This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json) Hash identifier: LGPGc4nwaUtw+PZ79Kd78yASHr68DACU6fyAvQia5T4= Subject key identifier: 37:F6:D4:22:1F:78:C0:B0:82:A0:B2:FD:65:3C:08:9D:0C:74:86:8F Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Certificate serial: 019B3BA2BCDDF5AEDADC848840E43B6E22F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft Manifest number: 169C Signing time: Sat 20 Dec 2025 12:01:19 +0000 Manifest this update: Sat 20 Dec 2025 12:01:19 +0000 Manifest next update: Sun 21 Dec 2025 12:01:19 +0000 Files and hashes: 1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=) 2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=) 3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=) 4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=) 5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: G6k0+nROAU586gTg78mkGe2frs52Cfp0ICgv0PodaK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:bc:dd:f5:ae:da:dc:84:88:40:e4:3b:6e:22:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Validity Not Before: Dec 20 12:01:19 2025 GMT Not After : Dec 21 12:01:19 2025 GMT Subject: CN=37f6d4221f78c0b082a0b2fd653c089d0c74868f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:30:cc:50:30:fd:22:30:42:2a:d0:89:7e: f4:51:db:88:ba:89:5a:2d:79:4d:ed:27:5b:ac:fd: 4b:1f:fc:34:c0:1a:9d:f0:00:5a:47:0b:e7:07:ed: c7:b8:2a:43:b9:4b:2b:07:ae:e1:e4:91:43:ba:2c: 55:69:6e:97:6c:45:e0:84:b1:0d:5b:3d:0f:a7:13: a6:1b:3c:84:79:39:5b:38:67:92:7b:6c:aa:28:09: c8:ed:86:39:90:15:01:1e:14:50:66:d6:7d:cb:b3: 1c:e7:5d:ad:23:ab:dd:13:3f:b7:2a:57:6d:c2:46: b2:a7:3d:0e:66:ff:77:99:cc:06:ac:40:5d:0b:ae: a4:70:a2:50:72:53:c4:f1:77:ab:61:ca:69:b3:37: 48:a4:7c:d5:0c:54:f9:03:70:f4:4f:38:7b:ec:66: 55:fd:aa:11:a6:16:d6:d6:9a:50:8d:bd:9f:f9:5c: 56:9b:86:83:56:e7:4b:4a:89:62:7a:dc:fe:10:87: eb:7f:3e:72:d0:7a:43:69:61:dc:e8:8e:88:13:8f: c5:48:2b:06:7e:ab:82:09:20:03:45:c7:23:ed:a3: af:a8:98:c4:1b:56:e0:ea:58:5c:10:e4:09:07:ea: 41:fc:b1:c9:ec:fe:d5:e6:c1:0a:27:1a:1a:25:38: 4c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F6:D4:22:1F:78:C0:B0:82:A0:B2:FD:65:3C:08:9D:0C:74:86:8F X509v3 Authority Key Identifier: keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6e:33:24:35:1c:30:ef:99:20:31:9d:ef:98:69:3d:2c:db: 93:70:e6:5f:e8:35:7c:0b:09:3d:3b:95:64:9e:ec:de:e8:58: be:14:e1:aa:fb:a4:88:89:c3:cd:76:7b:9d:08:8d:90:59:83: b2:5b:92:dd:df:32:13:7d:ff:0c:c1:a4:a0:cf:f8:76:5f:4f: 4e:b7:3b:e9:48:4e:05:76:26:01:4f:f1:c4:22:21:d6:02:ef: f6:20:9b:db:83:49:3e:4c:88:53:02:76:4d:27:6e:a2:c1:c3: 12:df:67:1b:96:dc:1c:3f:1b:ae:bd:b6:95:04:f1:2b:3c:45: 1c:87:4a:0e:b9:75:64:84:5f:b6:7d:cc:f5:8e:d9:94:c2:93: 11:e8:c9:5b:c1:c2:5f:e3:ff:1e:3a:ad:d9:3a:73:ff:18:04: 37:b3:f1:ea:48:b7:a3:e4:4a:f5:77:99:00:2c:f3:a8:13:ec: b7:d5:9a:a8:4f:a4:a8:04:73:af:0f:07:2c:ee:dc:a3:57:30: d4:11:0d:72:20:1f:b8:3b:ae:51:1b:5a:60:55:df:14:ef:8d: 94:8c:ac:81:f2:f5:e1:73:8f:b7:8a:db:c0:21:ad:91:6d:4b: 5f:47:25:aa:f3:e9:d3:97:85:62:bc:08:3c:44:98:82:bb:82: ff:da:b1:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7orzd9a7a3ISIQOQ7biLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Mzg4MDdhYmI5Y2UxNWI3YTg5MjU5MmI2ZjAwM2YxYTNl MTZiNjAwHhcNMjUxMjIwMTIwMTE5WhcNMjUxMjIxMTIwMTE5WjAzMTEwLwYDVQQD EygzN2Y2ZDQyMjFmNzhjMGIwODJhMGIyZmQ2NTNjMDg5ZDBjNzQ4NjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAMwzFAw/SIwQirQiX70UduIuola LXlN7SdbrP1LH/w0wBqd8ABaRwvnB+3HuCpDuUsrB67h5JFDuixVaW6XbEXghLEN Wz0PpxOmGzyEeTlbOGeSe2yqKAnI7YY5kBUBHhRQZtZ9y7Mc512tI6vdEz+3Kldt wkaypz0OZv93mcwGrEBdC66kcKJQclPE8XerYcppszdIpHzVDFT5A3D0Tzh77GZV /aoRphbW1ppQjb2f+VxWm4aDVudLSolietz+EIfrfz5y0HpDaWHc6I6IE4/FSCsG fquCCSADRccj7aOvqJjEG1bg6lhcEOQJB+pB/LHJ7P7V5sEKJxoaJThMzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDf21CIfeMCwgqCy/WU8CJ0MdIaPMB8GA1UdIwQY MBaAFMc4gHq7nOFbeoklkrbwA/Gj4WtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWIt M2QxZjMwZTA5MjNiLzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWItM2QxZjMwZTA5MjNi LzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASm4zJDUc MO+ZIDGd75hpPSzbk3DmX+g1fAsJPTuVZJ7s3uhYvhThqvukiInDzXZ7nQiNkFmD sluS3d8yE33/DMGkoM/4dl9PTrc76UhOBXYmAU/xxCIh1gLv9iCb24NJPkyIUwJ2 TSduosHDEt9nG5bcHD8brr22lQTxKzxFHIdKDrl1ZIRftn3M9Y7ZlMKTEejJW8HC X+P/Hjqt2Tpz/xgEN7Px6ki3o+RK9XeZACzzqBPst9WaqE+kqARzrw8HLO7co1cw 1BENciAfuDuuURtaYFXfFO+NlIysgfL14XOPt4rbwCGtkW1LX0clqvPp05eFYrwI PESYgruC/9qxcA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:22:34 2025 by rpki-client