This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json) Hash identifier: EycTr81sUO15UACbSxq5YbJsRpCoHPB/L/vZm5kcXwI= Subject key identifier: C7:FE:83:06:EC:C1:D1:3F:39:CA:39:3B:F7:0E:65:48:5D:8F:38:DC Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59 Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159 Certificate serial: 019B4091E0B560681F63CEFDCA0539FDA1B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft Manifest number: 06C1 Signing time: Sun 21 Dec 2025 11:01:00 +0000 Manifest this update: Sun 21 Dec 2025 11:01:00 +0000 Manifest next update: Mon 22 Dec 2025 11:01:00 +0000 Files and hashes: 1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=) 2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: +bEMkUAswInw482KLzbIy7GsBqxTeN0KgixR0Yxpi4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:e0:b5:60:68:1f:63:ce:fd:ca:05:39:fd:a1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159 Validity Not Before: Dec 21 11:01:00 2025 GMT Not After : Dec 22 11:01:00 2025 GMT Subject: CN=c7fe8306ecc1d13f39ca393bf70e65485d8f38dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:22:f3:e4:3f:64:26:55:b8:85:00:43:a9: 0e:71:ff:e9:7b:1e:9f:0f:03:ed:29:6f:a9:84:c8: fc:3e:69:a3:dc:89:84:67:1a:f2:f4:0d:aa:0b:d0: 3c:88:7b:90:28:ad:96:10:ea:69:f2:e8:84:90:e4: 81:5f:00:c1:c8:54:bb:c3:d5:68:2c:30:2f:0c:e3: 0a:42:6d:91:ed:5d:af:aa:f1:d1:7e:89:45:26:00: f3:15:c1:fb:b3:64:66:a4:ba:8a:b6:1b:23:b2:e5: 72:c2:08:74:3e:49:85:d5:7d:cf:6a:70:a9:d4:94: e0:8c:d9:2e:14:ff:a1:e2:87:16:56:f8:6d:31:27: aa:54:27:ea:ee:75:13:3b:63:4d:fb:e0:a3:17:2e: de:f0:da:3e:4f:76:e9:73:82:43:74:eb:71:52:3d: b0:0c:8c:7c:5d:27:fe:00:ac:ef:ca:0b:9b:5a:44: 48:5f:da:88:30:58:da:9b:82:e1:50:d9:23:b1:27: 04:ba:11:ba:71:2f:aa:42:5b:07:1e:85:b7:b3:d5: 21:b4:88:37:f8:99:dd:61:1c:ce:93:69:cb:b2:c2: d7:53:ac:5c:04:06:33:9b:6d:bb:3d:fe:d3:c2:2c: 2b:c0:8b:d7:c0:17:fc:66:9c:4c:75:28:c7:75:43: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FE:83:06:EC:C1:D1:3F:39:CA:39:3B:F7:0E:65:48:5D:8F:38:DC X509v3 Authority Key Identifier: keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:12:e7:f4:51:32:4c:42:6e:a2:08:cb:1f:be:ea:ce:06:7c: 59:94:75:c1:be:c9:00:bc:5e:64:75:37:7b:2e:83:f5:ea:24: 9d:fc:a7:5d:ce:2b:ca:6c:0a:55:f6:d0:75:6b:b8:77:de:1c: dd:d6:d1:c7:c8:b7:94:5f:92:4c:97:8a:ac:92:b7:dc:4d:d8: e0:83:d3:1a:3e:f1:44:85:c0:56:51:f7:72:0b:b6:5a:99:fa: 61:3e:44:58:e8:64:a6:c1:0f:3d:ba:42:e5:ff:18:d7:33:7a: 66:17:dd:e3:a9:d2:81:dd:2b:37:8a:31:85:20:38:44:90:6b: f4:69:ed:91:bd:f9:34:19:f5:85:ed:84:77:2e:5c:1f:94:00: b1:43:a4:0d:3f:6e:5a:2a:53:94:10:d2:2b:cd:9e:76:1b:f3: 12:ee:33:5c:2a:51:de:7f:d0:d8:5d:d7:34:21:9d:56:4f:74: e0:96:59:7e:d9:8d:e7:37:8b:83:11:54:e0:6f:b0:9c:85:bf: fe:73:81:15:17:ef:4e:81:01:c4:b9:15:85:23:e7:05:02:28: 71:c7:2a:77:b2:95:53:e5:35:b5:06:1a:06:70:8a:55:fb:55: 2d:32:db:0b:d0:8c:b9:e1:ae:3a:6a:89:2c:46:1c:a9:50:b3: af:5f:8d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkeC1YGgfY879ygU5/aGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YjM2ZmVhMjJjMzY2ZDA4YTRiNTQ2YWM4M2Y0NDg1YjJi MWUxNTkwHhcNMjUxMjIxMTEwMTAwWhcNMjUxMjIyMTEwMTAwWjAzMTEwLwYDVQQD EyhjN2ZlODMwNmVjYzFkMTNmMzljYTM5M2JmNzBlNjU0ODVkOGYzOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdwi8+Q/ZCZVuIUAQ6kOcf/pex6f DwPtKW+phMj8Pmmj3ImEZxry9A2qC9A8iHuQKK2WEOpp8uiEkOSBXwDByFS7w9Vo LDAvDOMKQm2R7V2vqvHRfolFJgDzFcH7s2RmpLqKthsjsuVywgh0PkmF1X3PanCp 1JTgjNkuFP+h4ocWVvhtMSeqVCfq7nUTO2NN++CjFy7e8No+T3bpc4JDdOtxUj2w DIx8XSf+AKzvygubWkRIX9qIMFjam4LhUNkjsScEuhG6cS+qQlsHHoW3s9UhtIg3 +JndYRzOk2nLssLXU6xcBAYzm227Pf7TwiwrwIvXwBf8ZpxMdSjHdUMRfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMf+gwbswdE/Oco5O/cOZUhdjzjcMB8GA1UdIwQY MBaAFMazb+oiw2bQiktUasg/RIWyseFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jYzA4M2MtZmU3Ni00NDNmLWEyMTQt NTRkMjBkODg5MTVkLzEveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jYzA4M2MtZmU3Ni00NDNmLWEyMTQtNTRkMjBkODg5MTVk LzEveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxLn9FEy TEJuogjLH77qzgZ8WZR1wb7JALxeZHU3ey6D9eoknfynXc4rymwKVfbQdWu4d94c 3dbRx8i3lF+STJeKrJK33E3Y4IPTGj7xRIXAVlH3cgu2Wpn6YT5EWOhkpsEPPbpC 5f8Y1zN6Zhfd46nSgd0rN4oxhSA4RJBr9Gntkb35NBn1he2Edy5cH5QAsUOkDT9u WipTlBDSK82edhvzEu4zXCpR3n/Q2F3XNCGdVk904JZZftmN5zeLgxFU4G+wnIW/ /nOBFRfvToEBxLkVhSPnBQIocccqd7KVU+U1tQYaBnCKVftVLTLbC9CMueGuOmqJ LEYcqVCzr1+NeA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:03:26 2025 by rpki-client