This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json) Hash identifier: lV/UnFM3Rq2en7yxpWHo77eJQOld6/MUtmGgiE2wBkw= Subject key identifier: D3:01:76:F6:14:13:F7:41:03:1D:EE:38:D2:7D:21:D5:37:E7:78:74 Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Certificate serial: 019B2BC22B9789D16808130C8128D7C90967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft Manifest number: 1785 Signing time: Wed 17 Dec 2025 10:01:43 +0000 Manifest this update: Wed 17 Dec 2025 10:01:43 +0000 Manifest next update: Thu 18 Dec 2025 10:01:43 +0000 Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=) 2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=) 3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: jvdUe7rXlavrQ0gzcOWvWwv29rOjX8b7Tflhxpdbx10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:2b:97:89:d1:68:08:13:0c:81:28:d7:c9:09:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Validity Not Before: Dec 17 10:01:43 2025 GMT Not After : Dec 18 10:01:43 2025 GMT Subject: CN=d30176f61413f741031dee38d27d21d537e77874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:73:0a:51:2d:05:e6:d4:93:c0:03:bb:bb: 3d:d6:cc:b2:07:76:52:d0:7c:6c:d6:16:ac:6e:2e: 0f:62:ca:98:a6:50:23:d3:27:a2:d4:53:6b:72:98: 55:44:f7:bd:36:eb:7e:8a:10:ae:86:fc:85:89:25: 19:44:e7:e3:4f:8f:ec:16:7e:40:b3:b8:61:0e:f4: 6a:b4:1a:d2:f7:b8:80:55:c9:15:14:42:c1:fa:ba: 4e:bb:3d:fc:ca:f5:46:82:24:59:ef:a7:60:44:cd: bf:26:1b:6c:70:39:e5:72:b2:8b:ed:39:3a:c7:fa: e4:2a:52:4f:d8:87:d6:22:c9:c8:e1:cf:13:53:51: bf:95:a1:e6:d6:ab:28:f1:78:80:f8:b9:e3:7f:b0: 88:33:7e:a4:57:77:95:af:2a:4b:3e:9c:6b:9b:fa: 8a:02:89:e2:55:ed:ad:7b:6a:f3:a7:ec:72:c9:d4: fc:b8:c4:5f:24:38:05:d4:08:17:77:7c:5c:82:17: ff:85:02:6c:64:23:60:49:c1:a6:b2:17:e1:14:f7: 72:e6:8e:a5:89:9c:a4:e5:6b:ff:f8:28:ee:91:24: 47:6c:eb:19:d2:0d:f3:40:30:07:cf:01:f4:a4:00: 5e:12:9e:8d:49:c9:a1:0d:30:46:8c:ba:3c:06:c5: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:01:76:F6:14:13:F7:41:03:1D:EE:38:D2:7D:21:D5:37:E7:78:74 X509v3 Authority Key Identifier: keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:84:6e:f8:7d:42:e1:30:20:d5:47:93:1b:2e:24:6e:92:48: 69:a7:c2:62:f0:2b:5f:e0:64:bb:df:5b:f8:1f:68:f8:c9:7c: 41:52:24:77:77:69:4c:a8:2b:98:f9:ce:f4:ef:20:78:ef:52: e6:98:86:cd:37:0b:0e:6b:d5:f8:aa:4d:89:66:81:8d:ae:57: 18:8b:6e:9b:80:e6:89:a8:3a:f3:a4:bc:c4:72:32:00:f6:12: e1:10:2b:10:51:af:8a:d0:c7:dc:b1:d8:df:59:d8:a6:e2:dd: 80:d4:31:00:b4:96:76:ca:a6:a1:ee:03:99:bc:19:d0:66:cb: 19:4e:72:52:2c:8d:45:0e:17:72:90:54:34:39:34:9c:08:ba: 04:0f:42:8f:85:f7:ae:d1:e4:cc:c9:ef:d5:e1:46:3a:4d:81: 72:9a:66:05:26:c0:00:ce:72:11:c2:12:ed:4c:48:1e:0d:5a: 62:b0:5a:d6:b1:59:ae:74:3e:92:70:01:a6:14:45:10:a5:41: 41:a2:3d:93:16:8e:50:11:03:a1:03:62:2e:1f:bf:d6:84:aa: 39:a0:f5:c1:70:24:15:13:cc:c3:d4:6b:74:c6:9b:c9:39:bf: ce:89:5d:ec:ef:0c:f8:65:be:29:df:90:95:e6:a8:f4:ce:b0: 02:55:35:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwiuXidFoCBMMgSjXyQlnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWJhMWZkZjZjNGRlMTkyYzFkM2VkZjhhODAwY2E1OTdm OTdkNjgwHhcNMjUxMjE3MTAwMTQzWhcNMjUxMjE4MTAwMTQzWjAzMTEwLwYDVQQD EyhkMzAxNzZmNjE0MTNmNzQxMDMxZGVlMzhkMjdkMjFkNTM3ZTc3ODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfRzClEtBebUk8ADu7s91syyB3ZS 0Hxs1hasbi4PYsqYplAj0yei1FNrcphVRPe9Nut+ihCuhvyFiSUZROfjT4/sFn5A s7hhDvRqtBrS97iAVckVFELB+rpOuz38yvVGgiRZ76dgRM2/JhtscDnlcrKL7Tk6 x/rkKlJP2IfWIsnI4c8TU1G/laHm1qso8XiA+Lnjf7CIM36kV3eVrypLPpxrm/qK AoniVe2te2rzp+xyydT8uMRfJDgF1AgXd3xcghf/hQJsZCNgScGmshfhFPdy5o6l iZyk5Wv/+CjukSRHbOsZ0g3zQDAHzwH0pABeEp6NScmhDTBGjLo8BsW9pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMBdvYUE/dBAx3uONJ9IdU353h0MB8GA1UdIwQY MBaAFMTrof32xN4ZLB0+34qADKWX+X1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYt NTEyODU2MGRiZGZjLzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYtNTEyODU2MGRiZGZj LzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoRu+H1C 4TAg1UeTGy4kbpJIaafCYvArX+Bku99b+B9o+Ml8QVIkd3dpTKgrmPnO9O8geO9S 5piGzTcLDmvV+KpNiWaBja5XGItum4Dmiag686S8xHIyAPYS4RArEFGvitDH3LHY 31nYpuLdgNQxALSWdsqmoe4DmbwZ0GbLGU5yUiyNRQ4XcpBUNDk0nAi6BA9Cj4X3 rtHkzMnv1eFGOk2BcppmBSbAAM5yEcIS7UxIHg1aYrBa1rFZrnQ+knABphRFEKVB QaI9kxaOUBEDoQNiLh+/1oSqOaD1wXAkFRPMw9RrdMabyTm/zold7O8M+GW+Kd+Q leao9M6wAlU1eA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:20:45 2025 by rpki-client