This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json) Hash identifier: fwdTWM0yQpnYmtyDkk8I+7usocyDUFHYYSvN12c5igE= Subject key identifier: 61:D0:0A:3D:34:00:40:C6:BC:0C:26:38:4F:EB:9C:22:DE:2C:8C:63 Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2 Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2 Certificate serial: 019AF208DEA16EBC80E60CD4418A3E760554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft Manifest number: 0F2A Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: MFGSVdo1FldpC12aH7e9R2pHC4Iba0y2IjzbEJFwrzc=) 2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:de:a1:6e:bc:80:e6:0c:d4:41:8a:3e:76:05:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=61d00a3d340040c6bc0c26384feb9c22de2c8c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:ff:dd:4e:cf:ae:70:f1:23:28:fd:3c:4f: 49:14:e7:e3:f4:0c:d4:d5:0c:68:bf:01:63:fd:de: 11:7d:be:4a:aa:0c:2c:65:90:20:6c:2a:9e:58:b9: 0b:09:fd:92:69:27:4b:50:ad:a0:22:f7:57:ad:c2: 7d:e5:f3:f9:cd:cd:dc:01:fd:37:8b:08:1d:91:71: ad:32:08:76:53:40:4b:16:6b:05:0d:3e:29:20:79: cf:5b:97:89:79:d1:38:86:32:30:ca:f5:ff:a1:07: 5d:7a:f1:6d:5f:af:84:14:e8:a5:7c:5d:2c:06:61: 84:ee:8d:e1:48:3f:29:54:fa:21:cd:e2:64:0a:34: 39:b9:91:8f:79:c5:99:b8:5b:3f:81:80:b4:b8:6c: 11:fb:f9:0a:5b:ec:06:ca:6b:25:35:bd:e4:31:d2: 82:83:ee:f5:75:51:9e:c0:1a:52:87:1e:3c:52:ce: a6:e0:c2:02:1d:86:ba:f4:98:d7:5b:3c:43:4b:ec: 94:9f:a2:f2:08:8b:45:fc:48:cb:6c:f0:35:49:0e: 98:5c:7c:31:58:6f:d5:81:0f:22:40:d0:76:44:eb: cb:7d:50:74:df:52:c2:9e:0e:f4:a8:d2:fa:f6:40: d9:ad:d9:3f:fa:09:7d:8e:d3:1b:e4:c1:7c:92:e0: 14:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D0:0A:3D:34:00:40:C6:BC:0C:26:38:4F:EB:9C:22:DE:2C:8C:63 X509v3 Authority Key Identifier: keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:fe:ef:f5:96:a2:68:3a:96:7a:4f:51:c2:87:f8:bf:f8:fc: 10:67:6b:25:e6:00:b1:f4:6b:d9:dd:e7:da:54:7a:54:50:66: 24:c0:17:54:a8:18:45:ed:be:a5:34:c2:75:15:0d:10:c1:67: a1:f6:20:43:f7:b9:3c:06:73:34:10:54:ff:29:c9:9f:d8:5d: 99:d4:a1:70:62:f7:f3:d3:af:0a:1f:ef:25:28:5c:a6:a5:24: a6:44:6a:f2:96:52:e5:ff:66:04:51:9f:a4:6c:4f:28:6c:b3: 83:1e:7d:5c:c3:f7:92:22:7f:b3:5b:5c:35:ee:03:85:5c:30: 23:80:51:b5:1a:50:b3:08:04:df:dd:b7:17:f5:e1:76:24:02: ab:a9:d4:e5:01:3a:c7:dd:30:8e:10:26:d9:5d:ba:0c:17:83: ec:dc:3c:9e:fd:c2:b0:c1:65:58:98:6e:ca:91:8a:23:f4:1c: 96:3d:8a:0c:85:18:91:9e:06:ff:49:20:e0:e8:ca:e8:a5:3c: 4b:2c:4c:fe:02:0a:b4:c3:01:98:7d:89:30:e0:88:d4:20:38: d4:a8:86:32:61:45:a3:20:ae:a5:5c:1d:eb:a3:c5:b7:1a:a2: 81:e7:a8:b1:da:89:4c:5b:db:d8:d9:05:31:31:65:e2:b9:46: cc:95:81:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN6hbryA5gzUQYo+dgVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMTNhMjFiNGU4Y2UxNGNlN2Q2NjgwYzk5MGVjNmJhMjlh MDI3YzIwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD Eyg2MWQwMGEzZDM0MDA0MGM2YmMwYzI2Mzg0ZmViOWMyMmRlMmM4YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vr/3U7PrnDxIyj9PE9JFOfj9AzU 1QxovwFj/d4Rfb5KqgwsZZAgbCqeWLkLCf2SaSdLUK2gIvdXrcJ95fP5zc3cAf03 iwgdkXGtMgh2U0BLFmsFDT4pIHnPW5eJedE4hjIwyvX/oQddevFtX6+EFOilfF0s BmGE7o3hSD8pVPohzeJkCjQ5uZGPecWZuFs/gYC0uGwR+/kKW+wGymslNb3kMdKC g+71dVGewBpShx48Us6m4MICHYa69JjXWzxDS+yUn6LyCItF/EjLbPA1SQ6YXHwx WG/VgQ8iQNB2ROvLfVB031LCng70qNL69kDZrdk/+gl9jtMb5MF8kuAU8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHQCj00AEDGvAwmOE/rnCLeLIxjMB8GA1UdIwQY MBaAFP8TohtOjOFM59ZoDJkOxropoCfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2Yjkt N2ZiYzRlNTc5N2ExLzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2YjktN2ZiYzRlNTc5N2Ex LzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIv7v9Zai aDqWek9Rwof4v/j8EGdrJeYAsfRr2d3n2lR6VFBmJMAXVKgYRe2+pTTCdRUNEMFn ofYgQ/e5PAZzNBBU/ynJn9hdmdShcGL389OvCh/vJShcpqUkpkRq8pZS5f9mBFGf pGxPKGyzgx59XMP3kiJ/s1tcNe4DhVwwI4BRtRpQswgE3923F/XhdiQCq6nU5QE6 x90wjhAm2V26DBeD7Nw8nv3CsMFlWJhuypGKI/Qclj2KDIUYkZ4G/0kg4OjK6KU8 SyxM/gIKtMMBmH2JMOCI1CA41KiGMmFFoyCupVwd66PFtxqigeeosdqJTFvb2NkF MTFl4rlGzJWB2g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:13 2025 by rpki-client