This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json) Hash identifier: rw0pzusNy/AJxCg4UBU/odBDtZx4SLHJ5/MYdWhL+GI= Subject key identifier: 14:50:D1:DC:99:1C:71:11:47:90:0E:6A:8C:55:73:D5:87:C4:C9:6D Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d Certificate serial: 019B277729028F8D4FD62B6A52D817CD8655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 14:01:19 +0000 Manifest this update: Tue 16 Dec 2025 14:01:19 +0000 Manifest next update: Wed 17 Dec 2025 14:01:19 +0000 Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: Zf3bauMGZJ+CVxd7WAQALxT9b82LeIwyWZTX94mC8BI=) 2: xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa (hash: 4NpowpxrTh5AKJl4K8wnIP5UZeAISCMu/TY3f9v3FM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:29:02:8f:8d:4f:d6:2b:6a:52:d8:17:cd:86:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d Validity Not Before: Dec 16 14:01:19 2025 GMT Not After : Dec 17 14:01:19 2025 GMT Subject: CN=1450d1dc991c711147900e6a8c5573d587c4c96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:80:5b:35:19:42:14:df:43:0f:8a:92:ea:a9: af:6e:6a:5f:a7:12:bf:4a:91:b1:8d:03:24:22:8d: 1b:07:4e:8d:48:da:71:85:91:ee:55:ca:e9:7f:21: f7:6b:09:38:8c:ba:e1:9a:3c:52:2f:36:b9:08:f6: 01:76:a1:b1:6c:09:c2:3a:b2:be:a2:61:b5:53:3a: 15:49:97:42:fc:bf:b7:2b:a9:93:48:91:6d:ed:e3: f6:9b:32:43:5e:3e:60:36:d0:02:43:7c:88:7d:bc: c5:20:d2:88:c3:65:66:b1:5c:4e:6d:fe:c3:43:8e: 4f:9e:84:3d:7a:20:af:08:8e:cf:64:be:db:92:b3: 10:bd:4b:15:5d:62:cb:f4:c4:6f:d2:c8:ed:4d:5c: 76:a3:65:1a:c1:5d:ab:75:f3:68:a6:00:7c:a0:28: a6:94:78:fa:fd:a5:33:b1:93:9d:9d:3a:eb:0b:d1: a2:bb:57:4f:23:96:db:bd:bb:ba:28:da:0c:16:82: c9:39:d4:e7:14:42:86:f4:61:22:79:22:5f:e5:87: 6e:f4:58:87:3c:db:c5:78:a5:21:43:c9:2b:37:b2: f7:04:4e:c3:f6:f2:4d:c6:2c:2b:b9:f6:fe:bf:f6: ee:57:ca:a4:3f:fe:ec:88:5b:fc:94:cf:58:a4:29: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:50:D1:DC:99:1C:71:11:47:90:0E:6A:8C:55:73:D5:87:C4:C9:6D X509v3 Authority Key Identifier: keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:bf:b6:32:96:b8:cb:2c:37:08:59:2e:a5:4a:9b:54:01:e2: c7:b5:94:f1:d5:34:80:a1:cd:5f:40:71:80:f0:00:b3:01:ea: dd:2c:c6:4e:d7:6d:84:10:42:a2:ed:10:0a:c3:02:c9:68:b1: 40:35:38:e1:b9:e4:62:36:da:28:25:ba:32:52:de:23:50:fa: 52:26:72:8d:47:f3:ad:ce:f2:e8:6f:1c:af:91:48:86:82:b4: 88:37:a7:b1:a5:74:5f:b1:51:df:fd:53:f5:fe:f0:11:e4:50: aa:32:47:00:78:aa:57:9a:f8:ff:be:fc:4f:dc:08:4f:e4:31: 99:66:e7:c1:a5:8d:77:89:a3:83:2c:c1:97:46:c3:66:50:0b: 79:0a:06:bc:b0:2a:27:ac:ea:5e:b4:c6:4f:56:c5:1e:65:85: a9:e1:aa:cb:60:80:e7:79:47:2a:50:9c:f6:d5:1b:4e:a1:45: 04:ff:17:9f:bd:f2:25:f7:55:e7:b3:5b:3e:2e:3a:9e:3b:b2: 4c:9a:75:0a:da:d6:21:52:46:35:66:31:f8:91:c2:59:c1:a5: d5:31:10:5d:47:ad:5e:4e:91:0e:62:9a:09:86:64:1d:00:b8: c3:14:df:f8:b4:cd:0c:94:4c:3d:62:3c:51:9f:66:b0:ba:20: ff:94:0a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndykCj41P1itqUtgXzYZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjA4NThhMzhhZDVlMTFiN2IxODkzOTI4ODNiYzgzZWI2 YjM2MWQwHhcNMjUxMjE2MTQwMTE5WhcNMjUxMjE3MTQwMTE5WjAzMTEwLwYDVQQD EygxNDUwZDFkYzk5MWM3MTExNDc5MDBlNmE4YzU1NzNkNTg3YzRjOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44BbNRlCFN9DD4qS6qmvbmpfpxK/ SpGxjQMkIo0bB06NSNpxhZHuVcrpfyH3awk4jLrhmjxSLza5CPYBdqGxbAnCOrK+ omG1UzoVSZdC/L+3K6mTSJFt7eP2mzJDXj5gNtACQ3yIfbzFINKIw2VmsVxObf7D Q45PnoQ9eiCvCI7PZL7bkrMQvUsVXWLL9MRv0sjtTVx2o2UawV2rdfNopgB8oCim lHj6/aUzsZOdnTrrC9Giu1dPI5bbvbu6KNoMFoLJOdTnFEKG9GEieSJf5Ydu9FiH PNvFeKUhQ8krN7L3BE7D9vJNxiwrufb+v/buV8qkP/7siFv8lM9YpCnOOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRQ0dyZHHERR5AOaoxVc9WHxMltMB8GA1UdIwQY MBaAFMZghYo4rV4Rt7GJOSiDvIPrazYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEt ZmE1ZDdiNDhhYWU5LzEveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEtZmE1ZDdiNDhhYWU5 LzEveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApL+2Mpa4 yyw3CFkupUqbVAHix7WU8dU0gKHNX0BxgPAAswHq3SzGTtdthBBCou0QCsMCyWix QDU44bnkYjbaKCW6MlLeI1D6UiZyjUfzrc7y6G8cr5FIhoK0iDensaV0X7FR3/1T 9f7wEeRQqjJHAHiqV5r4/778T9wIT+QxmWbnwaWNd4mjgyzBl0bDZlALeQoGvLAq J6zqXrTGT1bFHmWFqeGqy2CA53lHKlCc9tUbTqFFBP8Xn73yJfdV57NbPi46njuy TJp1CtrWIVJGNWYx+JHCWcGl1TEQXUetXk6RDmKaCYZkHQC4wxTf+LTNDJRMPWI8 UZ9msLog/5QKgA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:57 2025 by rpki-client