This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json) Hash identifier: xrttTOjmDu2jfeu5g9XOCMfLoxgA0HxZxp+5huhxgjo= Subject key identifier: C9:C6:FB:5F:03:B7:BB:C8:AB:F6:DF:2B:6A:93:7B:A1:C3:D6:9C:55 Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Certificate serial: 019B3EDA1E730B88E4BE44070850003C3CC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft Manifest number: 17A9 Signing time: Sun 21 Dec 2025 03:00:40 +0000 Manifest this update: Sun 21 Dec 2025 03:00:40 +0000 Manifest next update: Mon 22 Dec 2025 03:00:40 +0000 Files and hashes: 1: 3V6q1-UeO36fLmJlReM_Gz13sMA.roa (hash: PylpUbq0fhCG4XR5C05AhKT8758HGTKJAPQDgwx9IwI=) 2: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=) 3: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=) 4: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=) 5: kwPr5vzt3-ySJo5MI-LQFyEqrD0.roa (hash: wgaBbEuKlBEgI0/63TFwHnJqqn8xIpVCdKTwEP7oyo4=) 6: pNjGXJ-Sea4Ni2pVy1WIRiDYEDE.roa (hash: nLlZJFuKRcHnPRrTWYdH+coSN27tpwhU2HPjFKfGC1o=) 7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: 5Bmc+X89CX5ghleiTlUsPTjxvSqJGOBtvYxvbmwvMbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:1e:73:0b:88:e4:be:44:07:08:50:00:3c:3c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Validity Not Before: Dec 21 03:00:40 2025 GMT Not After : Dec 22 03:00:40 2025 GMT Subject: CN=c9c6fb5f03b7bbc8abf6df2b6a937ba1c3d69c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:d6:97:3a:c0:c3:20:a6:14:13:fc:5f:9e: 91:dc:0d:ca:0a:d2:87:1c:91:c4:cd:81:27:0a:41: f5:39:f0:77:b7:68:3e:89:59:85:58:1f:68:3f:0c: c3:e9:ad:f3:cb:89:bf:da:db:e6:ec:1b:f9:9f:54: 05:22:37:f1:bd:87:85:fb:7c:3b:ad:af:7c:7e:74: 9f:d5:cd:f9:43:92:12:17:16:b9:2a:cf:40:ab:29: dc:e8:93:cd:b5:28:a3:38:76:23:12:7d:8a:3d:6f: 53:ff:21:03:4d:ac:71:b7:5c:19:88:09:42:c3:26: 7d:ec:ab:3c:cb:25:9e:b7:c8:c1:9f:c9:ee:ee:30: 29:b0:aa:c1:2a:76:c4:96:51:5f:8a:d6:8b:dd:24: 9f:78:d4:74:59:c1:05:42:b8:a8:16:02:31:cc:3c: dd:fc:01:de:9b:06:1f:75:dd:cf:ed:c9:58:c3:64: d5:c8:b9:80:0d:57:68:50:58:ff:f1:1c:fb:8a:75: 30:9d:08:fa:e0:24:59:f8:51:87:df:ae:b4:50:3d: 34:45:e3:29:26:13:13:39:62:ed:4d:f3:0f:fd:59: 47:bc:58:01:31:b0:92:44:24:8c:68:56:17:99:6b: d1:45:ff:0c:21:66:dd:2d:d9:bb:a5:8e:83:e4:f3: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C6:FB:5F:03:B7:BB:C8:AB:F6:DF:2B:6A:93:7B:A1:C3:D6:9C:55 X509v3 Authority Key Identifier: keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ff:6d:53:b0:af:a7:30:45:16:73:4e:53:fa:74:1a:e5:5b: ae:b7:b4:f3:f1:30:e0:37:cd:86:af:0a:37:0c:cb:28:7c:e2: ac:a3:57:7c:fb:4f:11:cf:f4:7c:5b:df:4f:09:76:36:ee:cd: bd:cc:7b:e4:6f:10:37:40:14:b6:8d:ef:45:5e:a6:b0:ca:76: da:e6:cc:b8:fd:15:60:e4:9b:7c:4f:e1:fb:2c:53:96:f0:b8: 3e:49:f7:1e:ee:36:d4:ee:64:fc:cb:a6:af:05:66:f2:ac:1e: 13:65:0d:6d:55:02:f2:19:31:9a:fb:44:0d:13:8e:be:05:f8: e4:55:76:be:45:9d:a1:0c:7b:e2:07:d4:78:31:43:68:f6:34: 61:4e:70:a6:7d:1a:21:02:24:8d:f1:60:fd:ec:2a:1e:c8:5e: b3:18:23:11:21:6e:36:b6:c0:00:0a:88:1a:c9:a7:d4:73:b1: 97:e3:e4:74:71:70:4b:bc:9e:40:82:b4:b8:ff:81:8f:94:80: f0:19:81:11:c1:ed:12:db:71:c6:95:af:b3:89:d0:71:40:ab: 51:2a:a2:fd:7f:5f:90:f9:ab:5d:fc:b0:9b:88:13:58:c0:9e: 2d:dd:ed:25:e3:4c:f8:12:d0:3d:b2:10:e6:27:d1:5d:67:ab: 69:ad:63:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2h5zC4jkvkQHCFAAPDzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz YTBjZTIwHhcNMjUxMjIxMDMwMDQwWhcNMjUxMjIyMDMwMDQwWjAzMTEwLwYDVQQD EyhjOWM2ZmI1ZjAzYjdiYmM4YWJmNmRmMmI2YTkzN2JhMWMzZDY5YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywrWlzrAwyCmFBP8X56R3A3KCtKH HJHEzYEnCkH1OfB3t2g+iVmFWB9oPwzD6a3zy4m/2tvm7Bv5n1QFIjfxvYeF+3w7 ra98fnSf1c35Q5ISFxa5Ks9Aqync6JPNtSijOHYjEn2KPW9T/yEDTaxxt1wZiAlC wyZ97Ks8yyWet8jBn8nu7jApsKrBKnbEllFfitaL3SSfeNR0WcEFQrioFgIxzDzd /AHemwYfdd3P7clYw2TVyLmADVdoUFj/8Rz7inUwnQj64CRZ+FGH3660UD00ReMp JhMTOWLtTfMP/VlHvFgBMbCSRCSMaFYXmWvRRf8MIWbdLdm7pY6D5PNKfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnG+18Dt7vIq/bfK2qTe6HD1pxVMB8GA1UdIwQY MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt NTZjYzM5ZGI2ZWQ2LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2 LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv9tU7Cv pzBFFnNOU/p0GuVbrre08/Ew4DfNhq8KNwzLKHzirKNXfPtPEc/0fFvfTwl2Nu7N vcx75G8QN0AUto3vRV6msMp22ubMuP0VYOSbfE/h+yxTlvC4Pkn3Hu421O5k/Mum rwVm8qweE2UNbVUC8hkxmvtEDROOvgX45FV2vkWdoQx74gfUeDFDaPY0YU5wpn0a IQIkjfFg/ewqHshesxgjESFuNrbAAAqIGsmn1HOxl+PkdHFwS7yeQIK0uP+Bj5SA 8BmBEcHtEttxxpWvs4nQcUCrUSqi/X9fkPmrXfywm4gTWMCeLd3tJeNM+BLQPbIQ 5ifRXWeraa1j1w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:32 2025 by rpki-client