This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: 7PtFAa9nMElJNcFzEV5X3PsEJ4IF/ZwnkSnfdEsUY+o= Subject key identifier: 1F:90:40:73:AA:18:24:3B:26:33:BD:74:12:94:85:1B:EA:1F:86:0E Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019B3C7E052BD2AFFDCB4C8AFF1887F488E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1797 Signing time: Sat 20 Dec 2025 16:00:50 +0000 Manifest this update: Sat 20 Dec 2025 16:00:50 +0000 Manifest next update: Sun 21 Dec 2025 16:00:50 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: yPyLNmwPOVPbgj7Hy04oh6PsZ/ItuvJKU2Fyql7BfNA=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:05:2b:d2:af:fd:cb:4c:8a:ff:18:87:f4:88:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Dec 20 16:00:50 2025 GMT Not After : Dec 21 16:00:50 2025 GMT Subject: CN=1f904073aa18243b2633bd741294851bea1f860e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:67:c0:22:0a:66:d9:95:14:35:bb:88:e3: c7:cd:03:c8:79:b8:58:26:25:3f:34:38:91:9d:15: b3:dc:53:39:b4:98:62:ad:c5:6d:32:cf:9b:5b:9f: 5b:cb:f2:b4:3f:bf:c3:c3:b1:ce:57:c4:6a:21:a1: 07:58:f4:d2:b6:a4:3e:17:74:53:6a:16:b4:db:62: f3:d6:5a:9c:62:fe:a1:be:30:27:64:06:f6:ff:86: ce:5c:b1:7a:a0:ec:f1:fe:be:b1:aa:96:f3:86:bb: 20:49:f8:43:4d:93:5b:55:51:e3:1a:bf:b9:28:41: ae:2b:20:8f:60:90:60:0e:ac:66:33:7e:5d:05:6b: d1:88:24:0a:33:91:83:9e:71:ae:f5:8f:5b:06:18: 51:7f:20:88:b9:21:20:74:72:44:d6:85:ad:6c:61: a4:d0:5f:87:3e:84:72:a9:a6:87:cb:89:b1:30:58: 34:94:db:54:20:51:47:79:39:34:a9:a5:af:54:ae: ed:c4:58:38:03:4a:d6:05:8d:eb:ff:b9:d8:1f:cc: 19:83:6c:af:a3:22:35:6c:4c:a0:2d:07:ab:cc:d0: 8d:29:03:6b:12:92:4e:05:f7:16:29:d7:b4:06:0f: 39:41:6d:8a:93:55:50:2e:f2:e8:7a:c5:df:54:4f: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:90:40:73:AA:18:24:3B:26:33:BD:74:12:94:85:1B:EA:1F:86:0E X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:61:02:81:05:ba:f3:79:1c:20:34:a8:27:78:45:8d:ab:e4: e7:fd:0a:33:81:13:22:20:f1:77:28:a0:f5:48:59:a3:e7:ae: 42:60:0c:ad:4d:bb:fd:36:db:80:46:fa:46:21:17:54:7f:67: 45:81:5e:0d:50:b5:9a:17:49:76:f0:3b:28:01:b0:3d:8e:b3: b0:91:e2:15:a1:d2:d2:d7:65:f5:d8:0e:55:7a:e2:2f:82:06: 5d:85:f1:78:a1:9c:6e:6f:38:6b:61:53:61:53:e3:d3:0d:e1: 2d:21:19:37:f9:68:23:f5:5b:38:ee:64:f7:be:81:da:50:bf: e6:98:3f:b3:10:26:23:13:d7:5c:69:fc:98:83:01:87:5c:1d: eb:d1:b9:cf:41:f4:68:89:5a:89:c1:6b:e5:2a:96:8f:8e:e3: ef:a9:86:e8:a3:28:67:5b:e3:df:61:fd:be:4e:e0:b1:f0:c8: ae:15:7c:69:d0:3d:0e:67:2c:11:6d:0a:bb:a0:5e:f5:f6:db: 12:eb:4b:5f:94:86:a7:54:cf:08:b8:b0:da:11:8c:cb:7a:a5: dc:f4:00:8c:95:8f:a4:7d:ab:d0:9b:a7:94:f1:af:a7:ae:e7: b4:0b:47:b9:65:aa:3b:45:29:62:1a:b3:a1:38:93:17:be:23: 8f:67:79:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fgUr0q/9y0yK/xiH9IjoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUxMjIwMTYwMDUwWhcNMjUxMjIxMTYwMDUwWjAzMTEwLwYDVQQD EygxZjkwNDA3M2FhMTgyNDNiMjYzM2JkNzQxMjk0ODUxYmVhMWY4NjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYhnwCIKZtmVFDW7iOPHzQPIebhY JiU/NDiRnRWz3FM5tJhircVtMs+bW59by/K0P7/Dw7HOV8RqIaEHWPTStqQ+F3RT aha022Lz1lqcYv6hvjAnZAb2/4bOXLF6oOzx/r6xqpbzhrsgSfhDTZNbVVHjGr+5 KEGuKyCPYJBgDqxmM35dBWvRiCQKM5GDnnGu9Y9bBhhRfyCIuSEgdHJE1oWtbGGk 0F+HPoRyqaaHy4mxMFg0lNtUIFFHeTk0qaWvVK7txFg4A0rWBY3r/7nYH8wZg2yv oyI1bEygLQerzNCNKQNrEpJOBfcWKde0Bg85QW2Kk1VQLvLoesXfVE+QFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+QQHOqGCQ7JjO9dBKUhRvqH4YOMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2ECgQW6 83kcIDSoJ3hFjavk5/0KM4ETIiDxdyig9UhZo+euQmAMrU27/TbbgEb6RiEXVH9n RYFeDVC1mhdJdvA7KAGwPY6zsJHiFaHS0tdl9dgOVXriL4IGXYXxeKGcbm84a2FT YVPj0w3hLSEZN/loI/VbOO5k976B2lC/5pg/sxAmIxPXXGn8mIMBh1wd69G5z0H0 aIlaicFr5SqWj47j76mG6KMoZ1vj32H9vk7gsfDIrhV8adA9DmcsEW0Ku6Be9fbb EutLX5SGp1TPCLiw2hGMy3ql3PQAjJWPpH2r0JunlPGvp67ntAtHuWWqO0UpYhqz oTiTF74jj2d5dg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:41 2025 by rpki-client