This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json) Hash identifier: Xqk61VZPp3UACKR7fN9/nYCpzRKHfzn80vicxtnfqms= Subject key identifier: 3F:77:A8:4B:14:FE:99:47:19:A9:E4:78:F1:1A:A1:5A:FF:87:06:F8 Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503 Certificate serial: 019B3FECD0BC040A04D8C7B779AF6B2D8624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft Manifest number: 0F46 Signing time: Sun 21 Dec 2025 08:00:43 +0000 Manifest this update: Sun 21 Dec 2025 08:00:43 +0000 Manifest next update: Mon 22 Dec 2025 08:00:43 +0000 Files and hashes: 1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=) 2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=) 3: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: uF13XTnmM/BqBaSsADi9XWBAMSSe3XzrNbXCTlrod7Y=) 4: Z81p6D_dRIvEDGrIYx1WijPMCWI.roa (hash: B0c4eefCOibc6e3+7zDAkWkLSK4xkeiQAdhY0t08sgw=) 5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:d0:bc:04:0a:04:d8:c7:b7:79:af:6b:2d:86:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503 Validity Not Before: Dec 21 08:00:43 2025 GMT Not After : Dec 22 08:00:43 2025 GMT Subject: CN=3f77a84b14fe994719a9e478f11aa15aff8706f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:82:02:73:5b:11:0d:37:3f:41:94:da:1c: 4f:fe:06:66:57:76:ea:54:4c:24:d4:67:30:a4:a2: f2:42:39:60:7a:4d:4e:93:e3:d3:46:63:bd:aa:72: 4d:f0:08:72:ad:09:8c:6d:18:37:75:94:8b:75:b4: ca:96:ce:af:c5:82:af:c5:52:2b:36:e7:78:43:bc: 17:9b:f0:63:81:cf:fa:a8:79:88:ab:2a:cc:e6:c1: 93:88:f2:e7:dd:dd:93:ab:8e:1c:17:df:95:01:ab: be:16:44:f2:35:ba:ca:8d:4b:f3:b3:6c:02:91:de: 2b:22:4d:00:7f:01:79:35:19:b6:fe:e5:08:c4:4b: a8:65:6a:46:5f:e6:09:30:74:80:8c:19:d0:8e:92: 1c:73:af:cf:3f:25:23:90:52:82:a0:12:81:56:d6: 98:50:17:f9:a9:f8:94:05:59:17:84:3b:f4:99:5e: 79:27:39:2b:1f:9c:d2:75:32:52:3d:0b:fd:09:75: af:77:d6:aa:0e:e4:ac:ac:ca:8f:19:0d:45:01:fc: fb:49:02:5e:68:82:d2:9e:8b:cb:fc:bc:11:72:e9: a6:32:2d:90:43:ea:51:08:f1:8f:11:bf:4e:20:c7: b0:fd:50:32:74:95:c3:15:81:b0:b0:9f:51:ea:6d: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:77:A8:4B:14:FE:99:47:19:A9:E4:78:F1:1A:A1:5A:FF:87:06:F8 X509v3 Authority Key Identifier: keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:23:1a:3c:9b:94:62:ab:cf:91:c6:b8:b0:43:94:60:34:6f: c6:a6:9b:17:72:eb:4d:db:c4:ca:ec:b6:be:10:81:03:b9:29: 1e:95:2a:6f:88:e9:4f:f2:9c:71:b1:09:8f:c3:09:12:09:8d: ed:46:98:88:c0:46:c9:5a:11:06:5a:3b:2d:35:a2:aa:47:dd: 8e:8f:fc:97:46:8c:75:fd:3a:e5:e0:7c:6a:d1:f9:55:2c:7b: 08:d2:69:72:99:ce:9f:10:33:53:b8:1f:e7:33:b0:67:db:e1: de:a8:0c:0e:49:dd:b8:84:fd:ce:58:c1:a5:27:d7:26:0d:6e: ba:85:db:9b:47:bb:6c:36:4d:a1:34:d2:95:8a:5a:44:f3:4e: 3a:a8:80:0c:56:43:f3:e5:9b:38:79:3d:71:29:9a:1e:f5:1a: 3c:67:d9:91:d0:e7:56:54:aa:bc:c0:7b:2d:c5:5f:d4:06:6b: c0:f2:13:39:92:1d:1e:74:8a:f3:10:f9:0e:e5:0b:26:7c:50: 2f:1b:84:40:e8:8a:ed:80:d4:7a:11:f5:ce:88:c6:16:af:a9: cd:ad:0c:1e:90:99:04:04:b5:cd:37:5b:6b:b9:9e:23:7b:02: b8:37:55:7c:de:6e:89:c5:29:82:88:32:b9:af:4e:9c:ef:1f: 84:50:25:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7NC8BAoE2Me3ea9rLYYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx OTM1MDMwHhcNMjUxMjIxMDgwMDQzWhcNMjUxMjIyMDgwMDQzWjAzMTEwLwYDVQQD EygzZjc3YTg0YjE0ZmU5OTQ3MTlhOWU0NzhmMTFhYTE1YWZmODcwNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrOCAnNbEQ03P0GU2hxP/gZmV3bq VEwk1GcwpKLyQjlgek1Ok+PTRmO9qnJN8AhyrQmMbRg3dZSLdbTKls6vxYKvxVIr Nud4Q7wXm/Bjgc/6qHmIqyrM5sGTiPLn3d2Tq44cF9+VAau+FkTyNbrKjUvzs2wC kd4rIk0AfwF5NRm2/uUIxEuoZWpGX+YJMHSAjBnQjpIcc6/PPyUjkFKCoBKBVtaY UBf5qfiUBVkXhDv0mV55JzkrH5zSdTJSPQv9CXWvd9aqDuSsrMqPGQ1FAfz7SQJe aILSnovL/LwRcummMi2QQ+pRCPGPEb9OIMew/VAydJXDFYGwsJ9R6m0tKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD93qEsU/plHGankePEaoVr/hwb4MB8GA1UdIwQY MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt YzM2ZDFjNDYwZTJmLzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSMaPJuU YqvPkca4sEOUYDRvxqabF3LrTdvEyuy2vhCBA7kpHpUqb4jpT/KccbEJj8MJEgmN 7UaYiMBGyVoRBlo7LTWiqkfdjo/8l0aMdf065eB8atH5VSx7CNJpcpnOnxAzU7gf 5zOwZ9vh3qgMDknduIT9zljBpSfXJg1uuoXbm0e7bDZNoTTSlYpaRPNOOqiADFZD 8+WbOHk9cSmaHvUaPGfZkdDnVlSqvMB7LcVf1AZrwPITOZIdHnSK8xD5DuULJnxQ LxuEQOiK7YDUehH1zojGFq+pza0MHpCZBAS1zTdba7meI3sCuDdVfN5uicUpgogy ua9OnO8fhFAlAw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:43:30 2025 by rpki-client