This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json) Hash identifier: gaXMhlqhRc9Y2SjrA3JcSgtSCKjWGm3f9MBNZkChsyY= Subject key identifier: 2A:AB:C8:8C:5B:4F:8E:9D:14:24:93:A8:41:32:79:C2:FC:1D:32:13 Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b Certificate serial: 019B3AC64BE06488359AC44F03A151C74277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 08:00:32 +0000 Manifest this update: Sat 20 Dec 2025 08:00:32 +0000 Manifest next update: Sun 21 Dec 2025 08:00:32 +0000 Files and hashes: 1: DkHIx2qomTMRxi5txwcyeQJUMC4.roa (hash: aUooC/gZIs2knffE4CSZxz4fOwgHg5KB9hMX38VnhFA=) 2: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=) 3: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: KN2RLPzXCPvSExIPmFfuoDI7bykGedVfFmxMPQSj4/A=) 4: YPWPyR2PrV8C7bZPatIE86usWRg.roa (hash: oPtwylk/25k8zLps+NlaEoKI3y6QpsbDE1m1nmcztaE=) 5: bOO4UAkgvXb-rMii_89NfL-6bTI.roa (hash: NL1lyy08FzW+vpLdiv9to5VdvnEWSxR942DR56bOFW4=) 6: gVKSPISn7WOtLgcYX82T_CB0k8w.roa (hash: Ym9+8pOqwFm62YT9wllYnMmkH1dr3oLLznDhqgDjeLA=) 7: gincnI_gYVCe8a-UMsJw8uGTHk4.roa (hash: /B3bMOP6Q4JtPQrlZm8v7Y12jGfc6csMXusEpKv3HP0=) 8: pjijzSQUxqzDP8xeNUFbC_-9WRc.roa (hash: idDVoTbAeotEcfiyv3LfRPsc1HSc8qISJahqgpNH+A0=) 9: sbcX3dD-IzvBjjiuOceGuIya184.roa (hash: OgKPXFMnHlbOLdXfkb/OHlLV/72L9AOodiZ4Hgh7ss4=) 10: tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa (hash: a2zNXAKUIiHFRxrlG+HegKhw0N5htHdLY3b/L14Vpl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:4b:e0:64:88:35:9a:c4:4f:03:a1:51:c7:42:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Validity Not Before: Dec 20 08:00:32 2025 GMT Not After : Dec 21 08:00:32 2025 GMT Subject: CN=2aabc88c5b4f8e9d142493a8413279c2fc1d3213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:a6:fc:e2:f4:99:75:92:db:7f:ca:e0:6e: a8:ec:81:f5:ec:8d:a5:55:71:8f:36:3a:a2:98:df: 1b:5c:22:c3:28:08:f9:3c:fa:58:74:ba:8d:0e:4e: 6b:7e:55:28:b4:64:60:89:cf:d0:76:bc:3a:96:22: 88:3f:c8:bb:18:2a:7b:37:35:8a:fd:95:74:61:5d: f7:57:b5:f4:25:10:9f:5f:cf:7d:26:79:89:3d:be: 7d:f6:83:3d:8b:7a:57:1f:43:ab:45:54:4b:1c:75: ea:ff:cc:78:3d:a1:41:c1:a1:5e:97:0d:e8:82:5e: b0:68:5d:73:41:af:61:6b:4a:6f:39:ac:35:12:eb: 2b:b0:3b:13:a2:f4:f0:aa:25:41:4a:2b:cd:ff:a3: 12:49:61:be:e9:1f:f6:0d:80:b2:74:62:32:aa:02: 40:02:dd:14:45:cb:01:9f:83:c4:e5:bb:7c:12:c8: c5:fe:95:59:5c:15:04:84:91:7f:24:42:bc:25:d8: 7f:ba:a5:ea:95:cb:16:ed:0f:1a:fb:69:e7:87:37: 9c:c1:96:d4:52:90:3b:89:88:cb:ad:bd:11:42:1f: 6b:e1:63:e8:b5:1a:d1:b7:10:92:50:ff:88:4d:b1: fb:7d:f7:47:12:53:b4:c5:74:04:82:ca:d0:69:e0: f5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AB:C8:8C:5B:4F:8E:9D:14:24:93:A8:41:32:79:C2:FC:1D:32:13 X509v3 Authority Key Identifier: keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dd:40:a2:fa:cd:f9:e0:3f:12:54:39:d1:2a:63:9d:03:3b: d9:cc:37:ce:9a:ba:f4:40:fa:c3:ef:36:c8:23:ef:eb:29:1f: 6c:1d:76:2c:62:31:96:45:82:86:2c:a4:bf:c2:f2:a0:e3:17: 05:86:75:9f:3b:43:f4:22:bb:77:c2:fc:87:43:9e:0f:7a:a0: ff:50:f6:9c:e5:e6:20:94:e3:e1:8d:86:80:09:a3:44:9c:47: 9c:17:55:de:8d:7f:62:80:bb:7c:da:92:e0:cc:4c:cf:aa:f1: 47:49:8d:06:f1:f2:58:79:21:91:9e:9e:40:ba:08:11:2b:38: ba:75:df:12:91:27:52:de:68:ef:3e:df:82:87:62:ce:4f:73: db:10:e1:e6:67:82:83:71:6b:e0:8d:e9:6d:02:01:d6:35:05: 2c:cc:d1:28:29:d8:6b:4f:e8:d4:58:4f:86:66:2a:96:ae:78: c3:d0:3a:7f:78:b6:45:02:40:a9:03:d2:0e:bc:d9:8a:6a:03: 41:96:3a:79:7e:e8:9b:9e:6b:7c:f7:23:4e:22:71:d8:45:91: 31:da:78:57:11:ef:21:e4:49:f0:fb:40:db:b6:30:e8:50:d0: 14:d2:15:b6:78:37:83:1f:c4:f6:cc:bf:d0:35:1c:97:bd:9b: 09:55:c3:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xkvgZIg1msRPA6FRx0J3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi OTUzMmIwHhcNMjUxMjIwMDgwMDMyWhcNMjUxMjIxMDgwMDMyWjAzMTEwLwYDVQQD EygyYWFiYzg4YzViNGY4ZTlkMTQyNDkzYTg0MTMyNzljMmZjMWQzMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwOm/OL0mXWS23/K4G6o7IH17I2l VXGPNjqimN8bXCLDKAj5PPpYdLqNDk5rflUotGRgic/Qdrw6liKIP8i7GCp7NzWK /ZV0YV33V7X0JRCfX899JnmJPb599oM9i3pXH0OrRVRLHHXq/8x4PaFBwaFelw3o gl6waF1zQa9ha0pvOaw1EusrsDsTovTwqiVBSivN/6MSSWG+6R/2DYCydGIyqgJA At0URcsBn4PE5bt8EsjF/pVZXBUEhJF/JEK8Jdh/uqXqlcsW7Q8a+2nnhzecwZbU UpA7iYjLrb0RQh9r4WPotRrRtxCSUP+ITbH7ffdHElO0xXQEgsrQaeD1/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqryIxbT46dFCSTqEEyecL8HTITMB8GA1UdIwQY MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt OGM0YmM0NTkyN2EzLzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXd1AovrN +eA/ElQ50SpjnQM72cw3zpq69ED6w+82yCPv6ykfbB12LGIxlkWChiykv8LyoOMX BYZ1nztD9CK7d8L8h0OeD3qg/1D2nOXmIJTj4Y2GgAmjRJxHnBdV3o1/YoC7fNqS 4MxMz6rxR0mNBvHyWHkhkZ6eQLoIESs4unXfEpEnUt5o7z7fgodizk9z2xDh5meC g3Fr4I3pbQIB1jUFLMzRKCnYa0/o1FhPhmYqlq54w9A6f3i2RQJAqQPSDrzZimoD QZY6eX7om55rfPcjTiJx2EWRMdp4VxHvIeRJ8PtA27Yw6FDQFNIVtng3gx/E9sy/ 0DUcl72bCVXDtA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:29:04 2025 by rpki-client