This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: uNFDuXWInWUAl5RnMvKzxdEQkKohgbh2HcwrGDmftqA= Subject key identifier: 2E:61:97:26:D2:94:40:06:66:A5:53:96:E4:03:9F:2C:9E:4D:BA:A3 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019B3AFE0DDF0EE0DB053655CFB748FA4E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 17A3 Signing time: Sat 20 Dec 2025 09:01:26 +0000 Manifest this update: Sat 20 Dec 2025 09:01:26 +0000 Manifest next update: Sun 21 Dec 2025 09:01:26 +0000 Files and hashes: 1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=) 2: 9cZF6t0pRfYwb-LBxfj6qIf6oIs.roa (hash: rmhC0UPonVIgMVCi3q+pS4LXi85gqp0ddqXa/K7E7qg=) 3: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=) 4: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=) 5: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=) 6: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=) 7: PWoTLfI1GBVWXAdLNRuMVldxrk4.roa (hash: Be3sB5DnBNtLR4E5AJd2Iddf4oH46RSRRAT/o6NWkO0=) 8: XVtsR7QApMnuJxBGbKhRiugNLuM.roa (hash: mBXTHq+MNZP6clXD4om9o4T9lzXQfLi50+F1yKfLWMA=) 9: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: j2R+Ir1pyQq3FACYWG4BO3GNTGr4CBkfZbOgDhZTf1Q=) 10: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=) 11: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:0d:df:0e:e0:db:05:36:55:cf:b7:48:fa:4e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Dec 20 09:01:26 2025 GMT Not After : Dec 21 09:01:26 2025 GMT Subject: CN=2e619726d294400666a55396e4039f2c9e4dbaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:4e:5d:8e:9a:8b:11:43:98:ae:ab:75:8a: e9:ac:b8:7e:d4:5b:cf:4c:31:da:ae:8c:5c:63:a2: 6f:24:72:f3:23:42:f7:48:72:b4:66:89:b9:ce:13: 5c:34:65:32:13:92:ab:56:c2:d6:5f:a4:60:ba:05: ca:26:e3:22:8f:2d:a4:da:53:4e:04:79:70:85:34: f2:68:c1:fc:79:2c:45:cd:29:77:25:c8:de:ba:1f: fa:4b:61:bf:e7:61:71:d1:35:83:88:8d:6e:dc:ab: 69:ff:a5:70:63:5a:02:71:d1:e6:91:66:bd:23:75: 49:2a:e3:84:ed:91:1c:65:07:da:7a:f2:e7:9e:6d: 1c:14:c7:82:10:70:82:95:6b:c5:2f:ad:9d:1c:11: a0:35:db:79:66:14:16:35:3e:56:23:c2:20:fb:98: bf:19:67:89:43:0f:cd:5d:75:4d:db:32:22:bc:19: 27:ab:ac:19:22:34:dd:e6:0e:b5:30:22:34:92:74: 35:bb:6c:b7:07:73:fd:98:d7:64:f5:78:19:13:aa: c9:51:40:27:ac:9a:b2:6e:2f:c3:92:44:2f:ae:de: f9:9d:51:9f:1c:aa:fb:c9:d2:5d:e7:f0:6b:9d:3c: ff:85:1f:99:7b:8c:8a:fe:99:d3:2c:87:71:31:d2: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:61:97:26:D2:94:40:06:66:A5:53:96:E4:03:9F:2C:9E:4D:BA:A3 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2e:ea:aa:98:06:b9:a6:0c:92:a0:0e:d2:52:8f:bf:8f:1c: f1:b4:88:cd:35:b5:c3:37:25:17:cf:9c:40:86:7f:52:32:2a: ad:2c:4a:a4:8c:4c:51:de:d4:6b:04:7d:8d:ff:0d:40:1d:28: a5:0c:91:e9:6c:0e:92:8f:a5:11:96:9e:8d:dc:90:dd:2e:9f: 8a:13:fd:2b:2b:9f:0a:1f:19:70:fe:b4:75:fa:e6:21:b8:34: 24:58:1c:ab:b5:03:4a:13:59:da:1e:cd:b8:fb:cc:fb:f1:be: fd:a3:7b:bc:37:34:1a:aa:8a:e0:a3:d3:4a:57:64:23:1f:93: 06:b0:c2:7b:d7:e4:3d:31:6b:aa:06:d2:b5:d6:4e:12:f5:96: 3c:27:9f:50:02:3a:0f:ad:0a:46:7d:25:ef:89:c1:d9:ae:a4: 61:6b:01:83:64:e6:38:28:e5:2b:25:da:4c:2b:af:17:ac:f1: 30:24:68:01:25:55:2f:06:d0:c1:7a:a3:1a:08:fa:85:10:1d: 76:13:f7:a6:55:02:38:48:bb:73:58:a6:c9:d3:3b:ba:0b:72: df:0c:c5:7c:43:0e:48:73:49:74:37:e4:53:89:71:5e:aa:94: 8f:a5:04:d2:2d:bb:7d:7e:74:01:b0:2a:3f:c9:81:ab:85:f6: db:e1:65:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/g3fDuDbBTZVz7dI+k4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjUxMjIwMDkwMTI2WhcNMjUxMjIxMDkwMTI2WjAzMTEwLwYDVQQD EygyZTYxOTcyNmQyOTQ0MDA2NjZhNTUzOTZlNDAzOWYyYzllNGRiYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1dOXY6aixFDmK6rdYrprLh+1FvP TDHaroxcY6JvJHLzI0L3SHK0Zom5zhNcNGUyE5KrVsLWX6RgugXKJuMijy2k2lNO BHlwhTTyaMH8eSxFzSl3Jcjeuh/6S2G/52Fx0TWDiI1u3Ktp/6VwY1oCcdHmkWa9 I3VJKuOE7ZEcZQfaevLnnm0cFMeCEHCClWvFL62dHBGgNdt5ZhQWNT5WI8Ig+5i/ GWeJQw/NXXVN2zIivBknq6wZIjTd5g61MCI0knQ1u2y3B3P9mNdk9XgZE6rJUUAn rJqybi/DkkQvrt75nVGfHKr7ydJd5/BrnTz/hR+Ze4yK/pnTLIdxMdJAhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5hlybSlEAGZqVTluQDnyyeTbqjMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC7qqpgG uaYMkqAO0lKPv48c8bSIzTW1wzclF8+cQIZ/UjIqrSxKpIxMUd7UawR9jf8NQB0o pQyR6WwOko+lEZaejdyQ3S6fihP9KyufCh8ZcP60dfrmIbg0JFgcq7UDShNZ2h7N uPvM+/G+/aN7vDc0GqqK4KPTSldkIx+TBrDCe9fkPTFrqgbStdZOEvWWPCefUAI6 D60KRn0l74nB2a6kYWsBg2TmOCjlKyXaTCuvF6zxMCRoASVVLwbQwXqjGgj6hRAd dhP3plUCOEi7c1imydM7ugty3wzFfEMOSHNJdDfkU4lxXqqUj6UE0i27fX50AbAq P8mBq4X22+Fl1w== -----END CERTIFICATE-----Generated at Sat Dec 20 17:24:04 2025 by rpki-client