This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json) Hash identifier: nL8CK3uWc4OzUYI3OF7lYJ4eP3sYVPhUgVkI9gdyd3c= Subject key identifier: 69:F5:5C:A0:A4:5C:1F:09:57:57:47:D7:36:7F:77:BB:21:91:95:56 Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c Certificate serial: 019AF42E2858F2585F7F8742FBA58B554047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft Manifest number: 0E88 Signing time: Sat 06 Dec 2025 15:00:56 +0000 Manifest this update: Sat 06 Dec 2025 15:00:56 +0000 Manifest next update: Sun 07 Dec 2025 15:00:56 +0000 Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=) 2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: wPrnkNnv08fME7kZFXsdKNts+EaW0UNKzRo0RyJb7lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:28:58:f2:58:5f:7f:87:42:fb:a5:8b:55:40:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c Validity Not Before: Dec 6 15:00:56 2025 GMT Not After : Dec 7 15:00:56 2025 GMT Subject: CN=69f55ca0a45c1f09575747d7367f77bb21919556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:23:eb:57:5b:1f:8e:88:eb:4f:6b:b0:d2: 3a:e8:6c:d9:dd:bf:40:18:13:b4:ea:53:79:61:6d: e6:8c:0d:26:b8:64:db:41:d2:60:5a:cf:08:b9:e0: b0:72:7e:24:d8:ea:aa:e4:09:01:e7:49:dd:54:9d: f3:da:03:64:39:9a:2d:4e:c5:b2:58:dd:44:80:95: 61:71:ed:8b:37:4c:d0:ae:49:e0:3e:3a:39:d1:c9: 2e:12:2c:68:64:ea:95:c6:9b:21:5f:ae:23:d6:ff: 98:da:ec:3d:91:78:1e:75:11:79:3d:6c:64:8a:fb: 7d:12:63:5b:47:c7:db:5c:8b:5e:c6:83:62:f3:dd: e8:7a:62:d8:e8:63:33:bb:20:27:b3:3d:a7:d4:2d: 90:b8:3a:44:36:45:f8:6d:2a:f1:ee:5b:a9:76:4d: 34:63:02:5e:cb:82:31:4f:f4:8a:31:b9:45:e3:19: b0:52:fd:ef:77:88:82:76:34:c7:b9:1f:0c:d8:c1: 69:26:7a:c4:63:36:8e:0f:90:01:05:6b:3a:13:7d: 77:e9:46:e4:c0:68:4a:16:12:e4:6a:15:23:be:1b: 19:69:23:4f:12:6a:07:13:b9:6a:ad:07:ad:10:e5: 42:25:41:bb:8f:78:0d:bd:90:89:85:bd:9d:a0:38: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F5:5C:A0:A4:5C:1F:09:57:57:47:D7:36:7F:77:BB:21:91:95:56 X509v3 Authority Key Identifier: keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6a:31:41:1a:27:e6:3c:82:79:33:eb:b5:ec:b2:2b:bf:c3: 47:f7:4f:06:73:5f:b1:a6:50:43:5a:1b:61:0d:e3:e4:7b:b6: 7b:d0:81:41:f2:0f:78:06:08:97:0c:9d:75:0f:73:0f:97:a1: c1:4b:75:fa:41:ac:64:2e:54:0a:92:b6:f8:4c:2d:58:cc:e0: df:3a:c8:46:1e:9a:e2:3c:56:d7:59:aa:eb:03:d4:dd:70:7e: b6:1f:a3:ae:ed:32:0e:0a:ef:5b:fe:fd:8d:95:b2:c7:d4:25: 9b:fd:8b:65:0e:17:49:d9:03:fa:08:c2:3a:3a:f7:14:b7:8e: 37:a3:1d:c1:3b:f0:c9:40:8f:c0:27:91:b9:63:9f:41:62:32: f8:f4:3e:fa:a8:dc:8c:73:85:09:f8:30:be:a9:33:1e:3e:97: fe:c1:82:4e:46:e5:30:26:ed:72:c0:c7:c3:06:f5:6d:f6:e0: b0:4c:85:c8:3d:f9:26:3a:66:ff:94:99:32:6b:d8:65:bb:43: ec:04:95:48:76:b1:1f:83:8a:81:f5:7f:af:62:e9:06:41:25: 7e:7c:22:9b:0b:0c:f3:78:36:2d:c5:69:97:a0:0d:1d:2b:e0: 4b:95:60:93:cf:10:1e:3b:e7:d1:aa:90:02:bb:de:1c:08:d1: 25:7e:35:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LihY8lhff4dC+6WLVUBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NDg1ZTI5ZjExOGMwMWJlODZjMTllNjY4ZmFjZmE0ODVk ZTcxOGMwHhcNMjUxMjA2MTUwMDU2WhcNMjUxMjA3MTUwMDU2WjAzMTEwLwYDVQQD Eyg2OWY1NWNhMGE0NWMxZjA5NTc1NzQ3ZDczNjdmNzdiYjIxOTE5NTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVAj61dbH46I609rsNI66GzZ3b9A GBO06lN5YW3mjA0muGTbQdJgWs8IueCwcn4k2Oqq5AkB50ndVJ3z2gNkOZotTsWy WN1EgJVhce2LN0zQrkngPjo50ckuEixoZOqVxpshX64j1v+Y2uw9kXgedRF5PWxk ivt9EmNbR8fbXItexoNi893oemLY6GMzuyAnsz2n1C2QuDpENkX4bSrx7lupdk00 YwJey4IxT/SKMblF4xmwUv3vd4iCdjTHuR8M2MFpJnrEYzaOD5ABBWs6E3136Ubk wGhKFhLkahUjvhsZaSNPEmoHE7lqrQetEOVCJUG7j3gNvZCJhb2doDh7qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn1XKCkXB8JV1dH1zZ/d7shkZVWMB8GA1UdIwQY MBaAFMdIXinxGMAb6GwZ5mj6z6SF3nGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQt NTdmOWJjNmE1YzMwLzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQtNTdmOWJjNmE1YzMw LzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2oxQRon 5jyCeTPrteyyK7/DR/dPBnNfsaZQQ1obYQ3j5Hu2e9CBQfIPeAYIlwyddQ9zD5eh wUt1+kGsZC5UCpK2+EwtWMzg3zrIRh6a4jxW11mq6wPU3XB+th+jru0yDgrvW/79 jZWyx9Qlm/2LZQ4XSdkD+gjCOjr3FLeON6MdwTvwyUCPwCeRuWOfQWIy+PQ++qjc jHOFCfgwvqkzHj6X/sGCTkblMCbtcsDHwwb1bfbgsEyFyD35Jjpm/5SZMmvYZbtD 7ASVSHaxH4OKgfV/r2LpBkElfnwimwsM83g2LcVpl6ANHSvgS5Vgk88QHjvn0aqQ ArveHAjRJX41rg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:02 2025 by rpki-client