This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json) Hash identifier: TuFA9rDUtcUrFOe2QwmkHx4STzP//9An0c45LLMkdkI= Subject key identifier: FE:6F:6D:BE:2C:7E:A0:3F:8D:0E:6A:4D:5A:A4:63:B0:D6:14:2D:6F Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78 Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78 Certificate serial: 019AF3891F8E3DCE13CEBA255CC00859A83F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft Manifest number: 0DC9 Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=) 2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: oa91Us1z5ghS47NZvNtk2x3OrsLJjMlkL2B+mHNu0F8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1f:8e:3d:ce:13:ce:ba:25:5c:c0:08:59:a8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78 Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=fe6f6dbe2c7ea03f8d0e6a4d5aa463b0d6142d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:18:d7:bf:1e:96:62:2e:64:19:93:b9:f2: bc:73:91:ea:95:eb:6b:f5:d7:1a:77:b5:ed:cc:da: de:1e:bb:62:9f:09:cd:c6:23:31:51:69:1b:fb:fd: f3:7e:d9:d6:d0:06:8a:f0:bb:9a:5f:47:a6:0f:bd: 44:b3:c8:63:bc:13:f3:a5:21:36:fc:b9:94:50:1b: 8b:f3:a8:95:31:96:ca:68:a6:c5:17:86:21:56:e2: b6:c6:8f:97:1a:50:0a:69:dc:50:fa:b9:25:2b:f9: f8:40:29:a8:a9:2b:eb:02:f9:03:60:0c:d0:f1:71: cd:93:29:a7:8c:62:2e:a3:ab:76:f7:90:43:01:72: 02:d2:31:4d:7c:66:2b:eb:4b:b7:91:cf:59:65:18: 32:cb:29:75:81:8a:7f:b0:d6:ec:e8:59:20:47:ec: 16:44:f5:16:64:00:bf:78:da:07:74:37:e4:6c:dc: df:c0:b8:d6:fd:de:25:3b:64:5a:4f:32:ec:36:ff: 71:1f:04:25:6b:1e:d4:49:53:ca:04:df:36:b3:84: 39:ee:93:20:78:2f:2a:e8:f7:a6:13:b5:50:12:6b: d3:54:b3:0e:15:aa:4a:b7:9f:9d:49:ba:27:6a:16: 9a:38:c3:69:ce:10:16:e0:f6:b0:08:1f:3a:17:58: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6F:6D:BE:2C:7E:A0:3F:8D:0E:6A:4D:5A:A4:63:B0:D6:14:2D:6F X509v3 Authority Key Identifier: keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:44:3c:90:7a:aa:de:46:be:a1:88:b6:5f:19:06:dd:9b:12: 3a:25:db:6c:a9:05:bf:2a:ad:64:f8:24:2a:75:22:51:57:e2: d8:38:aa:54:8a:1d:1e:cd:2d:3c:9c:e7:85:84:ff:fb:96:6d: 54:fd:1c:8d:79:9a:ee:11:49:52:f2:5f:2e:74:09:3c:9b:f6: f3:2e:0a:ce:50:fa:40:2d:75:b7:fa:42:76:52:56:ab:b1:4c: 03:43:53:6a:41:62:60:01:2d:41:3c:22:ff:c0:f4:c9:cd:68: 46:61:0d:98:f0:b9:dd:40:58:da:1c:d4:2c:7e:d9:08:90:b8: 4d:60:78:9d:b1:d4:6f:35:5f:73:45:36:e5:14:50:ed:96:35: 9e:7d:b3:05:62:11:72:ce:08:91:af:32:0d:f2:e1:11:58:ba: 9a:29:5b:4c:a4:73:b6:8c:d3:f3:80:05:3b:c1:3f:bd:f9:4d: 7e:39:34:24:64:02:9a:ed:47:98:aa:b6:2a:04:e4:7d:ed:c7: 7e:bd:2c:ab:04:0c:24:35:97:44:cd:66:cd:ff:fb:d6:11:f2: 18:62:e8:96:5c:a7:2c:be:b2:5e:9f:d9:28:a6:25:7b:78:69: 46:c6:84:13:7d:5c:7e:71:10:d5:17:3f:21:89:28:8a:04:64: 43:e4:88:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziR+OPc4TzrolXMAIWag/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YzNiYzA1YWE1MmFiOWViNWQxODRmNTA4ODlmMWZmMGM5 MGNlNzgwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD EyhmZTZmNmRiZTJjN2VhMDNmOGQwZTZhNGQ1YWE0NjNiMGQ2MTQyZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkAY178elmIuZBmTufK8c5Hqletr 9dcad7XtzNreHrtinwnNxiMxUWkb+/3zftnW0AaK8LuaX0emD71Es8hjvBPzpSE2 /LmUUBuL86iVMZbKaKbFF4YhVuK2xo+XGlAKadxQ+rklK/n4QCmoqSvrAvkDYAzQ 8XHNkymnjGIuo6t295BDAXIC0jFNfGYr60u3kc9ZZRgyyyl1gYp/sNbs6FkgR+wW RPUWZAC/eNoHdDfkbNzfwLjW/d4lO2RaTzLsNv9xHwQlax7USVPKBN82s4Q57pMg eC8q6PemE7VQEmvTVLMOFapKt5+dSbonahaaOMNpzhAW4PawCB86F1gvWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5vbb4sfqA/jQ5qTVqkY7DWFC1vMB8GA1UdIwQY MBaAFMTDvAWqUquetdGE9QiJ8f8MkM54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE1POEJhcFNxNTYxMFlUMUNJbnhfd3lRem5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kMjM3ZmEtYjEwNS00MzJlLTgzY2It NmQzNWI3OTU2ZmNlLzEveE1POEJhcFNxNTYxMFlUMUNJbnhfd3lRem5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kMjM3ZmEtYjEwNS00MzJlLTgzY2ItNmQzNWI3OTU2ZmNl LzEveE1POEJhcFNxNTYxMFlUMUNJbnhfd3lRem5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkQ8kHqq 3ka+oYi2XxkG3ZsSOiXbbKkFvyqtZPgkKnUiUVfi2DiqVIodHs0tPJznhYT/+5Zt VP0cjXma7hFJUvJfLnQJPJv28y4KzlD6QC11t/pCdlJWq7FMA0NTakFiYAEtQTwi /8D0yc1oRmENmPC53UBY2hzULH7ZCJC4TWB4nbHUbzVfc0U25RRQ7ZY1nn2zBWIR cs4Ika8yDfLhEVi6milbTKRztozT84AFO8E/vflNfjk0JGQCmu1HmKq2KgTkfe3H fr0sqwQMJDWXRM1mzf/71hHyGGLollynLL6yXp/ZKKYle3hpRsaEE31cfnEQ1Rc/ IYkoigRkQ+SINw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:18 2025 by rpki-client