This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json) Hash identifier: Ql8vS4J0M22/CVxTiXRnFLUlN5kdMb8Io78/CRPPqoA= Subject key identifier: CA:89:2C:0E:B0:73:1D:C7:DA:39:1A:31:1E:81:E0:C4:DB:68:6A:B4 Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Certificate serial: 019AF31CD9AE6F04BA3E0F9C0E1490BDDA5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft Manifest number: 16C4 Signing time: Sat 06 Dec 2025 10:02:25 +0000 Manifest this update: Sat 06 Dec 2025 10:02:25 +0000 Manifest next update: Sun 07 Dec 2025 10:02:25 +0000 Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=) 2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=) 3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=) 4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=) 5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=) 6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=) 7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=) 8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: lAPGI+TbwrhJzZfGY+hDmE4JMIX+RMNMGUK5WXuhTfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d9:ae:6f:04:ba:3e:0f:9c:0e:14:90:bd:da:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Validity Not Before: Dec 6 10:02:25 2025 GMT Not After : Dec 7 10:02:25 2025 GMT Subject: CN=ca892c0eb0731dc7da391a311e81e0c4db686ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:e2:c0:4d:b6:68:43:c7:33:eb:54:51:b5: c5:b4:c7:ef:bb:0e:78:e8:b7:ee:00:e3:26:49:f2: 59:c1:68:de:3a:b5:2c:9b:eb:e0:a9:1a:01:25:8a: fb:1d:f0:28:fc:69:64:d6:72:6b:fc:c5:55:34:ef: 83:5f:d1:6b:53:cf:0c:d4:40:93:56:55:27:ce:a6: cc:57:d5:9c:5d:78:d5:6b:3e:9c:40:6d:7c:21:12: e3:7e:ea:12:b1:9d:3c:e0:6e:10:bf:c0:bd:bc:48: 73:02:34:91:5c:e9:c4:87:08:b9:a3:2b:3b:2b:7a: a8:18:5f:7b:5e:ab:e7:54:c8:cc:ff:78:5b:97:8c: c6:be:87:4e:90:84:fa:7b:f8:f4:b0:90:53:1c:f4: dc:c4:33:b2:c1:81:4c:39:69:3e:33:2b:e9:ca:c8: 77:e8:47:1a:a4:92:34:e5:9b:6d:e9:eb:98:dd:99: 27:67:44:c7:37:b0:66:1f:1b:20:f5:5c:2e:fb:b5: 49:05:4b:63:7d:09:b0:14:09:ef:9a:54:13:63:25: d9:5d:b0:ae:7f:02:fb:28:a2:5f:5a:3c:d1:b5:19: 7d:18:01:7d:20:fa:07:45:26:95:e0:7d:62:71:00: 6f:32:3b:ac:ec:3e:c7:19:74:5d:17:e9:53:83:41: 76:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:89:2C:0E:B0:73:1D:C7:DA:39:1A:31:1E:81:E0:C4:DB:68:6A:B4 X509v3 Authority Key Identifier: keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e4:1d:2d:90:1c:25:51:9c:99:5f:e8:67:c9:89:3a:94:0b: b6:28:3f:6f:de:b7:63:eb:9a:f0:70:72:58:47:75:2e:9e:56: 88:d3:df:b1:d2:a8:7f:1c:27:79:06:57:2c:85:36:b3:2e:20: 18:a6:ff:ad:d7:aa:2e:c3:4d:5e:ef:ae:a1:d4:05:74:84:fc: b6:fb:b8:41:90:4d:b8:69:40:44:06:e7:ff:3d:07:3e:b6:59: 54:30:61:4b:3f:ba:4d:1a:49:11:73:bc:b1:73:33:61:53:5d: 3d:7a:c3:4b:98:0b:87:15:ac:f6:fa:50:a6:00:68:5c:47:fc: 1e:a0:8d:e8:d2:05:fc:b2:7e:2f:d1:d9:d0:e9:15:91:3d:e1: 64:9b:63:eb:6a:3a:da:6f:96:f7:f1:2f:76:b3:d7:8f:d2:11: 50:27:97:53:c8:59:0c:6e:e5:32:b8:fe:59:63:56:95:c1:5e: 48:bc:33:ac:3f:b9:c0:8e:f6:de:81:ce:04:1c:89:b2:ee:99: c9:27:f6:13:b4:f2:46:0b:eb:f2:79:e5:be:ce:de:fc:d7:32: bd:53:08:cd:b3:25:2f:07:52:27:f5:be:4a:5a:82:02:f3:fd: 11:26:67:21:68:b1:69:ed:75:4e:82:44:84:9e:87:ff:a5:7b: 15:50:6b:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNmubwS6Pg+cDhSQvdpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw ZDVkZDkwHhcNMjUxMjA2MTAwMjI1WhcNMjUxMjA3MTAwMjI1WjAzMTEwLwYDVQQD EyhjYTg5MmMwZWIwNzMxZGM3ZGEzOTFhMzExZTgxZTBjNGRiNjg2YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrviwE22aEPHM+tUUbXFtMfvuw54 6LfuAOMmSfJZwWjeOrUsm+vgqRoBJYr7HfAo/Glk1nJr/MVVNO+DX9FrU88M1ECT VlUnzqbMV9WcXXjVaz6cQG18IRLjfuoSsZ084G4Qv8C9vEhzAjSRXOnEhwi5oys7 K3qoGF97XqvnVMjM/3hbl4zGvodOkIT6e/j0sJBTHPTcxDOywYFMOWk+Myvpysh3 6EcapJI05Ztt6euY3ZknZ0THN7BmHxsg9Vwu+7VJBUtjfQmwFAnvmlQTYyXZXbCu fwL7KKJfWjzRtRl9GAF9IPoHRSaV4H1icQBvMjus7D7HGXRdF+lTg0F21QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqJLA6wcx3H2jkaMR6B4MTbaGq0MB8GA1UdIwQY MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt OTkzMGYyMTk0YTBlLzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+QdLZAc JVGcmV/oZ8mJOpQLtig/b963Y+ua8HByWEd1Lp5WiNPfsdKofxwneQZXLIU2sy4g GKb/rdeqLsNNXu+uodQFdIT8tvu4QZBNuGlARAbn/z0HPrZZVDBhSz+6TRpJEXO8 sXMzYVNdPXrDS5gLhxWs9vpQpgBoXEf8HqCN6NIF/LJ+L9HZ0OkVkT3hZJtj62o6 2m+W9/EvdrPXj9IRUCeXU8hZDG7lMrj+WWNWlcFeSLwzrD+5wI723oHOBByJsu6Z ySf2E7TyRgvr8nnlvs7e/NcyvVMIzbMlLwdSJ/W+SlqCAvP9ESZnIWixae11ToJE hJ6H/6V7FVBrFw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:29:53 2025 by rpki-client