This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json) Hash identifier: r8WtFbFED4m9BWxRnr40uT0VxQTTxor0P58RXXV7tEQ= Subject key identifier: 59:EF:EA:CA:92:10:06:A6:4D:1E:E0:33:6A:20:80:2F:4D:EE:6C:30 Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d Certificate serial: 019B38A1055064235652E329F5893CE09E57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft Manifest number: 178D Signing time: Fri 19 Dec 2025 22:00:35 +0000 Manifest this update: Fri 19 Dec 2025 22:00:35 +0000 Manifest next update: Sat 20 Dec 2025 22:00:35 +0000 Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=) 2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=) 3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: YRfpWji9/6XUTESjPLWb8EQTmPYihUptfU3bk8tDmmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:05:50:64:23:56:52:e3:29:f5:89:3c:e0:9e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d Validity Not Before: Dec 19 22:00:35 2025 GMT Not After : Dec 20 22:00:35 2025 GMT Subject: CN=59efeaca921006a64d1ee0336a20802f4dee6c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:f6:8f:03:1e:fe:5f:56:ea:d9:14:8d:ba: 19:e8:bc:42:c8:7b:d8:d5:e9:0f:fb:21:cc:bf:1a: dc:1d:23:78:16:e0:30:09:59:c5:21:87:9b:d3:44: ed:1e:5e:6e:0c:ad:9d:9a:d4:06:44:67:ae:48:9f: a6:ed:f1:1d:95:7d:fd:f3:1d:86:fb:9a:ee:f1:c9: a5:f4:7d:22:d3:fe:46:04:34:d1:61:a5:c1:99:38: 86:ec:ad:a7:0a:25:d1:4e:bb:be:4a:05:77:c9:5e: 26:ad:5b:d4:42:5e:f9:a5:2b:4e:18:4c:42:93:6e: 16:28:44:d8:e1:73:81:f9:26:31:d0:ac:7b:00:0e: d6:ac:5f:8c:ba:42:d3:22:a9:ff:37:75:ec:bf:33: 14:a8:9a:44:18:54:17:89:8b:70:4f:73:3b:bd:8c: b7:c4:f0:df:07:cc:e1:33:00:93:f5:ba:43:71:ea: f0:9c:e4:3c:f3:c2:44:57:9e:30:f0:2a:60:de:5d: 9d:e1:8a:25:ec:80:d6:69:dc:b9:76:0d:ae:3b:b0: cf:41:a6:1d:51:c9:a3:a7:d9:33:21:6c:73:95:4a: 21:6d:ae:4a:27:ea:07:22:82:68:b1:29:bc:77:6b: d2:31:9b:12:6c:82:ca:e9:b6:0e:b0:e8:6c:2a:af: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EF:EA:CA:92:10:06:A6:4D:1E:E0:33:6A:20:80:2F:4D:EE:6C:30 X509v3 Authority Key Identifier: keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:78:5e:cb:dc:db:86:a9:b1:ca:f9:be:14:0d:1d:6a:fd:e2: 6a:73:b9:24:d4:06:80:dc:32:6d:f4:d0:ab:26:df:8e:af:5f: 89:03:30:91:ce:61:21:9c:34:c9:dc:a5:6b:63:6f:aa:5d:c6: 2d:27:74:52:1c:31:d0:a3:47:af:ce:33:97:92:bc:85:b4:ea: 4f:6c:67:42:d5:9c:09:83:ed:c9:f5:ab:85:31:0b:fd:31:7b: 06:0f:0e:8a:06:e7:fe:50:48:86:9a:81:59:d2:a9:01:b1:57: 7c:24:f4:fb:c7:1f:a4:fd:2b:fc:b9:e9:ed:68:2c:8e:e9:72: b4:21:ab:f9:67:1b:53:73:af:2f:ca:f1:bf:e3:24:77:02:60: 28:ae:eb:5c:2c:ad:25:55:63:8a:f3:50:8f:08:61:70:ce:89: 12:e0:59:38:31:45:d4:2f:58:35:14:e6:5f:0d:47:91:95:03: 42:af:c3:2c:40:be:4c:1d:59:db:9d:ba:1f:c3:94:23:ce:09: 46:19:0a:99:b3:32:ab:60:bf:ec:ef:34:af:80:b2:b6:65:da: 83:32:d9:5d:18:62:19:a1:82:5e:de:d3:38:15:7c:e7:39:0e: a6:84:f0:b5:fc:6f:76:37:60:75:69:5e:81:78:33:14:18:2e: cb:e0:52:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oQVQZCNWUuMp9Yk84J5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1 NTdiMmQwHhcNMjUxMjE5MjIwMDM1WhcNMjUxMjIwMjIwMDM1WjAzMTEwLwYDVQQD Eyg1OWVmZWFjYTkyMTAwNmE2NGQxZWUwMzM2YTIwODAyZjRkZWU2YzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYv2jwMe/l9W6tkUjboZ6LxCyHvY 1ekP+yHMvxrcHSN4FuAwCVnFIYeb00TtHl5uDK2dmtQGRGeuSJ+m7fEdlX398x2G +5ru8cml9H0i0/5GBDTRYaXBmTiG7K2nCiXRTru+SgV3yV4mrVvUQl75pStOGExC k24WKETY4XOB+SYx0Kx7AA7WrF+MukLTIqn/N3XsvzMUqJpEGFQXiYtwT3M7vYy3 xPDfB8zhMwCT9bpDcerwnOQ888JEV54w8Cpg3l2d4Yol7IDWady5dg2uO7DPQaYd Ucmjp9kzIWxzlUohba5KJ+oHIoJosSm8d2vSMZsSbILK6bYOsOhsKq+3+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnv6sqSEAamTR7gM2oggC9N7mwwMB8GA1UdIwQY MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3 LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnhey9zb hqmxyvm+FA0dav3ianO5JNQGgNwybfTQqybfjq9fiQMwkc5hIZw0ydyla2Nvql3G LSd0Uhwx0KNHr84zl5K8hbTqT2xnQtWcCYPtyfWrhTEL/TF7Bg8Oigbn/lBIhpqB WdKpAbFXfCT0+8cfpP0r/Lnp7WgsjulytCGr+WcbU3OvL8rxv+MkdwJgKK7rXCyt JVVjivNQjwhhcM6JEuBZODFF1C9YNRTmXw1HkZUDQq/DLEC+TB1Z2526H8OUI84J RhkKmbMyq2C/7O80r4CytmXagzLZXRhiGaGCXt7TOBV85zkOpoTwtfxvdjdgdWle gXgzFBguy+BSLg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:43 2025 by rpki-client