This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json) Hash identifier: webzD+hmlDdiB8qnFM40OhKhSHtpbaKZW03XihIFcRQ= Subject key identifier: 42:92:71:CD:20:EC:99:1C:E9:73:82:07:88:AC:3A:F6:BF:EF:79:D7 Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25 Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825 Certificate serial: 019B33E8B808A681BA2B575AF025D9B5B249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft Manifest number: 056C Signing time: Fri 19 Dec 2025 00:00:47 +0000 Manifest this update: Fri 19 Dec 2025 00:00:47 +0000 Manifest next update: Sat 20 Dec 2025 00:00:47 +0000 Files and hashes: 1: SGkYily7UQPusAexDOf3Pto8qlU.roa (hash: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=) 2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: un8R3QbsYQabIAfVvx/U3pAPxOWixx9NhbrSlP6coBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:b8:08:a6:81:ba:2b:57:5a:f0:25:d9:b5:b2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825 Validity Not Before: Dec 19 00:00:47 2025 GMT Not After : Dec 20 00:00:47 2025 GMT Subject: CN=429271cd20ec991ce973820788ac3af6bfef79d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:9d:c0:0b:08:51:ec:03:74:65:75:58:54: 9f:d6:a2:54:42:9d:b6:8f:76:18:0a:3a:16:fd:5a: 2d:50:cc:94:d8:0d:6a:53:94:17:bc:bb:eb:10:be: d6:0b:65:61:26:96:d5:ac:b6:2f:39:07:a3:fb:05: a0:bc:63:8c:55:f5:34:ab:75:a9:4f:82:10:90:40: 10:51:06:95:66:ad:89:41:20:79:ce:75:66:ef:a7: f4:35:03:dd:88:8c:69:2b:aa:10:94:a7:f6:59:ec: 57:df:5b:0b:42:60:80:7d:be:cb:2f:b8:f6:5b:5f: 93:45:c6:3d:fc:d6:40:9c:ed:cc:29:25:af:0b:77: 43:75:6e:c1:44:71:69:5b:40:0f:cf:60:1c:7a:9b: 89:a4:f8:d5:1e:50:a7:64:1f:f2:08:8c:2c:b3:72: 14:30:dd:76:c1:0e:35:93:ac:30:cc:da:c4:1c:3b: 93:4b:7e:ed:94:d8:b5:cd:2f:6e:64:15:e0:cc:f6: cd:0b:99:c2:90:65:85:0e:d5:24:35:d9:94:ea:a1: 76:25:e6:33:29:75:c3:27:b7:0e:1a:f6:6c:f9:17: 3b:8b:59:34:0d:12:b1:b0:a3:dc:a1:dd:4e:0c:a7: 63:b2:a0:be:17:6a:a8:b7:8e:77:5b:81:ed:06:c0: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:71:CD:20:EC:99:1C:E9:73:82:07:88:AC:3A:F6:BF:EF:79:D7 X509v3 Authority Key Identifier: keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:df:0d:33:93:79:5b:27:80:95:ee:0c:2b:3f:76:ff:6b:7f: d9:e1:b9:f6:ba:df:93:d7:5a:34:f1:ef:6f:89:14:85:a9:90: e6:29:11:d2:1e:08:b9:0f:36:f2:7b:92:a3:54:e1:18:2e:3a: f9:88:a1:7e:4d:d1:80:79:39:3f:d1:f8:be:e7:ef:7d:eb:7c: de:cd:90:11:c2:e5:0a:4b:7b:0d:0d:d6:4c:19:25:a6:6a:9a: df:de:1a:ab:7f:85:f3:d8:a2:04:99:77:d7:18:bd:e1:33:a1: 11:6b:e7:ea:a6:65:ec:8e:e8:63:52:14:d2:f0:d9:0a:af:e4: 2d:01:bd:f2:64:33:6f:b9:b2:00:68:36:a0:7a:1e:94:4f:7c: cc:fc:7d:54:e2:c1:cf:fc:24:e6:ed:c2:0d:1d:e1:25:67:44: 1a:72:91:bd:e3:c6:a8:9f:95:0e:bc:44:81:5a:15:be:d5:3d: 3e:81:3e:cb:a8:b2:22:8c:7b:39:97:78:2d:2d:12:57:c7:0d: 69:49:b6:cb:5a:b3:0b:3e:22:47:a1:b1:61:2a:4e:74:cb:bb: 0b:49:c4:c1:c5:99:6a:b2:2b:8d:cc:c7:91:15:70:01:a9:73: 25:5f:df:b5:97:9e:aa:1b:35:ce:4a:ba:bd:51:73:fe:78:0b: 15:04:06:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6LgIpoG6K1da8CXZtbJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTBmMzExMDk4NGNjZmJmNTI5OTgwYjZkNDE2ZGRkNGUx YTg4MjUwHhcNMjUxMjE5MDAwMDQ3WhcNMjUxMjIwMDAwMDQ3WjAzMTEwLwYDVQQD Eyg0MjkyNzFjZDIwZWM5OTFjZTk3MzgyMDc4OGFjM2FmNmJmZWY3OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorCdwAsIUewDdGV1WFSf1qJUQp22 j3YYCjoW/VotUMyU2A1qU5QXvLvrEL7WC2VhJpbVrLYvOQej+wWgvGOMVfU0q3Wp T4IQkEAQUQaVZq2JQSB5znVm76f0NQPdiIxpK6oQlKf2WexX31sLQmCAfb7LL7j2 W1+TRcY9/NZAnO3MKSWvC3dDdW7BRHFpW0APz2AcepuJpPjVHlCnZB/yCIwss3IU MN12wQ41k6wwzNrEHDuTS37tlNi1zS9uZBXgzPbNC5nCkGWFDtUkNdmU6qF2JeYz KXXDJ7cOGvZs+Rc7i1k0DRKxsKPcod1ODKdjsqC+F2qot453W4HtBsBh9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKScc0g7Jkc6XOCB4isOva/73nXMB8GA1UdIwQY MBaAFMSg8xEJhMz79SmYC21Bbd1OGoglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMt ZDEyYTkwYmY1MDJlLzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMtZDEyYTkwYmY1MDJl LzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIN8NM5N5 WyeAle4MKz92/2t/2eG59rrfk9daNPHvb4kUhamQ5ikR0h4IuQ828nuSo1ThGC46 +Yihfk3RgHk5P9H4vufvfet83s2QEcLlCkt7DQ3WTBklpmqa394aq3+F89iiBJl3 1xi94TOhEWvn6qZl7I7oY1IU0vDZCq/kLQG98mQzb7myAGg2oHoelE98zPx9VOLB z/wk5u3CDR3hJWdEGnKRvePGqJ+VDrxEgVoVvtU9PoE+y6iyIox7OZd4LS0SV8cN aUm2y1qzCz4iR6GxYSpOdMu7C0nEwcWZarIrjczHkRVwAalzJV/ftZeeqhs1zkq6 vVFz/ngLFQQGSw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:03 2025 by rpki-client