This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json) Hash identifier: 3caDnc1fzN3kVulw5egb73N8qwr4MxfTjLMpUOSHRbQ= Subject key identifier: 94:54:09:99:37:8E:AE:6F:A0:EE:CD:CD:A7:1F:5F:A6:9B:34:E3:CD Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Certificate serial: 019B31C3D9F796D4069F5E8379549E1018BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft Manifest number: 08EE Signing time: Thu 18 Dec 2025 14:01:17 +0000 Manifest this update: Thu 18 Dec 2025 14:01:17 +0000 Manifest next update: Fri 19 Dec 2025 14:01:17 +0000 Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=) 2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: zGBaLl/jsWFr2dYe54gX6hcK3P80lOW+vcCnGnzcWYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:d9:f7:96:d4:06:9f:5e:83:79:54:9e:10:18:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Validity Not Before: Dec 18 14:01:17 2025 GMT Not After : Dec 19 14:01:17 2025 GMT Subject: CN=94540999378eae6fa0eecdcda71f5fa69b34e3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f5:aa:68:25:30:21:ce:a6:5a:e3:87:ef:35: f1:12:98:5d:c3:6d:61:f7:cd:19:7a:6e:f6:ee:14: ce:65:5e:84:a0:d7:86:f1:e4:40:74:9b:b9:71:a0: 0a:54:84:f9:61:0e:3b:55:a0:a9:da:8d:03:ca:fa: c0:d3:b2:ee:01:01:42:2b:02:9c:aa:90:14:0e:9f: b7:4c:c7:d3:c7:aa:50:a0:58:41:4d:bf:6c:03:30: cf:99:bf:4f:2d:31:4c:56:ec:9a:55:f7:f1:60:9c: 50:8c:fb:50:90:48:62:dc:53:0d:50:5a:c3:fb:61: c4:be:af:54:c2:4a:24:53:a7:83:bf:8c:a0:03:6a: 1b:53:5c:5b:87:0b:e8:d3:b1:13:4a:08:c0:0e:5a: ca:09:05:32:86:aa:c7:f6:10:a4:e6:0e:cd:f1:32: f0:d1:48:96:11:27:a6:01:32:ad:6f:32:8b:1a:04: c5:6e:43:97:8c:fe:7a:3a:ef:2a:45:b6:fd:09:15: ac:43:e6:7d:85:c3:e1:0a:1a:12:77:07:52:db:73: 4a:ef:19:77:6d:16:a6:3d:80:b9:76:e4:ca:98:23: 62:bf:da:93:b4:9b:bc:7a:de:c9:51:26:c9:cb:6e: 90:56:2b:c4:bc:45:03:87:8c:df:82:1e:f1:89:f0: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:54:09:99:37:8E:AE:6F:A0:EE:CD:CD:A7:1F:5F:A6:9B:34:E3:CD X509v3 Authority Key Identifier: keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:88:15:8c:bf:9e:76:1a:15:28:bc:0a:1e:fc:af:e2:5b:72: a9:15:c5:59:a2:5b:6c:59:eb:15:0a:b1:c2:92:62:7e:69:11: 27:2a:db:0f:f9:95:f0:19:e2:b0:a3:eb:33:b2:83:93:b5:d2: 14:3d:6b:f7:a7:a3:21:fe:be:d2:0d:c3:ea:fd:4f:15:6d:52: 99:21:4f:46:b1:11:f0:0b:41:e4:14:36:f9:1f:a8:ee:e3:3c: 9b:05:0c:1d:f4:18:53:61:9d:6c:fa:96:c2:82:cb:3a:e3:fe: 91:60:2d:9b:1a:2c:50:f1:17:d4:c6:50:ef:9c:7e:1a:bd:ac: e7:85:56:22:30:23:12:8d:91:14:2f:1d:a3:49:9e:8f:bd:35: dc:01:eb:25:9d:39:ce:1a:b6:f3:f8:83:6e:5d:ac:7a:7f:d3: ef:3e:df:bb:1b:5e:5e:72:db:13:46:09:cf:b7:3d:d3:ea:76: b3:12:34:10:7c:2c:88:05:ee:8e:2b:0c:fa:f1:66:20:2a:3a: 8c:19:6f:61:12:97:ae:c1:83:ad:dd:67:c4:23:c6:f0:0d:9a: 17:91:ce:42:64:0d:3f:07:77:43:36:aa:49:84:25:4e:fc:ff: 68:64:4c:c3:49:da:42:69:28:75:31:d4:4b:31:57:f8:d8:69: 45:c6:54:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw9n3ltQGn16DeVSeEBi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZjFmMjE0ZmIyMmNjNTM2MTI4ZjVkZTRhYTAxN2E4Nzg4 MGYyODUwHhcNMjUxMjE4MTQwMTE3WhcNMjUxMjE5MTQwMTE3WjAzMTEwLwYDVQQD Eyg5NDU0MDk5OTM3OGVhZTZmYTBlZWNkY2RhNzFmNWZhNjliMzRlM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofWqaCUwIc6mWuOH7zXxEphdw21h 980Zem727hTOZV6EoNeG8eRAdJu5caAKVIT5YQ47VaCp2o0DyvrA07LuAQFCKwKc qpAUDp+3TMfTx6pQoFhBTb9sAzDPmb9PLTFMVuyaVffxYJxQjPtQkEhi3FMNUFrD +2HEvq9UwkokU6eDv4ygA2obU1xbhwvo07ETSgjADlrKCQUyhqrH9hCk5g7N8TLw 0UiWESemATKtbzKLGgTFbkOXjP56Ou8qRbb9CRWsQ+Z9hcPhChoSdwdS23NK7xl3 bRamPYC5duTKmCNiv9qTtJu8et7JUSbJy26QVivEvEUDh4zfgh7xifAZdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRUCZk3jq5voO7NzacfX6abNOPNMB8GA1UdIwQY MBaAFMTx8hT7IsxTYSj13kqgF6h4gPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAt ZWNmNGY0MjBjOThhLzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAtZWNmNGY0MjBjOThh LzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4gVjL+e dhoVKLwKHvyv4ltyqRXFWaJbbFnrFQqxwpJifmkRJyrbD/mV8BnisKPrM7KDk7XS FD1r96ejIf6+0g3D6v1PFW1SmSFPRrER8AtB5BQ2+R+o7uM8mwUMHfQYU2GdbPqW woLLOuP+kWAtmxosUPEX1MZQ75x+Gr2s54VWIjAjEo2RFC8do0mej7013AHrJZ05 zhq28/iDbl2sen/T7z7fuxteXnLbE0YJz7c90+p2sxI0EHwsiAXujisM+vFmICo6 jBlvYRKXrsGDrd1nxCPG8A2aF5HOQmQNPwd3QzaqSYQlTvz/aGRMw0naQmkodTHU SzFX+NhpRcZUXA== -----END CERTIFICATE-----Generated at Thu Dec 18 19:07:22 2025 by rpki-client