This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json) Hash identifier: pGzm27xr0UwVe3TrL0LlgCtQRYtlI+ZDy/IbLwSXklY= Subject key identifier: 4C:3A:88:F9:3D:70:AE:2B:94:18:D2:FF:F7:1C:72:1A:46:CA:9E:07 Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Certificate serial: 019B3EA32068AA60F7A5353BFF722300F8E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft Manifest number: EE Signing time: Sun 21 Dec 2025 02:00:36 +0000 Manifest this update: Sun 21 Dec 2025 02:00:36 +0000 Manifest next update: Mon 22 Dec 2025 02:00:36 +0000 Files and hashes: 1: 96LYebW41F9cWbiRR3tXv_5JTlA.roa (hash: E9I1sWzxYkdu6eno5OeViMQO2tf/PXjG/rZzNUHedvQ=) 2: qXbxlLviK9DJSOPQYHU6ZWE-Sa4.roa (hash: QbsyxqNuQBIITsu3wvPWziWsrz31D70A9kksDR3tVno=) 3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: UiKD2m/EA2T66I6AAMsqG1jo8UNoiKvFHOaplotaeYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:20:68:aa:60:f7:a5:35:3b:ff:72:23:00:f8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Validity Not Before: Dec 21 02:00:36 2025 GMT Not After : Dec 22 02:00:36 2025 GMT Subject: CN=4c3a88f93d70ae2b9418d2fff71c721a46ca9e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:40:bb:0f:1f:3e:87:a5:76:df:a9:05:ed:3b: f7:75:b3:69:b9:8d:8c:e7:89:5e:10:97:3e:ed:a4: 1d:cc:58:56:22:f3:04:1a:a6:3f:13:2f:46:e0:08: 62:42:e1:0a:43:8f:7a:1e:be:46:3d:1b:7a:dc:9f: 17:81:0b:12:0c:9b:a9:77:f2:68:74:2a:85:7c:2b: c2:24:99:a1:38:90:5c:d6:97:4e:7d:1d:22:5f:d8: a9:db:2c:69:e9:08:2f:10:3f:86:8b:d3:59:c3:e7: 20:39:6b:b8:2a:11:6a:8e:57:d4:9a:c1:05:00:1a: 9e:ba:9b:00:c1:3d:62:fc:da:e3:83:16:47:a6:80: ea:7c:14:b6:44:67:91:43:e6:62:9b:8f:f4:8f:98: ed:43:b6:e8:89:b0:67:6a:24:64:fe:a4:22:37:05: 39:92:bb:ee:62:29:75:6b:08:3b:08:cc:43:1d:f2: bd:ae:4f:bc:7c:43:4c:90:c5:d0:2f:32:bb:95:3c: b1:08:22:a3:6e:8a:5a:1d:d4:a8:e1:15:35:c7:40: 2d:36:e8:9c:67:38:84:fb:37:41:95:20:70:91:55: 1d:cd:db:f2:26:20:5a:e9:bb:09:2b:30:5a:d0:71: 07:0f:2f:36:1d:ec:7e:9a:1e:da:5d:73:a6:47:f4: a8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3A:88:F9:3D:70:AE:2B:94:18:D2:FF:F7:1C:72:1A:46:CA:9E:07 X509v3 Authority Key Identifier: keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c7:e5:f0:a0:ba:87:1a:41:60:bb:53:c4:ae:d8:08:88:f0: 42:75:e3:c1:12:0f:3c:a1:a3:59:b4:9f:ef:7b:34:02:7e:24: c9:fc:5e:88:02:7d:a6:b5:4e:ee:06:6b:19:43:93:fd:7b:9f: ee:26:ef:f9:d0:d2:68:c3:20:a6:a8:40:15:d7:de:24:dc:57: e6:83:2e:3a:1c:b3:71:1c:36:32:0b:99:02:1e:79:f3:72:61: dd:88:6f:0e:22:1b:04:d4:c7:22:af:bf:0c:41:36:7d:99:85: 6e:d2:5a:df:ce:0a:89:32:0f:aa:25:fb:a2:84:de:7e:91:f3: 4b:d4:32:9d:3a:3a:c1:ce:49:eb:72:51:a5:4f:29:88:40:28: ff:a0:24:50:d2:4e:d1:ea:1e:46:86:d9:86:37:77:95:bf:db: 9e:9a:54:3d:48:16:05:df:84:f8:28:cb:fa:20:5a:68:87:9d: be:f1:ad:5a:13:90:bc:bb:6b:fc:4b:36:4c:e7:61:f8:44:d0: c2:df:54:35:69:af:b2:b1:f5:9a:3b:f7:fd:90:90:6e:17:ba: 73:1c:c7:de:fb:96:92:31:fe:cc:3e:9d:02:88:79:5f:cd:55: 2f:dd:66:22:9d:78:00:05:4f:1d:a3:f4:1a:14:de:6d:90:b5: 22:f4:dc:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oyBoqmD3pTU7/3IjAPjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzY4ZjBhOGQxZWQxMTczZWNlZGM2ODljMTc3YjI0OWVl M2E2OGMwHhcNMjUxMjIxMDIwMDM2WhcNMjUxMjIyMDIwMDM2WjAzMTEwLwYDVQQD Eyg0YzNhODhmOTNkNzBhZTJiOTQxOGQyZmZmNzFjNzIxYTQ2Y2E5ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0C7Dx8+h6V236kF7Tv3dbNpuY2M 54leEJc+7aQdzFhWIvMEGqY/Ey9G4AhiQuEKQ496Hr5GPRt63J8XgQsSDJupd/Jo dCqFfCvCJJmhOJBc1pdOfR0iX9ip2yxp6QgvED+Gi9NZw+cgOWu4KhFqjlfUmsEF ABqeupsAwT1i/NrjgxZHpoDqfBS2RGeRQ+Zim4/0j5jtQ7boibBnaiRk/qQiNwU5 krvuYil1awg7CMxDHfK9rk+8fENMkMXQLzK7lTyxCCKjbopaHdSo4RU1x0AtNuic ZziE+zdBlSBwkVUdzdvyJiBa6bsJKzBa0HEHDy82Hex+mh7aXXOmR/SoDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw6iPk9cK4rlBjS//ccchpGyp4HMB8GA1UdIwQY MBaAFLF2jwqNHtEXPs7caJwXeySe46aMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYt MjQyMDFjMjUyOThmLzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYtMjQyMDFjMjUyOThm LzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8fl8KC6 hxpBYLtTxK7YCIjwQnXjwRIPPKGjWbSf73s0An4kyfxeiAJ9prVO7gZrGUOT/Xuf 7ibv+dDSaMMgpqhAFdfeJNxX5oMuOhyzcRw2MguZAh5583Jh3YhvDiIbBNTHIq+/ DEE2fZmFbtJa384KiTIPqiX7ooTefpHzS9QynTo6wc5J63JRpU8piEAo/6AkUNJO 0eoeRobZhjd3lb/bnppUPUgWBd+E+CjL+iBaaIedvvGtWhOQvLtr/Es2TOdh+ETQ wt9UNWmvsrH1mjv3/ZCQbhe6cxzH3vuWkjH+zD6dAoh5X81VL91mIp14AAVPHaP0 GhTebZC1IvTcYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:50 2025 by rpki-client