This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json) Hash identifier: nWj3DnG1VyKYvcv6PAsBqfu5UoiDlG6cTiBYuW+fmiY= Subject key identifier: E2:CB:F0:9C:62:D4:E6:D5:5E:A7:49:8D:7E:AC:25:C0:EA:0F:08:90 Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb Certificate serial: 019B0890695018ABDBC1348942F9CDFCFBDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft Manifest number: 0D85 Signing time: Wed 10 Dec 2025 14:00:40 +0000 Manifest this update: Wed 10 Dec 2025 14:00:40 +0000 Manifest next update: Thu 11 Dec 2025 14:00:40 +0000 Files and hashes: 1: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (hash: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=) 2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: Ti01bd62pl7LQMzihfvtc8tkxJ+RY0rqmqmKEWUmht8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:69:50:18:ab:db:c1:34:89:42:f9:cd:fc:fb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb Validity Not Before: Dec 10 14:00:40 2025 GMT Not After : Dec 11 14:00:40 2025 GMT Subject: CN=e2cbf09c62d4e6d55ea7498d7eac25c0ea0f0890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:af:b0:2e:e7:a6:08:71:d0:55:8a:67:00: 3f:f2:58:54:b7:f1:41:a2:8d:7a:58:e6:d8:ae:8e: 4a:93:a7:69:2e:9a:54:a9:b8:6e:b4:23:ec:95:47: c3:45:70:3a:b4:30:8f:76:7f:3c:20:4e:b8:f0:d7: bc:da:07:f4:f4:7f:0c:7c:66:c3:e6:8a:1f:82:37: c9:1a:c9:41:bc:1d:a8:f6:24:20:91:cf:f2:2b:18: 8a:c8:12:94:f4:48:6f:68:43:ec:d1:f0:75:6e:4d: cd:fb:dc:0d:6d:83:a7:f7:54:a3:5c:26:44:7a:10: f6:49:2f:ed:1c:36:eb:f4:ff:c5:ff:ed:46:f1:f4: 1b:3e:9e:4c:0d:ba:72:e8:9a:1d:fd:b5:60:ee:ed: 0f:61:91:e8:2a:4f:da:11:67:2f:69:05:96:8e:ad: 42:1c:39:0a:e4:e4:e4:ca:5a:2f:b1:7e:f6:da:2a: 72:90:2f:21:30:84:bc:16:51:df:a5:ac:2a:5e:17: 90:c9:63:08:8f:de:78:07:59:e5:bb:c3:de:26:e5: c3:06:4a:e2:2d:96:ab:bc:65:db:a5:9d:48:a6:00: ba:b9:ca:18:d2:d2:70:09:8e:c2:95:34:77:b4:d6: 20:ee:43:42:9b:77:c6:75:cf:2b:13:74:95:f1:9d: bf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CB:F0:9C:62:D4:E6:D5:5E:A7:49:8D:7E:AC:25:C0:EA:0F:08:90 X509v3 Authority Key Identifier: keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b8:a9:6e:93:4e:c2:49:ff:0b:fc:f4:62:80:3a:32:4b:2e: a8:05:4c:8e:59:d0:73:b0:2b:ea:12:9a:76:0e:5b:f8:e3:50: 76:00:67:dc:77:e3:2a:6d:b9:b1:54:d1:56:40:d5:3f:11:73: cc:5b:f1:b1:bb:18:70:4c:60:80:ef:5b:cb:16:ef:c2:75:82: ab:81:09:d7:bd:c7:8e:62:aa:88:32:5f:b0:b7:ef:33:65:d1: 58:0c:eb:41:92:cc:6c:96:70:ce:85:7b:58:5b:da:ad:8b:c4: b8:50:66:3c:67:97:4f:ba:be:f0:6c:63:c4:b5:80:08:b0:ce: 2d:3d:e8:3e:b4:e8:5e:68:6c:de:27:bb:d5:59:75:23:23:28: 73:af:12:07:04:8d:1b:18:9a:c9:b2:b8:ed:2a:89:77:67:a6: d4:70:67:aa:82:81:59:3d:66:f6:38:b3:97:26:84:35:3e:e7: 99:e5:9b:3b:b2:1f:4c:45:b1:21:3f:3f:56:d6:27:d0:d3:46: 84:a3:15:db:63:4f:47:c8:2a:74:73:2a:00:cc:e5:a1:9c:24: 3f:22:27:df:32:b5:24:8c:60:d8:41:ea:f8:03:6f:84:70:2b: 9a:8c:8d:9b:c2:6c:60:07:52:24:11:be:79:d0:83:c4:29:e0: 1e:b4:98:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkGlQGKvbwTSJQvnN/PveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1Y2RjZTMyYWRjNjJhZmI3N2U0MzE4NmNmN2MyYzA3MWU0 MmI3YmIwHhcNMjUxMjEwMTQwMDQwWhcNMjUxMjExMTQwMDQwWjAzMTEwLwYDVQQD EyhlMmNiZjA5YzYyZDRlNmQ1NWVhNzQ5OGQ3ZWFjMjVjMGVhMGYwODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ivsC7npghx0FWKZwA/8lhUt/FB oo16WObYro5Kk6dpLppUqbhutCPslUfDRXA6tDCPdn88IE648Ne82gf09H8MfGbD 5oofgjfJGslBvB2o9iQgkc/yKxiKyBKU9EhvaEPs0fB1bk3N+9wNbYOn91SjXCZE ehD2SS/tHDbr9P/F/+1G8fQbPp5MDbpy6Jod/bVg7u0PYZHoKk/aEWcvaQWWjq1C HDkK5OTkylovsX722ipykC8hMIS8FlHfpawqXheQyWMIj954B1nlu8PeJuXDBkri LZarvGXbpZ1IpgC6ucoY0tJwCY7ClTR3tNYg7kNCm3fGdc8rE3SV8Z2/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLL8Jxi1ObVXqdJjX6sJcDqDwiQMB8GA1UdIwQY MBaAFMXNzjKtxir7d+Qxhs98LAceQre7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUt YjBhMjhiYjM1YjIwLzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUtYjBhMjhiYjM1YjIw LzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLipbpNO wkn/C/z0YoA6MksuqAVMjlnQc7Ar6hKadg5b+ONQdgBn3HfjKm25sVTRVkDVPxFz zFvxsbsYcExggO9byxbvwnWCq4EJ173HjmKqiDJfsLfvM2XRWAzrQZLMbJZwzoV7 WFvarYvEuFBmPGeXT7q+8GxjxLWACLDOLT3oPrToXmhs3ie71Vl1IyMoc68SBwSN GxiaybK47SqJd2em1HBnqoKBWT1m9jizlyaENT7nmeWbO7IfTEWxIT8/VtYn0NNG hKMV22NPR8gqdHMqAMzloZwkPyIn3zK1JIxg2EHq+ANvhHArmoyNm8JsYAdSJBG+ edCDxCngHrSYPw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:07:13 2025 by rpki-client