This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: GHx6XCwfGzKPU0DOy4KvvkKFgEJlUQoIS+sqhXWsB1E= Subject key identifier: 1B:89:A2:DD:D8:F1:48:16:BF:4D:5E:29:8C:C7:4D:28:47:51:2D:62 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019B3833AB04AACFD5F99354481FD02F309B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1340 Signing time: Fri 19 Dec 2025 20:01:08 +0000 Manifest this update: Fri 19 Dec 2025 20:01:08 +0000 Manifest next update: Sat 20 Dec 2025 20:01:08 +0000 Files and hashes: 1: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (hash: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=) 2: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=) 3: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=) 4: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=) 5: DvF8t9IlxmCDE7eFFlHlL3S7BtQ.roa (hash: q1i0GBgyIfuASOH5psAfGMqR7ZZC66TTNfURWKBgMUE=) 6: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=) 7: Y2nJBnRnNh-WlEWlPML8mjTDUbM.roa (hash: EQQSLf951cekN3Ib/OD0TFtguegsJd5BXORrWTSHjrc=) 8: ZAx7Azq9YHnuLtmsAGgkpQ9XaQk.roa (hash: Nv+QAFomBrYRU4aOf9OpKKgjZFP6zJcF4QMA/O4RLyo=) 9: cGP_gRD-iBTmMU6jmRktcee-Lfo.roa (hash: wwltlEMfjaaWf1NiPcGDf2EH6nVadz8p372jM5CZNuE=) 10: fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa (hash: xpyUK/0mWO28W5ZFHD9SD69xhudYUF35PPRLXFMXs6I=) 11: kskuiZFZ4qnR7ertADOXhwQ9Oco.roa (hash: ZSYBr6SFSDGeJPdXMk2oIUoftKHvv6I70l0Yr4tHKxk=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: HGdHSON2zBg/z0K03FKYR1WU0uj/QTOHh9En9sp8M5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:ab:04:aa:cf:d5:f9:93:54:48:1f:d0:2f:30:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Dec 19 20:01:08 2025 GMT Not After : Dec 20 20:01:08 2025 GMT Subject: CN=1b89a2ddd8f14816bf4d5e298cc74d2847512d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:ac:f7:6b:67:95:0c:ba:b5:59:5e:77:d1: 80:20:ad:4c:52:3c:14:41:3c:7e:d7:e7:0e:23:8a: 9a:3f:d8:37:4a:88:8d:bc:77:35:fc:a0:fc:7f:51: f7:40:13:ae:16:9f:cd:8a:6b:0b:3c:cc:a4:8f:99: a2:9f:88:6d:9a:14:9e:fe:b1:13:6f:83:b9:6e:50: d2:47:35:ab:52:a2:1b:f5:73:ba:ac:be:44:d7:ee: 2e:0c:ee:a5:df:f5:d6:02:9b:5a:3c:93:2f:47:43: 6d:63:f6:4c:60:63:a1:5a:08:cc:74:cc:c5:ad:78: 60:9f:f7:ef:c6:ac:8a:6f:32:7a:c6:55:62:8c:4c: 2d:ba:29:37:9e:5a:8b:8c:d5:a7:dc:1a:06:7c:95: e0:4f:51:1a:d8:c3:bd:01:3a:16:27:3c:79:d6:5d: f9:f2:57:66:7e:47:5d:65:fb:bc:43:05:6c:9a:7e: 24:df:34:83:74:4d:93:52:d4:da:b4:f5:5a:11:5c: 41:2d:0c:ea:74:aa:64:d5:5c:2e:28:5c:f7:85:fb: db:34:75:c5:bb:d9:ec:09:f4:e9:bc:44:de:6b:54: b5:02:f7:1f:6b:a3:1c:27:f1:3a:bb:63:e2:f7:7f: eb:84:e8:0d:c0:85:dc:9f:79:b9:b9:a2:3b:ca:d7: 2c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:89:A2:DD:D8:F1:48:16:BF:4D:5E:29:8C:C7:4D:28:47:51:2D:62 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:84:6d:31:c1:5d:73:b6:32:41:bb:b4:0b:21:25:30:cd:25: ac:a5:d9:2f:78:6b:c9:d2:b1:1d:6b:50:fa:06:96:ac:af:55: 6b:a5:99:70:61:01:77:ad:d2:65:72:e0:80:31:dc:29:31:f9: 74:4d:0b:53:55:66:b5:d6:3f:fa:69:9a:86:cb:cb:c2:77:8e: 93:6f:e6:08:7d:c2:94:a8:da:50:8b:c6:f2:48:ee:8b:56:aa: ed:f2:57:21:89:86:c1:4d:61:16:39:92:c8:b1:50:8d:b4:94: 63:32:06:df:49:9a:82:34:ad:73:3c:54:f1:42:86:d1:c0:57: ce:4b:70:c5:4b:0c:f7:f0:1f:54:3a:1b:25:3b:53:d1:ed:a5: 1b:f4:d7:ff:16:af:f9:7c:70:63:b9:1c:5c:15:06:30:c9:8a: 81:36:03:98:0d:aa:20:4f:d5:65:06:83:70:dd:00:ae:a9:d9: a1:6e:4b:e6:79:50:b6:d0:ea:2b:c9:31:84:b8:ef:46:02:90: 8a:c2:43:b3:c6:6f:5c:b7:08:d0:f2:0c:de:02:bb:e4:f2:8f: c3:76:e8:a3:45:10:68:10:23:86:0e:20:31:ab:6a:f1:c7:cb: 4a:c6:fd:16:87:5b:a4:28:69:e6:4b:d7:30:50:b2:7a:3d:02: 2a:aa:4a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M6sEqs/V+ZNUSB/QLzCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjUxMjE5MjAwMTA4WhcNMjUxMjIwMjAwMTA4WjAzMTEwLwYDVQQD EygxYjg5YTJkZGQ4ZjE0ODE2YmY0ZDVlMjk4Y2M3NGQyODQ3NTEyZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRis92tnlQy6tVled9GAIK1MUjwU QTx+1+cOI4qaP9g3SoiNvHc1/KD8f1H3QBOuFp/NimsLPMykj5min4htmhSe/rET b4O5blDSRzWrUqIb9XO6rL5E1+4uDO6l3/XWAptaPJMvR0NtY/ZMYGOhWgjMdMzF rXhgn/fvxqyKbzJ6xlVijEwtuik3nlqLjNWn3BoGfJXgT1Ea2MO9AToWJzx51l35 8ldmfkddZfu8QwVsmn4k3zSDdE2TUtTatPVaEVxBLQzqdKpk1VwuKFz3hfvbNHXF u9nsCfTpvETea1S1Avcfa6McJ/E6u2Pi93/rhOgNwIXcn3m5uaI7ytcsjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuJot3Y8UgWv01eKYzHTShHUS1iMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIRtMcFd c7YyQbu0CyElMM0lrKXZL3hrydKxHWtQ+gaWrK9Va6WZcGEBd63SZXLggDHcKTH5 dE0LU1VmtdY/+mmahsvLwneOk2/mCH3ClKjaUIvG8kjui1aq7fJXIYmGwU1hFjmS yLFQjbSUYzIG30magjStczxU8UKG0cBXzktwxUsM9/AfVDobJTtT0e2lG/TX/xav +XxwY7kcXBUGMMmKgTYDmA2qIE/VZQaDcN0ArqnZoW5L5nlQttDqK8kxhLjvRgKQ isJDs8ZvXLcI0PIM3gK75PKPw3boo0UQaBAjhg4gMatq8cfLSsb9FodbpChp5kvX MFCyej0CKqpKeQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:58:56 2025 by rpki-client