This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json)
Hash identifier: RNzQ/tZxZWA5PtWFx4LJy27zq6LfdOisTTCjQSGa1TI=
Subject key identifier: 34:42:26:DD:CC:27:DB:9F:8E:00:74:4D:8C:42:78:A9:E4:5B:B5:82
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 019B378ED90B8C98889DC27361CA320D238D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
Manifest number: 17A1
Signing time: Fri 19 Dec 2025 17:01:07 +0000
Manifest this update: Fri 19 Dec 2025 17:01:07 +0000
Manifest next update: Sat 20 Dec 2025 17:01:07 +0000
Files and hashes: 1: 0X4Mkrt6RHt5xbUnB42Nc8_CJJ0.roa (hash: Y3zhErD2fvOZ7YMVCPvi9YGS4yfBp7uytHtEq8brQEk=)
2: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=)
3: KfO_wUnBkZv7_2njcVwFBBB43bk.roa (hash: jkyXcB14v3h50NkdLiUvCIo+SO4BFIe4PofoZYA3RMk=)
4: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=)
5: fTF_8zwqGVqS5MslIq-2fWADKb8.roa (hash: LlI44hFKyPdFoWdnamWkRGSv8Iou0mgO68pUv4TrZHM=)
6: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=)
7: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=)
8: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=)
9: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=)
10: qC4I7omklrGMGDF8l2hLIeTGK0I.roa (hash: 8xsMx8ZOTT0zr7b6BrMYk6XYyKq+pWHRlqmJag8LVoI=)
11: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=)
12: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: dh7wn6ck8hlBSk2D9fko4lRimBrMFdGs5kt9+jPXDAo=)
13: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=)
14: y_L2KY0YMCG1-r_MH3UQ-w2AaWU.roa (hash: lYapeVk68a8E5/mSvSWVv9SpoiliM2jz4U96TGrpByw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:8e:d9:0b:8c:98:88:9d:c2:73:61:ca:32:0d:23:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Dec 19 17:01:07 2025 GMT
Not After : Dec 20 17:01:07 2025 GMT
Subject: CN=344226ddcc27db9f8e00744d8c4278a9e45bb582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:19:96:5b:ca:56:4d:50:19:cf:ca:ab:43:
3e:9f:91:f3:6f:d2:7d:42:b0:fe:fc:97:06:75:e6:
ea:b0:67:00:a6:87:18:ae:72:3b:ed:b6:17:9c:2e:
e6:e3:73:cb:27:21:0c:a4:be:a3:f8:59:88:23:b7:
71:68:d1:d0:c0:ef:b1:4e:ca:80:88:27:ed:c4:51:
14:57:8f:5d:4e:f3:f9:6a:2b:5f:40:52:67:1a:c1:
57:8e:dc:b1:70:a3:df:48:d9:fa:e4:ca:05:d4:31:
f1:58:53:ce:04:23:c6:43:dd:2e:a0:e7:86:3e:d6:
e6:e8:29:57:5a:b9:24:e0:75:bc:41:74:2a:1f:8d:
85:10:09:10:b9:67:d0:85:d1:f7:a1:9a:8b:b9:52:
8b:48:71:83:e3:f7:08:5d:a1:3c:f8:ea:31:ff:7a:
87:cd:01:83:43:74:44:9c:28:05:aa:bb:57:ff:82:
db:ec:b7:42:38:99:08:55:55:14:07:2e:15:92:72:
63:fe:a3:6d:8b:97:e7:67:51:8e:ad:2e:92:4d:bf:
8a:94:6b:bb:0a:22:ca:77:41:d1:d9:8f:8b:10:04:
00:be:9c:35:39:41:8c:c7:13:50:49:99:74:ae:e2:
f0:1d:42:16:1c:10:39:9d:e1:57:7d:0e:45:83:0a:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:26:DD:CC:27:DB:9F:8E:00:74:4D:8C:42:78:A9:E4:5B:B5:82
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ba:81:e7:45:ce:f4:75:6d:b4:00:f1:28:8d:5f:88:a4:09:
18:14:f3:04:0e:3d:91:08:d3:70:a9:d8:6e:ca:29:03:d4:23:
a9:ea:67:25:f4:c7:c2:5b:9e:80:b5:6d:04:35:76:54:d8:ed:
ac:f0:96:cc:28:99:af:81:c7:82:99:f4:7c:d3:a5:74:73:a3:
3d:9a:19:15:e6:50:e6:ae:cc:63:06:71:05:f6:7c:b5:60:97:
37:1d:6b:3f:4d:2f:f5:69:09:67:17:b6:41:5f:d3:bc:15:b6:
d9:42:90:1c:8b:96:5f:71:41:c2:44:e8:64:16:0c:6d:98:35:
21:c8:ed:f7:0b:18:f6:35:28:2d:d2:dd:3f:03:fb:54:79:bc:
a9:60:c2:3e:8b:3b:a3:6d:ff:e2:16:76:09:f6:86:06:be:7a:
b2:f6:3d:92:c5:1c:4e:3c:ac:e1:9c:17:5a:33:23:01:f1:dc:
fe:fe:98:fb:ef:bd:d1:b6:d7:71:8a:9b:d6:97:6b:01:ea:1a:
76:ba:a7:83:1e:91:02:69:40:69:43:f1:9f:d1:83:4e:66:10:
c2:46:d4:e5:d7:74:36:55:1c:37:51:9e:52:76:c1:af:28:17:
56:26:3a:12:83:8c:c3:63:a0:06:15:c2:21:d5:b2:e9:24:d2:
5b:c3:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:39:55 2025 by rpki-client