This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json) Hash identifier: rZtx39xoyLzoNr3axi9XYtXE70WCvXysDpzyvT9rEM4= Subject key identifier: 0C:1B:5F:1C:FA:F1:25:69:4F:35:67:55:FF:0D:E3:4A:55:AD:DB:F9 Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db Certificate serial: 019AF208B71DA9C3F583E92AEE73FCF26463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft Manifest number: 1080 Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=) 2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: dAxq7fYsd6CFcu+X01MVWkT8N5Cvi7SxXREtHJ84ZKY=) 3: zR84EUjuhaa5ivFSjib2H6uqTAI.roa (hash: OvGw4b3tIigD4ZAweUVrQghHKdITbbX+aX8uLk9vlAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b7:1d:a9:c3:f5:83:e9:2a:ee:73:fc:f2:64:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=0c1b5f1cfaf125694f356755ff0de34a55addbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:cc:82:60:9b:bd:87:85:de:27:e8:ba:bb: e2:da:8b:8c:60:73:22:30:dc:90:9d:82:67:d2:7f: 37:33:bc:7b:2f:f8:3e:18:9d:55:1f:d9:72:7d:63: 84:0c:fb:7d:b9:8d:9f:3b:67:32:e0:d2:23:38:5d: c4:3f:19:21:0d:6d:82:16:dc:09:46:b6:46:1f:91: f3:fc:d1:65:90:93:20:fe:0d:f5:e5:bc:3d:62:44: 3a:41:a3:ae:93:f9:80:c6:b2:e2:ab:ca:dd:24:67: bb:40:40:58:45:67:5d:6a:6d:46:8c:49:92:0f:60: f6:1b:98:b5:4a:65:3d:45:a1:6a:82:0c:04:1c:9b: 73:c0:3f:ab:38:df:2d:6f:3c:f1:ff:89:38:0e:d3: c5:f2:f5:86:45:ab:df:1e:51:95:98:ea:04:92:5d: c1:70:99:94:23:4e:df:3e:95:25:d3:d5:62:07:ed: a3:33:99:90:3c:d4:37:06:d0:65:9d:66:12:03:ab: dd:b0:84:1a:ec:e9:ff:88:30:e5:d0:43:b8:a4:e5: e2:d4:8c:e4:5d:0a:1f:d5:b6:29:fd:72:2f:05:cd: b7:b9:44:97:13:52:68:9b:80:fc:af:65:7e:68:a1: 00:a6:1d:7a:28:b9:b6:46:55:df:cc:b0:8a:b6:c6: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1B:5F:1C:FA:F1:25:69:4F:35:67:55:FF:0D:E3:4A:55:AD:DB:F9 X509v3 Authority Key Identifier: keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:a8:25:01:fb:3e:61:cf:b6:83:48:56:f6:b7:89:58:32:0c: 1f:0c:11:db:65:51:f2:bf:3d:88:38:5d:dd:c3:9f:ba:5a:39: f0:be:55:85:3c:1c:9d:a4:9d:95:e4:65:25:44:4c:9d:db:2c: 23:13:49:61:7b:bd:f4:55:80:3f:02:c8:e2:2a:3d:21:47:de: 2f:18:54:02:0e:d5:7c:4c:04:a3:18:07:76:f6:95:20:b4:c5: cd:a8:af:46:ee:ed:4b:54:9e:6e:86:ec:3d:e3:f3:f8:76:92: f5:38:d2:44:9f:57:df:ca:20:c0:8e:af:2a:2a:f9:29:91:13: 83:50:75:ba:d3:a7:2a:37:3e:90:cf:2c:4c:79:94:d2:e8:fa: b5:a2:70:b6:25:cc:16:87:4f:92:a7:96:66:1e:8c:7a:ef:db: 91:64:ca:93:36:60:40:81:88:06:8b:71:30:1a:a5:ab:19:01: e7:fe:d7:93:fe:09:c0:22:de:88:82:83:12:72:00:9e:ab:3d: b3:73:a1:bd:c4:5c:db:f0:1a:3a:79:55:14:7b:b7:a7:dc:49: dc:44:aa:ae:9c:7d:b4:3d:8e:2d:6b:8b:8b:69:8e:54:12:5a: 36:36:93:de:49:1a:1f:18:bc:8f:c3:00:85:4a:52:37:4d:08: ba:1f:22:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLcdqcP1g+kq7nP88mRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZWIwZWJkODc4Yjc3ZDQyZjJjYTlkZDA4ZjcwYzMyM2M1 ZDAzZGIwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD EygwYzFiNWYxY2ZhZjEyNTY5NGYzNTY3NTVmZjBkZTM0YTU1YWRkYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5bMgmCbvYeF3ifourvi2ouMYHMi MNyQnYJn0n83M7x7L/g+GJ1VH9lyfWOEDPt9uY2fO2cy4NIjOF3EPxkhDW2CFtwJ RrZGH5Hz/NFlkJMg/g315bw9YkQ6QaOuk/mAxrLiq8rdJGe7QEBYRWddam1GjEmS D2D2G5i1SmU9RaFqggwEHJtzwD+rON8tbzzx/4k4DtPF8vWGRavfHlGVmOoEkl3B cJmUI07fPpUl09ViB+2jM5mQPNQ3BtBlnWYSA6vdsIQa7On/iDDl0EO4pOXi1Izk XQof1bYp/XIvBc23uUSXE1Jom4D8r2V+aKEAph16KLm2RlXfzLCKtsZfCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwbXxz68SVpTzVnVf8N40pVrdv5MB8GA1UdIwQY MBaAFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEt OWMzNzQ3OGE1OTNmLzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEtOWMzNzQ3OGE1OTNm LzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqglAfs+ Yc+2g0hW9reJWDIMHwwR22VR8r89iDhd3cOfulo58L5VhTwcnaSdleRlJURMndss IxNJYXu99FWAPwLI4io9IUfeLxhUAg7VfEwEoxgHdvaVILTFzaivRu7tS1Sebobs PePz+HaS9TjSRJ9X38ogwI6vKir5KZETg1B1utOnKjc+kM8sTHmU0uj6taJwtiXM FodPkqeWZh6Meu/bkWTKkzZgQIGIBotxMBqlqxkB5/7Xk/4JwCLeiIKDEnIAnqs9 s3OhvcRc2/AaOnlVFHu3p9xJ3ESqrpx9tD2OLWuLi2mOVBJaNjaT3kkaHxi8j8MA hUpSN00Iuh8iTA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:30 2025 by rpki-client