This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json) Hash identifier: R3SuQAZc5I2JPWt3ei486ie7/gIyHUcRRwsO8U/W1WE= Subject key identifier: F6:60:F5:08:28:14:4E:37:FC:AD:34:DC:88:46:EF:DF:F6:0C:15:BF Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Certificate serial: 019AF23F8E7F1480D4D29F97AC4B8890FC31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft Manifest number: 1469 Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=) 2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=) 3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=) 4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=) 5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: WTCYCkJRXd3U8NMg2Pn6BEaudX4D0G0eEUJuk76oe34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8e:7f:14:80:d4:d2:9f:97:ac:4b:88:90:fc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=f660f50828144e37fcad34dc8846efdff60c15bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:66:97:63:01:49:43:e6:1f:c6:8f:a9:bd:6f: 02:22:f3:f4:ef:8a:d2:8b:e6:a5:af:e3:f7:3a:e6: b7:18:60:77:50:e4:fa:8e:52:02:d7:cf:e5:74:07: a7:0f:64:c5:44:a2:e2:2d:e8:39:3a:67:b4:30:7b: bb:c4:ba:c7:88:7a:ef:cc:bd:96:7c:60:c4:08:5e: 59:47:8c:7f:19:fa:bb:e7:ae:ad:91:81:d8:c0:ac: 12:43:7e:21:95:b1:35:17:da:2d:04:82:d1:68:ff: bf:20:1e:1a:91:33:42:35:67:ef:16:4e:e6:72:f4: fb:e5:9e:cf:64:8d:5b:a4:19:93:ff:b7:dc:19:c9: 93:b7:82:13:0c:6d:3a:9d:03:5d:f8:40:64:15:ba: cc:b1:b3:65:4e:5b:84:2d:63:89:73:8b:0f:c5:41: a0:15:4d:22:1b:0a:f5:27:08:25:5f:0c:da:38:05: 42:39:d8:a0:c5:1f:4e:5e:59:28:e9:66:7e:74:2e: cc:5e:c3:c3:2f:ac:a1:42:de:de:81:24:3c:99:54: 95:3e:5c:89:5a:f9:3f:9b:80:bf:00:d3:9c:3d:b4: dd:6a:c7:58:5c:6a:21:97:a7:e7:94:ad:c9:35:dc: d7:27:4a:9f:48:66:87:72:66:5f:7b:ae:ac:65:19: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:60:F5:08:28:14:4E:37:FC:AD:34:DC:88:46:EF:DF:F6:0C:15:BF X509v3 Authority Key Identifier: keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d7:13:33:68:05:48:0e:78:0c:13:60:61:fd:f1:15:1b:86: 5e:01:f4:c1:f7:74:fc:e4:16:28:30:94:3e:c4:30:e6:03:ae: 97:4a:e8:2e:9d:10:61:32:ff:37:93:ea:4f:9f:49:e1:4e:2e: bf:81:f6:df:01:ac:d6:6d:9a:2f:03:3c:2f:34:67:29:9b:e3: 92:10:ba:d2:ea:4a:5e:27:87:69:6a:8a:29:b5:9a:e9:ce:56: a7:30:c2:59:8a:50:a4:f8:99:83:b7:82:30:9e:ec:61:c4:11: 7b:7a:60:1a:90:31:d7:82:fb:bd:01:76:9f:dc:45:8b:9f:cb: fb:af:68:3c:12:14:e6:3f:fd:e0:fd:ff:15:cc:1a:c9:a5:3b: d9:d0:87:8a:15:d9:ec:59:cb:09:d9:84:d8:60:56:23:5c:5c: b8:64:ef:35:4b:ca:2a:fa:d7:47:42:75:f7:c0:ff:9e:71:73: 00:6c:3f:0f:13:e3:29:e3:df:66:37:77:dc:a5:62:a0:a6:65: 63:60:e3:96:4f:fc:ef:9e:fc:c7:66:62:d5:36:1b:06:46:fb: a2:90:77:4e:dd:bd:77:ad:f4:48:0b:dc:22:08:7b:2d:f4:36: a9:6d:72:ce:71:e1:b8:a4:4c:29:8a:1a:16:8d:42:a2:bb:65: ec:72:4f:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP45/FIDU0p+XrEuIkPwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz NGI1ZDEwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD EyhmNjYwZjUwODI4MTQ0ZTM3ZmNhZDM0ZGM4ODQ2ZWZkZmY2MGMxNWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWaXYwFJQ+Yfxo+pvW8CIvP074rS i+alr+P3Oua3GGB3UOT6jlIC18/ldAenD2TFRKLiLeg5Ome0MHu7xLrHiHrvzL2W fGDECF5ZR4x/Gfq7566tkYHYwKwSQ34hlbE1F9otBILRaP+/IB4akTNCNWfvFk7m cvT75Z7PZI1bpBmT/7fcGcmTt4ITDG06nQNd+EBkFbrMsbNlTluELWOJc4sPxUGg FU0iGwr1JwglXwzaOAVCOdigxR9OXlko6WZ+dC7MXsPDL6yhQt7egSQ8mVSVPlyJ Wvk/m4C/ANOcPbTdasdYXGohl6fnlK3JNdzXJ0qfSGaHcmZfe66sZRkFRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZg9QgoFE43/K003IhG79/2DBW/MB8GA1UdIwQY MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1 LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9cTM2gF SA54DBNgYf3xFRuGXgH0wfd0/OQWKDCUPsQw5gOul0roLp0QYTL/N5PqT59J4U4u v4H23wGs1m2aLwM8LzRnKZvjkhC60upKXieHaWqKKbWa6c5WpzDCWYpQpPiZg7eC MJ7sYcQRe3pgGpAx14L7vQF2n9xFi5/L+69oPBIU5j/94P3/FcwayaU72dCHihXZ 7FnLCdmE2GBWI1xcuGTvNUvKKvrXR0J198D/nnFzAGw/DxPjKePfZjd33KVioKZl Y2Djlk/87578x2Zi1TYbBkb7opB3Tt29d630SAvcIgh7LfQ2qW1yznHhuKRMKYoa Fo1Cortl7HJPRw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:03 2025 by rpki-client