This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json) Hash identifier: 1DwcBFUtOC6yDQpkbW3W6DCNpdT5NXn41KWIP46rj/Q= Subject key identifier: AC:48:53:21:96:18:02:3B:48:E8:62:3F:6F:9F:FD:99:2F:77:BA:36 Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25 Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825 Certificate serial: 019B69FB5213AD3178C89FD7CF777ABC33B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft Manifest number: 0588 Signing time: Mon 29 Dec 2025 12:00:36 +0000 Manifest this update: Mon 29 Dec 2025 12:00:36 +0000 Manifest next update: Tue 30 Dec 2025 12:00:36 +0000 Files and hashes: 1: SGkYily7UQPusAexDOf3Pto8qlU.roa (hash: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=) 2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: 94GtUlNdw6STvEqcjDIYuVqtvk0k+rgwDnooIykJ5r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:52:13:ad:31:78:c8:9f:d7:cf:77:7a:bc:33:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825 Validity Not Before: Dec 29 12:00:36 2025 GMT Not After : Dec 30 12:00:36 2025 GMT Subject: CN=ac4853219618023b48e8623f6f9ffd992f77ba36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:6e:c6:3a:76:52:d2:9d:fe:75:87:bb:07: c8:17:a3:82:3c:77:77:7c:58:6b:1b:a3:e4:57:c0: 6e:5a:1a:82:96:42:ee:39:50:f0:2e:1b:82:42:db: 57:d2:91:4f:35:4a:f0:89:c2:f1:8b:43:e9:65:16: 72:8d:d0:19:a0:ba:91:88:65:42:4e:7d:86:77:1f: 30:a7:1b:6e:88:86:16:57:04:7d:c0:1b:14:48:e3: fb:b2:79:bf:e4:bf:7b:fc:95:25:0d:7b:76:bc:48: 6f:48:6f:cc:e8:b3:5b:45:f6:e8:42:db:bf:c7:fb: e1:58:52:cc:e1:c9:56:a5:37:17:97:57:91:99:28: 9b:9a:9f:5a:8c:27:4b:a8:a8:18:f9:dd:7a:a4:42: d0:8d:0e:a6:39:61:88:50:c8:5d:dd:28:f1:f5:5f: 98:58:60:b9:18:97:e4:be:1d:b6:d6:2f:cb:34:d5: fe:58:eb:ef:4c:be:d5:cf:96:2b:0b:60:3b:da:30: c8:7c:d1:3a:e1:30:99:04:57:91:61:da:ae:05:f5: 38:05:4b:08:aa:b6:12:d0:e7:ca:5a:70:d2:fc:19: ad:ac:3c:21:5e:18:b4:2a:f2:9a:f1:eb:54:b9:e2: 85:9a:ca:0b:c9:1d:87:65:65:39:27:db:fe:f7:b8: de:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:48:53:21:96:18:02:3B:48:E8:62:3F:6F:9F:FD:99:2F:77:BA:36 X509v3 Authority Key Identifier: keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2e:9f:22:0a:f7:0c:fb:41:81:46:4c:c8:5e:e8:9e:ee:09: 99:d9:d4:2d:87:e4:56:f3:78:59:6e:ba:c0:6e:80:d3:5f:fc: e5:3c:f7:4c:f5:a2:12:48:af:b9:14:31:50:16:dd:e2:5a:ca: 55:16:87:db:cc:9c:6f:3e:1a:80:83:af:80:3c:8b:a5:99:13: 5b:dc:8e:d7:d0:7a:f6:9d:3b:b6:6c:96:c7:84:1d:41:40:7b: 46:a9:30:c7:9b:d6:09:e3:c6:66:8b:a8:09:c2:57:25:30:b8: 7f:34:ea:ba:b2:d2:0a:c7:17:1b:67:15:c8:e0:fb:80:ae:98: c4:87:b6:40:66:f1:1e:fc:aa:5f:65:bc:2c:b2:8d:16:f4:50: 67:ab:94:35:a9:a7:9c:ed:ed:a6:a5:e2:a0:08:b3:c2:82:bf: 7b:b7:c9:ca:d1:b9:af:e9:8d:44:a7:77:72:2a:ec:fa:5d:44: 7a:b7:3a:59:67:c8:ef:92:10:0a:fa:ff:dd:d7:db:a6:c8:da: 65:01:78:03:31:a0:3e:46:f7:b9:80:dc:1b:d2:14:29:65:1a: 3e:70:16:84:8f:a1:1e:05:13:ef:74:e6:5a:31:6c:04:4e:33: e9:27:7f:e6:e5:60:06:65:f4:dd:33:f1:75:05:bd:7d:13:ac: bd:bd:7b:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+1ITrTF4yJ/Xz3d6vDO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTBmMzExMDk4NGNjZmJmNTI5OTgwYjZkNDE2ZGRkNGUx YTg4MjUwHhcNMjUxMjI5MTIwMDM2WhcNMjUxMjMwMTIwMDM2WjAzMTEwLwYDVQQD EyhhYzQ4NTMyMTk2MTgwMjNiNDhlODYyM2Y2ZjlmZmQ5OTJmNzdiYTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmShuxjp2UtKd/nWHuwfIF6OCPHd3 fFhrG6PkV8BuWhqClkLuOVDwLhuCQttX0pFPNUrwicLxi0PpZRZyjdAZoLqRiGVC Tn2Gdx8wpxtuiIYWVwR9wBsUSOP7snm/5L97/JUlDXt2vEhvSG/M6LNbRfboQtu/ x/vhWFLM4clWpTcXl1eRmSibmp9ajCdLqKgY+d16pELQjQ6mOWGIUMhd3Sjx9V+Y WGC5GJfkvh221i/LNNX+WOvvTL7Vz5YrC2A72jDIfNE64TCZBFeRYdquBfU4BUsI qrYS0OfKWnDS/BmtrDwhXhi0KvKa8etUueKFmsoLyR2HZWU5J9v+97jevQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxIUyGWGAI7SOhiP2+f/Zkvd7o2MB8GA1UdIwQY MBaAFMSg8xEJhMz79SmYC21Bbd1OGoglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMt ZDEyYTkwYmY1MDJlLzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMtZDEyYTkwYmY1MDJl LzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC6fIgr3 DPtBgUZMyF7onu4JmdnULYfkVvN4WW66wG6A01/85Tz3TPWiEkivuRQxUBbd4lrK VRaH28ycbz4agIOvgDyLpZkTW9yO19B69p07tmyWx4QdQUB7Rqkwx5vWCePGZouo CcJXJTC4fzTqurLSCscXG2cVyOD7gK6YxIe2QGbxHvyqX2W8LLKNFvRQZ6uUNamn nO3tpqXioAizwoK/e7fJytG5r+mNRKd3cirs+l1Eerc6WWfI75IQCvr/3dfbpsja ZQF4AzGgPkb3uYDcG9IUKWUaPnAWhI+hHgUT73TmWjFsBE4z6Sd/5uVgBmX03TPx dQW9fROsvb17yg== -----END CERTIFICATE-----Generated at Mon Dec 29 13:28:18 2025 by rpki-client