This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json) Hash identifier: drAJ51Nbj0JK/bMnS7VyYEa+NNI2eNdLItzON/ou3rM= Subject key identifier: 82:12:F0:9B:C7:79:9E:54:B7:8B:88:6A:B2:3D:CE:B1:2D:98:2A:8A Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Certificate serial: 019B4E16877FB2AE813F192FEE81C1A643C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 02:00:57 +0000 Manifest this update: Wed 24 Dec 2025 02:00:57 +0000 Manifest next update: Thu 25 Dec 2025 02:00:57 +0000 Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=) 2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=) 3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: Rk/2EOvVLjbBPPSeDNr6MaazHo3O+Vwldy0aghhz0i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:87:7f:b2:ae:81:3f:19:2f:ee:81:c1:a6:43:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Validity Not Before: Dec 24 02:00:57 2025 GMT Not After : Dec 25 02:00:57 2025 GMT Subject: CN=8212f09bc7799e54b78b886ab23dceb12d982a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:63:f1:f5:eb:bd:96:38:d6:40:00:a0:ae: 71:94:69:93:76:49:09:2a:29:11:6a:9d:de:ca:b1: 19:ad:cb:be:eb:ab:ae:d8:c7:c3:1e:4a:e3:0a:2f: 21:d8:6f:b1:49:05:56:da:c9:42:05:8f:49:5a:aa: bd:6d:ea:77:c0:00:46:ce:f3:70:3a:99:8a:84:9f: 33:8e:bd:bf:50:b2:44:23:36:50:4a:03:62:7d:5b: 47:64:ac:58:ac:67:74:f6:06:1e:22:8c:b6:52:4a: ff:4e:3e:a1:23:d7:b6:c8:f5:d8:0e:45:88:1f:60: 23:c5:19:21:36:f4:00:cd:01:bd:04:da:65:e9:9a: eb:17:d1:ea:04:63:d7:fd:d0:b8:e0:5d:5f:4a:78: 56:ef:b0:9d:ca:07:85:16:74:d5:25:39:a5:0c:86: cb:fd:77:64:2b:7c:bc:d8:9e:ab:d7:e6:a1:e1:29: 43:cf:86:38:43:18:2c:b7:c8:c8:84:24:7c:f4:77: a8:af:7f:28:ee:54:01:91:d8:84:81:15:36:1b:d5: 59:d5:bd:d0:a1:6c:fc:12:60:58:00:95:b3:84:4a: c1:b9:40:61:66:a2:24:dd:80:fc:3d:c4:3e:02:bb: ac:4c:28:4a:f4:89:4c:03:2b:ea:d7:ed:be:71:ed: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:12:F0:9B:C7:79:9E:54:B7:8B:88:6A:B2:3D:CE:B1:2D:98:2A:8A X509v3 Authority Key Identifier: keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:62:6e:34:bb:78:04:61:aa:08:bd:78:d1:72:08:a2:38:8b: ba:9b:0d:c4:45:fb:5d:8b:4a:fc:7e:e9:1a:c1:0a:11:cf:c4: 6d:99:fa:74:6f:44:62:66:07:bb:08:aa:4f:4c:8f:55:20:22: 5d:6f:40:4c:64:76:20:b5:d6:97:a1:59:0c:64:39:03:70:92: 10:5e:74:95:f6:b0:9f:82:df:2c:92:54:44:b9:99:7d:81:41: 92:67:b2:b1:22:e1:1a:90:b9:62:cb:60:15:8e:b4:f7:09:7a: 1c:67:ab:d5:1d:03:82:b0:e2:80:25:da:6e:01:6e:3b:b7:d1: 64:4a:ef:de:de:5e:06:5c:d7:df:a0:be:57:98:ff:1e:95:d5: e2:12:41:d6:b8:c1:58:b9:88:7a:d1:54:62:8d:e3:c9:8d:3b: 3f:04:71:d8:ab:f9:03:2a:24:69:db:5a:05:89:3c:61:06:f5: c8:1f:5b:af:a8:66:61:f9:f6:78:69:a1:2b:25:eb:16:be:7f: 67:21:8f:48:a1:7c:04:52:38:5c:2a:d1:49:23:62:27:55:23: 76:c0:a0:3c:b3:4a:95:4b:c9:bb:b3:83:47:79:7e:a9:24:1f: 78:49:97:ab:18:cd:c6:70:24:e4:7d:75:2b:ed:bb:03:2e:bc: ec:55:55:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFod/sq6BPxkv7oHBpkPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1N2U1OGMzNDZlN2I0MTU1NTBjMTNhZWFkZDJjZjkwZWRk MDc4OTUwHhcNMjUxMjI0MDIwMDU3WhcNMjUxMjI1MDIwMDU3WjAzMTEwLwYDVQQD Eyg4MjEyZjA5YmM3Nzk5ZTU0Yjc4Yjg4NmFiMjNkY2ViMTJkOTgyYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kxj8fXrvZY41kAAoK5xlGmTdkkJ KikRap3eyrEZrcu+66uu2MfDHkrjCi8h2G+xSQVW2slCBY9JWqq9bep3wABGzvNw OpmKhJ8zjr2/ULJEIzZQSgNifVtHZKxYrGd09gYeIoy2Ukr/Tj6hI9e2yPXYDkWI H2AjxRkhNvQAzQG9BNpl6ZrrF9HqBGPX/dC44F1fSnhW77CdygeFFnTVJTmlDIbL /XdkK3y82J6r1+ah4SlDz4Y4Qxgst8jIhCR89Heor38o7lQBkdiEgRU2G9VZ1b3Q oWz8EmBYAJWzhErBuUBhZqIk3YD8PcQ+ArusTChK9IlMAyvq1+2+ce1v9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIS8JvHeZ5Ut4uIarI9zrEtmCqKMB8GA1UdIwQY MBaAFMV+WMNG57QVVQwTrq3Sz5Dt0HiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2Mt MDc0MzA1NzM1YWMyLzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2MtMDc0MzA1NzM1YWMy LzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2JuNLt4 BGGqCL140XIIojiLupsNxEX7XYtK/H7pGsEKEc/EbZn6dG9EYmYHuwiqT0yPVSAi XW9ATGR2ILXWl6FZDGQ5A3CSEF50lfawn4LfLJJURLmZfYFBkmeysSLhGpC5Ystg FY609wl6HGer1R0DgrDigCXabgFuO7fRZErv3t5eBlzX36C+V5j/HpXV4hJB1rjB WLmIetFUYo3jyY07PwRx2Kv5AyokadtaBYk8YQb1yB9br6hmYfn2eGmhKyXrFr5/ ZyGPSKF8BFI4XCrRSSNiJ1UjdsCgPLNKlUvJu7ODR3l+qSQfeEmXqxjNxnAk5H11 K+27Ay687FVVOg== -----END CERTIFICATE-----Generated at Wed Dec 24 04:46:43 2025 by rpki-client