:8a:fc:15:5f:f0:ba:77:fa:ed:a6:01: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0C:13:D1:BE:5E:16:12:AD:FF:69:70:CE:FB:01:83:99:4E:3D:AD X509v3 Authority Key Identifier: keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:67:01:6f:1c:ea:40:bf:f8:2b:ed:7f:f4:b4:d5:a6:f8:50: 8b:6f:5f:65:78:22:39:76:71:27:e4:04:12:57:73:e9:7b:3a: 77:22:0b:4b:b2:dc:f2:a4:ed:11:1a:c0:ac:38:d7:26:02:eb: 6e:39:00:09:90:e1:f2:cf:10:a4:aa:7f:8c:54:5e:20:06:ad: 9b:9c:d1:28:94:be:d2:db:2f:50:d8:65:56:77:9c:ef:bb:19: db:3c:77:65:94:51:2f:f4:4a:a9:bb:8c:80:5b:fd:f8:84:b6: 53:68:35:65:02:aa:e1:7c:a8:83:aa:a5:bc:e9:53:93:97:c8: 7d:67:8c:31:87:bc:04:39:01:d5:bd:b0:0a:e9:17:c2:dd:08: 22:e4:42:58:73:7e:d7:e0:33:fe:6e:76:02:75:f7:62:5f:d5: 71:0f:a8:a4:39:de:13:96:9a:9d:bb:34:d0:66:f1:5a:e9:9c: 42:ef:5c:c2:1d:6c:38:2c:78:11:bf:6a:97:d4:a2:dc:83:5a: b1:3a:48:a7:4b:71:22:f1:fd:46:4c:60:78:92:1f:41:e7:ef: 3d:f6:69:a9:79:21:1e:33:b0:17:1b:b6:fd:e9:48:22:e0:a2: ae:cd:72:cc:d3:8f:ab:3c:9a:23:58:b4:6d:b2:c8:0b:3f:ca: a7:13:03:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziR/iPWtYNsxvMPQt1CEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZTEwYzdjYmZmZDc0ODhhOTZhMDJkNWM5MTJmOWY5MjU2 NGJiNWMwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD Eyg0MTBjMTNkMWJlNWUxNjEyYWRmZjY5NzBjZWZiMDE4Mzk5NGUzZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiaZWXM3n35vvvVsxkmN3IvLjVFG ppg285vxilJvSJsmvyxy8gRSdCuQ6OPFxBl0RKba5ubBsldPucqsiMCVfeyRUY1n KEZ57OWmwnNtqIbPALuF51EKYrxaflzbn6O66nXMSm7gBuTyC+QOFdOC3/n5fhxG 7G1Vnx8Oxb0hUBcbupQamJo6Wr/9AwTQtW4qWSLFRFbtaraIXHw0rCrbO43g/1V8 rCwTpdTQ5cLyzYPdkUfiJWGrJJin3tSQYUgUvmr4unNSVjGeDan9gl5lrd1b9Qif n3e20kk35qa+LopPNNqQN4SwP5zt7PIRlsy3yP1RivwVX/C6d/rtpgHSxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEME9G+XhYSrf9pcM77AYOZTj2tMB8GA1UdIwQY MBaAFMThDHy//XSIqWoC1ckS+fklZLtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUt NDU4YmY1OTY4ZGQxLzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUtNDU4YmY1OTY4ZGQx LzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmcBbxzq QL/4K+1/9LTVpvhQi29fZXgiOXZxJ+QEEldz6Xs6dyILS7Lc8qTtERrArDjXJgLr bjkACZDh8s8QpKp/jFReIAatm5zRKJS+0tsvUNhlVnec77sZ2zx3ZZRRL/RKqbuM gFv9+IS2U2g1ZQKq4Xyog6qlvOlTk5fIfWeMMYe8BDkB1b2wCukXwt0IIuRCWHN+ 1+Az/m52AnX3Yl/VcQ+opDneE5aanbs00GbxWumcQu9cwh1sOCx4Eb9ql9Si3INa sTpIp0txIvH9RkxgeJIfQefvPfZpqXkhHjOwFxu2/elIIuCirs1yzNOPqzyaI1i0 bbLICz/KpxMD5g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:24 2025 by rpki-client