This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json) Hash identifier: s9GxB+WHdojv9EMP8GarGf/iuU994PZzZ+iR3RxM/eM= Subject key identifier: DA:0C:78:35:B6:9F:D0:B6:0E:4A:78:9E:FE:0F:01:44:58:1F:DB:25 Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Certificate serial: 019AF1D19FA780E0CF2818D38737C52D7AD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=) 2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=) 3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: l7ydCDf+Usfy//FbffhJ02CiGgPhI0QMUCdxRVUH+OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9f:a7:80:e0:cf:28:18:d3:87:37:c5:2d:7a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=da0c7835b69fd0b60e4a789efe0f0144581fdb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:4a:75:05:ef:6f:4a:8a:d0:4c:19:9c:53: 6f:8f:b7:43:7f:b9:8b:d2:c6:f2:83:66:c8:e5:29: 85:b8:ac:9e:95:9a:48:b7:45:4c:cd:c7:63:60:19: e7:01:26:44:23:58:cb:c0:b5:4c:b1:81:b2:11:74: 99:ed:86:b7:9e:1d:0f:81:23:17:f4:39:07:5d:23: b2:64:64:a8:da:af:72:5d:6d:31:5a:83:81:24:e9: ba:72:28:07:fe:06:a3:cc:b6:52:5e:c5:8e:d9:0e: a2:a1:57:82:1a:29:57:3c:61:40:b1:97:b0:0d:22: 52:47:64:7e:e1:ec:2a:07:a0:67:25:4e:3f:71:a2: e2:e0:e4:4d:ee:2d:ff:eb:cc:01:91:27:0a:d1:63: cb:7a:cd:45:53:10:24:11:f5:f8:83:e2:ed:67:c6: f6:a9:20:90:d2:82:2c:db:fa:0b:c7:4e:c4:ab:0c: 16:d9:ef:f5:4e:5b:4f:bf:c8:98:fa:cf:94:ef:89: c0:35:32:46:aa:f6:0c:e6:b6:8c:09:76:a7:85:a8: 90:55:93:d4:a1:a8:20:d4:31:ac:6e:2a:87:10:21: 76:6b:ee:f7:48:0c:fb:2d:0a:67:02:8d:a9:cb:03: b0:d7:78:ac:48:66:bb:38:25:48:bf:3b:79:53:31: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0C:78:35:B6:9F:D0:B6:0E:4A:78:9E:FE:0F:01:44:58:1F:DB:25 X509v3 Authority Key Identifier: keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3d:46:57:f5:06:7a:d3:cb:a7:c9:e2:1f:a5:ba:ce:cc:59: 1c:30:05:6a:0f:12:9e:b2:2c:e3:e4:0f:e2:6d:d9:e4:34:c6: 87:50:b6:58:ef:d4:c8:b9:3a:7d:4a:01:77:bc:19:0b:1a:12: b4:56:01:1f:fc:73:11:b9:8a:b3:3c:fd:09:67:ba:14:fe:5e: fe:b0:23:9f:ea:2f:4f:60:7c:4c:8d:20:c2:b7:12:67:44:f6: 0c:b8:c2:f5:62:7c:62:8e:a9:4c:c5:b6:98:65:23:90:63:be: 2f:31:7d:f2:0e:ad:d7:4b:ec:0f:e5:ec:37:e7:60:38:1e:17: b0:40:ff:eb:b6:66:c9:dc:0a:81:97:02:7a:15:fa:8e:f7:43: 7e:5b:88:ab:a9:4b:4b:1f:4d:b9:5a:94:6b:90:2f:88:23:bf: f8:86:a8:6d:92:d0:38:b1:43:28:7e:09:ac:fa:68:f3:df:9f: c6:6b:95:18:d8:4a:0b:75:a2:07:04:6d:d5:99:e6:27:af:f4: d6:9e:c4:3d:9b:da:b4:35:0d:5d:b8:ca:0f:81:14:fa:f5:85: df:25:36:6c:ba:8b:ec:6f:1e:7d:d1:26:ed:b3:b4:90:e6:45: 38:ec:1c:9c:e7:95:44:92:93:1c:42:df:39:63:6e:40:bc:65: 3f:a7:86:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z+ngODPKBjThzfFLXrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWJhMWZkZjZjNGRlMTkyYzFkM2VkZjhhODAwY2E1OTdm OTdkNjgwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EyhkYTBjNzgzNWI2OWZkMGI2MGU0YTc4OWVmZTBmMDE0NDU4MWZkYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7lKdQXvb0qK0EwZnFNvj7dDf7mL 0sbyg2bI5SmFuKyelZpIt0VMzcdjYBnnASZEI1jLwLVMsYGyEXSZ7Ya3nh0PgSMX 9DkHXSOyZGSo2q9yXW0xWoOBJOm6cigH/gajzLZSXsWO2Q6ioVeCGilXPGFAsZew DSJSR2R+4ewqB6BnJU4/caLi4ORN7i3/68wBkScK0WPLes1FUxAkEfX4g+LtZ8b2 qSCQ0oIs2/oLx07EqwwW2e/1TltPv8iY+s+U74nANTJGqvYM5raMCXanhaiQVZPU oagg1DGsbiqHECF2a+73SAz7LQpnAo2pywOw13isSGa7OCVIvzt5UzFQzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoMeDW2n9C2Dkp4nv4PAURYH9slMB8GA1UdIwQY MBaAFMTrof32xN4ZLB0+34qADKWX+X1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYt NTEyODU2MGRiZGZjLzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYtNTEyODU2MGRiZGZj LzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAST1GV/UG etPLp8niH6W6zsxZHDAFag8SnrIs4+QP4m3Z5DTGh1C2WO/UyLk6fUoBd7wZCxoS tFYBH/xzEbmKszz9CWe6FP5e/rAjn+ovT2B8TI0gwrcSZ0T2DLjC9WJ8Yo6pTMW2 mGUjkGO+LzF98g6t10vsD+XsN+dgOB4XsED/67ZmydwKgZcCehX6jvdDfluIq6lL Sx9NuVqUa5AviCO/+IaobZLQOLFDKH4JrPpo89+fxmuVGNhKC3WiBwRt1ZnmJ6/0 1p7EPZvatDUNXbjKD4EU+vWF3yU2bLqL7G8efdEm7bO0kOZFOOwcnOeVRJKTHELf OWNuQLxlP6eGuw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:59 2025 by rpki-client