This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft File: Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json) Hash identifier: 6Ik3E8dxSjFcE2Qyw1bPS959LMOuF2CUW8DT/71hLnA= Subject key identifier: 80:E7:88:3B:57:5A:DE:D2:CF:71:C7:FF:44:B0:2B:0A:29:6D:4D:DB Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Certificate serial: 019AF31C400C33030A5A31D587BC0C2B1AFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft Manifest number: 1A80 Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=) 2: J_uC0dJQDqHEPt-d--Cb9t-urwM.roa (hash: e8u82xuHOyBw07V/g8e5280CWEkS/COcM0hM2MysMng=) 3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: JTbbLjL7F3VZEvbHg9ha7cByCLEi0zaRlBavwMsvfgs=) 4: ZfGgxOD9oKOLO00K2AU9JKrI1kQ.roa (hash: MxwT8vbLLXhabuxFnu//UYyIHp8dV7WQm7/O2tItwaI=) 5: okmt1S4hd7NrbW4f-tCxGrBU2rY.roa (hash: 7cs3FirAxa0B9mH+9gI5rKR6WF9kuQy/8mCwxNj88sE=) 6: zyLW_fmvxSGA6Dkl_dKOAAuCaKA.roa (hash: S57dj5w3OjddXOHG41hwkdAE+eK8GpSk82b7ZJXFhhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:40:0c:33:03:0a:5a:31:d5:87:bc:0c:2b:1a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=80e7883b575aded2cf71c7ff44b02b0a296d4ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:a3:1d:26:ac:15:25:8e:b9:c8:90:0b:ca: e5:1d:73:e5:2f:54:3c:04:d9:d5:f9:46:0e:c1:1e: d4:33:46:b9:99:bd:d7:ad:4f:a5:b9:ab:03:2a:e1: 61:5f:c4:4c:aa:71:77:02:7a:9e:c6:29:9d:a0:77: bb:40:6f:db:c5:39:09:d8:11:89:b7:12:4b:d6:bc: b6:d5:87:ee:00:38:1f:72:34:63:32:f1:22:9d:52: b4:5e:b0:b7:28:c0:e8:11:c1:02:79:3d:f0:40:68: eb:0e:ac:db:4c:76:0a:00:bc:22:2b:75:02:c1:fd: 73:7f:0e:b4:04:80:c1:b9:d9:93:a6:2d:66:48:10: a1:da:0f:bf:98:26:a1:26:5b:b7:e3:69:28:2c:97: d1:6a:15:4f:31:64:85:53:4c:f2:4a:68:64:b1:98: 0f:a7:ac:dd:66:8b:e3:1d:7b:28:99:93:75:4d:87: 91:08:ec:bb:a5:a5:11:25:cc:23:6b:33:b2:46:2b: 45:a2:29:4e:9a:be:ef:89:20:8f:0b:1d:8c:a4:f3: bc:45:33:db:29:43:39:90:e9:0a:d5:4e:26:c3:86: 65:bb:11:d2:0e:43:99:fb:75:64:82:05:0a:b7:ab: c3:6a:cf:f1:ad:d4:30:25:47:75:c0:8f:c5:8d:dd: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E7:88:3B:57:5A:DE:D2:CF:71:C7:FF:44:B0:2B:0A:29:6D:4D:DB X509v3 Authority Key Identifier: keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c1:fb:09:22:f2:4a:1b:c2:e0:e9:5a:3b:22:98:b4:1a:05: 5a:5f:f1:3e:eb:b9:ad:6f:61:7f:be:ce:82:0b:a2:15:4c:2d: 47:2b:8b:4c:3f:95:56:9e:a5:38:71:b1:ef:6e:ce:c8:e6:bb: 95:c3:3c:89:32:c5:1b:6a:88:f4:c6:fa:72:5d:7f:1b:33:e2: 58:ce:0c:b0:c6:b0:99:21:1a:31:5b:ed:dc:d6:d0:3b:38:d1: f2:81:13:84:5f:b8:61:df:e9:5e:72:3c:e1:0b:eb:bd:fe:f8: 53:5a:1b:2e:09:a2:bb:97:87:92:df:f7:c6:1d:14:01:5f:df: 79:2d:2b:2a:30:73:4b:35:b8:69:df:e1:1f:0d:74:83:78:d6: cb:69:95:c3:1b:e1:80:f5:ef:25:30:85:4a:53:a8:61:54:04: e2:0d:17:55:26:97:e6:63:c6:e8:1f:6a:ea:55:2d:56:f8:c2: 24:d1:8a:82:fd:03:97:a2:38:c2:08:7c:2a:8e:ae:77:6e:21: 16:d0:e4:16:a9:80:db:f0:3a:88:9c:77:2b:f4:27:08:84:04: 50:a9:ab:65:61:90:77:94:a0:77:5d:c1:a6:33:c0:f0:45:ad: ba:48:91:1e:1a:e1:3b:fc:7c:13:31:4b:b0:9f:b9:34:14:a3: 3e:08:c3:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEAMMwMKWjHVh7wMKxr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk ZjNlMWUwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD Eyg4MGU3ODgzYjU3NWFkZWQyY2Y3MWM3ZmY0NGIwMmIwYTI5NmQ0ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv72jHSasFSWOuciQC8rlHXPlL1Q8 BNnV+UYOwR7UM0a5mb3XrU+luasDKuFhX8RMqnF3AnqeximdoHe7QG/bxTkJ2BGJ txJL1ry21YfuADgfcjRjMvEinVK0XrC3KMDoEcECeT3wQGjrDqzbTHYKALwiK3UC wf1zfw60BIDBudmTpi1mSBCh2g+/mCahJlu342koLJfRahVPMWSFU0zySmhksZgP p6zdZovjHXsomZN1TYeRCOy7paURJcwjazOyRitFoilOmr7viSCPCx2MpPO8RTPb KUM5kOkK1U4mw4ZluxHSDkOZ+3VkggUKt6vDas/xrdQwJUd1wI/Fjd1rxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDniDtXWt7Sz3HH/0SwKwopbU3bMB8GA1UdIwQY MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt YjU5MDk1N2Q5NDE1LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1 LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8H7CSLy ShvC4OlaOyKYtBoFWl/xPuu5rW9hf77OgguiFUwtRyuLTD+VVp6lOHGx727OyOa7 lcM8iTLFG2qI9Mb6cl1/GzPiWM4MsMawmSEaMVvt3NbQOzjR8oEThF+4Yd/pXnI8 4Qvrvf74U1obLgmiu5eHkt/3xh0UAV/feS0rKjBzSzW4ad/hHw10g3jWy2mVwxvh gPXvJTCFSlOoYVQE4g0XVSaX5mPG6B9q6lUtVvjCJNGKgv0Dl6I4wgh8Ko6ud24h FtDkFqmA2/A6iJx3K/QnCIQEUKmrZWGQd5Sgd13BpjPA8EWtukiRHhrhO/x8EzFL sJ+5NBSjPgjDBA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:28 2025 by rpki-client