This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json) Hash identifier: 8JLLpLqvN+9y7Hn/7uHaY9t6dDXQaiaCti4ytBHaylM= Subject key identifier: 0A:E6:F1:39:5D:F1:0A:FB:8F:70:19:D3:91:25:86:0D:38:C1:BB:94 Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Certificate serial: 019B3C0FED76481BD91FE06DFADBC8D17D9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 14:00:35 +0000 Manifest this update: Sat 20 Dec 2025 14:00:35 +0000 Manifest next update: Sun 21 Dec 2025 14:00:35 +0000 Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=) 2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: hGQc8F767e9URw4wuUG297WtPyQsxmFdOySgEzLiemQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:ed:76:48:1b:d9:1f:e0:6d:fa:db:c8:d1:7d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Validity Not Before: Dec 20 14:00:35 2025 GMT Not After : Dec 21 14:00:35 2025 GMT Subject: CN=0ae6f1395df10afb8f7019d39125860d38c1bb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:a0:21:2d:7b:5f:4b:04:58:c5:bc:c9:31: ba:90:d2:3f:c0:38:78:d5:cb:ef:8d:fb:e3:4a:4d: 66:d4:0f:91:a6:3f:e3:31:0a:4f:a4:f8:24:a8:28: 8d:08:5a:60:30:63:f5:66:7d:24:72:ba:96:ee:96: d3:a1:15:08:11:0c:10:71:34:fe:81:14:6c:59:13: e0:98:66:26:48:81:0a:2b:1a:b0:0a:ea:c6:01:17: 0d:04:6f:ee:8e:47:b1:51:3b:77:6c:7c:5c:39:da: 66:78:74:77:a1:0c:64:44:a6:b2:13:09:b1:5f:5d: c5:6a:5b:86:2b:ac:de:a0:77:ab:bd:60:85:7c:ca: 94:4b:98:2a:cb:23:d8:87:17:83:69:00:51:5b:10: ce:ec:cc:54:fc:22:88:84:ff:b1:99:f2:6b:6c:a5: d4:07:32:7d:40:2e:5f:a6:83:8c:2c:8d:c7:32:2e: a3:e0:98:48:56:86:95:85:f3:61:ef:c3:7c:d6:f6: bd:9a:c9:d3:f2:12:3a:e0:53:17:86:da:6f:85:6f: 45:27:33:aa:cf:d2:b2:e4:2a:e9:3f:18:4b:d8:80: a7:5a:af:8d:06:57:ce:7b:62:c9:a3:14:16:70:cb: f8:42:eb:bb:83:65:43:5c:36:9a:bd:3b:da:e7:8b: e0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E6:F1:39:5D:F1:0A:FB:8F:70:19:D3:91:25:86:0D:38:C1:BB:94 X509v3 Authority Key Identifier: keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f6:f1:82:be:41:51:2a:75:af:ae:66:ef:97:12:57:5b:2a: de:5b:5b:5d:11:df:bf:db:60:05:b9:fb:82:6f:f4:0c:94:2b: f8:7a:cd:8a:70:93:9b:00:95:32:5c:32:9b:2a:36:6b:44:01: 32:90:16:83:16:9c:5b:63:29:53:4e:c8:6b:55:e1:49:18:a3: ce:d9:1c:bf:2c:9e:aa:2e:05:d4:0f:6c:d2:12:91:7b:00:e5: d5:78:d8:86:d5:37:dc:3f:6e:2c:fe:8d:9e:73:c6:91:ca:8c: c2:83:24:47:12:0e:5f:a6:1e:8d:cc:43:e2:74:f7:e2:fb:a1: 3b:07:0e:d3:dc:52:c5:26:38:f8:6c:15:23:36:fb:ad:ad:2c: 91:64:bd:32:4a:0e:17:97:02:da:3f:c2:dd:92:68:4e:e0:7e: dd:d9:f5:8a:32:93:63:2c:de:60:f8:08:9f:46:6f:d2:01:84: ee:22:63:cd:92:e8:b8:1c:68:b0:f9:1b:db:c8:7e:ee:5d:fa: c8:79:c4:4e:81:e3:02:3b:47:aa:24:00:1c:6d:25:72:2f:90: 45:83:4f:8e:d0:d3:28:b3:b7:10:48:5f:56:6a:99:6f:14:7b: 8a:8f:a2:4e:13:56:a1:6b:53:7d:27:40:79:28:7e:c5:72:9f: 48:08:7d:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+12SBvZH+Bt+tvI0X2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi NjdlNDkwHhcNMjUxMjIwMTQwMDM1WhcNMjUxMjIxMTQwMDM1WjAzMTEwLwYDVQQD EygwYWU2ZjEzOTVkZjEwYWZiOGY3MDE5ZDM5MTI1ODYwZDM4YzFiYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriqgIS17X0sEWMW8yTG6kNI/wDh4 1cvvjfvjSk1m1A+Rpj/jMQpPpPgkqCiNCFpgMGP1Zn0kcrqW7pbToRUIEQwQcTT+ gRRsWRPgmGYmSIEKKxqwCurGARcNBG/ujkexUTt3bHxcOdpmeHR3oQxkRKayEwmx X13FaluGK6zeoHervWCFfMqUS5gqyyPYhxeDaQBRWxDO7MxU/CKIhP+xmfJrbKXU BzJ9QC5fpoOMLI3HMi6j4JhIVoaVhfNh78N81va9msnT8hI64FMXhtpvhW9FJzOq z9Ky5CrpPxhL2ICnWq+NBlfOe2LJoxQWcMv4Quu7g2VDXDaavTva54vgiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArm8Tld8Qr7j3AZ05Elhg04wbuUMB8GA1UdIwQY MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt YTQ4NmJlMzU2OWE3LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3 LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfbxgr5B USp1r65m75cSV1sq3ltbXRHfv9tgBbn7gm/0DJQr+HrNinCTmwCVMlwymyo2a0QB MpAWgxacW2MpU07Ia1XhSRijztkcvyyeqi4F1A9s0hKRewDl1XjYhtU33D9uLP6N nnPGkcqMwoMkRxIOX6YejcxD4nT34vuhOwcO09xSxSY4+GwVIzb7ra0skWS9MkoO F5cC2j/C3ZJoTuB+3dn1ijKTYyzeYPgIn0Zv0gGE7iJjzZLouBxosPkb28h+7l36 yHnEToHjAjtHqiQAHG0lci+QRYNPjtDTKLO3EEhfVmqZbxR7io+iThNWoWtTfSdA eSh+xXKfSAh9cQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:23:31 2025 by rpki-client