This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json) Hash identifier: aXMWlbBNxDmHccJ73HMAeaV+GnaV+VUfNlSurzKEsE0= Subject key identifier: 26:F8:DB:B5:AB:D5:D8:1D:6E:51:65:8E:8E:7D:57:8C:85:D0:B5:30 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019B3D90B7D221883F65D7D51AA5A410CB27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft Manifest number: 0522 Signing time: Sat 20 Dec 2025 21:00:52 +0000 Manifest this update: Sat 20 Dec 2025 21:00:52 +0000 Manifest next update: Sun 21 Dec 2025 21:00:52 +0000 Files and hashes: 1: 0eBj-TNfE0NgkAODM9VoPKQnB0E.roa (hash: O8GHZwLzkXmxkB1uIiy9qo5QY14RKmQf2i0WksTve7o=) 2: 4is7oarlUlE_cBHOgTitgHxyrkc.roa (hash: qZVlByTSh1XFAvIhseY4HhxihXTQeYS+WUxMcII1cZU=) 3: ArduW9RyhkgTaVNtmygI54aFcIA.roa (hash: H1GsuB1vIqvoIr6LSF93O4XBAfU4yiaPJMNktGfUc10=) 4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: +ARFw0QaOAgrWxH4G7UsdYptcwz/k622QO80l4JkiMg=) 5: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:b7:d2:21:88:3f:65:d7:d5:1a:a5:a4:10:cb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Dec 20 21:00:52 2025 GMT Not After : Dec 21 21:00:52 2025 GMT Subject: CN=26f8dbb5abd5d81d6e51658e8e7d578c85d0b530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:a4:cf:04:44:ae:5e:0a:d3:5a:91:7c:9f: a2:d1:41:05:0c:0b:f4:04:be:4c:d6:da:44:00:3c: 18:65:ed:f5:e4:e4:da:24:90:3d:15:3d:d5:4d:dc: d3:6a:4b:c9:2d:3a:be:55:93:38:41:8a:ff:ff:1d: cb:ba:1b:7b:ee:61:81:6b:94:5c:4f:bc:92:68:c7: e0:ed:5e:e2:f8:38:ae:54:c0:43:fd:86:b0:76:15: 1c:a2:42:d3:32:6b:fe:6e:f0:22:f7:ef:c2:89:06: 5c:be:77:84:fd:cb:46:aa:3e:5e:c2:09:56:fd:d1: 83:18:9a:e4:81:f4:9c:e0:4a:76:7a:8b:92:5c:66: 82:08:f1:49:b4:8e:04:82:ce:b6:36:5d:0c:e1:82: 58:84:d0:ec:1e:12:db:4a:22:b7:0f:e8:23:e9:7f: 3a:03:f5:4a:fe:0b:6a:40:19:84:8a:35:c7:0f:09: 5e:e7:4d:bd:27:b9:08:bc:93:f7:1a:21:cf:07:7a: 8f:00:10:88:ce:a8:3e:bb:56:42:ad:00:fe:dc:14: b7:e1:5f:59:b1:06:59:50:44:bd:7d:e6:3c:ca:6e: 9d:dd:04:4a:5f:37:21:15:0c:de:cb:31:c6:3d:4c: d2:5f:e9:59:10:4b:02:d7:ba:ce:0f:6e:8c:1d:aa: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F8:DB:B5:AB:D5:D8:1D:6E:51:65:8E:8E:7D:57:8C:85:D0:B5:30 X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:38:56:37:92:e8:ef:5a:74:df:7e:bd:74:74:ab:3e:80:d7: 3e:43:c3:7a:a3:b7:26:dd:10:66:20:22:8b:a0:d7:69:b0:ad: 72:55:49:13:72:3e:5d:4f:c6:d6:45:dc:1a:17:d4:ef:fe:7d: f6:3a:e5:7c:d6:03:df:43:1a:b0:c9:93:c3:cf:21:8b:11:e2: 38:70:22:08:37:87:e1:d9:92:a2:5a:f1:55:22:0a:ed:65:da: f3:04:7f:5a:de:b6:05:cb:28:b0:3d:52:8a:b7:c6:5d:73:f2: ba:50:52:ed:be:2c:a4:91:1a:76:f4:11:b0:61:3d:a9:69:cf: 02:ec:91:5f:46:9c:8b:1a:de:b3:5a:dd:97:39:23:98:92:3b: cc:5f:a5:16:4f:ac:dd:ea:31:25:cf:de:93:6e:41:21:03:fc: 41:27:81:3f:5b:ae:8b:27:92:54:0b:16:c9:6f:2c:5a:d5:7c: 15:8f:39:e0:75:c2:42:98:f2:65:83:38:c9:f1:22:c5:38:64: 94:35:fd:62:67:87:45:ab:6c:c1:e4:aa:96:ea:5c:fb:ee:b5: 4e:d3:63:9f:f3:4b:c9:9a:f4:ad:02:bc:29:8f:b9:34:a5:7c: 3b:1c:ed:f7:c1:57:7b:be:13:2a:c0:af:a7:0d:3d:43:b6:95: 5b:18:41:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLfSIYg/ZdfVGqWkEMsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjUxMjIwMjEwMDUyWhcNMjUxMjIxMjEwMDUyWjAzMTEwLwYDVQQD EygyNmY4ZGJiNWFiZDVkODFkNmU1MTY1OGU4ZTdkNTc4Yzg1ZDBiNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKqkzwRErl4K01qRfJ+i0UEFDAv0 BL5M1tpEADwYZe315OTaJJA9FT3VTdzTakvJLTq+VZM4QYr//x3Luht77mGBa5Rc T7ySaMfg7V7i+DiuVMBD/YawdhUcokLTMmv+bvAi9+/CiQZcvneE/ctGqj5ewglW /dGDGJrkgfSc4Ep2eouSXGaCCPFJtI4Egs62Nl0M4YJYhNDsHhLbSiK3D+gj6X86 A/VK/gtqQBmEijXHDwle5029J7kIvJP3GiHPB3qPABCIzqg+u1ZCrQD+3BS34V9Z sQZZUES9feY8ym6d3QRKXzchFQzeyzHGPUzSX+lZEEsC17rOD26MHarXtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb427Wr1dgdblFljo59V4yF0LUwMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizhWN5Lo 71p03369dHSrPoDXPkPDeqO3Jt0QZiAii6DXabCtclVJE3I+XU/G1kXcGhfU7/59 9jrlfNYD30MasMmTw88hixHiOHAiCDeH4dmSolrxVSIK7WXa8wR/Wt62BcsosD1S irfGXXPyulBS7b4spJEadvQRsGE9qWnPAuyRX0acixres1rdlzkjmJI7zF+lFk+s 3eoxJc/ek25BIQP8QSeBP1uuiyeSVAsWyW8sWtV8FY854HXCQpjyZYM4yfEixThk lDX9YmeHRatsweSqlupc++61TtNjn/NLyZr0rQK8KY+5NKV8Oxzt98FXe74TKsCv pw09Q7aVWxhBxg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:34 2025 by rpki-client