This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft File: xLMV8myhzbhEERaAw88EN7TBJ-Y.mft (raw, json) Hash identifier: YwW+8JoyAq90pZ0dV3AqPFpX6PKQIn/de6bDjFhc5oA= Subject key identifier: AD:21:15:66:97:B6:BA:EB:7A:B8:AE:3C:D5:78:B6:F8:17:B6:84:AD Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6 Certificate issuer: /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6 Certificate serial: 019AF42E469657B0FC0E6C5678CBC1D2A90E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft Manifest number: 036A Signing time: Sat 06 Dec 2025 15:01:04 +0000 Manifest this update: Sat 06 Dec 2025 15:01:04 +0000 Manifest next update: Sun 07 Dec 2025 15:01:04 +0000 Files and hashes: 1: X8EmhkaAzLrZGF0PLTQTQ3F7TQY.roa (hash: wTbEC33NFOM4jNYeqPZkMZltYqmbT0A3haddap6K47g=) 2: xLMV8myhzbhEERaAw88EN7TBJ-Y.crl (hash: YFK6iehISPgbe7M1lNMXDEJiviJ2eAEszVt4+uLxtaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:46:96:57:b0:fc:0e:6c:56:78:cb:c1:d2:a9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6 Validity Not Before: Dec 6 15:01:04 2025 GMT Not After : Dec 7 15:01:04 2025 GMT Subject: CN=ad21156697b6baeb7ab8ae3cd578b6f817b684ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:6f:fe:89:00:48:59:cb:1b:e4:6f:86:95: 49:62:5e:15:f5:61:7e:75:59:de:8a:53:73:9c:f7: 02:33:bd:e8:c1:de:30:df:0a:12:81:27:25:b2:56: bf:73:66:45:66:94:67:93:e1:66:1d:1d:f1:64:9d: d4:ec:fa:29:8c:b3:8e:d2:e7:04:f7:35:38:db:f2: c3:e9:00:12:cd:19:9b:68:38:a5:c5:09:cd:33:bf: fd:a6:f6:01:56:81:e4:64:87:c6:c7:e2:fc:61:ea: 78:d0:b9:33:28:d8:61:9b:64:f6:6c:74:bd:98:1f: 7f:5f:81:2e:17:0a:95:89:c7:a3:eb:81:c8:63:de: fa:7a:10:74:6d:f5:40:65:dc:f6:ba:92:e2:f9:b5: 38:7a:ff:a1:5a:d2:3d:c5:38:ff:9a:f0:8f:93:e9: ec:bb:83:76:a0:60:96:b8:4c:dd:5a:37:3b:7e:a0: a2:11:cd:81:9c:ec:b3:20:bd:13:a8:18:5c:15:92: ff:c2:b2:51:2f:7c:16:39:3c:76:e3:60:62:ff:4c: 16:7e:e5:95:81:90:ec:15:af:2d:30:64:bf:01:d7: 9f:30:ba:03:6a:e2:1c:c1:96:05:3e:ef:69:16:93: 98:aa:b3:79:d7:ec:1c:6f:37:7e:3e:21:d1:99:11: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:21:15:66:97:B6:BA:EB:7A:B8:AE:3C:D5:78:B6:F8:17:B6:84:AD X509v3 Authority Key Identifier: keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c9:e6:29:4e:1d:48:52:da:39:28:cc:4b:e3:6a:e8:f9:31: c4:4d:b4:04:56:07:51:5c:e8:41:4a:c1:3f:4a:a2:9a:c2:ce: 94:7e:4f:90:c4:04:68:eb:b5:eb:e3:84:ca:ef:ba:73:42:b6: d2:bd:aa:ad:56:cf:12:1c:3c:1e:b4:5b:3d:dc:15:d7:8b:3e: 56:c8:3c:1c:38:da:eb:40:a8:7c:df:38:10:bc:71:5f:64:5d: f6:bf:48:0a:0d:ee:e9:74:4d:8e:a6:ec:7e:10:16:e6:b9:fb: da:23:04:31:a6:d1:1a:fd:5c:81:4d:75:3c:63:ae:1f:c7:22: 88:8a:f3:c7:c8:47:e5:77:b6:64:8f:18:18:59:c7:4c:fe:86: 87:c6:38:31:52:58:00:63:05:30:74:ff:c8:d2:81:72:c5:a3: d7:3b:87:5c:7e:c9:67:8d:ff:ce:82:8b:49:a0:d6:49:a5:f5: ce:67:78:57:19:bf:9e:3b:55:a9:2f:90:58:b8:d1:e4:6e:ef: a8:e6:e0:2d:38:53:f3:f8:d9:d7:14:35:7e:60:79:cc:f4:a8: c3:1b:91:49:4e:a7:4a:1e:bf:4b:fc:25:2f:0a:02:79:dd:52: 0d:ea:6f:2a:c3:82:d7:36:a9:6f:9c:b6:40:1b:4d:ec:ad:74: 49:ef:03:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkaWV7D8DmxWeMvB0qkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjMxNWYyNmNhMWNkYjg0NDExMTY4MGMzY2YwNDM3YjRj MTI3ZTYwHhcNMjUxMjA2MTUwMTA0WhcNMjUxMjA3MTUwMTA0WjAzMTEwLwYDVQQD EyhhZDIxMTU2Njk3YjZiYWViN2FiOGFlM2NkNTc4YjZmODE3YjY4NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDNv/okASFnLG+RvhpVJYl4V9WF+ dVneilNznPcCM73owd4w3woSgSclsla/c2ZFZpRnk+FmHR3xZJ3U7PopjLOO0ucE 9zU42/LD6QASzRmbaDilxQnNM7/9pvYBVoHkZIfGx+L8Yep40LkzKNhhm2T2bHS9 mB9/X4EuFwqVicej64HIY976ehB0bfVAZdz2upLi+bU4ev+hWtI9xTj/mvCPk+ns u4N2oGCWuEzdWjc7fqCiEc2BnOyzIL0TqBhcFZL/wrJRL3wWOTx242Bi/0wWfuWV gZDsFa8tMGS/AdefMLoDauIcwZYFPu9pFpOYqrN51+wcbzd+PiHRmRGXoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0hFWaXtrrreriuPNV4tvgXtoStMB8GA1UdIwQY MBaAFMSzFfJsoc24RBEWgMPPBDe0wSfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExNVjhteWh6YmhFRVJhQXc4OEVON1RCSi1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xMGFhM2QtMTk1Mi00ZGRlLTgwZDct MTE2M2ZjM2EyMjFlLzEveExNVjhteWh6YmhFRVJhQXc4OEVON1RCSi1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xMGFhM2QtMTk1Mi00ZGRlLTgwZDctMTE2M2ZjM2EyMjFl LzEveExNVjhteWh6YmhFRVJhQXc4OEVON1RCSi1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8nmKU4d SFLaOSjMS+Nq6PkxxE20BFYHUVzoQUrBP0qimsLOlH5PkMQEaOu16+OEyu+6c0K2 0r2qrVbPEhw8HrRbPdwV14s+Vsg8HDja60CofN84ELxxX2Rd9r9ICg3u6XRNjqbs fhAW5rn72iMEMabRGv1cgU11PGOuH8ciiIrzx8hH5Xe2ZI8YGFnHTP6Gh8Y4MVJY AGMFMHT/yNKBcsWj1zuHXH7JZ43/zoKLSaDWSaX1zmd4Vxm/njtVqS+QWLjR5G7v qObgLThT8/jZ1xQ1fmB5zPSowxuRSU6nSh6/S/wlLwoCed1SDepvKsOC1zapb5y2 QBtN7K10Se8D0g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:11 2025 by rpki-client