This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json) Hash identifier: RhxHUEX89ZB4/SrzfwnBqzRtxeXf5DaOuYmSxlAq5Ok= Subject key identifier: DA:C1:15:03:22:65:DA:92:78:22:37:D8:A9:1A:83:2E:D4:32:B7:47 Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28 Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128 Certificate serial: 019B3E6C81FAFDF5DB233273EBEBD4B69EAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft Manifest number: 0AFC Signing time: Sun 21 Dec 2025 01:00:56 +0000 Manifest this update: Sun 21 Dec 2025 01:00:56 +0000 Manifest next update: Mon 22 Dec 2025 01:00:56 +0000 Files and hashes: 1: LGIjR37T32om32PNGVlywqITYQM.roa (hash: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=) 2: h3E3zuaVe9Fd-K2eeSfreUoqzxE.roa (hash: zkBB1N0MG6XqITCSMbDyxtWFtXhvrbfgV/J1jxkBcRM=) 3: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: gm2C7y+rltVm1PWalB9O6qCciJkS10Lk7c5hP9pYQ3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:81:fa:fd:f5:db:23:32:73:eb:eb:d4:b6:9e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128 Validity Not Before: Dec 21 01:00:56 2025 GMT Not After : Dec 22 01:00:56 2025 GMT Subject: CN=dac115032265da92782237d8a91a832ed432b747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:b4:5b:d1:2e:ef:2e:73:3c:45:16:1c:e6: b6:5b:c2:f3:d2:64:62:c3:68:5b:2e:4f:62:9b:be: dd:98:bd:24:c1:c6:c0:a0:be:9d:69:9c:70:6a:00: 0a:54:4b:b0:90:c8:37:97:b5:1e:f3:cd:87:44:1d: ab:fc:94:20:03:0c:96:22:ae:05:94:b4:7c:e9:00: b5:2c:1b:a0:9b:dd:73:25:17:37:9a:bd:56:12:85: 0c:3b:55:fb:b5:a7:0b:6a:86:dc:9f:fa:d1:9d:20: a3:6b:ad:06:f0:15:a4:08:00:ad:f1:15:5f:bb:36: 59:3b:4a:82:a5:01:e7:00:bb:e2:0c:1f:35:3a:6f: 69:ac:af:b4:98:f0:a1:ec:a8:8f:af:d4:d6:19:f5: b0:b6:01:6a:72:8c:ee:90:90:fd:29:01:26:1d:c6: 18:0c:4d:44:c1:ff:c4:9e:e8:aa:25:31:86:be:a9: 65:74:16:e4:f5:e2:bb:a3:c4:ed:5d:fe:93:03:a1: e5:0a:d2:5f:e6:40:a8:ce:72:d9:24:f5:5c:65:c3: 97:d1:88:66:51:59:77:d8:b0:74:57:0b:8d:02:b4: 52:f4:e9:34:12:43:5f:26:2a:73:4e:e4:a9:af:4b: 8e:7a:f3:b0:52:fc:c5:2b:88:f3:72:f8:d7:ca:4b: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C1:15:03:22:65:DA:92:78:22:37:D8:A9:1A:83:2E:D4:32:B7:47 X509v3 Authority Key Identifier: keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ea:bd:8a:7b:6f:75:6d:4b:94:1c:f8:30:9d:e7:15:95:db: bc:a2:67:b1:04:aa:92:72:99:f4:d0:0f:28:87:48:7c:43:0c: 5c:61:a0:87:36:9b:fe:c4:a8:cd:7d:ca:fc:48:a0:bf:e8:38: e9:ab:5f:c9:70:50:28:f8:ef:27:40:69:4c:de:8d:81:a3:a9: a9:be:52:50:3e:f8:ae:94:c1:7c:ba:57:d1:8c:0d:24:59:f8: 8b:0d:90:3c:df:9a:e9:e5:df:ca:3b:70:7f:7f:d4:84:f8:0e: 33:fd:8b:df:44:9d:4a:04:8b:f7:d0:b5:84:37:57:d0:19:21: 6a:9d:ec:43:e6:34:e7:21:41:dd:cf:f6:ee:b4:92:80:36:14: 03:8e:5c:a4:89:33:3d:7f:f9:84:cf:dc:74:16:f0:ca:ee:23: d3:21:82:ec:42:29:3c:b5:50:0f:fa:48:1f:9d:13:9a:2e:bd: b2:99:86:a6:c0:b1:d4:e4:f4:1b:5e:e6:9d:24:b3:1d:ac:05: 09:57:e3:7b:f9:5c:79:3d:06:4e:ca:ac:fc:76:c4:99:d9:13: c9:b0:98:9f:a5:69:6a:a5:17:f3:a0:c9:f2:80:76:14:16:ad: d9:f4:19:27:97:5f:5c:7a:b0:53:f6:43:31:97:be:b2:7b:b8: 38:77:b8:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bIH6/fXbIzJz6+vUtp6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmQyMTU0ZWQ1M2I2MjlkODcyYjJhMzhkOWNkMDQxYmRi NGIxMjgwHhcNMjUxMjIxMDEwMDU2WhcNMjUxMjIyMDEwMDU2WjAzMTEwLwYDVQQD EyhkYWMxMTUwMzIyNjVkYTkyNzgyMjM3ZDhhOTFhODMyZWQ0MzJiNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKu0W9Eu7y5zPEUWHOa2W8Lz0mRi w2hbLk9im77dmL0kwcbAoL6daZxwagAKVEuwkMg3l7Ue882HRB2r/JQgAwyWIq4F lLR86QC1LBugm91zJRc3mr1WEoUMO1X7tacLaobcn/rRnSCja60G8BWkCACt8RVf uzZZO0qCpQHnALviDB81Om9prK+0mPCh7KiPr9TWGfWwtgFqcozukJD9KQEmHcYY DE1Ewf/EnuiqJTGGvqlldBbk9eK7o8TtXf6TA6HlCtJf5kCoznLZJPVcZcOX0Yhm UVl32LB0VwuNArRS9Ok0EkNfJipzTuSpr0uOevOwUvzFK4jzcvjXykt7EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrBFQMiZdqSeCI32Kkagy7UMrdHMB8GA1UdIwQY MBaAFMVtIVTtU7Yp2HKyo42c0EG9tLEoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAt N2I0MTBiNzgxZGVmLzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAtN2I0MTBiNzgxZGVm LzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+q9intv dW1LlBz4MJ3nFZXbvKJnsQSqknKZ9NAPKIdIfEMMXGGghzab/sSozX3K/Eigv+g4 6atfyXBQKPjvJ0BpTN6NgaOpqb5SUD74rpTBfLpX0YwNJFn4iw2QPN+a6eXfyjtw f3/UhPgOM/2L30SdSgSL99C1hDdX0Bkhap3sQ+Y05yFB3c/27rSSgDYUA45cpIkz PX/5hM/cdBbwyu4j0yGC7EIpPLVQD/pIH50Tmi69spmGpsCx1OT0G17mnSSzHawF CVfje/lceT0GTsqs/HbEmdkTybCYn6VpaqUX86DJ8oB2FBat2fQZJ5dfXHqwU/ZD MZe+snu4OHe4SQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:10:37 2025 by rpki-client