This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json) Hash identifier: NkYQNR4H+1z3iIku1X0zi+7jLOIgRI1io5+/k4rjtBY= Subject key identifier: 0A:E6:1A:A8:7D:1E:1A:4B:73:62:A5:FF:F5:05:59:36:A7:D9:67:95 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019AF3F7B44D5ACC72BE193F0BE6CDAF681D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft Manifest number: 04FB Signing time: Sat 06 Dec 2025 14:01:28 +0000 Manifest this update: Sat 06 Dec 2025 14:01:28 +0000 Manifest next update: Sun 07 Dec 2025 14:01:28 +0000 Files and hashes: 1: 0eBj-TNfE0NgkAODM9VoPKQnB0E.roa (hash: O8GHZwLzkXmxkB1uIiy9qo5QY14RKmQf2i0WksTve7o=) 2: 3MrTzqXRqi4qw3h6oaqykX6J0kU.roa (hash: +ClOERLFY4P0cwxaW/Im6eS4rQN8CdS+8xi58ep6Alk=) 3: 4is7oarlUlE_cBHOgTitgHxyrkc.roa (hash: qZVlByTSh1XFAvIhseY4HhxihXTQeYS+WUxMcII1cZU=) 4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: AfYb8wGIRVFSjJcRHE9TxUBQyJtStIjazihAbpQreEQ=) 5: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b4:4d:5a:cc:72:be:19:3f:0b:e6:cd:af:68:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Dec 6 14:01:28 2025 GMT Not After : Dec 7 14:01:28 2025 GMT Subject: CN=0ae61aa87d1e1a4b7362a5fff5055936a7d96795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:32:fe:51:4b:e0:93:2a:a6:63:5a:e5:4c: d7:d3:aa:5c:ed:37:d0:04:3f:23:79:05:1a:d7:50: 45:26:37:61:ef:40:b3:bd:83:1d:75:4e:19:8d:ed: 33:70:61:27:b7:b6:20:aa:90:c6:43:a1:e1:07:5f: 23:1a:1d:0d:f3:4c:6e:86:95:83:1e:f1:d8:aa:27: e4:66:15:05:0c:18:db:3f:e8:5d:33:45:8d:94:5d: 4a:41:95:e2:9f:a4:9e:0f:a7:42:af:8e:95:75:7b: ea:82:60:bd:73:a4:c8:fc:ea:42:cb:76:3e:29:58: 10:92:1b:d3:a9:5c:3a:1d:bc:4c:63:f0:10:80:53: 2a:c8:07:37:c3:c8:00:ff:20:f7:26:71:e6:f5:14: 66:0d:65:f9:fa:94:93:22:d9:84:c5:24:3d:9c:00: be:35:77:f0:4d:fe:79:77:a7:f4:6d:de:18:df:e6: 5d:71:ac:56:ea:50:8e:ac:79:7e:db:5e:69:5e:b0: 97:06:bc:19:15:8c:23:11:98:c3:3b:ba:70:54:56: ab:6e:ee:40:ae:13:f4:45:ee:26:26:63:1d:30:9b: 2a:0f:a6:9f:cd:bb:c6:e0:43:3a:c3:4a:9c:18:ac: 57:f2:fc:b6:44:a6:80:7e:64:8e:d0:4d:d1:7e:36: 1b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E6:1A:A8:7D:1E:1A:4B:73:62:A5:FF:F5:05:59:36:A7:D9:67:95 X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:53:a1:91:f8:c2:cc:43:30:30:e4:85:8a:91:6b:cc:3d:b5: 6c:0a:bf:88:c2:02:01:2a:56:82:45:0c:a3:4f:20:68:88:77: ee:40:5e:cf:02:5a:c7:15:00:4b:02:27:81:92:b3:59:1c:01: 40:03:68:6c:ed:f7:58:93:fe:7f:4e:b4:6d:bd:31:38:3d:f3: 9a:50:87:c7:c2:b0:69:19:f6:17:31:8e:0b:86:45:9a:42:43: 2a:64:d4:d4:1f:ea:27:da:87:97:55:d1:16:a7:a7:e1:52:39: 87:b0:3e:55:85:85:71:59:22:b0:2c:61:3f:d5:01:9c:d9:45: 96:ab:6a:9b:d3:a5:9f:9c:33:1d:0e:9f:6d:7a:cc:9f:c4:e1: 08:63:bd:7a:9a:d5:89:82:f0:5f:a3:bd:43:fc:b4:2a:dc:53: 44:3d:83:fe:5d:28:e2:09:bd:e1:86:43:bb:b5:df:c5:7c:ef: 5d:78:42:22:7a:8d:03:69:c8:be:63:23:eb:f3:d9:42:47:b1: 6d:d0:ab:ec:d5:92:2c:1d:bc:39:97:e8:96:46:d1:e9:d8:28: d4:b6:a2:6a:c7:e9:a1:52:b8:ac:b2:82:fb:2d:f3:56:50:fe: 01:4a:48:e7:73:94:ff:d6:0c:a6:58:bf:f4:83:83:e4:37:cc: 2b:18:21:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97RNWsxyvhk/C+bNr2gdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjUxMjA2MTQwMTI4WhcNMjUxMjA3MTQwMTI4WjAzMTEwLwYDVQQD EygwYWU2MWFhODdkMWUxYTRiNzM2MmE1ZmZmNTA1NTkzNmE3ZDk2Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU8y/lFL4JMqpmNa5UzX06pc7TfQ BD8jeQUa11BFJjdh70CzvYMddU4Zje0zcGEnt7YgqpDGQ6HhB18jGh0N80xuhpWD HvHYqifkZhUFDBjbP+hdM0WNlF1KQZXin6SeD6dCr46VdXvqgmC9c6TI/OpCy3Y+ KVgQkhvTqVw6HbxMY/AQgFMqyAc3w8gA/yD3JnHm9RRmDWX5+pSTItmExSQ9nAC+ NXfwTf55d6f0bd4Y3+ZdcaxW6lCOrHl+215pXrCXBrwZFYwjEZjDO7pwVFarbu5A rhP0Re4mJmMdMJsqD6afzbvG4EM6w0qcGKxX8vy2RKaAfmSO0E3RfjYb2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArmGqh9HhpLc2Kl//UFWTan2WeVMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVOhkfjC zEMwMOSFipFrzD21bAq/iMICASpWgkUMo08gaIh37kBezwJaxxUASwIngZKzWRwB QANobO33WJP+f060bb0xOD3zmlCHx8KwaRn2FzGOC4ZFmkJDKmTU1B/qJ9qHl1XR Fqen4VI5h7A+VYWFcVkisCxhP9UBnNlFlqtqm9Oln5wzHQ6fbXrMn8ThCGO9eprV iYLwX6O9Q/y0KtxTRD2D/l0o4gm94YZDu7XfxXzvXXhCInqNA2nIvmMj6/PZQkex bdCr7NWSLB28OZfolkbR6dgo1LaiasfpoVK4rLKC+y3zVlD+AUpI53OU/9YMpli/ 9IOD5DfMKxghzg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:12 2025 by rpki-client