This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json) Hash identifier: +zVaxSic83pI7xB3ZUruWzkHUdXEH29/1A8gdkxxcRg= Subject key identifier: 5B:F8:27:78:06:6D:9A:16:35:96:19:4A:51:42:9E:29:EE:A8:3A:3F Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b Certificate serial: 019B405AAF75C42402E33FD451EAD747A401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft Manifest number: 148C Signing time: Sun 21 Dec 2025 10:00:43 +0000 Manifest this update: Sun 21 Dec 2025 10:00:43 +0000 Manifest next update: Mon 22 Dec 2025 10:00:43 +0000 Files and hashes: 1: 7CZAgUvQPu-wrbV-N9bEd3CgOWs.roa (hash: sMayzuz7AI9s61a/aq9HH1Cc6asWKL5qDPVUoL1bHKQ=) 2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: fh8fkEDTbXeRIQSaxywLabkjRkGwepDVD5+A2sCBBVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:af:75:c4:24:02:e3:3f:d4:51:ea:d7:47:a4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b Validity Not Before: Dec 21 10:00:43 2025 GMT Not After : Dec 22 10:00:43 2025 GMT Subject: CN=5bf82778066d9a163596194a51429e29eea83a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:62:60:c1:7a:2e:92:87:f8:ab:ff:b3:01:8f: 50:45:52:91:ce:bd:09:5e:d3:73:3a:12:16:a6:e0: c3:79:87:e5:6c:27:0e:98:eb:b9:02:ba:5b:79:ca: 2d:9e:bc:3d:f5:b0:a9:03:4a:7f:b4:a3:8f:58:87: 6f:5f:1b:fa:cb:fd:d9:aa:38:3d:0c:3b:5e:b8:76: 03:fc:e8:6c:bc:50:52:be:51:fa:5a:81:05:91:a2: 93:a6:26:2f:6b:64:d8:f5:98:19:35:99:b5:37:3b: 79:43:ec:a8:36:ec:56:a5:38:5a:9b:bf:f2:04:a1: ef:e2:15:1e:17:61:0a:b1:65:a2:6e:08:23:bb:e0: 60:48:45:5b:dc:ee:13:cd:b5:1c:99:93:d2:4c:8d: 80:d6:e7:0b:f2:11:91:b6:72:ca:e8:a2:5b:5f:ad: bb:d0:8d:36:70:5e:0c:fd:30:4a:14:23:29:23:86: 60:65:95:57:98:97:99:f2:90:71:c7:9f:79:92:5d: fa:92:6f:21:f9:32:c7:56:be:f5:db:e0:eb:2a:fc: 06:ff:08:e7:c2:23:13:ca:5c:e8:6e:2b:8e:6b:cb: cd:1d:ca:f9:86:f1:96:93:b0:af:d9:a6:43:06:62: 97:26:0e:03:eb:59:ad:42:d5:b3:4a:ab:78:e5:38: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F8:27:78:06:6D:9A:16:35:96:19:4A:51:42:9E:29:EE:A8:3A:3F X509v3 Authority Key Identifier: keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:52:8b:39:37:f9:fd:5f:ce:39:b9:25:4e:25:af:2d:9b:a3: 9d:d4:11:51:6b:71:b3:51:d4:b4:59:a5:6f:51:ea:e2:84:c9: 03:fa:ad:7c:cd:f4:5f:a9:77:74:e1:bd:4b:31:7a:6d:b9:34: 51:2e:f1:77:70:2e:74:94:65:f1:8f:69:8f:f3:66:12:71:bf: 5b:65:61:11:0e:97:4e:b6:08:31:fc:48:18:41:25:08:fa:44: c7:da:09:e5:fc:6e:2a:c4:97:a4:7e:41:37:01:65:ce:c9:2f: 38:5d:cc:b7:3d:4f:50:29:4a:56:44:a0:96:63:5b:28:a3:9c: 53:60:71:b5:83:77:04:2c:69:e7:2d:16:4b:cc:e7:d1:3d:96: f8:68:4b:fa:c1:26:85:0b:4e:19:0c:8c:cd:7e:48:d0:53:d9: 58:10:35:5c:d6:4e:78:1e:2e:1d:0a:ae:3f:23:8a:f1:76:4d: a0:ed:a9:17:22:39:a0:56:19:4b:07:bd:89:3f:25:a0:d2:f2: ca:00:d4:48:a1:1c:7d:94:4c:15:54:3d:7e:2e:fb:cc:f3:4e: 2c:f2:f5:c4:6e:0e:55:79:eb:d1:8b:68:2a:2a:7e:56:da:6b: 88:db:67:b4:13:f5:10:f9:42:83:c8:1b:32:a3:67:15:88:72: 53:c2:b5:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWq91xCQC4z/UUerXR6QBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTE0NzI0ODA2ODNjNjE5NzBmNjA1ZmIxOTllZWI2ZWFl MTIxOGIwHhcNMjUxMjIxMTAwMDQzWhcNMjUxMjIyMTAwMDQzWjAzMTEwLwYDVQQD Eyg1YmY4Mjc3ODA2NmQ5YTE2MzU5NjE5NGE1MTQyOWUyOWVlYTgzYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mJgwXoukof4q/+zAY9QRVKRzr0J XtNzOhIWpuDDeYflbCcOmOu5Arpbecotnrw99bCpA0p/tKOPWIdvXxv6y/3Zqjg9 DDteuHYD/OhsvFBSvlH6WoEFkaKTpiYva2TY9ZgZNZm1Nzt5Q+yoNuxWpTham7/y BKHv4hUeF2EKsWWibggju+BgSEVb3O4TzbUcmZPSTI2A1ucL8hGRtnLK6KJbX627 0I02cF4M/TBKFCMpI4ZgZZVXmJeZ8pBxx595kl36km8h+TLHVr712+DrKvwG/wjn wiMTylzobiuOa8vNHcr5hvGWk7Cv2aZDBmKXJg4D61mtQtWzSqt45TgH6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv4J3gGbZoWNZYZSlFCninuqDo/MB8GA1UdIwQY MBaAFMVRRySAaDxhlw9gX7GZ7rbq4SGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzIt NTdlYjVlZjg5NmUxLzEveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzItNTdlYjVlZjg5NmUx LzEveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFKLOTf5 /V/OObklTiWvLZujndQRUWtxs1HUtFmlb1Hq4oTJA/qtfM30X6l3dOG9SzF6bbk0 US7xd3AudJRl8Y9pj/NmEnG/W2VhEQ6XTrYIMfxIGEElCPpEx9oJ5fxuKsSXpH5B NwFlzskvOF3Mtz1PUClKVkSglmNbKKOcU2BxtYN3BCxp5y0WS8zn0T2W+GhL+sEm hQtOGQyMzX5I0FPZWBA1XNZOeB4uHQquPyOK8XZNoO2pFyI5oFYZSwe9iT8loNLy ygDUSKEcfZRMFVQ9fi77zPNOLPL1xG4OVXnr0YtoKip+VtpriNtntBP1EPlCg8gb MqNnFYhyU8K1nw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:28:24 2025 by rpki-client