This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json) Hash identifier: IIPrqbJ2TNR9izVF9oiwTlZRH61MyCMy5RNu/lukG/U= Subject key identifier: C8:7C:81:58:01:43:E5:26:5D:92:0D:11:B5:B3:CF:7F:14:77:EB:F3 Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Certificate serial: 019B3DFEE6E3D9136879FF937FDA1C0DDB6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 23:01:13 +0000 Manifest this update: Sat 20 Dec 2025 23:01:13 +0000 Manifest next update: Sun 21 Dec 2025 23:01:13 +0000 Files and hashes: 1: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (hash: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=) 2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: pvEg06RuIx2xE232zcw2WbnAxd7kvcaiVvP7CeHUNVQ=) 3: kDFFmEHOxxsPr1PqT9Wra3pOapo.roa (hash: PtmDDx7DD6q5hVM880BXHYOoqWKL19qOEEf16G0FZlQ=) 4: whsaqddiyDI8xyshxKkHo02Q7GA.roa (hash: GiAQ6ec8LMUk9UTzynBovpvos9gk3+nUpwnbIm92gbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e6:e3:d9:13:68:79:ff:93:7f:da:1c:0d:db:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Validity Not Before: Dec 20 23:01:13 2025 GMT Not After : Dec 21 23:01:13 2025 GMT Subject: CN=c87c81580143e5265d920d11b5b3cf7f1477ebf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:f3:0f:03:68:db:88:22:2e:e7:52:09:e1: 18:b3:a7:a5:66:e8:b0:b2:85:a4:a3:5e:5a:18:e0: b1:e1:66:31:4d:4b:de:ef:1b:2d:9f:97:3f:11:14: 43:6a:92:02:03:cc:75:df:a9:bd:6d:59:c5:e3:fd: 26:df:15:46:b6:10:96:d7:72:44:56:b2:ce:10:1f: 0f:ca:bd:7a:ee:11:e9:33:32:4a:e4:05:3c:aa:e4: 18:8d:c3:bd:dc:96:37:4a:3b:6e:12:ca:9d:d5:61: 6a:1d:02:93:31:76:8f:65:05:42:f7:87:0f:c1:01: 69:67:51:d8:7d:69:9a:d6:7c:d6:8d:64:42:8b:1a: b5:ff:10:0e:8c:85:52:4f:c1:a5:cf:26:a8:71:15: 8f:c5:c7:83:84:6e:18:32:3b:dc:28:bc:95:dc:02: 42:1e:25:3a:12:71:ba:bd:d2:41:eb:7b:82:55:11: 29:5c:85:8e:9b:fd:54:14:36:cb:34:b7:6d:b9:e2: 78:ad:9e:98:b0:89:7e:a7:c3:8b:32:71:51:d6:34: 1e:34:0e:b7:78:e5:1f:fa:81:5c:08:c8:0c:4e:0f: 3c:2f:ae:c8:72:76:26:82:ad:b4:4f:9a:8a:e2:d8: b0:a4:b6:8b:1a:12:25:ef:3d:c2:3b:0d:9f:5c:91: ce:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7C:81:58:01:43:E5:26:5D:92:0D:11:B5:B3:CF:7F:14:77:EB:F3 X509v3 Authority Key Identifier: keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c7:9c:d3:fb:ea:8a:7b:29:e0:37:9f:4e:e6:b9:a1:fe:b2: 6e:e4:7b:1f:d2:8f:9c:47:e0:be:ee:64:0d:d9:22:c8:78:a5: b5:50:d5:82:0e:ac:5c:7b:96:6c:05:d9:13:bb:80:e5:10:4a: 98:90:94:62:ca:eb:d0:56:83:92:c0:8b:f0:44:8d:2d:39:d0: e7:cb:0d:d7:93:72:21:50:3d:a1:c9:65:7b:dc:3f:02:6a:ad: 47:bb:4c:2b:f4:bb:92:c4:e8:a6:0c:54:a5:be:4a:8d:78:03: 97:c5:a6:6e:3e:53:4c:52:d9:ac:9c:ad:fd:59:c9:26:0f:82: 63:3f:a5:59:7c:d6:0f:e4:2d:b6:dd:d6:76:e3:03:2c:38:5d: ad:5b:17:84:c1:9b:69:78:e9:0b:35:b2:fe:9e:f0:94:3b:67: 34:14:e2:cf:d5:d9:8f:a0:11:1f:ab:9e:85:e2:b2:8c:a7:9b: 2c:8c:6e:87:e1:43:6f:fd:23:39:4c:b8:ed:f2:24:25:83:4c: ed:c2:ff:33:a7:cf:8a:03:3e:33:f5:b9:8a:c5:75:de:27:b1: 5b:83:04:e8:c5:7a:4c:ea:6f:37:8a:a2:79:aa:eb:c0:97:92: a7:85:53:ac:52:9d:a8:ec:b8:51:0c:2e:82:68:5b:43:9b:cd: be:0c:54:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/ubj2RNoef+Tf9ocDdttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3 MDViMmYwHhcNMjUxMjIwMjMwMTEzWhcNMjUxMjIxMjMwMTEzWjAzMTEwLwYDVQQD EyhjODdjODE1ODAxNDNlNTI2NWQ5MjBkMTFiNWIzY2Y3ZjE0NzdlYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YLzDwNo24giLudSCeEYs6elZuiw soWko15aGOCx4WYxTUve7xstn5c/ERRDapICA8x136m9bVnF4/0m3xVGthCW13JE VrLOEB8Pyr167hHpMzJK5AU8quQYjcO93JY3SjtuEsqd1WFqHQKTMXaPZQVC94cP wQFpZ1HYfWma1nzWjWRCixq1/xAOjIVST8GlzyaocRWPxceDhG4YMjvcKLyV3AJC HiU6EnG6vdJB63uCVREpXIWOm/1UFDbLNLdtueJ4rZ6YsIl+p8OLMnFR1jQeNA63 eOUf+oFcCMgMTg88L67IcnYmgq20T5qK4tiwpLaLGhIl7z3COw2fXJHODQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh8gVgBQ+UmXZINEbWzz38Ud+vzMB8GA1UdIwQY MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt MGUxZGI5OGFkMjMxLzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacec0/vq insp4DefTua5of6ybuR7H9KPnEfgvu5kDdkiyHiltVDVgg6sXHuWbAXZE7uA5RBK mJCUYsrr0FaDksCL8ESNLTnQ58sN15NyIVA9oclle9w/AmqtR7tMK/S7ksTopgxU pb5KjXgDl8Wmbj5TTFLZrJyt/VnJJg+CYz+lWXzWD+Qttt3WduMDLDhdrVsXhMGb aXjpCzWy/p7wlDtnNBTiz9XZj6ARH6ueheKyjKebLIxuh+FDb/0jOUy47fIkJYNM 7cL/M6fPigM+M/W5isV13iexW4ME6MV6TOpvN4qiearrwJeSp4VTrFKdqOy4UQwu gmhbQ5vNvgxUyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:18:44 2025 by rpki-client