This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: dqrtWnOmtyyjpfDRdx3AlbaKPmchcw0SNJO+1sViJyA= Subject key identifier: 38:D2:5C:3C:D1:47:82:FD:FE:8F:52:EC:C6:11:AA:96:3C:4C:BB:10 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019B36E9FFFE32291C83608BF89DA68A283F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 0F89 Signing time: Fri 19 Dec 2025 14:01:03 +0000 Manifest this update: Fri 19 Dec 2025 14:01:03 +0000 Manifest next update: Sat 20 Dec 2025 14:01:03 +0000 Files and hashes: 1: 1-h5OCB8JpMYjopLDVkrKQwK2dpM.roa (hash: d3AbXN4lYtYyEUM8E0v7gWJmAkvZX7xtSRa43xkdCaQ=) 2: 4BRf9QEM8HRGBLk-AoS4Oo-qwJE.roa (hash: 5AHXjtuq+kTYWfnBOXLhKcC6BCQTDutSSrluB2da0xU=) 3: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=) 4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=) 5: JaK5nEHPaQ0eg4QVia6pq3nQtT8.asa (hash: zedp2dasOOuQWUFRKt1kDWC26clgR3XYNTuR7fBJPis=) 6: V2_sT2jDOr8MNnfYkhj5mMdvMaM.asa (hash: wVzZdXFDBv7mOQErQUozopppuOlT1ZjyUfEdZpNO8vQ=) 7: W2igZCKEosi-mfbhRXPXIOTNq9g.roa (hash: ttgFPCRGHj86SopPcwo8WI2fNU1bbHVqZycyehToXcM=) 8: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=) 9: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=) 10: k-o-zmp6E6M3w6lzVcLiVZ5iVV4.asa (hash: Uz7NKhkWs+9EDYle9gncDdJ37LyWdJWLb6DGxc1DGk4=) 11: sBswLDnyePuF7Wb4bNeFEX6khaA.roa (hash: q527iz5VwNMqqpTHR8opQ9UxQkOaCpJMBwKrLwpuxmM=) 12: t1mwU24RWx_QtHlt8VAyAaicScc.asa (hash: qul+FoGF3pEOmc/vqfxBeRQ9gtI1SffvAcYIByELYPs=) 13: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: /qJ1atJhrie2exID7sJFr91I2/9nSATJ7rlV2UZaHus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:ff:fe:32:29:1c:83:60:8b:f8:9d:a6:8a:28:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Dec 19 14:01:03 2025 GMT Not After : Dec 20 14:01:03 2025 GMT Subject: CN=38d25c3cd14782fdfe8f52ecc611aa963c4cbb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:c8:ea:2a:51:6e:bb:dd:ab:1a:0c:84:33: ce:ae:a1:68:8c:d5:6f:a4:8f:b7:7b:cd:05:6d:0b: 99:41:6e:2e:66:a3:69:cf:6a:48:0e:0b:09:1b:74: ba:fe:3d:e6:82:a1:a9:b2:0f:4b:74:9c:d2:55:4c: 36:6d:85:f8:eb:08:19:0f:0c:e2:90:ff:0b:62:d6: 30:60:11:8b:d6:de:cd:32:2c:d6:9b:21:39:f8:14: 52:0c:e6:6e:d5:84:4a:d9:32:11:b1:e1:e0:43:d5: de:5b:f9:52:d5:f2:0d:c5:1a:de:85:83:63:22:96: 05:74:30:33:d9:0a:e0:c1:61:19:5f:76:67:7a:3e: d4:9a:57:29:05:16:1d:78:37:3d:8c:39:ca:7f:58: a3:a9:17:63:36:91:98:d6:d6:be:7e:2f:e8:58:9e: 05:93:82:2a:91:c7:53:98:23:f6:b2:90:85:92:42: ae:ac:77:c2:6c:b4:d0:b0:b0:a6:c7:a0:1b:49:4b: 5d:85:c7:8d:d4:ed:0e:c1:f8:01:d0:d1:99:a8:9f: 44:c5:cd:08:17:7f:11:f1:c7:25:64:5c:13:89:7d: 7d:7b:fc:78:01:ab:6e:c5:0d:b1:c8:03:16:11:b2: 84:c8:2b:d6:4d:a9:5a:f5:54:2f:0f:cd:0a:f5:80: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D2:5C:3C:D1:47:82:FD:FE:8F:52:EC:C6:11:AA:96:3C:4C:BB:10 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4b:79:e6:97:41:7b:d3:3d:4e:39:79:62:3e:90:b9:38:ce: 2a:28:2e:d8:78:2b:45:04:b3:b8:a5:db:7b:96:4e:c5:23:43: 37:7c:27:43:64:aa:ba:0d:37:74:7f:ac:a3:2c:09:01:df:ae: 07:fb:44:6c:a7:11:9d:54:c4:4e:36:f9:f3:fc:f0:c9:c4:55: 8f:f2:c0:76:a3:14:2a:57:d9:08:e9:13:da:f0:c8:f0:6a:f5: 7a:a4:14:b8:58:f4:89:d6:8d:69:ba:80:67:6e:f8:86:a0:c0: 65:ec:95:d5:be:00:36:3b:e6:d1:d6:a6:a5:c9:a0:30:0e:ab: 49:38:58:a8:1b:12:84:57:c1:92:26:3a:e8:20:6f:af:32:f4: f8:fd:3f:12:12:4a:f2:2f:14:72:22:57:2e:7f:04:17:f3:dc: ff:f8:80:aa:f7:a4:56:9f:92:a7:cc:bb:d1:98:08:38:6c:83: 34:39:0a:7d:ca:aa:41:71:41:a2:78:7c:54:a6:48:c8:0b:d4: 48:61:0a:30:be:65:34:3d:14:79:17:fc:68:e8:6c:b4:f6:0f: 53:ad:81:2b:05:2d:53:0e:1a:24:1e:f2:cc:d3:38:81:bc:44: 5e:6e:cd:02:83:d4:5d:04:ca:08:ea:f5:b1:e5:8a:6c:c1:ef: c3:c3:bc:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26f/+Mikcg2CL+J2miig/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjUxMjE5MTQwMTAzWhcNMjUxMjIwMTQwMTAzWjAzMTEwLwYDVQQD EygzOGQyNWMzY2QxNDc4MmZkZmU4ZjUyZWNjNjExYWE5NjNjNGNiYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4rI6ipRbrvdqxoMhDPOrqFojNVv pI+3e80FbQuZQW4uZqNpz2pIDgsJG3S6/j3mgqGpsg9LdJzSVUw2bYX46wgZDwzi kP8LYtYwYBGL1t7NMizWmyE5+BRSDOZu1YRK2TIRseHgQ9XeW/lS1fINxRrehYNj IpYFdDAz2QrgwWEZX3Znej7UmlcpBRYdeDc9jDnKf1ijqRdjNpGY1ta+fi/oWJ4F k4IqkcdTmCP2spCFkkKurHfCbLTQsLCmx6AbSUtdhceN1O0OwfgB0NGZqJ9Exc0I F38R8cclZFwTiX19e/x4AatuxQ2xyAMWEbKEyCvWTala9VQvD80K9YAApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjSXDzRR4L9/o9S7MYRqpY8TLsQMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUt55pdB e9M9Tjl5Yj6QuTjOKigu2HgrRQSzuKXbe5ZOxSNDN3wnQ2Squg03dH+soywJAd+u B/tEbKcRnVTETjb58/zwycRVj/LAdqMUKlfZCOkT2vDI8Gr1eqQUuFj0idaNabqA Z274hqDAZeyV1b4ANjvm0dampcmgMA6rSThYqBsShFfBkiY66CBvrzL0+P0/EhJK 8i8UciJXLn8EF/Pc//iAqvekVp+Sp8y70ZgIOGyDNDkKfcqqQXFBonh8VKZIyAvU SGEKML5lND0UeRf8aOhstPYPU62BKwUtUw4aJB7yzNM4gbxEXm7NAoPUXQTKCOr1 seWKbMHvw8O8cA== -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:06 2025 by rpki-client