This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json) Hash identifier: BBbXUXKowewuL0DjjPKx4wdgCbTtzjSVYN+vrow+DZg= Subject key identifier: 43:92:28:0C:87:14:13:B9:EB:78:4F:E9:A2:D6:B7:46:8B:21:EF:42 Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f Certificate serial: 019AF31BBA8047818E8AACC58AFA7B7AE9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft Manifest number: 154A Signing time: Sat 06 Dec 2025 10:01:11 +0000 Manifest this update: Sat 06 Dec 2025 10:01:11 +0000 Manifest next update: Sun 07 Dec 2025 10:01:11 +0000 Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=) 2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=) 3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: H5F9L35Dp4rJjA1LzbV8dUJrxSEAusCjO7ZyGm2U+4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ba:80:47:81:8e:8a:ac:c5:8a:fa:7b:7a:e9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f Validity Not Before: Dec 6 10:01:11 2025 GMT Not After : Dec 7 10:01:11 2025 GMT Subject: CN=4392280c871413b9eb784fe9a2d6b7468b21ef42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:c2:ff:1d:da:23:21:50:3c:cf:2b:8f:2b: 25:95:5a:e9:1c:cb:f0:09:01:d1:32:75:49:41:a1: b3:51:88:73:75:3b:77:a4:cc:bd:8d:80:e2:d1:19: e0:8a:17:0f:dc:ad:8d:c5:66:ee:9b:bc:ff:ad:23: ae:a0:37:03:a6:82:ed:bc:e5:cd:17:15:74:13:e1: 24:86:bd:f5:c3:48:01:6f:16:f6:1d:96:18:da:e5: 16:1b:84:f9:53:ab:13:6d:17:b5:96:92:ac:0e:df: c9:22:dc:48:80:18:44:b9:76:91:7f:cc:87:3d:10: d8:87:3d:cc:9e:47:6d:63:ea:06:ef:e1:db:48:a4: 50:ec:81:d8:82:48:5f:56:3c:c2:7f:69:7c:43:b5: ab:c7:8f:cf:4e:ed:25:6b:5c:ed:53:f4:5a:b0:ce: b0:ba:0b:70:10:4c:89:8a:a0:00:60:91:5b:86:af: 75:fe:68:9e:08:1c:ac:2d:1a:c7:60:96:4f:ae:22: 70:4d:ee:dd:94:4a:92:3b:9c:de:67:81:55:d3:b2: 44:fb:df:96:df:3e:19:e4:48:8e:b8:38:a3:0f:45: 51:75:bc:6b:9f:b7:26:1d:89:65:80:cf:de:b3:68: e1:c2:32:b4:c6:39:3b:4c:b9:7e:03:37:d1:0f:8c: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:92:28:0C:87:14:13:B9:EB:78:4F:E9:A2:D6:B7:46:8B:21:EF:42 X509v3 Authority Key Identifier: keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ca:b4:ce:06:43:7c:69:b2:2a:83:f7:f8:6f:32:df:0e:4d: e8:3f:74:d3:bc:0c:57:58:08:6a:91:42:9f:4a:b7:91:e9:7a: c1:d5:a1:e1:bd:49:af:0c:32:25:b1:83:e1:a0:4a:4f:fa:2e: d8:29:7f:cc:bf:0d:7c:05:e6:af:67:46:96:83:e8:fd:2a:a8: 68:a2:4c:bf:86:d4:74:8a:31:64:fe:58:0b:08:e3:08:fa:a4: 48:8d:98:25:0d:17:29:b2:38:a8:52:f9:9c:cc:7b:bd:20:28: b2:19:fb:9e:fc:4f:cf:2a:2a:e6:ab:25:73:01:d5:df:f0:3e: 92:5c:a1:b4:39:bd:a8:e6:12:fb:e5:cc:77:e9:69:b8:3f:84: 79:f2:95:61:0f:bf:45:2a:fe:fb:d7:67:59:56:90:b8:7a:6e: f8:47:aa:64:6d:3e:71:5e:af:5e:b4:f5:e8:da:c2:08:bc:69: 5a:e2:f9:0a:9f:ca:e7:3d:a7:82:0f:89:50:fc:cc:f2:70:b2: 10:ef:a8:5d:e8:a9:f6:56:0c:4d:3a:4b:9c:2a:3e:2b:6c:ca: f5:8a:8e:7d:bf:58:44:f4:b9:73:8f:f0:28:3c:67:b2:94:ca: ab:19:5c:24:a1:36:0a:fb:2a:bc:72:93:66:ec:5a:d1:76:bc: d8:3b:c7:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7qAR4GOiqzFivp7eunKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmRjNjBkMTZkZmUxNjQ5ZDg2YzE2OTNlMTc4NThjMjMw NjM4N2YwHhcNMjUxMjA2MTAwMTExWhcNMjUxMjA3MTAwMTExWjAzMTEwLwYDVQQD Eyg0MzkyMjgwYzg3MTQxM2I5ZWI3ODRmZTlhMmQ2Yjc0NjhiMjFlZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtarC/x3aIyFQPM8rjysllVrpHMvw CQHRMnVJQaGzUYhzdTt3pMy9jYDi0RngihcP3K2NxWbum7z/rSOuoDcDpoLtvOXN FxV0E+Ekhr31w0gBbxb2HZYY2uUWG4T5U6sTbRe1lpKsDt/JItxIgBhEuXaRf8yH PRDYhz3MnkdtY+oG7+HbSKRQ7IHYgkhfVjzCf2l8Q7Wrx4/PTu0la1ztU/RasM6w ugtwEEyJiqAAYJFbhq91/mieCBysLRrHYJZPriJwTe7dlEqSO5zeZ4FV07JE+9+W 3z4Z5EiOuDijD0VRdbxrn7cmHYllgM/es2jhwjK0xjk7TLl+AzfRD4x44QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOSKAyHFBO563hP6aLWt0aLIe9CMB8GA1UdIwQY MBaAFMZtxg0W3+FknYbBaT4XhYwjBjh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQt ZDRmZWQ1MDg1MzkyLzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQtZDRmZWQ1MDg1Mzky LzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMq0zgZD fGmyKoP3+G8y3w5N6D9007wMV1gIapFCn0q3kel6wdWh4b1JrwwyJbGD4aBKT/ou 2Cl/zL8NfAXmr2dGloPo/SqoaKJMv4bUdIoxZP5YCwjjCPqkSI2YJQ0XKbI4qFL5 nMx7vSAoshn7nvxPzyoq5qslcwHV3/A+klyhtDm9qOYS++XMd+lpuD+EefKVYQ+/ RSr++9dnWVaQuHpu+EeqZG0+cV6vXrT16NrCCLxpWuL5Cp/K5z2ngg+JUPzM8nCy EO+oXeip9lYMTTpLnCo+K2zK9YqOfb9YRPS5c4/wKDxnspTKqxlcJKE2CvsqvHKT Zuxa0Xa82DvHQg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:00 2025 by rpki-client