This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json) Hash identifier: 4ehU+K206hTVAkoeoBnxdoDLa7uSFiufAN3dTpQZeOI= Subject key identifier: B2:B3:F7:2F:E6:80:43:4E:31:99:59:B8:9E:D0:0C:36:2E:E6:77:7A Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf Certificate serial: 019B40C9261DE746D04995A990F484784512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft Manifest number: 0CFE Signing time: Sun 21 Dec 2025 12:01:22 +0000 Manifest this update: Sun 21 Dec 2025 12:01:22 +0000 Manifest next update: Mon 22 Dec 2025 12:01:22 +0000 Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=) 2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: 1kNjfk6tn6sSgtYI0d3Sc7TuAeK0/9BT/SCpSTlkogs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:26:1d:e7:46:d0:49:95:a9:90:f4:84:78:45:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf Validity Not Before: Dec 21 12:01:22 2025 GMT Not After : Dec 22 12:01:22 2025 GMT Subject: CN=b2b3f72fe680434e319959b89ed00c362ee6777a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:e7:5e:83:89:ca:73:75:91:4c:89:ab:bf: 78:1b:eb:3a:65:37:99:b0:2a:60:d3:11:fc:0f:68: c2:a3:cf:3c:32:f0:f0:02:b4:01:2b:70:e2:6c:4d: bd:9d:08:d1:ab:91:7b:1c:64:b2:11:79:e3:19:79: 96:33:b0:fc:66:27:b2:33:65:f9:10:79:92:6f:81: 1c:75:1d:d7:dc:00:2a:e7:09:a4:ca:19:10:92:fe: 00:49:2d:61:1f:8c:27:95:3d:ea:e8:32:de:4f:db: b8:8e:c8:23:6f:1a:4b:94:60:53:e4:f1:84:ec:30: 10:df:43:f1:a4:ae:9b:cd:02:32:3d:e7:95:14:09: 3a:2f:f8:63:e5:53:6a:6a:8c:05:da:1e:24:ad:38: 73:aa:4d:65:09:78:bb:75:5a:d2:45:03:34:c6:f9: bc:6b:d4:ef:d8:3c:88:a1:66:9d:87:14:35:d8:b0: 24:9c:53:4b:88:b8:21:cc:da:48:84:2f:fe:b2:93: 5c:2a:18:6d:0d:9b:65:af:95:e2:55:97:f3:af:b9: fe:3d:16:b0:eb:82:ca:a3:48:ed:5b:1d:f5:f5:61: d6:c6:a7:ea:01:ea:a7:d3:45:b0:4c:4f:2e:00:57: a5:ea:47:95:17:6a:9b:0f:50:15:69:14:67:46:40: cf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B3:F7:2F:E6:80:43:4E:31:99:59:B8:9E:D0:0C:36:2E:E6:77:7A X509v3 Authority Key Identifier: keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:02:71:37:17:3d:a2:f5:85:1f:82:15:0e:d9:3c:82:ba:a5: 4b:95:1e:59:86:96:45:4e:03:bf:be:64:4e:72:50:1f:1a:40: bf:8f:be:f4:1d:b7:2d:27:a0:c8:38:b5:8b:4a:29:75:02:10: e7:1c:19:fa:ff:ce:ce:56:bc:d3:8d:48:21:70:bd:da:40:49: a4:29:2c:26:be:31:51:3e:28:4b:98:c1:f7:cf:99:89:cd:85: 95:ef:8d:cd:b8:87:c8:e3:30:94:35:64:be:07:d7:da:8e:f2: 72:d9:19:9d:93:ac:e4:98:fc:89:f9:b5:b4:4a:19:2c:33:31: 08:06:46:b3:2f:3e:f7:2c:7d:2e:be:e5:58:33:04:2f:62:a6: 40:cd:ba:ab:8e:57:50:a1:94:dc:3a:63:37:fb:06:33:17:dd: 83:84:1c:cb:13:b7:ba:11:01:83:0c:30:6f:a1:7a:9c:61:e4: a3:f3:97:35:80:6a:0c:57:12:aa:1c:7a:b4:03:32:70:9d:ca: f4:7e:f3:93:5c:e2:60:38:02:b6:44:7d:39:33:73:23:08:6d: f2:c8:81:54:13:89:1f:cf:d2:a5:5b:a0:31:58:be:28:36:8f: 96:01:1d:af:bb:6a:51:06:67:b7:fe:19:8e:f2:83:bb:f6:02: c2:9c:bc:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySYd50bQSZWpkPSEeEUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Mzg5Y2U4MjZiYzhkMjY4NjliNDUyZjNjZDkzNjkwMmM1 NTJmYmYwHhcNMjUxMjIxMTIwMTIyWhcNMjUxMjIyMTIwMTIyWjAzMTEwLwYDVQQD EyhiMmIzZjcyZmU2ODA0MzRlMzE5OTU5Yjg5ZWQwMGMzNjJlZTY3NzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykLnXoOJynN1kUyJq794G+s6ZTeZ sCpg0xH8D2jCo888MvDwArQBK3DibE29nQjRq5F7HGSyEXnjGXmWM7D8ZieyM2X5 EHmSb4EcdR3X3AAq5wmkyhkQkv4ASS1hH4wnlT3q6DLeT9u4jsgjbxpLlGBT5PGE 7DAQ30PxpK6bzQIyPeeVFAk6L/hj5VNqaowF2h4krThzqk1lCXi7dVrSRQM0xvm8 a9Tv2DyIoWadhxQ12LAknFNLiLghzNpIhC/+spNcKhhtDZtlr5XiVZfzr7n+PRaw 64LKo0jtWx319WHWxqfqAeqn00WwTE8uAFel6keVF2qbD1AVaRRnRkDPCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKz9y/mgENOMZlZuJ7QDDYu5nd6MB8GA1UdIwQY MBaAFMc4nOgmvI0mhptFLzzZNpAsVS+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2Et NTIwMDhkMWNiOWI2LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2EtNTIwMDhkMWNiOWI2 LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgJxNxc9 ovWFH4IVDtk8grqlS5UeWYaWRU4Dv75kTnJQHxpAv4++9B23LSegyDi1i0opdQIQ 5xwZ+v/Ozla8041IIXC92kBJpCksJr4xUT4oS5jB98+Zic2Fle+NzbiHyOMwlDVk vgfX2o7yctkZnZOs5Jj8ifm1tEoZLDMxCAZGsy8+9yx9Lr7lWDMEL2KmQM26q45X UKGU3DpjN/sGMxfdg4QcyxO3uhEBgwwwb6F6nGHko/OXNYBqDFcSqhx6tAMycJ3K 9H7zk1ziYDgCtkR9OTNzIwht8siBVBOJH8/SpVugMVi+KDaPlgEdr7tqUQZnt/4Z jvKDu/YCwpy8yg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:19:03 2025 by rpki-client