This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json) Hash identifier: mM+NRFzh8gz3WwQuS5tNPhvnoK6VLlWsZDI3IhoYKPI= Subject key identifier: 19:C0:66:E7:53:06:61:37:E1:80:EA:D7:E4:0A:44:B1:DA:25:1D:8C Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Certificate serial: 019B3D59B3C18AA912D984C48B927292D1CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft Manifest number: 0FEF Signing time: Sat 20 Dec 2025 20:00:47 +0000 Manifest this update: Sat 20 Dec 2025 20:00:47 +0000 Manifest next update: Sun 21 Dec 2025 20:00:47 +0000 Files and hashes: 1: 5tqPEp3EliYZS2xI-t2SOYASA6Q.roa (hash: rrWZ9V7KWJ4Q+nTEuZg3LRcJ0iLHgZLsCePpW9vxZts=) 2: CFHgd4L73NmnKwbNZX4Ea5xUqNI.roa (hash: 1vwfxPtMAo6Ane/X/c4BMzTm00LQJy+F2i0HA+2GRDU=) 3: FNknYOM-2Xofk1XbcOJNM1rObAg.roa (hash: FASTd9f7x4x3qa5aRCBcwSFhMWBiMZ3cOy9OdE4lRwc=) 4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: r/1BjUYp+A1XGZAjTjoZDNWE+tdzJXllWPM6vMT4MO8=) 5: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (hash: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b3:c1:8a:a9:12:d9:84:c4:8b:92:72:92:d1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Validity Not Before: Dec 20 20:00:47 2025 GMT Not After : Dec 21 20:00:47 2025 GMT Subject: CN=19c066e753066137e180ead7e40a44b1da251d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:4e:d9:ad:c9:d9:f2:16:45:f8:68:a7:89: 75:ff:7b:a4:e8:dc:5e:4b:2f:51:57:84:de:5f:7d: b4:62:9f:9b:56:8f:9b:a7:e0:71:ca:aa:63:23:0e: 4f:d2:73:08:b4:ec:76:85:83:6b:0c:e0:36:8e:5d: 43:9a:67:fa:22:ec:27:24:77:9d:ee:68:24:be:23: 0c:0c:7f:92:ce:e0:41:27:cb:72:38:bf:3b:c0:88: 20:07:e4:ca:b5:0a:9c:55:27:ee:23:f4:7b:79:64: f6:b7:2d:92:c7:02:1e:bd:23:bc:d9:29:11:c3:85: 97:e2:75:9b:34:26:00:9a:99:22:ca:ca:b7:71:e4: fb:18:60:44:13:fc:7b:40:26:60:58:66:4b:ba:7c: 98:f3:19:6c:eb:81:5e:48:38:44:e0:1a:20:8e:4e: 32:d7:6c:9b:d4:5e:1c:91:50:41:3e:06:21:ae:7e: 87:68:5f:2b:91:20:e1:38:56:01:ba:6e:e5:95:ea: 76:b6:e9:18:8e:42:2f:32:a2:31:58:2e:e8:98:1f: 18:77:fc:49:2c:41:d4:10:6f:ca:6a:95:45:b6:14: 8d:4d:38:b8:86:f7:6d:ab:11:88:5c:80:29:3e:a4: 35:a4:6c:28:d7:72:42:19:39:b3:1c:8b:6c:6a:a0: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C0:66:E7:53:06:61:37:E1:80:EA:D7:E4:0A:44:B1:DA:25:1D:8C X509v3 Authority Key Identifier: keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:02:ff:9a:d6:a7:d9:5a:2e:07:bd:77:49:7b:e4:24:15:68: e0:ce:5c:53:19:c3:5c:8b:25:bf:e6:b4:90:7e:13:df:af:93: bf:17:f6:b8:8c:9e:63:97:01:98:09:b1:5f:1d:b2:55:a5:2d: 92:f1:67:16:34:03:57:19:d4:80:df:e4:23:7b:46:4c:4b:7b: 46:6d:cb:4c:3f:38:9b:c9:16:aa:56:cb:ed:3a:53:0c:49:a0: dc:c4:5d:01:30:3a:fb:b9:05:53:fb:98:69:ca:6c:78:7a:ad: dd:27:2a:03:53:21:42:e9:b5:6d:1b:25:03:61:ba:af:42:65: c9:fa:44:da:52:d0:85:b2:1d:bc:f5:7f:f9:f1:cb:e8:d3:22: ad:85:76:f6:20:bf:9e:d8:af:bb:da:a9:d7:82:4e:21:94:da: 47:81:3c:e3:03:d2:db:d0:46:03:7c:0d:1b:63:e8:92:71:3e: 9a:ec:33:66:8a:0c:0f:b2:51:e4:63:c9:1f:30:c6:50:f0:73: f8:e9:02:c9:af:4f:c4:20:3e:3c:b6:70:a2:a4:d9:b2:63:43: 34:34:35:28:b0:81:6c:68:f0:97:01:c4:47:4b:b6:6e:54:2b: c6:01:33:46:42:ef:86:c6:d8:03:5a:45:dd:9e:18:d5:a9:53: 97:79:87:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbPBiqkS2YTEi5JyktHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTAwNGJlZmE1NTNkZGIzNTU2NGZiNzc2MmIwNWViMjIy ZWNmOTMwHhcNMjUxMjIwMjAwMDQ3WhcNMjUxMjIxMjAwMDQ3WjAzMTEwLwYDVQQD EygxOWMwNjZlNzUzMDY2MTM3ZTE4MGVhZDdlNDBhNDRiMWRhMjUxZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6JO2a3J2fIWRfhop4l1/3uk6Nxe Sy9RV4TeX320Yp+bVo+bp+BxyqpjIw5P0nMItOx2hYNrDOA2jl1Dmmf6IuwnJHed 7mgkviMMDH+SzuBBJ8tyOL87wIggB+TKtQqcVSfuI/R7eWT2ty2SxwIevSO82SkR w4WX4nWbNCYAmpkiysq3ceT7GGBEE/x7QCZgWGZLunyY8xls64FeSDhE4Bogjk4y 12yb1F4ckVBBPgYhrn6HaF8rkSDhOFYBum7llep2tukYjkIvMqIxWC7omB8Yd/xJ LEHUEG/KapVFthSNTTi4hvdtqxGIXIApPqQ1pGwo13JCGTmzHItsaqB8xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnAZudTBmE34YDq1+QKRLHaJR2MMB8GA1UdIwQY MBaAFF7gBL76VT3bNVZPt3YrBesiLs+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjIt ZTIyOGFhYjQ1MDE0LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjItZTIyOGFhYjQ1MDE0 LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwL/mtan 2VouB713SXvkJBVo4M5cUxnDXIslv+a0kH4T36+Tvxf2uIyeY5cBmAmxXx2yVaUt kvFnFjQDVxnUgN/kI3tGTEt7Rm3LTD84m8kWqlbL7TpTDEmg3MRdATA6+7kFU/uY acpseHqt3ScqA1MhQum1bRslA2G6r0JlyfpE2lLQhbIdvPV/+fHL6NMirYV29iC/ ntivu9qp14JOIZTaR4E84wPS29BGA3wNG2PoknE+muwzZooMD7JR5GPJHzDGUPBz +OkCya9PxCA+PLZwoqTZsmNDNDQ1KLCBbGjwlwHER0u2blQrxgEzRkLvhsbYA1pF 3Z4Y1alTl3mHzw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:33 2025 by rpki-client