This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json) Hash identifier: 0ZOrpg56WFbli2+6BEHLzywUJESmZFlfGItOhbj6Ur4= Subject key identifier: 03:BE:4D:01:36:4E:A9:22:D7:77:15:4E:6F:3B:78:CE:B0:72:9B:86 Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4 Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4 Certificate serial: 019B6CC6BDF297C7EA770488153F3704AE4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 01:02:02 +0000 Manifest this update: Tue 30 Dec 2025 01:02:02 +0000 Manifest next update: Wed 31 Dec 2025 01:02:02 +0000 Files and hashes: 1: b9YzzhOPHDVo_soINWMmjLB7fhk.roa (hash: lwz89foq6Y4dt/R5BV0uIhhLjFL2sOp+mEH46qLg0yk=) 2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: XyzqzUkWpK0JrfMjlNTk6NgfTGkHOlaMdpNRrPRgNDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:bd:f2:97:c7:ea:77:04:88:15:3f:37:04:ae:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4 Validity Not Before: Dec 30 01:02:02 2025 GMT Not After : Dec 31 01:02:02 2025 GMT Subject: CN=03be4d01364ea922d777154e6f3b78ceb0729b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:03:75:fe:aa:2b:1d:2a:ba:c4:5f:77:fe: 83:9f:92:a8:fe:43:06:21:e0:83:6e:be:83:24:48: 25:87:c7:89:67:f3:3e:4e:1d:ce:d3:8e:89:3c:7c: d5:4a:c5:1e:47:05:3e:bb:49:1b:5c:b3:72:d2:e3: 7d:f5:a2:ec:39:6b:8f:26:01:e7:e8:67:c9:df:e7: b9:ac:66:76:ad:a2:28:49:ce:a1:d3:19:c4:64:10: a5:25:af:cc:78:e3:7c:70:46:3b:f8:b6:39:5d:68: 19:0c:36:13:d8:d5:7c:2b:33:9a:9b:45:27:89:2c: 06:d9:0f:6d:de:dd:35:63:c2:cb:52:c3:8e:68:a8: 97:7c:bd:cd:f6:67:2c:14:c9:e0:79:c3:f2:f7:40: f1:cd:d3:b2:78:a2:ad:61:46:96:6e:f2:9a:e2:e7: 68:ba:dd:3f:6f:1b:d9:22:5c:f4:9a:5f:8b:01:bf: d3:d9:6f:68:a3:f9:02:46:75:bf:6e:b0:07:96:41: 19:ea:36:78:8c:c7:53:d5:48:e7:14:2b:5d:f8:79: 03:d9:9f:ea:0c:db:27:3c:45:17:21:21:11:30:bf: ae:4e:7f:c9:5b:db:0d:fd:c8:2e:0d:32:29:7b:b2: e5:90:5b:bb:02:32:7b:50:71:7c:7b:91:60:39:e4: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BE:4D:01:36:4E:A9:22:D7:77:15:4E:6F:3B:78:CE:B0:72:9B:86 X509v3 Authority Key Identifier: keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:93:9f:cc:0e:6c:9b:b5:9f:50:b7:e6:96:0b:09:d4:60:92: db:2f:b5:82:76:8d:5d:4b:d8:63:7a:51:21:43:2c:6f:43:c6: a5:e7:08:6b:f1:fe:cb:70:f4:ce:96:b8:64:bd:0c:4d:41:c1: 34:2b:ae:21:b4:07:c0:65:19:71:bd:b8:f4:ca:6f:0c:90:b8: f1:c3:9e:8a:3b:f3:9c:f2:6c:36:4c:a6:1a:ac:1e:70:bb:45: c4:d3:a5:ed:44:b2:ab:f8:1a:87:28:f9:b0:52:34:1e:f1:38: 14:22:4c:f1:9b:04:f3:c7:1c:be:71:d9:ab:5a:52:72:b8:bb: 01:0d:15:80:f0:3e:8b:dc:e0:5c:c2:15:15:35:6f:d6:e2:33: e3:db:4e:de:50:46:c4:da:de:2e:19:09:1c:47:be:30:f8:ca: 5c:95:16:de:3d:54:68:87:60:eb:33:d6:4b:9e:21:e5:cc:f7: d5:73:2d:9d:90:81:7c:d6:34:9d:1a:7c:6d:c5:8b:84:38:3b: 5f:65:1f:ce:92:0b:c6:0b:70:bc:69:be:6c:01:f6:06:27:db: 4e:df:8a:95:13:2b:b8:42:27:e6:68:98:fe:13:08:37:4b:6d: 38:fd:79:0c:bf:d7:50:07:f5:99:71:7a:75:5b:23:e3:ac:58: 33:cf:19:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxr3yl8fqdwSIFT83BK5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTMyNzZjYmNhNjc5M2MzMzQ1N2E5YmYyMmZjMTBiMzgy MzAxZjQwHhcNMjUxMjMwMDEwMjAyWhcNMjUxMjMxMDEwMjAyWjAzMTEwLwYDVQQD EygwM2JlNGQwMTM2NGVhOTIyZDc3NzE1NGU2ZjNiNzhjZWIwNzI5Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wgDdf6qKx0qusRfd/6Dn5Ko/kMG IeCDbr6DJEglh8eJZ/M+Th3O046JPHzVSsUeRwU+u0kbXLNy0uN99aLsOWuPJgHn 6GfJ3+e5rGZ2raIoSc6h0xnEZBClJa/MeON8cEY7+LY5XWgZDDYT2NV8KzOam0Un iSwG2Q9t3t01Y8LLUsOOaKiXfL3N9mcsFMngecPy90DxzdOyeKKtYUaWbvKa4udo ut0/bxvZIlz0ml+LAb/T2W9oo/kCRnW/brAHlkEZ6jZ4jMdT1UjnFCtd+HkD2Z/q DNsnPEUXISERML+uTn/JW9sN/cguDTIpe7LlkFu7AjJ7UHF8e5FgOeShfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO+TQE2Tqki13cVTm87eM6wcpuGMB8GA1UdIwQY MBaAFMYTJ2y8pnk8M0V6m/IvwQs4IwH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yODE4YjYtMWMxMy00NzI0LWJlOTIt OGNkNDM4YjVmMjYwLzEveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yODE4YjYtMWMxMy00NzI0LWJlOTItOGNkNDM4YjVmMjYw LzEveGhNbmJMeW1lVHd6UlhxYjhpX0JDemdqQWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpOfzA5s m7WfULfmlgsJ1GCS2y+1gnaNXUvYY3pRIUMsb0PGpecIa/H+y3D0zpa4ZL0MTUHB NCuuIbQHwGUZcb249MpvDJC48cOeijvznPJsNkymGqwecLtFxNOl7USyq/gahyj5 sFI0HvE4FCJM8ZsE88ccvnHZq1pScri7AQ0VgPA+i9zgXMIVFTVv1uIz49tO3lBG xNreLhkJHEe+MPjKXJUW3j1UaIdg6zPWS54h5cz31XMtnZCBfNY0nRp8bcWLhDg7 X2UfzpILxgtwvGm+bAH2BifbTt+KlRMruEIn5miY/hMIN0ttOP15DL/XUAf1mXF6 dVsj46xYM88Z7Q== -----END CERTIFICATE-----Generated at Tue Dec 30 09:08:36 2025 by rpki-client