This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json) Hash identifier: 1V12WeXB7pD3IPbDJiYJ1U6klvTXqkbadJhUfWJwXt8= Subject key identifier: 32:3F:90:AE:8D:18:1F:50:8E:F1:E4:F1:FD:87:DE:5F:87:44:C9:F4 Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1 Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1 Certificate serial: 019B41A43E750DE6CA2B0A5767313E1E156C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft Manifest number: 1065 Signing time: Sun 21 Dec 2025 16:00:41 +0000 Manifest this update: Sun 21 Dec 2025 16:00:41 +0000 Manifest next update: Mon 22 Dec 2025 16:00:41 +0000 Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=) 2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: 5a+QgFe5QASA46dsZN6YkOH8D65kWP07+LnqxXYiZkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:3e:75:0d:e6:ca:2b:0a:57:67:31:3e:1e:15:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1 Validity Not Before: Dec 21 16:00:41 2025 GMT Not After : Dec 22 16:00:41 2025 GMT Subject: CN=323f90ae8d181f508ef1e4f1fd87de5f8744c9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:73:10:4f:d5:7e:e0:ed:be:16:29:51:71: 7e:e9:ea:42:62:d4:02:1a:10:6d:6e:d4:fe:8e:c2: ed:2e:64:56:a8:f3:70:5a:60:3e:03:8a:a3:c5:12: 1c:c0:e2:f4:28:74:8b:bc:ba:73:74:01:c4:4a:44: d5:07:fb:12:af:df:59:a3:55:b2:c1:38:71:10:5f: fa:f8:9b:4f:71:79:12:fd:f7:37:a6:a9:76:62:a0: e2:59:a8:71:eb:7a:3b:78:0f:d6:e0:77:89:68:56: fd:43:77:c4:5d:69:ee:1e:80:10:c6:0e:11:ec:89: 7d:5d:ec:3d:68:9d:17:b8:6e:1d:3a:1c:55:59:83: 67:1f:64:ad:ac:c5:30:e6:75:cd:3c:9b:bc:23:24: 17:90:9d:23:6b:b1:65:35:9c:d0:e3:2d:7a:42:b1: 22:ad:1a:d2:fd:ce:fc:66:65:b7:7b:27:5a:d3:26: 95:36:f9:b9:1c:54:58:55:0b:e4:3f:1f:f8:cf:4f: b6:18:93:0b:52:b3:73:a5:31:c3:3b:69:38:97:ea: c5:4a:c1:6f:6c:fb:62:18:4e:6f:9c:1b:60:59:a6: c1:9b:83:28:01:6f:97:2d:84:e7:ec:d9:8a:76:f7: da:02:4c:75:57:e8:f1:1b:7d:75:1d:16:f7:c6:b5: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3F:90:AE:8D:18:1F:50:8E:F1:E4:F1:FD:87:DE:5F:87:44:C9:F4 X509v3 Authority Key Identifier: keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a6:eb:59:f5:49:df:5a:c6:ef:4c:2c:3a:0b:dc:f7:fd:c3: 83:e9:d4:32:87:30:05:05:38:b5:5a:e7:31:d4:3c:83:77:77: 03:2b:61:e4:04:b9:70:0c:ab:8b:2b:1b:d4:69:74:e9:a0:2d: 89:d7:17:bb:71:21:2d:b4:f6:bb:4b:b5:88:6f:ee:38:7d:06: 8f:f4:8a:43:9a:d6:bd:6f:48:8f:60:cd:1b:aa:33:a3:6b:21: 34:1b:0e:7d:32:99:3e:53:f1:53:4c:d6:a8:b2:eb:8b:3c:37: 4e:ae:1d:f3:b8:dc:f5:93:e4:6f:34:da:0e:98:a3:b1:9a:6c: 24:4e:b2:70:c6:99:f9:3c:51:87:01:4a:d7:9c:ce:fd:60:a2: 1d:0f:d1:7a:cb:96:ce:3e:f1:54:6d:5c:65:ac:b6:ae:44:75: ee:7c:ff:07:cc:e7:78:e7:71:36:8c:bc:2d:87:2f:ba:de:bf: fa:65:1f:3c:9d:a3:41:b0:84:18:fd:de:22:31:96:41:ec:2c: 39:8e:a9:69:10:2c:f1:33:39:4e:b2:3e:e6:9a:fb:0c:54:dd: 46:75:a1:cf:b2:a4:32:eb:e3:27:4f:66:d1:7f:90:03:3c:d4: 49:79:ef:91:3d:73:e1:65:fe:e1:17:e8:02:71:23:21:5a:df: fd:51:29:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpD51DebKKwpXZzE+HhVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNmM2NGZjMjBjZTFkOTcyZjVlMzQ3NDMxOTA0OGEyYWM2 NTZkZjEwHhcNMjUxMjIxMTYwMDQxWhcNMjUxMjIyMTYwMDQxWjAzMTEwLwYDVQQD EygzMjNmOTBhZThkMTgxZjUwOGVmMWU0ZjFmZDg3ZGU1Zjg3NDRjOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9hzEE/VfuDtvhYpUXF+6epCYtQC GhBtbtT+jsLtLmRWqPNwWmA+A4qjxRIcwOL0KHSLvLpzdAHESkTVB/sSr99Zo1Wy wThxEF/6+JtPcXkS/fc3pql2YqDiWahx63o7eA/W4HeJaFb9Q3fEXWnuHoAQxg4R 7Il9Xew9aJ0XuG4dOhxVWYNnH2StrMUw5nXNPJu8IyQXkJ0ja7FlNZzQ4y16QrEi rRrS/c78ZmW3eyda0yaVNvm5HFRYVQvkPx/4z0+2GJMLUrNzpTHDO2k4l+rFSsFv bPtiGE5vnBtgWabBm4MoAW+XLYTn7NmKdvfaAkx1V+jxG311HRb3xrWXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDI/kK6NGB9QjvHk8f2H3l+HRMn0MB8GA1UdIwQY MBaAFF5sZPwgzh2XL140dDGQSKKsZW3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG14a19DRE9IWmN2WGpSME1aQklvcXhsYmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMDk3ODgtOTg2OS00ZjEyLTlmMWUt YWM0ZGUxNjlhZGNlLzEvWG14a19DRE9IWmN2WGpSME1aQklvcXhsYmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mMDk3ODgtOTg2OS00ZjEyLTlmMWUtYWM0ZGUxNjlhZGNl LzEvWG14a19DRE9IWmN2WGpSME1aQklvcXhsYmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqbrWfVJ 31rG70wsOgvc9/3Dg+nUMocwBQU4tVrnMdQ8g3d3Ayth5AS5cAyriysb1Gl06aAt idcXu3EhLbT2u0u1iG/uOH0Gj/SKQ5rWvW9Ij2DNG6ozo2shNBsOfTKZPlPxU0zW qLLrizw3Tq4d87jc9ZPkbzTaDpijsZpsJE6ycMaZ+TxRhwFK15zO/WCiHQ/ResuW zj7xVG1cZay2rkR17nz/B8zneOdxNoy8LYcvut6/+mUfPJ2jQbCEGP3eIjGWQews OY6paRAs8TM5TrI+5pr7DFTdRnWhz7KkMuvjJ09m0X+QAzzUSXnvkT1z4WX+4Rfo AnEjIVrf/VEpbQ== -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:57 2025 by rpki-client