This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json) Hash identifier: DP1rJNnLZe+guqE5AmcdBVXpAMQMSnZoWKKvj3xxFpA= Subject key identifier: 0F:B7:9E:AF:40:A9:D3:A7:51:03:8E:7B:EE:FF:AB:A8:EB:C6:2F:5E Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Certificate serial: 019AF31BA4CF6DC82B29F9647F6DB60EDB64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft Manifest number: 101F Signing time: Sat 06 Dec 2025 10:01:06 +0000 Manifest this update: Sat 06 Dec 2025 10:01:06 +0000 Manifest next update: Sun 07 Dec 2025 10:01:06 +0000 Files and hashes: 1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=) 2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: gRa+QI+m5qTz0yhYA8SQnsAT4zsMpb5F+lPHRKCzvc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a4:cf:6d:c8:2b:29:f9:64:7f:6d:b6:0e:db:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Validity Not Before: Dec 6 10:01:06 2025 GMT Not After : Dec 7 10:01:06 2025 GMT Subject: CN=0fb79eaf40a9d3a751038e7beeffaba8ebc62f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:8c:18:bf:e1:a1:aa:5f:33:67:6a:89:88: 55:cc:e7:2d:3b:83:18:d0:e6:31:62:48:a9:51:ae: d3:e6:d6:7e:41:0e:6c:c0:94:76:eb:b0:97:66:e4: cf:7f:03:fb:b1:1a:b5:f2:e8:02:25:d0:d8:8b:d0: 4c:51:3c:01:8a:19:c5:7a:aa:4c:ba:e8:94:96:29: 49:02:eb:58:bd:0d:42:b3:e7:e2:26:27:41:9f:68: da:ea:92:d8:7e:08:0b:ca:0e:c3:0c:ea:c1:e2:45: 9e:b1:2b:6a:7d:3c:1e:ff:a3:2b:d2:55:aa:24:a7: 31:f3:0c:a3:69:8a:02:08:ff:58:c6:de:92:ad:84: 93:03:28:de:22:8b:bd:38:ba:67:c0:cf:0a:a8:f9: c2:eb:98:7f:35:41:eb:02:c0:97:ef:ef:f5:1b:cd: bd:ef:48:7c:3c:69:f4:69:d1:01:48:ca:48:5d:03: 28:69:12:90:cd:1f:66:83:5c:2f:4b:8b:9a:ef:28: 2f:d9:21:ef:f9:d7:e6:cd:18:a4:29:25:93:ca:d3: 4c:07:aa:a3:9f:58:aa:52:cb:27:b1:f9:a3:96:1f: 68:70:af:5e:d3:1e:e3:bf:11:d9:d1:16:22:79:d6: fc:af:ac:ef:f7:d6:ba:2b:ec:d9:b4:6b:3b:87:a5: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B7:9E:AF:40:A9:D3:A7:51:03:8E:7B:EE:FF:AB:A8:EB:C6:2F:5E X509v3 Authority Key Identifier: keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:52:58:01:a1:5a:9d:f5:44:93:07:11:a4:93:ea:70:13:99: dc:ac:19:6b:27:07:d9:04:60:7a:56:17:d7:31:72:19:96:30: 7f:bd:83:0a:a6:f9:80:92:0e:8a:5c:36:ca:83:da:c1:39:f3: ae:7f:39:3c:13:07:36:e5:9f:b0:c3:a0:28:2a:3b:96:db:aa: 8d:e9:43:a2:1e:c9:43:ca:98:5d:31:56:25:7d:4b:3d:b4:29: aa:b3:49:9c:15:2d:24:42:95:43:84:d2:96:f8:57:e9:33:7b: 35:3b:1d:93:d7:08:ad:57:10:d0:8f:a6:97:f1:95:70:0b:3c: 9a:a3:c8:9f:7e:73:93:3d:c5:3a:52:e6:00:d9:3c:e1:02:59: 4f:fe:11:ad:87:f2:4f:90:00:ca:a5:e6:4d:ac:fd:58:89:1c: 0e:f5:f5:31:8f:e5:bf:43:d1:69:bb:9b:73:97:8c:1b:e1:e2: 29:ee:21:ed:c6:b9:5d:d1:a3:9b:8f:c4:70:e0:82:cb:9a:d5: dc:1d:97:6a:d7:d9:6c:e9:d1:56:21:58:49:00:bd:c6:96:a8: b0:e7:43:0c:bb:0e:7c:8d:95:a3:b2:71:3a:01:1a:34:54:b2: 27:d3:e9:eb:2f:fb:6c:c4:69:f9:71:da:2a:5d:c0:be:db:b9: ad:77:e6:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6TPbcgrKflkf222DttkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGYxNjJhZmE3YmZkN2I4NDdjMWRkMGViNGFlYmVhOTNj NDY5Y2YwHhcNMjUxMjA2MTAwMTA2WhcNMjUxMjA3MTAwMTA2WjAzMTEwLwYDVQQD EygwZmI3OWVhZjQwYTlkM2E3NTEwMzhlN2JlZWZmYWJhOGViYzYyZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/SMGL/hoapfM2dqiYhVzOctO4MY 0OYxYkipUa7T5tZ+QQ5swJR267CXZuTPfwP7sRq18ugCJdDYi9BMUTwBihnFeqpM uuiUlilJAutYvQ1Cs+fiJidBn2ja6pLYfggLyg7DDOrB4kWesStqfTwe/6Mr0lWq JKcx8wyjaYoCCP9Yxt6SrYSTAyjeIou9OLpnwM8KqPnC65h/NUHrAsCX7+/1G829 70h8PGn0adEBSMpIXQMoaRKQzR9mg1wvS4ua7ygv2SHv+dfmzRikKSWTytNMB6qj n1iqUssnsfmjlh9ocK9e0x7jvxHZ0RYiedb8r6zv99a6K+zZtGs7h6Xm+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+3nq9AqdOnUQOOe+7/q6jrxi9eMB8GA1UdIwQY MBaAFF8PFir6e/17hHwd0OtK6+qTxGnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEt Y2VlNGM1MTg3NzBkLzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEtY2VlNGM1MTg3NzBk LzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1JYAaFa nfVEkwcRpJPqcBOZ3KwZaycH2QRgelYX1zFyGZYwf72DCqb5gJIOilw2yoPawTnz rn85PBMHNuWfsMOgKCo7ltuqjelDoh7JQ8qYXTFWJX1LPbQpqrNJnBUtJEKVQ4TS lvhX6TN7NTsdk9cIrVcQ0I+ml/GVcAs8mqPIn35zkz3FOlLmANk84QJZT/4RrYfy T5AAyqXmTaz9WIkcDvX1MY/lv0PRabubc5eMG+HiKe4h7ca5XdGjm4/EcOCCy5rV 3B2XatfZbOnRViFYSQC9xpaosOdDDLsOfI2Vo7JxOgEaNFSyJ9Pp6y/7bMRp+XHa Kl3Avtu5rXfmfg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:20 2025 by rpki-client