This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json) Hash identifier: 8I/slWBytQcBbECrnL90fJ3lbeNh8Jb1MTZ8f0EeaWo= Subject key identifier: F3:45:DD:54:2D:51:F0:39:70:1B:E9:89:AB:34:B1:FE:BC:BD:AE:9D Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2 Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2 Certificate serial: 019B44A565062FAF54F4C7401BFE4644227C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft Manifest number: 147A Signing time: Mon 22 Dec 2025 06:00:48 +0000 Manifest this update: Mon 22 Dec 2025 06:00:48 +0000 Manifest next update: Tue 23 Dec 2025 06:00:48 +0000 Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=) 2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: tM3jaxENDFn0l/pSaFUzbPcwoekDyb6QcE/uXL4oYoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:65:06:2f:af:54:f4:c7:40:1b:fe:46:44:22:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2 Validity Not Before: Dec 22 06:00:48 2025 GMT Not After : Dec 23 06:00:48 2025 GMT Subject: CN=f345dd542d51f039701be989ab34b1febcbdae9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:60:65:84:68:d2:5a:55:44:98:74:ce:0b: 0b:ce:71:03:9a:77:99:f0:35:20:c8:01:c6:96:8a: 04:32:01:20:1c:3c:61:5e:d9:45:5e:71:3d:a8:bc: 2f:a8:15:e4:e3:46:b7:1c:d5:23:81:64:e9:25:8c: 18:d7:f8:6d:64:77:16:60:1f:58:da:c0:b9:01:ed: 97:3e:01:fa:a1:ba:4e:41:ba:8b:63:9f:51:26:b2: 2e:d7:55:d3:c5:ff:eb:4e:dd:e8:df:a8:c8:66:da: 04:9a:e0:5b:25:33:6b:eb:6c:0e:1f:07:a1:7c:4c: 97:34:43:4a:0b:ab:51:af:a6:f4:39:0f:10:40:a1: 69:cc:a7:52:e4:e9:57:ab:73:3e:84:23:ce:26:6a: 82:68:86:93:bd:dd:f3:1a:d6:37:8f:5e:1d:6b:9f: 71:36:c6:33:a6:ee:e5:92:98:eb:96:4d:85:46:7b: c3:fa:97:e7:22:4f:58:8b:80:83:6a:eb:9f:07:e6: 44:5c:4f:35:be:47:18:3b:49:ea:cc:7a:bc:8d:e7: fb:c3:5a:6e:11:b7:22:95:c0:55:1b:12:d8:4f:3c: e5:af:41:cb:b6:61:56:b8:53:66:26:9e:86:dc:9a: b1:d1:3f:16:a9:f5:50:e9:fb:78:f0:d1:f7:be:7f: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:45:DD:54:2D:51:F0:39:70:1B:E9:89:AB:34:B1:FE:BC:BD:AE:9D X509v3 Authority Key Identifier: keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:81:e9:b1:5f:b9:21:82:39:89:bd:89:da:ef:d6:5f:8e:9d: 83:87:00:27:6e:ac:47:93:a5:b3:13:58:6a:4c:ba:bc:5f:3d: ae:e7:e6:33:dc:8f:ac:5d:1c:5c:d2:70:ee:d8:92:e6:df:d6: a1:a0:e4:a1:b0:3b:7b:dc:79:30:10:1f:2c:9d:35:68:50:fd: 50:b5:c2:e8:d8:5e:f8:8b:8c:5b:f7:ab:ba:03:67:a3:4a:8c: c2:0f:5c:eb:1b:14:26:d7:96:d3:ef:84:ff:5b:99:0b:1e:e0: 0c:21:76:40:b9:02:9a:aa:55:2e:a2:6e:0f:ec:d4:24:42:8a: 6c:48:3b:06:56:b8:7d:e9:4d:8f:d8:11:61:f5:46:14:b5:d4: 43:74:bb:d3:15:ac:7c:5b:50:15:62:7f:f6:ef:bf:a1:de:a2: c6:40:e6:df:a5:31:cd:41:e3:79:1e:d8:00:9f:b7:df:5e:3b: 93:60:ef:ff:85:43:26:c8:39:66:8c:71:60:5e:78:4c:dc:00: 57:c9:55:06:1a:0a:ae:8b:c4:93:38:c1:6e:42:77:0f:78:45: 50:0b:0e:11:56:73:2a:08:5e:1d:21:1a:a5:b1:14:03:93:a1: de:e4:ee:8e:41:45:5e:3b:13:f8:e0:bf:54:e8:96:61:6e:cd: 06:3f:cf:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpWUGL69U9MdAG/5GRCJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Mjk3OGQ1MzI2OThmYjIwODQwZjk0MmIwMjQ3YzAxYzhm NTc4YjIwHhcNMjUxMjIyMDYwMDQ4WhcNMjUxMjIzMDYwMDQ4WjAzMTEwLwYDVQQD EyhmMzQ1ZGQ1NDJkNTFmMDM5NzAxYmU5ODlhYjM0YjFmZWJjYmRhZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGtgZYRo0lpVRJh0zgsLznEDmneZ 8DUgyAHGlooEMgEgHDxhXtlFXnE9qLwvqBXk40a3HNUjgWTpJYwY1/htZHcWYB9Y 2sC5Ae2XPgH6obpOQbqLY59RJrIu11XTxf/rTt3o36jIZtoEmuBbJTNr62wOHweh fEyXNENKC6tRr6b0OQ8QQKFpzKdS5OlXq3M+hCPOJmqCaIaTvd3zGtY3j14da59x NsYzpu7lkpjrlk2FRnvD+pfnIk9Yi4CDauufB+ZEXE81vkcYO0nqzHq8jef7w1pu EbcilcBVGxLYTzzlr0HLtmFWuFNmJp6G3Jqx0T8WqfVQ6ft48NH3vn9DLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNF3VQtUfA5cBvpias0sf68va6dMB8GA1UdIwQY MBaAFMQpeNUyaY+yCED5QrAkfAHI9XiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGIt NzdkNTE2YmU3YTg3LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGItNzdkNTE2YmU3YTg3 LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoHpsV+5 IYI5ib2J2u/WX46dg4cAJ26sR5OlsxNYaky6vF89rufmM9yPrF0cXNJw7tiS5t/W oaDkobA7e9x5MBAfLJ01aFD9ULXC6Nhe+IuMW/erugNno0qMwg9c6xsUJteW0++E /1uZCx7gDCF2QLkCmqpVLqJuD+zUJEKKbEg7Bla4felNj9gRYfVGFLXUQ3S70xWs fFtQFWJ/9u+/od6ixkDm36UxzUHjeR7YAJ+33147k2Dv/4VDJsg5ZoxxYF54TNwA V8lVBhoKrovEkzjBbkJ3D3hFUAsOEVZzKgheHSEapbEUA5Oh3uTujkFFXjsT+OC/ VOiWYW7NBj/PXg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:47:41 2025 by rpki-client