This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json) Hash identifier: zBbM7nKqoHVIprqoQGLHXM4Eg12URClf0s/BEb7SN8Q= Subject key identifier: 16:CC:5C:89:39:33:D3:7D:2E:99:BC:42:23:01:2B:41:5B:FB:1C:EF Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Certificate serial: 019B3EA37034A5D7D60D23894D031D4AC33E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 02:00:56 +0000 Manifest this update: Sun 21 Dec 2025 02:00:56 +0000 Manifest next update: Mon 22 Dec 2025 02:00:56 +0000 Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=) 2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=) 3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: 7VgfeUhIs7eb0tXxRL6GnHFJNJSl0ZmmeS6hnDeHY0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:70:34:a5:d7:d6:0d:23:89:4d:03:1d:4a:c3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Validity Not Before: Dec 21 02:00:56 2025 GMT Not After : Dec 22 02:00:56 2025 GMT Subject: CN=16cc5c893933d37d2e99bc4223012b415bfb1cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:f5:0b:92:a3:81:a4:51:74:d1:da:df:c6: 3d:de:ff:61:8d:43:0e:81:15:72:f3:ac:64:9d:1b: a6:f8:2b:46:11:0b:d8:b3:df:58:ea:ce:87:05:19: c8:ca:b0:79:23:d8:bd:e7:5d:e3:e1:18:47:cb:dd: ec:52:64:66:f6:c8:8b:8e:be:fe:3c:99:57:4e:c1: ee:f2:81:7a:36:7f:25:f4:76:c4:48:b3:fe:54:d3: 1e:65:a2:ef:56:30:0c:92:44:f5:c0:33:0f:73:f0: 5f:7c:f6:45:c3:b2:a0:77:88:94:51:10:af:a2:68: 23:5b:ce:0a:94:31:7c:ff:ef:03:aa:0a:51:60:64: 41:f1:c2:5f:82:db:eb:72:0a:5d:58:b0:92:74:21: 7f:17:c8:c5:a6:56:10:12:8e:82:77:7a:23:20:bf: a2:b1:bc:53:36:fd:36:49:b4:76:85:f2:7c:08:bc: 2b:1c:90:08:32:5c:04:3c:d6:f4:43:db:32:b1:11: 39:c0:fa:60:b9:ee:32:84:4d:e6:3d:0b:e0:07:fa: 26:a1:3b:17:52:68:4d:a5:cc:10:83:95:d8:77:4d: 6a:b5:92:04:98:a6:36:33:75:0d:0f:5c:48:8a:de: a8:77:f2:6c:c8:ec:a9:4c:96:b5:a4:fc:aa:c4:81: 6a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CC:5C:89:39:33:D3:7D:2E:99:BC:42:23:01:2B:41:5B:FB:1C:EF X509v3 Authority Key Identifier: keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:84:10:dd:c7:aa:b2:a3:06:04:54:72:61:af:ea:98:ce:59: 82:b9:e1:44:83:67:f5:bc:40:f0:2b:ee:e9:42:36:e6:9d:78: b3:8d:c1:7b:ce:d9:57:14:d4:59:77:a7:16:be:f9:22:97:0f: c9:74:3f:83:33:89:38:31:05:ed:a1:43:cb:81:61:fe:d5:20: 4a:92:0c:4d:b1:13:b7:51:8b:57:49:41:80:8c:3c:64:d0:06: 6e:9e:3e:b7:75:2f:c8:dc:b1:c2:96:5f:02:09:24:f9:a4:94: 6d:fd:5e:10:52:9b:5f:cc:64:1b:be:40:96:53:58:0b:ba:bf: e9:a7:d7:56:20:6c:5a:ce:a3:57:95:16:5d:a5:43:7b:9e:e0: ea:30:fa:16:f5:44:c6:1a:c7:bb:b5:9e:3c:78:2f:bf:eb:fb: 04:74:c8:f1:41:7c:43:91:f0:5f:97:1c:3e:45:ab:a1:a0:fb: e9:9c:4f:e5:b4:e9:31:4a:8b:f1:03:af:f7:a2:08:23:84:25: 1c:11:03:10:02:78:9d:48:9e:83:7a:b3:34:6a:0c:e3:6c:0b: f6:cf:f4:36:9c:d2:45:1c:72:ff:10:34:95:fb:10:8f:ad:c2: 4d:bf:2e:b2:13:4e:32:db:ae:22:08:f7:c8:3a:22:5b:1f:eb: 28:76:f4:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3A0pdfWDSOJTQMdSsM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1N2U1OGMzNDZlN2I0MTU1NTBjMTNhZWFkZDJjZjkwZWRk MDc4OTUwHhcNMjUxMjIxMDIwMDU2WhcNMjUxMjIyMDIwMDU2WjAzMTEwLwYDVQQD EygxNmNjNWM4OTM5MzNkMzdkMmU5OWJjNDIyMzAxMmI0MTViZmIxY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+n1C5KjgaRRdNHa38Y93v9hjUMO gRVy86xknRum+CtGEQvYs99Y6s6HBRnIyrB5I9i9513j4RhHy93sUmRm9siLjr7+ PJlXTsHu8oF6Nn8l9HbESLP+VNMeZaLvVjAMkkT1wDMPc/BffPZFw7Kgd4iUURCv omgjW84KlDF8/+8DqgpRYGRB8cJfgtvrcgpdWLCSdCF/F8jFplYQEo6Cd3ojIL+i sbxTNv02SbR2hfJ8CLwrHJAIMlwEPNb0Q9sysRE5wPpgue4yhE3mPQvgB/omoTsX UmhNpcwQg5XYd01qtZIEmKY2M3UND1xIit6od/JsyOypTJa1pPyqxIFqswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbMXIk5M9N9Lpm8QiMBK0Fb+xzvMB8GA1UdIwQY MBaAFMV+WMNG57QVVQwTrq3Sz5Dt0HiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2Mt MDc0MzA1NzM1YWMyLzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2MtMDc0MzA1NzM1YWMy LzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyoQQ3ceq sqMGBFRyYa/qmM5ZgrnhRINn9bxA8Cvu6UI25p14s43Be87ZVxTUWXenFr75IpcP yXQ/gzOJODEF7aFDy4Fh/tUgSpIMTbETt1GLV0lBgIw8ZNAGbp4+t3UvyNyxwpZf Agkk+aSUbf1eEFKbX8xkG75AllNYC7q/6afXViBsWs6jV5UWXaVDe57g6jD6FvVE xhrHu7WePHgvv+v7BHTI8UF8Q5HwX5ccPkWroaD76ZxP5bTpMUqL8QOv96III4Ql HBEDEAJ4nUieg3qzNGoM42wL9s/0NpzSRRxy/xA0lfsQj63CTb8ushNOMtuuIgj3 yDoiWx/rKHb0pA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:21:03 2025 by rpki-client