This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json) Hash identifier: EoxVJZRdkLRLSy9/KCK5EgDVTWX7oAtuJqIR0BLvDgo= Subject key identifier: 8A:D4:11:03:EF:87:2B:AA:CB:3D:B7:76:3E:83:E2:60:4E:FA:49:66 Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Certificate serial: 019B3E6DDC37D7A85A450FB6F606A2F3D8A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft Manifest number: 0217 Signing time: Sun 21 Dec 2025 01:02:25 +0000 Manifest this update: Sun 21 Dec 2025 01:02:25 +0000 Manifest next update: Mon 22 Dec 2025 01:02:25 +0000 Files and hashes: 1: NGw8ktOj6OOwsyhqpmQcxVz3HFU.roa (hash: Z7YWYHXxapOgTQP+VOKpEFoycxd68wL+FS31DhS3NVc=) 2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: 4UE9vO0AzzZ5nfUxm2vxi0/1RU3T7dXXXqHEWrOoJlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:dc:37:d7:a8:5a:45:0f:b6:f6:06:a2:f3:d8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Validity Not Before: Dec 21 01:02:25 2025 GMT Not After : Dec 22 01:02:25 2025 GMT Subject: CN=8ad41103ef872baacb3db7763e83e2604efa4966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:bd:e8:01:50:ae:f1:05:a9:ec:81:ef:71: ed:95:ba:57:3a:27:43:21:62:8c:fd:20:00:64:f0: bb:63:b5:0f:76:38:e9:39:92:dd:94:94:5a:74:80: 1b:75:f2:7f:34:b7:f0:96:3f:27:cb:f0:ac:1d:4e: c9:9f:e1:f0:01:1b:0a:1f:c5:76:8f:f2:69:4b:6e: 8c:6d:fb:50:dc:9f:e6:e4:ea:a0:66:b2:ab:a7:1c: f8:7f:82:37:0f:d3:6b:31:3f:f4:92:c5:95:aa:c4: f3:b7:fb:75:fd:5e:15:11:6a:9e:ea:87:68:1a:20: 13:df:87:7a:0c:50:6a:42:a8:7a:8a:ee:de:a1:16: c0:47:16:89:ef:b6:ca:c3:bc:02:0e:71:49:8b:e2: a6:1a:2f:2d:6a:fd:f2:e7:e2:08:60:fc:0b:42:d0: 13:98:92:57:ed:d8:f0:ba:43:9f:5a:48:6c:e7:13: 62:25:25:f5:62:9a:d8:d4:84:4f:f1:25:e7:dc:e6: 9b:9d:0b:87:bb:ce:02:76:f5:a3:d4:cc:a4:07:57: fe:91:63:0c:d8:6d:a1:d0:3c:ae:0b:86:a5:0d:40: 3a:08:7a:71:ca:c7:42:c9:fc:0f:5e:f9:3b:8d:ef: 22:08:45:6e:ed:87:22:a6:69:d7:3d:82:dc:01:a0: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D4:11:03:EF:87:2B:AA:CB:3D:B7:76:3E:83:E2:60:4E:FA:49:66 X509v3 Authority Key Identifier: keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:24:3a:ae:2c:ec:b1:14:48:24:2a:eb:6f:ce:22:22:f4:26: 6b:5a:9c:45:ef:42:f0:9c:b7:f2:aa:4b:c1:55:a4:20:69:1c: 98:4b:3e:44:46:c9:60:f4:7a:45:8d:de:9f:83:7d:72:c6:ef: b1:be:ca:48:b4:79:7c:d7:7a:68:68:f7:5c:00:c5:18:f8:7f: bd:72:73:d3:be:5c:40:43:c0:02:48:b7:e4:c2:3e:ce:4e:6e: 3a:c0:ff:9c:4b:df:29:5f:a8:3f:cf:44:65:12:87:da:69:39: 84:af:50:a7:b0:b9:5f:ba:10:fd:ff:07:d9:04:8f:a6:69:59: 9f:6b:aa:20:77:00:8c:54:cf:a4:df:d9:e3:39:7c:06:c4:eb: 52:b1:58:a5:f7:c4:74:f0:e7:ed:33:b2:02:05:c9:a4:0d:ef: bd:ae:11:61:f8:b6:9c:64:c5:b4:2e:e0:0e:c3:88:ac:54:47: af:c0:99:df:92:4a:9d:4d:9b:ef:ba:39:f9:db:bc:b0:1e:77: ce:0b:7c:1a:7a:4f:09:02:4a:95:0e:4a:f5:1a:39:9e:cc:44: b0:c3:91:ee:ac:7d:b4:a5:c7:cc:5e:ae:08:5d:2d:78:f1:2a: 19:37:5c:26:d1:21:52:f2:2b:94:df:8e:51:06:e3:b1:30:ca: 66:87:21:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bdw316haRQ+29gai89ikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz YTI3YzYwHhcNMjUxMjIxMDEwMjI1WhcNMjUxMjIyMDEwMjI1WjAzMTEwLwYDVQQD Eyg4YWQ0MTEwM2VmODcyYmFhY2IzZGI3NzYzZTgzZTI2MDRlZmE0OTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfO96AFQrvEFqeyB73HtlbpXOidD IWKM/SAAZPC7Y7UPdjjpOZLdlJRadIAbdfJ/NLfwlj8ny/CsHU7Jn+HwARsKH8V2 j/JpS26MbftQ3J/m5OqgZrKrpxz4f4I3D9NrMT/0ksWVqsTzt/t1/V4VEWqe6odo GiAT34d6DFBqQqh6iu7eoRbARxaJ77bKw7wCDnFJi+KmGi8tav3y5+IIYPwLQtAT mJJX7djwukOfWkhs5xNiJSX1YprY1IRP8SXn3OabnQuHu84CdvWj1MykB1f+kWMM 2G2h0DyuC4alDUA6CHpxysdCyfwPXvk7je8iCEVu7YcipmnXPYLcAaC99QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrUEQPvhyuqyz23dj6D4mBO+klmMB8GA1UdIwQY MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt OGIzMDFiYWMzMGM5LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5 LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiQ6rizs sRRIJCrrb84iIvQma1qcRe9C8Jy38qpLwVWkIGkcmEs+REbJYPR6RY3en4N9csbv sb7KSLR5fNd6aGj3XADFGPh/vXJz075cQEPAAki35MI+zk5uOsD/nEvfKV+oP89E ZRKH2mk5hK9Qp7C5X7oQ/f8H2QSPpmlZn2uqIHcAjFTPpN/Z4zl8BsTrUrFYpffE dPDn7TOyAgXJpA3vva4RYfi2nGTFtC7gDsOIrFRHr8CZ35JKnU2b77o5+du8sB53 zgt8GnpPCQJKlQ5K9Ro5nsxEsMOR7qx9tKXHzF6uCF0tePEqGTdcJtEhUvIrlN+O UQbjsTDKZochAg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:33:20 2025 by rpki-client