This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json) Hash identifier: r+OcKGe4EgGRGEITjVkU0NfcwwZfYOHU9mWVwqz5WoI= Subject key identifier: 2B:68:26:D6:EC:7E:F4:0F:B0:22:1C:9F:7F:C2:FA:E1:DE:F3:00:24 Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7 Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7 Certificate serial: 019B6E0FC1094B014C28909828DC1DD62455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 07:01:24 +0000 Manifest this update: Tue 30 Dec 2025 07:01:24 +0000 Manifest next update: Wed 31 Dec 2025 07:01:24 +0000 Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=) 2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: d4mEmn+174R9etfyXBwyMEytrLrMzYi8/CJniKdC8/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:c1:09:4b:01:4c:28:90:98:28:dc:1d:d6:24:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7 Validity Not Before: Dec 30 07:01:24 2025 GMT Not After : Dec 31 07:01:24 2025 GMT Subject: CN=2b6826d6ec7ef40fb0221c9f7fc2fae1def30024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:ab:ba:aa:59:58:8d:35:e4:87:bb:af:d7: 71:a0:09:f1:c7:99:0a:7f:01:3d:13:8c:27:a1:25: 49:f0:64:21:1c:ea:5f:1e:87:07:4e:18:31:0f:28: e1:d0:57:50:cb:43:62:4d:e1:a6:4c:1a:e4:bd:06: fa:a7:0c:34:e8:3b:2d:bc:ee:b3:5a:8a:94:fb:d3: 99:27:d5:7d:ea:31:96:77:d6:a6:fa:09:cb:57:c2: 5e:0f:16:8d:30:92:25:96:fc:d8:e5:65:f5:5c:8f: f0:72:ae:fe:25:6e:24:c5:1f:5d:1e:23:81:e6:fc: 00:54:e8:a7:b4:83:00:38:56:cc:d2:4d:b5:68:52: 68:2d:47:d6:3b:1b:96:46:a8:58:15:98:d7:bf:d1: 40:7a:4c:a3:4d:a7:84:e7:1f:65:82:fc:79:03:e4: a6:38:39:13:82:50:81:2d:d0:11:29:9a:5f:6c:b3: 7a:f9:ef:99:3e:e5:06:1e:33:f5:cd:83:e6:3b:8f: 92:f3:14:12:e9:2b:e8:a0:97:f3:b9:09:c1:d7:5d: 5a:2c:0f:0c:ff:9a:80:f4:05:bc:ba:ea:51:13:e4: 75:73:03:22:ad:6f:b8:f6:c4:1c:89:5f:22:bc:31: 52:d9:de:b9:45:0d:26:e5:49:0f:41:17:3d:0c:62: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:68:26:D6:EC:7E:F4:0F:B0:22:1C:9F:7F:C2:FA:E1:DE:F3:00:24 X509v3 Authority Key Identifier: keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1c:7f:33:d3:4f:ab:7c:a6:2b:1c:8c:8e:a0:ee:08:45:54: 9f:1c:25:ab:26:61:42:e6:49:c2:b3:e7:af:70:e1:14:f6:53: aa:2b:ce:cb:3d:4f:2f:59:79:52:f8:87:8e:7e:c7:eb:4a:1b: 04:e6:6a:f8:f2:65:47:3e:45:2c:e1:cc:2d:d0:a0:89:4c:f4: 7f:4c:1f:50:5f:fc:8a:a5:99:82:fd:62:c6:d3:83:f2:44:45: 34:c6:b5:ce:19:f8:6c:de:fa:69:83:95:5f:81:d4:2d:05:1e: 43:94:12:8a:b8:95:bd:3f:94:51:14:15:19:2c:f0:38:38:68: 51:91:fc:a6:5b:50:21:e6:a9:69:7d:39:23:08:c6:2e:b6:f4: 66:ef:89:d8:09:cb:6f:f9:99:03:0f:3d:8d:3b:49:ba:ab:aa: 88:04:2e:af:5c:f3:9a:66:30:5f:65:43:f7:7c:da:0b:d4:be: 1c:75:5c:88:cb:45:27:c1:25:f9:e6:91:7d:e1:e0:f1:cf:df: e9:64:db:36:09:e2:0b:13:98:4e:8f:88:ac:1e:df:6f:ce:3e: f9:c4:43:9a:d3:f0:64:fb:04:2c:ed:cb:a4:48:38:4d:36:70: 30:25:be:b6:25:2c:97:ae:6c:0a:e2:8f:f8:a4:54:d5:bb:02: 36:f2:56:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuD8EJSwFMKJCYKNwd1iRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTA4NTAwNWQwZTQ0OWQzYmFmYTMxYzVjYjQyOWZmODlk MmM0YjcwHhcNMjUxMjMwMDcwMTI0WhcNMjUxMjMxMDcwMTI0WjAzMTEwLwYDVQQD EygyYjY4MjZkNmVjN2VmNDBmYjAyMjFjOWY3ZmMyZmFlMWRlZjMwMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/SruqpZWI015Ie7r9dxoAnxx5kK fwE9E4wnoSVJ8GQhHOpfHocHThgxDyjh0FdQy0NiTeGmTBrkvQb6pww06DstvO6z WoqU+9OZJ9V96jGWd9am+gnLV8JeDxaNMJIllvzY5WX1XI/wcq7+JW4kxR9dHiOB 5vwAVOintIMAOFbM0k21aFJoLUfWOxuWRqhYFZjXv9FAekyjTaeE5x9lgvx5A+Sm ODkTglCBLdARKZpfbLN6+e+ZPuUGHjP1zYPmO4+S8xQS6SvooJfzuQnB111aLA8M /5qA9AW8uupRE+R1cwMirW+49sQciV8ivDFS2d65RQ0m5UkPQRc9DGLhzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtoJtbsfvQPsCIcn3/C+uHe8wAkMB8GA1UdIwQY MBaAFMVQhQBdDkSdO6+jHFy0Kf+J0sS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMt MjBhY2MzOGJjOGZmLzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMtMjBhY2MzOGJjOGZm LzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxx/M9NP q3ymKxyMjqDuCEVUnxwlqyZhQuZJwrPnr3DhFPZTqivOyz1PL1l5UviHjn7H60ob BOZq+PJlRz5FLOHMLdCgiUz0f0wfUF/8iqWZgv1ixtOD8kRFNMa1zhn4bN76aYOV X4HULQUeQ5QSiriVvT+UURQVGSzwODhoUZH8pltQIeapaX05IwjGLrb0Zu+J2AnL b/mZAw89jTtJuquqiAQur1zzmmYwX2VD93zaC9S+HHVciMtFJ8El+eaRfeHg8c/f 6WTbNgniCxOYTo+IrB7fb84++cRDmtPwZPsELO3LpEg4TTZwMCW+tiUsl65sCuKP +KRU1bsCNvJW3g== -----END CERTIFICATE-----Generated at Tue Dec 30 09:41:58 2025 by rpki-client