This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json) Hash identifier: BbNwisoyhdcrqofrT8plMb8t5XQL2U8bSVC9qivq39U= Subject key identifier: 3A:6C:3B:15:54:34:67:55:06:5A:BA:7E:85:F6:37:E4:1C:06:8D:B4 Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Certificate serial: 019B39B3EE44B1D54DD7E80E3BEBC63FF329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 03:00:51 +0000 Manifest this update: Sat 20 Dec 2025 03:00:51 +0000 Manifest next update: Sun 21 Dec 2025 03:00:51 +0000 Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=) 2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=) 3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=) 4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: aOlQ64ehrwu5wldWBVwjNHaY7msZqMikFZ1BBvfM2Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:ee:44:b1:d5:4d:d7:e8:0e:3b:eb:c6:3f:f3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Validity Not Before: Dec 20 03:00:51 2025 GMT Not After : Dec 21 03:00:51 2025 GMT Subject: CN=3a6c3b1554346755065aba7e85f637e41c068db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:b0:ec:e8:64:a0:02:dc:d2:76:3d:1b:53: 72:18:dd:cd:67:cb:98:a9:e1:80:0a:35:f4:4d:37: f8:7d:5e:34:d8:f6:f4:33:f9:65:15:cf:0e:37:ab: 77:41:5b:2e:92:41:e4:25:1b:64:22:7e:97:8f:3f: b8:06:7d:76:32:74:c2:89:cd:96:e6:f6:3b:3a:56: ca:6d:39:4e:29:99:e4:34:ce:22:00:aa:14:b2:e6: 64:c8:5b:31:e0:19:af:cd:fe:d5:81:27:cd:93:f4: 81:a7:ce:88:07:8e:bd:11:54:68:8f:3a:f6:97:86: a1:ef:f1:ab:08:c7:81:f2:56:9e:d6:47:50:1a:d4: 70:56:54:f8:b8:64:f8:2d:2e:de:d7:c8:b9:56:2c: 90:4d:6b:44:9f:5c:2c:49:2a:c0:4d:58:ad:3b:86: 03:e4:38:d1:8a:ec:bc:74:3b:67:18:eb:8d:63:68: bf:58:aa:b4:ef:8c:dc:4a:43:4c:bd:10:09:99:bf: 0b:2e:66:57:b3:87:a6:ce:d4:94:36:f4:db:63:1c: 6c:97:24:72:b4:43:0b:0d:b2:59:b9:35:5a:c7:05: 83:13:0b:46:c8:46:49:04:12:d5:36:4a:89:2d:63: e7:a3:15:bc:3d:ab:0a:7a:ca:7e:f2:bf:a0:ca:3e: e5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6C:3B:15:54:34:67:55:06:5A:BA:7E:85:F6:37:E4:1C:06:8D:B4 X509v3 Authority Key Identifier: keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f4:37:ae:24:3f:86:00:09:f9:7f:63:b3:fe:bb:4e:0c:d7: d4:ff:d8:21:1e:e7:07:c3:00:15:66:2b:ea:3e:1f:e0:ef:91: be:7f:fe:30:c8:93:e5:84:2f:a0:14:69:ff:60:e1:a0:86:b8: ae:dd:e0:94:97:28:c7:77:f8:9c:bb:6a:87:a3:92:84:b4:0a: 01:37:fe:58:99:08:f7:94:64:fa:db:26:85:84:a2:62:11:cf: af:97:b7:e8:75:69:93:64:27:dc:f3:e1:e3:54:bc:31:04:64: 3f:e3:1e:3f:a3:d9:6b:6b:45:fe:c9:e3:99:7a:95:b6:54:4d: c8:13:45:a7:b5:68:c4:c1:7e:9e:04:49:73:fc:69:dc:61:66: 06:88:f7:3e:2c:48:0d:55:2e:a2:ae:c3:a1:89:8e:3c:42:76: 98:e6:ce:2b:34:eb:1b:2a:24:8a:a5:6c:09:b7:27:b3:f2:7d: a5:27:21:d2:3e:d4:bf:0f:8e:1b:b0:7e:33:3a:38:20:dd:92: 3f:38:81:03:2f:e7:8e:e5:03:ab:0f:45:26:36:c8:cb:e5:e8: 80:1b:39:5a:21:2c:b7:cf:ad:5e:2a:a1:74:42:08:f0:76:bf: ed:aa:7b:c0:e7:54:33:02:7c:23:75:73:d1:ac:81:01:39:c8: 7b:f6:a3:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+5EsdVN1+gOO+vGP/MpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz NzBhMTkwHhcNMjUxMjIwMDMwMDUxWhcNMjUxMjIxMDMwMDUxWjAzMTEwLwYDVQQD EygzYTZjM2IxNTU0MzQ2NzU1MDY1YWJhN2U4NWY2MzdlNDFjMDY4ZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMCw7OhkoALc0nY9G1NyGN3NZ8uY qeGACjX0TTf4fV402Pb0M/llFc8ON6t3QVsukkHkJRtkIn6Xjz+4Bn12MnTCic2W 5vY7OlbKbTlOKZnkNM4iAKoUsuZkyFsx4Bmvzf7VgSfNk/SBp86IB469EVRojzr2 l4ah7/GrCMeB8lae1kdQGtRwVlT4uGT4LS7e18i5ViyQTWtEn1wsSSrATVitO4YD 5DjRiuy8dDtnGOuNY2i/WKq074zcSkNMvRAJmb8LLmZXs4emztSUNvTbYxxslyRy tEMLDbJZuTVaxwWDEwtGyEZJBBLVNkqJLWPnoxW8PasKesp+8r+gyj7l5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpsOxVUNGdVBlq6foX2N+QcBo20MB8GA1UdIwQY MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvQ3riQ/ hgAJ+X9js/67TgzX1P/YIR7nB8MAFWYr6j4f4O+Rvn/+MMiT5YQvoBRp/2DhoIa4 rt3glJcox3f4nLtqh6OShLQKATf+WJkI95Rk+tsmhYSiYhHPr5e36HVpk2Qn3PPh 41S8MQRkP+MeP6PZa2tF/snjmXqVtlRNyBNFp7VoxMF+ngRJc/xp3GFmBoj3PixI DVUuoq7DoYmOPEJ2mObOKzTrGyokiqVsCbcns/J9pSch0j7Uvw+OG7B+Mzo4IN2S PziBAy/njuUDqw9FJjbIy+XogBs5WiEst8+tXiqhdEII8Ha/7ap7wOdUMwJ8I3Vz 0ayBATnIe/aj9g== -----END CERTIFICATE-----Generated at Sat Dec 20 06:04:55 2025 by rpki-client