This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json) Hash identifier: y/6q30vyKJE5Ov8QoD9TVWr/btc+SPOsDlXdNyYxGAw= Subject key identifier: 48:D3:1D:0F:3E:01:C7:99:CB:D8:3B:D9:1C:BC:74:BA:A5:D8:9D:2F Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4 Certificate serial: 019B4693846577C0DCBBFC6A3D24B8296F96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft Manifest number: 168C Signing time: Mon 22 Dec 2025 15:00:31 +0000 Manifest this update: Mon 22 Dec 2025 15:00:31 +0000 Manifest next update: Tue 23 Dec 2025 15:00:31 +0000 Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: A2RZyPJjEieW0ZzDX8v5t2KVtcUwrrBRGjzGwxXBNtE=) 2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:84:65:77:c0:dc:bb:fc:6a:3d:24:b8:29:6f:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4 Validity Not Before: Dec 22 15:00:31 2025 GMT Not After : Dec 23 15:00:31 2025 GMT Subject: CN=48d31d0f3e01c799cbd83bd91cbc74baa5d89d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:60:33:b4:0c:6b:69:25:84:73:45:c7:91: cc:a8:b3:06:8d:cc:b1:d5:57:af:45:37:55:ee:bf: b9:86:18:e9:de:04:d2:7e:12:dc:43:26:ec:d0:7e: f6:75:15:77:41:94:6a:63:0c:c1:a7:27:91:a5:f1: 5b:ce:f1:38:fe:79:e0:72:c7:8e:77:30:52:5a:5f: 26:48:5f:d9:d4:ae:4a:a5:77:c5:6f:cd:a4:c4:3e: 02:79:1c:7a:bd:15:00:02:77:11:57:c8:1b:11:3f: 3e:05:50:21:4c:22:74:6e:3f:99:58:e6:a1:9b:18: fd:43:92:ac:04:24:bf:a6:e7:ba:17:cc:a1:df:2c: bf:18:60:46:c6:97:16:7d:0e:b9:07:57:37:76:00: 26:13:e9:6f:88:2b:f7:4b:5f:46:63:52:f2:9c:6b: 9a:6f:53:f1:ae:ab:b6:55:e7:9a:f8:2b:57:5e:37: 46:1b:69:1b:10:33:39:94:9f:aa:d0:2a:00:16:f1: 2f:64:8a:0f:84:e4:0e:08:a3:c5:80:87:00:10:cf: e0:dd:d6:3c:aa:46:69:3b:46:f6:20:ba:50:10:74: 86:37:1c:c6:d6:4b:97:7d:e0:e6:de:03:f7:25:4d: 40:ee:bb:ce:9f:58:bc:7c:05:18:5b:a2:09:81:b6: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D3:1D:0F:3E:01:C7:99:CB:D8:3B:D9:1C:BC:74:BA:A5:D8:9D:2F X509v3 Authority Key Identifier: keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:96:41:4a:17:0c:ec:b9:6b:b1:f0:ff:6e:55:ca:56:dc:30: 1d:c8:95:7d:e6:48:9d:2c:33:ca:c8:ca:d9:6a:a9:2f:7b:b9: e4:51:6a:6f:d9:bb:d7:5d:39:4f:f7:c1:72:25:74:ea:1e:82: b6:60:12:ea:cf:4a:2b:9f:73:aa:d5:8e:c6:91:06:3d:df:4c: 3f:51:bc:a0:cc:1c:93:c4:5d:f2:39:94:78:e1:26:72:88:2a: ba:07:fb:23:ec:3f:ea:a6:b8:c2:74:7c:26:96:ff:47:75:1e: 8a:20:09:95:e4:1a:18:75:5c:ce:7c:cb:f2:c3:11:f5:24:4b: 59:82:c4:77:04:0e:de:59:6c:f4:d6:4b:71:c8:ee:5d:8d:56: d0:1c:09:4c:df:52:8e:66:a9:c3:91:15:36:7d:51:f9:db:74: d4:94:33:49:3f:dd:5e:06:bd:3a:46:16:6d:cb:10:47:97:cd: bb:ca:4d:ce:09:a1:ec:6b:fa:c5:04:29:b7:1f:43:57:14:89: 3d:06:1b:99:a8:5d:62:ea:25:4e:62:56:70:1f:ec:bc:08:f3: 73:12:c3:21:34:c8:68:73:48:32:22:9b:a3:7c:8a:7b:a0:b9: ec:df:4d:e4:cf:d6:ab:ac:81:20:4d:f1:57:17:01:59:69:dd: d1:d3:8c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk4Rld8Dcu/xqPSS4KW+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx ZTNhYTQwHhcNMjUxMjIyMTUwMDMxWhcNMjUxMjIzMTUwMDMxWjAzMTEwLwYDVQQD Eyg0OGQzMWQwZjNlMDFjNzk5Y2JkODNiZDkxY2JjNzRiYWE1ZDg5ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxChgM7QMa2klhHNFx5HMqLMGjcyx 1VevRTdV7r+5hhjp3gTSfhLcQybs0H72dRV3QZRqYwzBpyeRpfFbzvE4/nngcseO dzBSWl8mSF/Z1K5KpXfFb82kxD4CeRx6vRUAAncRV8gbET8+BVAhTCJ0bj+ZWOah mxj9Q5KsBCS/pue6F8yh3yy/GGBGxpcWfQ65B1c3dgAmE+lviCv3S19GY1LynGua b1Pxrqu2Veea+CtXXjdGG2kbEDM5lJ+q0CoAFvEvZIoPhOQOCKPFgIcAEM/g3dY8 qkZpO0b2ILpQEHSGNxzG1kuXfeDm3gP3JU1A7rvOn1i8fAUYW6IJgbaO7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjTHQ8+AceZy9g72Ry8dLql2J0vMB8GA1UdIwQY MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJZBShcM 7LlrsfD/blXKVtwwHciVfeZInSwzysjK2WqpL3u55FFqb9m71105T/fBciV06h6C tmAS6s9KK59zqtWOxpEGPd9MP1G8oMwck8Rd8jmUeOEmcogqugf7I+w/6qa4wnR8 Jpb/R3UeiiAJleQaGHVcznzL8sMR9SRLWYLEdwQO3lls9NZLccjuXY1W0BwJTN9S jmapw5EVNn1R+dt01JQzST/dXga9OkYWbcsQR5fNu8pNzgmh7Gv6xQQptx9DVxSJ PQYbmahdYuolTmJWcB/svAjzcxLDITTIaHNIMiKbo3yKe6C57N9N5M/Wq6yBIE3x VxcBWWnd0dOMNQ== -----END CERTIFICATE-----Generated at Mon Dec 22 17:31:12 2025 by rpki-client