This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft File: XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json) Hash identifier: voAlt0GYJJ3na01oi8FJKKYk2OEelf31tyUlWWftXvw= Subject key identifier: 4D:27:B3:D7:42:9C:91:C7:E3:C4:B7:AC:6A:AC:83:68:59:E3:78:76 Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Certificate serial: 019B3C0FD96CD5416347615B83FD3584FF3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft Manifest number: 0851 Signing time: Sat 20 Dec 2025 14:00:30 +0000 Manifest this update: Sat 20 Dec 2025 14:00:30 +0000 Manifest next update: Sun 21 Dec 2025 14:00:30 +0000 Files and hashes: 1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=) 2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: zhJ7btnBGzj4oXkRmPDokrcF5MaslXWOwRtWXZVlH+Q=) 3: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (hash: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=) 4: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=) 5: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=) 6: yM87hDn48G9pC2uXeNqB6MxDyyY.roa (hash: m4eQad2ewLgQnWmXHQewt9Vc5wlc0Xqlxo4fhTztW/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:d9:6c:d5:41:63:47:61:5b:83:fd:35:84:ff:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Validity Not Before: Dec 20 14:00:30 2025 GMT Not After : Dec 21 14:00:30 2025 GMT Subject: CN=4d27b3d7429c91c7e3c4b7ac6aac836859e37876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:2c:05:67:ba:80:0d:40:34:10:e1:4a:8a: 67:59:d8:27:c3:ea:5d:08:87:85:92:e6:bf:89:04: 26:31:e2:7f:98:89:47:75:68:1b:5f:34:cf:4f:00: cd:2e:ae:d3:45:32:22:61:48:f7:c8:d2:99:43:1f: 48:c4:63:63:fd:52:44:7d:69:21:93:97:d4:b6:a1: 65:f2:60:0e:29:78:74:3a:5e:07:eb:13:43:be:08: d6:9e:06:b3:75:8e:76:8d:97:77:5e:51:9c:e8:a8: 88:16:f0:1d:65:8b:98:81:95:c0:de:53:1b:f2:8d: e0:e3:1b:4e:19:fc:1b:4e:c4:53:97:e0:91:07:e2: e5:1a:d0:b6:c5:14:64:cd:1e:ef:67:f2:04:32:5a: 7b:44:b8:b4:bc:ba:ce:67:5e:1f:ec:11:a9:48:01: 57:af:8e:3f:c2:03:15:e0:60:70:dc:8b:4e:a6:a2: 8e:fc:4a:f9:e4:1c:b3:4e:61:35:59:75:3b:03:ba: 92:7a:31:38:d9:01:f2:e3:2a:b6:09:0b:0a:42:e3: 27:88:41:fd:cd:43:f0:93:d8:76:34:89:e7:2e:7d: bc:b4:1c:33:c1:eb:01:75:60:f3:dc:34:d6:d6:f8: 49:c0:2f:33:82:61:ae:f8:70:d6:4b:8b:fe:1b:43: ee:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:27:B3:D7:42:9C:91:C7:E3:C4:B7:AC:6A:AC:83:68:59:E3:78:76 X509v3 Authority Key Identifier: keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:34:25:71:22:a7:77:f3:da:7c:f1:c5:c7:10:cb:1d:d6:3f: 83:0e:a9:90:25:10:d6:6d:9b:35:ca:9e:8c:e1:fe:9e:47:93: 00:96:7e:4b:53:16:ce:e7:97:d3:87:ab:a9:f5:be:7e:c5:0a: 46:b8:17:29:fc:dc:29:be:ab:bb:aa:8a:e3:bd:0a:7a:2f:ef: c7:10:e5:6b:e6:a8:79:46:e8:26:85:c9:bc:f9:82:71:a7:7b: a2:49:6e:45:10:ef:f9:3d:bb:2f:1c:25:43:a7:69:8d:19:29: fc:98:a9:bb:d3:0f:a2:25:0e:f3:19:51:e2:a4:d1:3e:38:74: dc:eb:e2:74:00:bf:2f:76:bc:69:24:9d:f5:e7:6c:37:ea:63: 76:17:8b:53:45:14:03:a5:81:dd:ef:09:17:68:6d:3f:aa:ec: 72:71:a6:45:56:39:0a:cc:a8:c9:96:be:35:59:16:9b:75:e9: 42:80:47:b8:da:08:7a:ac:31:9d:3d:7f:20:7f:1c:a3:69:73: 86:36:f3:fb:95:a8:c8:e3:55:d2:94:bf:e1:9e:f8:7b:3b:8a: bb:14:6e:47:d6:30:a3:58:3a:d7:9d:e9:ba:09:f2:b6:12:85: 4d:ba:2c:fe:45:80:21:29:ee:bc:f9:35:54:77:e2:2f:67:bb: 8f:9a:39:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9ls1UFjR2Fbg/01hP87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODZjNDdkYTZkOTA3OTM0N2I2MGYwNGVkNWM1NTU3ZmU5 ODNlYjgwHhcNMjUxMjIwMTQwMDMwWhcNMjUxMjIxMTQwMDMwWjAzMTEwLwYDVQQD Eyg0ZDI3YjNkNzQyOWM5MWM3ZTNjNGI3YWM2YWFjODM2ODU5ZTM3ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBosBWe6gA1ANBDhSopnWdgnw+pd CIeFkua/iQQmMeJ/mIlHdWgbXzTPTwDNLq7TRTIiYUj3yNKZQx9IxGNj/VJEfWkh k5fUtqFl8mAOKXh0Ol4H6xNDvgjWngazdY52jZd3XlGc6KiIFvAdZYuYgZXA3lMb 8o3g4xtOGfwbTsRTl+CRB+LlGtC2xRRkzR7vZ/IEMlp7RLi0vLrOZ14f7BGpSAFX r44/wgMV4GBw3ItOpqKO/Er55ByzTmE1WXU7A7qSejE42QHy4yq2CQsKQuMniEH9 zUPwk9h2NInnLn28tBwzwesBdWDz3DTW1vhJwC8zgmGu+HDWS4v+G0PubQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0ns9dCnJHH48S3rGqsg2hZ43h2MB8GA1UdIwQY MBaAFF2GxH2m2QeTR7YPBO1cVVf+mD64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYt ZmM2MzI4NDFiYTNlLzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYtZmM2MzI4NDFiYTNl LzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzQlcSKn d/PafPHFxxDLHdY/gw6pkCUQ1m2bNcqejOH+nkeTAJZ+S1MWzueX04erqfW+fsUK RrgXKfzcKb6ru6qK470Kei/vxxDla+aoeUboJoXJvPmCcad7okluRRDv+T27Lxwl Q6dpjRkp/Jipu9MPoiUO8xlR4qTRPjh03OvidAC/L3a8aSSd9edsN+pjdheLU0UU A6WB3e8JF2htP6rscnGmRVY5CsyoyZa+NVkWm3XpQoBHuNoIeqwxnT1/IH8co2lz hjbz+5WoyONV0pS/4Z74ezuKuxRuR9Ywo1g6153pugnythKFTbos/kWAISnuvPk1 VHfiL2e7j5o5Kw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:52 2025 by rpki-client