This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json) Hash identifier: /TyKCR2PWxNSTXMZSnuzAh3LoLLWtm64QBz9+0iKhAU= Subject key identifier: BA:CE:7D:82:6C:FE:BB:A5:8F:41:97:20:54:0A:B6:48:8F:95:29:B1 Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Certificate serial: 019B397D4FCEAFDBE07EEF47ED93051F1B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 02:01:12 +0000 Manifest this update: Sat 20 Dec 2025 02:01:12 +0000 Manifest next update: Sun 21 Dec 2025 02:01:12 +0000 Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=) 2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=) 3: Me2RurdP2NLhCjdqhoeK0mf-VUg.roa (hash: LOxCBjCfnlrjhQuF86hx7twRBwn91CADOctOtx6FzQE=) 4: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=) 5: pBNH2AvH3F_7NHfh2pdfWJm5GAw.roa (hash: 65SqIpROrgrk/ZTF3DMhTQ4zJ8Yp0X8B5YheGcQu0b0=) 6: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: IZf6NsOcXrlqtR5qJU9CrrvAq3+pZioJzUiixcQEQC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:4f:ce:af:db:e0:7e:ef:47:ed:93:05:1f:1b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Validity Not Before: Dec 20 02:01:12 2025 GMT Not After : Dec 21 02:01:12 2025 GMT Subject: CN=bace7d826cfebba58f419720540ab6488f9529b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:c7:0f:79:d3:09:f5:76:83:55:b8:c0:38: f6:7b:73:b7:58:8e:b0:e4:65:0d:e5:b1:18:53:e2: 2f:31:b7:90:a3:e6:bc:75:b0:1d:ef:d1:f3:23:52: 7c:72:07:3e:62:de:86:69:04:de:56:5a:bd:10:a5: b1:7f:b0:b6:4c:07:a1:98:73:3e:55:6f:77:6e:58: cf:59:52:d9:a1:d4:2f:b5:88:57:b5:76:40:01:10: c1:a8:9e:f6:a3:85:21:04:fd:84:1b:90:4c:8c:ed: 81:a7:d9:19:bf:a8:d4:f0:0d:bd:49:da:81:ec:82: 68:3f:bc:a0:1c:b1:4d:10:eb:7d:b7:77:e8:dc:d0: e7:38:fb:bd:38:06:29:a1:77:b6:83:73:7e:cf:77: 39:2d:49:57:e9:62:09:59:0e:45:86:5e:c1:fd:0c: f8:58:77:de:c4:55:a2:6d:0d:09:42:4c:b3:7e:10: cc:3b:24:74:31:28:11:f5:af:55:b3:87:e7:b6:ab: af:1d:fa:20:03:7d:de:8d:24:0d:22:38:40:f0:a6: 67:a0:85:e0:61:3d:e7:54:df:e2:d4:d9:ca:8a:9c: 24:12:15:5d:20:de:19:56:55:a0:71:87:e6:de:62: 67:e4:a3:81:a4:e8:66:81:70:8e:db:f2:b5:c8:5f: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CE:7D:82:6C:FE:BB:A5:8F:41:97:20:54:0A:B6:48:8F:95:29:B1 X509v3 Authority Key Identifier: keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:eb:75:ed:e4:7d:8d:39:f3:26:9a:9a:99:45:70:b1:61:72: b3:23:ff:e6:17:2e:5b:1a:ee:90:ef:73:33:e8:39:ba:f1:9b: a0:b5:b0:98:c2:a8:89:34:b3:fb:e5:7e:09:e9:53:9c:8e:d3: ef:37:0e:7b:ed:37:51:8b:91:c4:4f:f5:9e:d9:2a:e5:67:e7: 5e:3f:e2:13:b6:4c:b8:cb:71:a0:3c:47:0d:59:11:03:92:55: 52:bc:57:34:23:0d:ce:40:5a:96:79:ce:33:c2:88:7c:10:68: de:88:e7:30:6a:6c:f1:27:88:9b:9d:15:7b:cc:8f:21:82:14: 4a:bf:72:47:7f:00:a4:b0:ff:bb:26:44:52:79:e6:7e:6a:b9: 9e:6b:91:6a:68:2b:b2:d5:8e:3a:35:69:73:b3:df:f6:bf:39: bc:ca:0a:89:f5:bb:dd:9a:80:4b:6c:97:eb:af:15:ce:9f:a6: f2:2f:1b:c4:df:5b:3e:ee:30:db:94:87:c8:1d:d9:2f:8e:e5: 33:16:e3:06:80:cb:f2:f8:e7:80:dd:14:51:67:ed:04:e3:cf: f5:83:5a:08:10:98:77:8d:50:8f:c9:cb:6d:a7:3f:c1:22:08: d9:49:24:f3:62:6e:49:d8:3d:a1:1d:2d:17:82:38:6d:dd:86: 5e:d6:70:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fU/Or9vgfu9H7ZMFHxtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZhOTRmNjEzNGUzOTYwZWE1ZjMxODg0NmEzMGNmM2U5 MjJkZDcwHhcNMjUxMjIwMDIwMTEyWhcNMjUxMjIxMDIwMTEyWjAzMTEwLwYDVQQD EyhiYWNlN2Q4MjZjZmViYmE1OGY0MTk3MjA1NDBhYjY0ODhmOTUyOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVXHD3nTCfV2g1W4wDj2e3O3WI6w 5GUN5bEYU+IvMbeQo+a8dbAd79HzI1J8cgc+Yt6GaQTeVlq9EKWxf7C2TAehmHM+ VW93bljPWVLZodQvtYhXtXZAARDBqJ72o4UhBP2EG5BMjO2Bp9kZv6jU8A29SdqB 7IJoP7ygHLFNEOt9t3fo3NDnOPu9OAYpoXe2g3N+z3c5LUlX6WIJWQ5Fhl7B/Qz4 WHfexFWibQ0JQkyzfhDMOyR0MSgR9a9Vs4fntquvHfogA33ejSQNIjhA8KZnoIXg YT3nVN/i1NnKipwkEhVdIN4ZVlWgcYfm3mJn5KOBpOhmgXCO2/K1yF9n+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrOfYJs/rulj0GXIFQKtkiPlSmxMB8GA1UdIwQY MBaAFMbPqU9hNOOWDqXzGIRqMM8+ki3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUt ZjlhNDM3MDlkMDBiLzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUtZjlhNDM3MDlkMDBi LzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOt17eR9 jTnzJpqamUVwsWFysyP/5hcuWxrukO9zM+g5uvGboLWwmMKoiTSz++V+CelTnI7T 7zcOe+03UYuRxE/1ntkq5WfnXj/iE7ZMuMtxoDxHDVkRA5JVUrxXNCMNzkBalnnO M8KIfBBo3ojnMGps8SeIm50Ve8yPIYIUSr9yR38ApLD/uyZEUnnmfmq5nmuRamgr stWOOjVpc7Pf9r85vMoKifW73ZqAS2yX668Vzp+m8i8bxN9bPu4w25SHyB3ZL47l MxbjBoDL8vjngN0UUWftBOPP9YNaCBCYd41Qj8nLbac/wSII2Ukk82JuSdg9oR0t F4I4bd2GXtZwwA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:09:16 2025 by rpki-client