This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json) Hash identifier: NPHHvVeSwWmMQ0I2rLE9c8BLL8O9HiG1fZqXdpH4cQI= Subject key identifier: BD:45:09:0E:61:99:5A:C3:46:61:03:08:8B:BD:98:16:A0:2C:B5:12 Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12 Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612 Certificate serial: 019AF50A61C28F26C29486CF88A2FB9BB3E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 19:01:29 +0000 Manifest this update: Sat 06 Dec 2025 19:01:29 +0000 Manifest next update: Sun 07 Dec 2025 19:01:29 +0000 Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=) 2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: Hw4ft+Kv0dFrGodQSoovgym8s5V9psxbnudu7kz/EX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:61:c2:8f:26:c2:94:86:cf:88:a2:fb:9b:b3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612 Validity Not Before: Dec 6 19:01:29 2025 GMT Not After : Dec 7 19:01:29 2025 GMT Subject: CN=bd45090e61995ac3466103088bbd9816a02cb512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:06:a8:62:2d:9c:0e:53:fd:d7:85:fe:f9: 22:9c:bf:76:6a:14:92:58:e4:20:b6:d5:d4:9f:d8: ea:7f:01:01:34:d3:5a:3e:00:75:f2:cb:4e:c1:10: 61:5f:8e:99:75:be:5b:33:bb:4d:d5:89:c6:0b:4c: d1:05:03:08:9e:7f:a7:cf:a5:a7:07:d2:a4:22:a7: 3c:c4:62:26:1e:0b:29:1d:23:52:49:e2:5c:db:f5: d5:db:91:18:2c:95:b1:28:c1:c6:fe:68:ff:10:83: 8d:ec:80:d3:cb:63:41:44:ae:f4:68:fb:ea:04:1b: 05:ef:5f:10:96:cf:a5:52:47:96:be:5a:f4:19:3e: 5b:7c:ef:03:e1:6e:99:0f:1c:1f:c2:6d:77:94:04: 64:65:58:b6:0a:47:d3:14:cc:7d:5f:47:41:af:4c: 2c:fd:39:b7:07:ae:10:02:2c:ac:c7:3f:fd:c5:4f: 98:15:ff:ce:76:4e:98:b6:f8:1d:0b:20:ab:04:14: b5:29:92:ef:dd:31:14:d6:e3:24:81:26:ef:46:07: 50:e8:20:77:8a:54:2c:65:2e:64:0e:f8:74:f7:4f: 45:69:9d:16:ce:27:89:7f:f7:8a:05:75:11:6d:42: 8c:1f:ea:3a:84:07:76:53:fa:c9:e3:7f:24:ea:ce: f0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:45:09:0E:61:99:5A:C3:46:61:03:08:8B:BD:98:16:A0:2C:B5:12 X509v3 Authority Key Identifier: keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:76:ce:92:a4:86:97:26:0e:81:e0:b2:76:5d:9c:9f:a3:c0: 71:0d:ed:97:21:b2:12:b2:fa:77:d1:42:b3:b4:69:85:f8:a6: 38:62:ce:bc:c1:6b:ce:88:6f:0f:a8:1a:a4:49:9d:82:13:b4: 27:d9:96:b9:23:9f:1d:5e:60:fd:bd:f3:79:f2:f5:59:66:b3: c2:09:87:e3:57:64:59:3b:85:49:12:2c:19:31:b1:b8:42:92: 5b:f4:d3:50:f0:5f:ac:14:ce:a0:20:a8:61:3f:b0:c7:fe:6b: b1:65:c2:a1:fb:41:ff:f7:b9:82:d5:f7:e8:88:ff:d8:f2:1d: 42:40:a8:ab:99:37:84:0f:a2:83:a3:d4:40:b1:00:a9:41:cb: 0c:b9:5b:cb:4d:2a:e7:e8:56:db:17:8a:c5:56:da:24:cf:64: 4f:6b:e2:24:6d:33:fc:f3:11:ce:37:3c:59:4c:f7:78:fe:c4: dd:de:28:d7:9d:be:be:e2:80:5a:a4:e5:56:3a:c8:4b:6c:2a: 48:8b:c1:4a:cc:23:03:7a:80:b4:11:a2:1b:d9:b4:61:e3:96: b3:af:70:68:94:e4:bb:b6:30:4b:1b:9e:c8:15:3e:35:55:9c: 70:cf:47:e7:d6:c0:d7:d5:82:e5:fb:c8:b5:cd:75:2b:2c:89: 0e:38:b1:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CmHCjybClIbPiKL7m7PjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMmYyMWU1YTRmYmUwMTUyMDVmNmNlZjg4YWZhZTE5Y2Qw NmE2MTIwHhcNMjUxMjA2MTkwMTI5WhcNMjUxMjA3MTkwMTI5WjAzMTEwLwYDVQQD EyhiZDQ1MDkwZTYxOTk1YWMzNDY2MTAzMDg4YmJkOTgxNmEwMmNiNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCsGqGItnA5T/deF/vkinL92ahSS WOQgttXUn9jqfwEBNNNaPgB18stOwRBhX46Zdb5bM7tN1YnGC0zRBQMInn+nz6Wn B9KkIqc8xGImHgspHSNSSeJc2/XV25EYLJWxKMHG/mj/EION7IDTy2NBRK70aPvq BBsF718Qls+lUkeWvlr0GT5bfO8D4W6ZDxwfwm13lARkZVi2CkfTFMx9X0dBr0ws /Tm3B64QAiysxz/9xU+YFf/Odk6YtvgdCyCrBBS1KZLv3TEU1uMkgSbvRgdQ6CB3 ilQsZS5kDvh0909FaZ0WzieJf/eKBXURbUKMH+o6hAd2U/rJ438k6s7wtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1FCQ5hmVrDRmEDCIu9mBagLLUSMB8GA1UdIwQY MBaAFF0vIeWk++AVIF9s74ivrhnNBqYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWIt MjE0YTc2MjEwZmQ2LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWItMjE0YTc2MjEwZmQ2 LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHbOkqSG lyYOgeCydl2cn6PAcQ3tlyGyErL6d9FCs7RphfimOGLOvMFrzohvD6gapEmdghO0 J9mWuSOfHV5g/b3zefL1WWazwgmH41dkWTuFSRIsGTGxuEKSW/TTUPBfrBTOoCCo YT+wx/5rsWXCoftB//e5gtX36Ij/2PIdQkCoq5k3hA+ig6PUQLEAqUHLDLlby00q 5+hW2xeKxVbaJM9kT2viJG0z/PMRzjc8WUz3eP7E3d4o152+vuKAWqTlVjrIS2wq SIvBSswjA3qAtBGiG9m0YeOWs69waJTku7YwSxueyBU+NVWccM9H59bA19WC5fvI tc11KyyJDjixuA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:50:31 2025 by rpki-client