This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: GKOsJ88JA0RBCDS/4aKjbDYHMOLCjIGmY411LzwaO/g= Subject key identifier: 69:E3:DF:C1:5C:D6:C6:CF:65:92:72:04:9F:DB:E0:3B:12:F1:22:43 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019B3F114EEC1C522D3FE0212F4F833EB419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 166B Signing time: Sun 21 Dec 2025 04:00:57 +0000 Manifest this update: Sun 21 Dec 2025 04:00:57 +0000 Manifest next update: Mon 22 Dec 2025 04:00:57 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: O9epNS0NrOI-bOL5KKfYRX4De8A.roa (hash: G611SXA/jC4vDIlVwFGLwWk81ZAiML9tAZ+IqKvstVo=) 6: VKWObPFDBc-jGCeYU56YA-6t1Cw.roa (hash: KPhyop9Bdu13gG3nAoBktF8fNM6NO652iDQfc8w2K04=) 7: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: bfuwt047VcRIb/C/UKdixQRuL/9oNudC4Hd4cf+Ad40=) 9: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 10: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:4e:ec:1c:52:2d:3f:e0:21:2f:4f:83:3e:b4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Dec 21 04:00:57 2025 GMT Not After : Dec 22 04:00:57 2025 GMT Subject: CN=69e3dfc15cd6c6cf659272049fdbe03b12f12243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e3:73:1f:5c:70:21:23:8f:18:63:2c:e1:7c: 6d:82:a3:63:9b:c3:90:c4:50:0b:a4:76:f3:f6:a7: 0d:52:33:94:ae:8b:0b:96:0a:c2:bb:5b:84:61:d1: 08:ce:f5:bc:63:de:10:42:65:a2:9c:99:05:73:55: 8d:79:1a:e5:5a:3d:c3:5f:ea:7c:aa:e4:41:82:f1: 5a:73:86:ea:bd:e8:59:37:c8:27:1c:4d:0c:1a:01: 86:cc:02:d5:71:ab:d4:6a:99:28:f1:61:3c:2c:7b: 80:0d:06:40:dc:18:ea:a0:83:aa:89:3c:64:1a:92: 98:d7:19:36:75:cd:e7:f8:35:eb:6e:14:73:f4:52: 40:71:5c:f2:27:88:83:fa:61:b7:22:93:71:27:63: ef:63:6b:86:f4:86:c0:bb:bf:42:d3:aa:5c:35:99: 86:8e:b0:1e:ec:a7:b4:b6:ae:0b:b4:2d:84:06:ed: 6c:4a:8c:3d:5e:63:06:c8:04:f0:6e:07:38:b6:0c: 0e:c7:b1:79:ad:18:7e:ea:8d:67:c1:da:cb:1a:ad: 7d:87:93:34:42:6f:44:df:2d:98:f9:da:d2:18:de: 92:2b:cb:45:c9:36:fb:37:66:95:60:a9:47:bc:d2: 1e:5f:43:d8:32:36:9a:87:13:a8:ec:8b:cc:f3:91: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E3:DF:C1:5C:D6:C6:CF:65:92:72:04:9F:DB:E0:3B:12:F1:22:43 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8e:97:f7:0a:ec:88:e5:a7:42:4a:89:8e:e5:fb:4f:75:0f: 8b:76:5a:01:67:1c:aa:31:79:ae:f5:c8:b6:ce:f8:c0:1b:1e: 2f:3b:73:4b:16:88:a3:cb:fd:d0:0c:2c:43:b5:6e:5f:bd:75: dd:99:b4:1b:56:b4:87:e2:7f:75:07:3f:d7:7d:f0:02:08:92: 77:24:17:a0:0e:69:28:bb:51:8d:5e:f7:39:c2:80:1e:59:f7: 6b:1c:c9:10:28:68:70:fe:bc:fe:8f:85:bc:e7:0c:51:23:5f: 9c:be:7b:f7:82:a1:e8:0b:56:03:1d:87:e7:29:b8:d3:f5:9c: 78:e8:3f:18:ca:2e:a7:f5:d7:25:f6:65:32:a0:f9:d5:81:c4: 02:66:02:57:01:56:45:cf:30:89:bd:fa:f3:a2:6b:e7:8c:2d: ae:ba:82:59:48:c9:76:f7:e9:0c:7f:09:42:34:5e:e9:5d:55: 0f:2e:d5:89:f4:cf:99:f5:cf:2d:13:5c:2c:da:94:36:55:12: 73:ef:e4:e0:cb:20:35:4e:30:0e:8b:b4:49:55:1d:a1:05:15: f6:30:b5:9c:e1:41:90:eb:8f:af:c5:50:3f:05:ff:16:5a:22: 53:b2:e5:25:64:64:6d:02:db:ba:7e:84:d6:0a:5b:54:6d:23: 09:ad:97:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EU7sHFItP+AhL0+DPrQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUxMjIxMDQwMDU3WhcNMjUxMjIyMDQwMDU3WjAzMTEwLwYDVQQD Eyg2OWUzZGZjMTVjZDZjNmNmNjU5MjcyMDQ5ZmRiZTAzYjEyZjEyMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuNzH1xwISOPGGMs4XxtgqNjm8OQ xFALpHbz9qcNUjOUrosLlgrCu1uEYdEIzvW8Y94QQmWinJkFc1WNeRrlWj3DX+p8 quRBgvFac4bqvehZN8gnHE0MGgGGzALVcavUapko8WE8LHuADQZA3BjqoIOqiTxk GpKY1xk2dc3n+DXrbhRz9FJAcVzyJ4iD+mG3IpNxJ2PvY2uG9IbAu79C06pcNZmG jrAe7Ke0tq4LtC2EBu1sSow9XmMGyATwbgc4tgwOx7F5rRh+6o1nwdrLGq19h5M0 Qm9E3y2Y+drSGN6SK8tFyTb7N2aVYKlHvNIeX0PYMjaahxOo7IvM85FxTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnj38Fc1sbPZZJyBJ/b4DsS8SJDMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY6X9wrs iOWnQkqJjuX7T3UPi3ZaAWccqjF5rvXIts74wBseLztzSxaIo8v90AwsQ7VuX711 3Zm0G1a0h+J/dQc/133wAgiSdyQXoA5pKLtRjV73OcKAHln3axzJEChocP68/o+F vOcMUSNfnL5794Kh6AtWAx2H5ym40/WceOg/GMoup/XXJfZlMqD51YHEAmYCVwFW Rc8wib3686Jr54wtrrqCWUjJdvfpDH8JQjRe6V1VDy7VifTPmfXPLRNcLNqUNlUS c+/k4MsgNU4wDou0SVUdoQUV9jC1nOFBkOuPr8VQPwX/FloiU7LlJWRkbQLbun6E 1gpbVG0jCa2Xnw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:06:29 2025 by rpki-client