This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json) Hash identifier: YNA6sLztO/S49wTuiR3/iCFcP2rhVxlxovVJ/aOF9Dc= Subject key identifier: 61:3B:B8:3A:31:A5:EF:71:D0:F3:5A:76:AA:E5:E1:F9:70:3E:85:6F Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c Certificate serial: 019B3CB5172F07794FBEF8D7D52BBCC3B72A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft Manifest number: 0169 Signing time: Sat 20 Dec 2025 17:00:59 +0000 Manifest this update: Sat 20 Dec 2025 17:00:59 +0000 Manifest next update: Sun 21 Dec 2025 17:00:59 +0000 Files and hashes: 1: TbZ9-J7RJ19MnUwHQhG72h3QmmA.roa (hash: 1KAnW0BNGRWt07l0J8xmwG1lZvzCRjTvOjNa6gA0ebQ=) 2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: H1T16GVEp7imd4D+QJhbvqFX9AJioSvATLg7eHyeETA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:17:2f:07:79:4f:be:f8:d7:d5:2b:bc:c3:b7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c Validity Not Before: Dec 20 17:00:59 2025 GMT Not After : Dec 21 17:00:59 2025 GMT Subject: CN=613bb83a31a5ef71d0f35a76aae5e1f9703e856f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:61:46:8d:08:8c:de:f9:b2:6d:b2:87:ef: 5f:3a:99:3e:db:6e:53:76:fe:05:66:6c:32:85:12: 55:35:dd:97:07:95:c8:29:8f:bf:96:7e:92:6a:35: 38:18:4e:6b:ed:2b:d0:fe:67:64:fb:be:32:dc:66: 92:59:17:28:81:97:cf:a6:ae:17:a0:c4:1b:ef:46: 87:df:f6:d5:76:93:fe:49:4e:2b:d6:79:bb:be:78: 97:fd:63:47:cf:fd:4c:fe:bc:90:bd:64:3b:0b:f6: 26:a3:f5:db:b8:50:ec:eb:fb:91:8d:f6:80:b9:89: 27:87:09:12:c2:67:5f:23:40:4e:f0:3f:00:ab:28: cc:17:34:12:41:3a:f0:71:3f:65:9d:84:c2:1e:ea: b9:42:43:6e:c6:fd:3f:ab:28:ad:67:a5:a0:c2:17: 93:5f:31:f7:7a:a2:f4:ae:2c:7b:e6:52:3e:e4:e3: 8e:6a:77:e2:79:40:15:70:b4:dd:21:ee:10:a4:31: f4:6b:8d:65:cb:a1:8e:4d:78:30:a0:77:e0:a3:35: 64:3f:c6:87:a6:33:6d:66:90:41:6d:72:33:5a:12: 07:6b:01:f8:d7:42:79:65:95:6c:65:ee:e5:9a:81: 88:59:93:97:35:da:08:3d:32:8e:1f:31:2a:57:44: dc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3B:B8:3A:31:A5:EF:71:D0:F3:5A:76:AA:E5:E1:F9:70:3E:85:6F X509v3 Authority Key Identifier: keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:04:6e:e9:0c:3d:25:8f:ed:06:81:b6:e9:ef:29:a1:56:c9: 3e:a1:b8:1b:54:08:38:65:17:b1:f1:ad:69:ef:f0:f3:22:f3: 2c:b6:f8:d1:37:3e:e5:6d:63:8e:60:49:a7:fb:5b:e0:3a:38: 8c:58:7e:72:6f:a5:2c:a8:23:73:e6:a1:ab:47:9f:aa:69:c1: 8f:d8:4e:9c:79:6d:d4:e6:76:5f:19:13:d1:a9:0f:d1:33:0d: 94:b0:fa:46:b9:11:3b:0a:01:21:d4:95:56:37:27:8f:2a:5b: ef:25:e5:4a:f2:37:79:09:dc:cc:ac:7e:39:d8:90:a0:c2:3b: 56:d1:dd:30:98:b1:e6:bd:e9:8a:6e:f1:8c:a5:5e:89:ff:8a: 9f:3d:0e:0f:9b:a5:ac:a5:6a:35:c9:1c:a3:24:6d:2f:3c:55: 4c:2e:1f:b7:ce:39:a8:cb:d7:2c:87:1e:10:b3:e5:91:c4:ae: 21:46:00:e5:e4:46:95:50:61:96:32:aa:cd:61:d4:81:9b:27: 77:13:47:94:70:1d:50:35:f9:49:d7:64:b7:3c:a5:8c:c4:51: 9c:c9:99:f0:4f:53:9a:0b:c4:37:b6:c9:db:e9:9f:fb:93:c8: 7f:2b:5b:40:21:99:57:de:f6:ea:fd:5d:11:e1:40:d7:6a:c5: 0b:b6:d5:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRcvB3lPvvjX1Su8w7cqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MGYzMjQ2ZmRkNjFiYTFiNTc5MmZlMWFlYzRhZGNhOThk NzVhNWMwHhcNMjUxMjIwMTcwMDU5WhcNMjUxMjIxMTcwMDU5WjAzMTEwLwYDVQQD Eyg2MTNiYjgzYTMxYTVlZjcxZDBmMzVhNzZhYWU1ZTFmOTcwM2U4NTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT5hRo0IjN75sm2yh+9fOpk+225T dv4FZmwyhRJVNd2XB5XIKY+/ln6SajU4GE5r7SvQ/mdk+74y3GaSWRcogZfPpq4X oMQb70aH3/bVdpP+SU4r1nm7vniX/WNHz/1M/ryQvWQ7C/Ymo/XbuFDs6/uRjfaA uYknhwkSwmdfI0BO8D8AqyjMFzQSQTrwcT9lnYTCHuq5QkNuxv0/qyitZ6WgwheT XzH3eqL0rix75lI+5OOOanfieUAVcLTdIe4QpDH0a41ly6GOTXgwoHfgozVkP8aH pjNtZpBBbXIzWhIHawH410J5ZZVsZe7lmoGIWZOXNdoIPTKOHzEqV0TcQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGE7uDoxpe9x0PNadqrl4flwPoVvMB8GA1UdIwQY MBaAFMYPMkb91huhtXkv4a7ErcqY11pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUt MTc5NzkyNzY4ZGFlLzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUtMTc5NzkyNzY4ZGFl LzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwRu6Qw9 JY/tBoG26e8poVbJPqG4G1QIOGUXsfGtae/w8yLzLLb40Tc+5W1jjmBJp/tb4Do4 jFh+cm+lLKgjc+ahq0efqmnBj9hOnHlt1OZ2XxkT0akP0TMNlLD6RrkROwoBIdSV Vjcnjypb7yXlSvI3eQnczKx+OdiQoMI7VtHdMJix5r3pim7xjKVeif+Knz0OD5ul rKVqNckcoyRtLzxVTC4ft845qMvXLIceELPlkcSuIUYA5eRGlVBhljKqzWHUgZsn dxNHlHAdUDX5SddktzyljMRRnMmZ8E9TmgvEN7bJ2+mf+5PIfytbQCGZV9726v1d EeFA12rFC7bVtw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:26:05 2025 by rpki-client