This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json) Hash identifier: gg72+C1WNmFcu83dSdf6hgfAMjGVwg292fahq6XDfMg= Subject key identifier: 34:68:FB:4B:88:B5:5F:A7:99:48:BD:09:19:BA:25:53:E6:88:66:15 Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28 Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828 Certificate serial: 019B4023E82D1245A65C3D550D39612E0601 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 09:00:53 +0000 Manifest this update: Sun 21 Dec 2025 09:00:53 +0000 Manifest next update: Mon 22 Dec 2025 09:00:53 +0000 Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=) 2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: BJnzNA9Ft/rvUIRTcE2PKuK+uPcUvR/N4DN4GN8DblY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:e8:2d:12:45:a6:5c:3d:55:0d:39:61:2e:06:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828 Validity Not Before: Dec 21 09:00:53 2025 GMT Not After : Dec 22 09:00:53 2025 GMT Subject: CN=3468fb4b88b55fa79948bd0919ba2553e6886615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:e7:ae:10:41:e3:89:48:27:20:92:19:ae: 8d:fc:de:7f:a4:1a:7b:65:c1:da:5c:a9:3b:1c:f3: e3:66:2e:fe:c3:dc:54:c8:3a:9a:6a:35:b1:4c:b6: 6c:7e:cd:b6:f3:b2:31:af:59:de:1b:9b:7c:a2:8f: 13:55:6b:17:24:0f:02:19:8a:0f:04:88:30:b5:04: d6:b8:8a:23:76:cd:92:99:ec:2c:ef:ba:ab:36:34: b0:d0:ff:88:0c:38:56:be:03:0e:29:79:8e:40:07: f4:09:03:a6:c3:44:7d:d9:89:8f:8e:34:67:48:38: c6:7b:a4:53:0d:5a:dc:80:8d:5f:36:58:df:ba:6a: 29:8a:db:f1:2a:e7:e1:44:fe:29:ac:13:49:cc:e8: d9:6e:16:e8:43:c2:f7:54:bf:1a:b0:30:fc:52:50: 56:3c:9e:01:6c:45:a6:e3:d6:83:59:f4:a9:bd:aa: 3f:06:84:33:92:36:24:a8:6a:cc:0f:c7:1b:f6:a5: 03:88:3f:23:37:5e:9e:cb:ce:c4:2d:e5:57:4d:44: 63:55:f6:e3:ea:b8:f4:74:3f:cb:1d:0c:8d:39:71: 47:82:41:77:c4:23:cc:37:7d:d3:ff:3e:00:32:d7: c3:86:15:0a:e6:27:74:5e:b1:dc:fc:aa:49:8c:25: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:68:FB:4B:88:B5:5F:A7:99:48:BD:09:19:BA:25:53:E6:88:66:15 X509v3 Authority Key Identifier: keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ea:a3:89:76:f8:6c:22:c3:49:c2:36:e8:be:9b:75:b8:b4: bf:b0:f8:e8:72:4b:a3:76:09:24:05:a4:d2:24:06:53:76:48: 05:c9:fe:76:ad:61:cc:8f:ad:85:ec:ea:d3:f7:85:37:dd:0c: 6f:38:71:3a:7b:c1:43:9f:bb:bb:c9:e9:a6:45:35:42:07:14: 3c:2b:71:f3:04:66:93:9f:f4:0e:e0:bb:21:f9:55:7d:06:05: 54:f9:7f:3e:7c:bc:cc:a1:67:8f:fe:3b:f1:4a:80:8c:08:a7: de:ac:db:ed:81:a0:fc:00:d3:48:48:c4:5b:ec:90:35:0c:5d: 93:ab:fd:2e:b3:bc:e6:5e:da:47:47:79:2f:ac:86:50:12:18: 07:5d:62:9e:bf:b9:fe:9a:2f:e2:4c:5f:49:4b:0f:27:28:50: 5b:82:47:ef:07:d1:65:b5:6b:f1:95:8b:a5:86:33:81:60:e5: c4:0f:fa:cb:c6:be:0b:61:6b:8c:0e:8e:5f:cc:73:c3:8b:df: b6:98:27:3f:fc:ce:6c:32:d6:31:e8:6c:ca:fe:6d:fa:0e:5d: 0d:23:e6:dd:10:52:4e:b2:50:9b:a5:86:bf:95:37:f7:aa:0d: bd:4b:9f:32:a4:74:09:11:7e:cb:b5:9f:de:7e:dc:eb:2c:30: 50:32:dd:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI+gtEkWmXD1VDTlhLgYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj ZTc4MjgwHhcNMjUxMjIxMDkwMDUzWhcNMjUxMjIyMDkwMDUzWjAzMTEwLwYDVQQD EygzNDY4ZmI0Yjg4YjU1ZmE3OTk0OGJkMDkxOWJhMjU1M2U2ODg2NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN3nrhBB44lIJyCSGa6N/N5/pBp7 ZcHaXKk7HPPjZi7+w9xUyDqaajWxTLZsfs2287Ixr1neG5t8oo8TVWsXJA8CGYoP BIgwtQTWuIojds2Smews77qrNjSw0P+IDDhWvgMOKXmOQAf0CQOmw0R92YmPjjRn SDjGe6RTDVrcgI1fNljfumopitvxKufhRP4prBNJzOjZbhboQ8L3VL8asDD8UlBW PJ4BbEWm49aDWfSpvao/BoQzkjYkqGrMD8cb9qUDiD8jN16ey87ELeVXTURjVfbj 6rj0dD/LHQyNOXFHgkF3xCPMN33T/z4AMtfDhhUK5id0XrHc/KpJjCUqCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRo+0uItV+nmUi9CRm6JVPmiGYVMB8GA1UdIwQY MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt ODYzMmVlOTQxNDViLzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwuqjiXb4 bCLDScI26L6bdbi0v7D46HJLo3YJJAWk0iQGU3ZIBcn+dq1hzI+thezq0/eFN90M bzhxOnvBQ5+7u8nppkU1QgcUPCtx8wRmk5/0DuC7IflVfQYFVPl/Pny8zKFnj/47 8UqAjAin3qzb7YGg/ADTSEjEW+yQNQxdk6v9LrO85l7aR0d5L6yGUBIYB11inr+5 /pov4kxfSUsPJyhQW4JH7wfRZbVr8ZWLpYYzgWDlxA/6y8a+C2FrjA6OX8xzw4vf tpgnP/zObDLWMehsyv5t+g5dDSPm3RBSTrJQm6WGv5U396oNvUufMqR0CRF+y7Wf 3n7c6ywwUDLdoA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:23:33 2025 by rpki-client