This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json) Hash identifier: 5OGjG6CblYoCmS7aKz4DPhPUR5E55SV/q0Bv4fwn8nY= Subject key identifier: 61:AA:71:88:07:63:FD:3C:49:7B:A5:C1:93:BD:03:10:16:D8:EE:2B Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Certificate serial: 019B43C9F8EE85C016CE2D0616622776D9FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft Manifest number: 1799 Signing time: Mon 22 Dec 2025 02:01:08 +0000 Manifest this update: Mon 22 Dec 2025 02:01:08 +0000 Manifest next update: Tue 23 Dec 2025 02:01:08 +0000 Files and hashes: 1: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (hash: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=) 2: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (hash: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=) 3: kJyTZGrKIJP-guAGkQfidQemnN0.roa (hash: 5VNjlZQ2lTGQgsP/MAa7aAdGIHpHVpDviDdJ3Ul/giI=) 4: oZ13AtjecChXKw5f_3lLaOPw8Ks.roa (hash: /XejTxxPIA/m0yG5qUhn06Ei20l/pmuOP7i6MWx0h1U=) 5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: uwWBbgFQrfPtH31aUyxfFx9UlWpql2RInL3Zbd7QaBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:f8:ee:85:c0:16:ce:2d:06:16:62:27:76:d9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Validity Not Before: Dec 22 02:01:08 2025 GMT Not After : Dec 23 02:01:08 2025 GMT Subject: CN=61aa71880763fd3c497ba5c193bd031016d8ee2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:a4:ff:30:24:a3:c6:b5:e0:c7:ec:36:f3: 52:6c:19:1f:4c:be:12:08:f5:70:21:6f:6b:db:1a: 9a:b8:80:22:99:37:8c:16:4d:de:30:c3:52:bb:d4: 4f:1b:b3:1c:c5:b9:29:a9:14:7f:79:26:3a:c2:e1: fa:5f:6c:9d:f5:32:ac:03:05:bb:df:b3:33:08:b1: e2:4c:53:5f:32:59:5b:a5:a5:aa:20:8a:23:91:11: 54:31:ae:66:5e:a1:48:11:32:ed:45:d2:8d:53:38: 1b:72:55:13:b3:5c:23:7b:5d:a6:75:fa:40:a9:ac: 46:20:2b:70:08:a1:b5:96:08:8b:5e:f8:50:94:ab: c5:ef:68:51:a3:94:e4:e9:93:1f:d6:59:2a:e1:7d: 49:02:bd:71:2f:e8:f8:7d:df:f0:23:ab:e0:fb:c6: 78:1e:75:b1:f2:1c:03:30:c8:83:7b:4e:2e:c6:16: 93:29:26:ac:ca:76:04:b8:ba:71:02:77:91:94:72: a7:2e:63:cc:be:92:d7:02:f8:8e:ba:00:4d:65:5a: 63:23:18:5c:96:d9:1a:a4:71:d2:f7:81:ca:ac:f5: 3f:ec:d8:17:bd:58:7e:d5:6c:f9:11:9d:e0:1b:65: 15:2b:0c:4f:95:f3:32:00:f7:26:00:d8:e3:2d:95: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AA:71:88:07:63:FD:3C:49:7B:A5:C1:93:BD:03:10:16:D8:EE:2B X509v3 Authority Key Identifier: keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ac:2b:e2:8d:1b:fa:08:5b:3e:3e:b6:02:8d:e9:94:8c:f2: 74:b5:99:ae:c7:b2:68:7e:6a:9b:7a:b3:8f:96:1c:ee:e4:f1: fd:ba:81:8b:7a:d9:34:32:a4:90:6a:ae:5e:89:fe:6e:dc:09: 3a:7e:41:f2:ce:c4:4e:da:bc:ec:b2:92:88:2a:ba:ca:65:94: 6f:48:75:13:95:ad:7a:3c:2a:81:44:78:e8:8c:39:a1:c6:c7: a6:ad:8f:87:8c:3e:e8:76:33:91:8c:97:78:e3:4b:c4:b8:95: 29:48:5d:67:8a:79:34:63:b0:3d:81:f5:1f:78:fa:d9:f9:bc: 32:96:6c:63:52:23:d3:76:6f:4f:84:cb:ac:e0:09:37:93:a0: 09:7e:35:49:aa:30:9d:ce:4d:02:ec:1d:2b:25:da:80:05:bb: da:fa:d8:fc:57:d0:9a:4e:83:f1:5e:15:ee:e4:67:d3:e4:95: 20:39:24:07:50:63:d5:f3:79:d8:34:cb:ed:71:59:17:43:87: e3:4c:81:f3:1f:79:d6:7e:f8:c4:c3:5f:64:b8:81:7f:87:d6: 8a:cd:19:d0:df:a5:d2:1e:2d:89:e1:98:75:21:b1:bb:9d:0d: 03:e4:b3:45:5a:42:d3:5f:33:3f:0d:50:d1:76:32:fb:d7:81: a8:32:97:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyfjuhcAWzi0GFmIndtn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0 NmVlMDUwHhcNMjUxMjIyMDIwMTA4WhcNMjUxMjIzMDIwMTA4WjAzMTEwLwYDVQQD Eyg2MWFhNzE4ODA3NjNmZDNjNDk3YmE1YzE5M2JkMDMxMDE2ZDhlZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKOk/zAko8a14MfsNvNSbBkfTL4S CPVwIW9r2xqauIAimTeMFk3eMMNSu9RPG7McxbkpqRR/eSY6wuH6X2yd9TKsAwW7 37MzCLHiTFNfMllbpaWqIIojkRFUMa5mXqFIETLtRdKNUzgbclUTs1wje12mdfpA qaxGICtwCKG1lgiLXvhQlKvF72hRo5Tk6ZMf1lkq4X1JAr1xL+j4fd/wI6vg+8Z4 HnWx8hwDMMiDe04uxhaTKSasynYEuLpxAneRlHKnLmPMvpLXAviOugBNZVpjIxhc ltkapHHS94HKrPU/7NgXvVh+1Wz5EZ3gG2UVKwxPlfMyAPcmANjjLZU+NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGqcYgHY/08SXulwZO9AxAW2O4rMB8GA1UdIwQY MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3 LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKwr4o0b +ghbPj62Ao3plIzydLWZrseyaH5qm3qzj5Yc7uTx/bqBi3rZNDKkkGquXon+btwJ On5B8s7ETtq87LKSiCq6ymWUb0h1E5WtejwqgUR46Iw5ocbHpq2Ph4w+6HYzkYyX eONLxLiVKUhdZ4p5NGOwPYH1H3j62fm8MpZsY1Ij03ZvT4TLrOAJN5OgCX41Saow nc5NAuwdKyXagAW72vrY/FfQmk6D8V4V7uRn0+SVIDkkB1Bj1fN52DTL7XFZF0OH 40yB8x951n74xMNfZLiBf4fWis0Z0N+l0h4tieGYdSGxu50NA+SzRVpC018zPw1Q 0XYy+9eBqDKX/w== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:44 2025 by rpki-client