This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json) Hash identifier: mJKSnR+328F2ToUlf3oNVvWlgCHv/kvaZ+3fiFp14nk= Subject key identifier: E2:EE:72:F2:D8:5C:08:53:52:BE:6D:4D:41:67:C3:83:33:53:C9:62 Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4 Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4 Certificate serial: 019B6AD875E9FE4048B07EDDDA927E681AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft Manifest number: 17A2 Signing time: Mon 29 Dec 2025 16:02:09 +0000 Manifest this update: Mon 29 Dec 2025 16:02:09 +0000 Manifest next update: Tue 30 Dec 2025 16:02:09 +0000 Files and hashes: 1: b9YzzhOPHDVo_soINWMmjLB7fhk.roa (hash: lwz89foq6Y4dt/R5BV0uIhhLjFL2sOp+mEH46qLg0yk=) 2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: /AA5uL+TFfYFxko9SbQZMocSqsvAGbwbVmbPLiuNi08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:75:e9:fe:40:48:b0:7e:dd:da:92:7e:68:1a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4 Validity Not Before: Dec 29 16:02:09 2025 GMT Not After : Dec 30 16:02:09 2025 GMT Subject: CN=e2ee72f2d85c085352be6d4d4167c3833353c962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:2d:d0:fa:2f:b0:08:f4:fd:a4:a6:a7:5e: 6d:60:84:86:ce:89:8a:c7:e1:45:21:d7:63:f1:d9: d0:b1:c3:7f:6d:65:83:31:e0:7a:46:54:08:6c:d5: 9b:28:a2:71:24:93:3e:17:c4:09:a8:03:3a:f6:30: 21:4a:c2:ec:3a:70:ea:88:ec:40:a8:af:4c:e5:9f: 3a:ce:b5:ad:84:c6:c1:14:8f:d9:66:3b:c7:73:48: 03:5e:d6:31:2c:ab:ac:b9:58:7a:f6:d5:4b:82:db: db:a3:dd:28:8b:3d:24:3d:40:53:88:9e:10:53:ca: 75:14:c1:40:3a:42:c6:09:03:d7:f9:f0:d7:d3:c8: 2f:6e:c5:e2:87:02:f1:08:cd:55:1c:22:9c:7a:5a: c5:81:ee:af:01:35:c0:aa:a6:f1:4d:8b:a2:8e:a6: 54:12:44:66:2a:92:ec:d0:55:1f:a6:65:55:12:97: 40:b3:61:80:64:1e:a3:af:4f:2a:05:f7:43:df:c0: 23:a1:0b:3d:cb:c2:24:d7:7a:c5:5b:31:ea:ff:b8: 27:2e:10:2e:37:8f:fc:c7:67:2f:0c:d9:c7:91:db: 31:fc:ad:d8:64:6e:88:dc:be:f0:25:fc:0e:12:14: 6c:d8:29:0f:fb:af:a1:af:61:f0:a0:fe:9a:f1:3b: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EE:72:F2:D8:5C:08:53:52:BE:6D:4D:41:67:C3:83:33:53:C9:62 X509v3 Authority Key Identifier: keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d1:dd:00:30:37:ff:ed:75:09:4b:10:9a:11:66:d7:8f:f3: 82:04:0e:ea:b6:5d:9b:43:9e:87:f1:d7:ca:f3:22:81:dd:38: 8a:8b:4a:ff:f5:f2:79:eb:4c:17:4e:6c:d9:72:f8:c0:fd:a4: 86:6b:f1:4d:a4:b3:75:0d:2d:50:33:21:27:c0:23:06:a3:1f: f9:7b:16:5f:a9:bb:9b:cf:60:42:ac:33:90:8f:c2:98:16:bb: 93:cc:64:0d:a8:08:96:6b:aa:e2:a1:4a:4b:3f:38:66:8d:fc: 7d:9b:1c:b6:61:6d:11:a3:b5:e6:f7:4c:08:35:c1:32:36:ac: 16:63:3d:b0:52:c7:0e:1d:86:23:00:46:40:64:c3:9a:45:ec: 93:1a:3e:0a:fe:95:79:a1:99:92:5f:ba:7e:e0:18:ac:b4:9c: 41:19:cd:75:b0:ac:ec:a5:0b:b2:3c:fa:06:ad:6c:ba:c6:8b: f5:dc:2b:22:36:59:5f:c3:fd:13:9c:c1:ff:c7:ea:ca:a3:be: 7e:4d:d1:a7:44:f9:10:14:72:1b:49:76:ac:f8:50:e9:16:97: 94:9a:c3:b2:51:b3:7a:44:c4:ea:ce:93:39:7a:48:04:d3:7a: 51:dc:6d:bf:f3:52:09:77:58:0c:84:1b:43:7d:27:24:3b:5d: 3b:df:db:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2HXp/kBIsH7d2pJ+aBrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTMyNzZjYmNhNjc5M2MzMzQ1N2E5YmYyMmZjMTBiMzgy MzAxZjQwHhcNMjUxMjI5MTYwMjA5WhcNMjUxMjMwMTYwMjA5WjAzMTEwLwYDVQQD EyhlMmVlNzJmMmQ4NWMwODUzNTJiZTZkNGQ0MTY3YzM4MzMzNTNjOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzwt0PovsAj0/aSmp15tYISGzomK x+FFIddj8dnQscN/bWWDMeB6RlQIbNWbKKJxJJM+F8QJqAM69jAhSsLsOnDqiOxA qK9M5Z86zrWthMbBFI/ZZjvHc0gDXtYxLKusuVh69tVLgtvbo90oiz0kPUBTiJ4Q U8p1FMFAOkLGCQPX+fDX08gvbsXihwLxCM1VHCKcelrFge6vATXAqqbxTYuijqZU EkRmKpLs0FUfpmVVEpdAs2GAZB6jr08qBfdD38AjoQs9y8Ik13rFWzHq/7gnLhAu N4/8x2cvDNnHkdsx/K3YZG6I3L7wJfwOEhRs2CkP+6+hr2HwoP6a8TuTLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLucvLYXAhTUr5tTUFnw4MzU8liMB8GA1UdIwQY MBaAFMYTJ2y8pnk8M0V6m/IvwQs4IwH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yODE4YjYtMWMxMy00NzI0LWJlOTIt OGNkNDM4YjVmMjYwLzEveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yODE4YjYtMWMxMy00NzI0LWJlOTItOGNkNDM4YjVmMjYw LzEveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9HdADA3 /+11CUsQmhFm14/zggQO6rZdm0Oeh/HXyvMigd04iotK//XyeetMF05s2XL4wP2k hmvxTaSzdQ0tUDMhJ8AjBqMf+XsWX6m7m89gQqwzkI/CmBa7k8xkDagIlmuq4qFK Sz84Zo38fZsctmFtEaO15vdMCDXBMjasFmM9sFLHDh2GIwBGQGTDmkXskxo+Cv6V eaGZkl+6fuAYrLScQRnNdbCs7KULsjz6Bq1susaL9dwrIjZZX8P9E5zB/8fqyqO+ fk3Rp0T5EBRyG0l2rPhQ6RaXlJrDslGzekTE6s6TOXpIBNN6Udxtv/NSCXdYDIQb Q30nJDtdO9/b7A== -----END CERTIFICATE-----Generated at Mon Dec 29 18:44:31 2025 by rpki-client