This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json) Hash identifier: orTobDG97jVCwSyFX6xO2H19DzV8FdqfAXL4bqyqErc= Subject key identifier: E7:F9:DC:3C:D4:D8:4F:DA:AF:C6:DD:FC:41:E3:30:94:0A:A0:6D:D7 Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87 Certificate serial: 019B3C0FEB0D85E42770C7A551BEC05AB150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 14:00:34 +0000 Manifest this update: Sat 20 Dec 2025 14:00:34 +0000 Manifest next update: Sun 21 Dec 2025 14:00:34 +0000 Files and hashes: 1: 4EBLQiUigXa_kHRgKUQlBdf2vQs.roa (hash: jB+fJelPc+bKwLGuPQtWiTZOTzyJjm6S+9AcmCEgdhI=) 2: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=) 3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: xzL50MwyQ+fj9H4/s0uYb2+CBnxvWlwG5wmdlQCFB0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:eb:0d:85:e4:27:70:c7:a5:51:be:c0:5a:b1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c612adfabf915df33198935808cf0df9738dca87 Validity Not Before: Dec 20 14:00:34 2025 GMT Not After : Dec 21 14:00:34 2025 GMT Subject: CN=e7f9dc3cd4d84fdaafc6ddfc41e330940aa06dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:f6:e6:cc:96:c2:c4:49:05:5b:ed:db:58: b6:19:a9:7e:b1:48:ad:58:54:2c:26:72:c6:83:d3: 0c:b3:d4:7a:d5:c1:34:bc:a9:1b:97:fe:da:e5:9c: e8:f5:24:0a:c8:d6:fd:d5:26:46:f1:49:f9:05:e2: 9f:fa:e3:02:d8:47:67:52:0b:8b:ef:7a:98:ed:da: d0:3d:b2:9d:f1:5d:87:8c:28:85:29:ac:4e:a7:e2: 4b:3e:03:0f:ac:49:0a:9f:90:5c:b7:aa:d2:c4:7e: 71:e4:2f:1e:63:e2:0d:88:1f:cd:46:07:a3:68:a2: 85:fa:ef:dc:20:76:63:0d:05:da:84:22:61:3e:30: 09:57:f6:64:46:63:c0:61:88:52:28:69:91:37:9c: c4:1e:73:f6:f0:c3:3a:44:50:31:11:bc:5c:a1:bd: 89:1b:19:a6:74:04:ff:de:82:f4:8f:a5:15:6f:74: 97:af:a9:68:1f:5a:3a:d8:07:84:9c:71:3c:e5:ed: 76:6a:00:e5:16:60:61:f6:36:09:e0:bf:08:91:01: a3:1a:04:05:59:ed:b1:6f:28:4c:4a:6b:5d:37:ea: 2a:29:39:72:d6:7e:50:aa:28:43:2e:97:00:08:39: fd:86:00:36:10:6f:dd:64:2f:6b:f2:ab:0b:08:36: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F9:DC:3C:D4:D8:4F:DA:AF:C6:DD:FC:41:E3:30:94:0A:A0:6D:D7 X509v3 Authority Key Identifier: keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1f:0b:75:54:dd:d2:cd:79:4a:04:18:c3:6f:f1:91:91:ae: ff:e3:1e:ca:46:35:32:20:e6:18:7b:58:3b:6e:1a:bb:53:13: f2:5d:9d:de:e6:f0:51:35:76:a1:3b:b8:ca:13:26:b2:80:e6: 23:85:7d:c0:40:d5:46:0f:7d:a6:d4:0e:5c:43:b6:76:07:52: 7d:76:c3:9b:a9:f0:fb:65:a6:e5:8c:3f:fb:ba:b1:84:37:8e: 5a:a7:f5:f9:e2:a7:68:df:91:d7:5a:a7:1f:4f:0f:39:59:14: b8:aa:0f:d7:e8:a6:18:7a:37:d2:86:89:a6:9c:4a:6e:e3:03: 43:c4:8e:59:37:a3:9b:4d:a1:22:bf:14:a2:6f:07:59:ee:1d: 2f:cb:66:6d:59:9b:a9:c1:3c:85:20:6a:9a:1e:a3:ec:47:35: 75:a1:2f:6a:dc:6d:7b:ab:51:f5:e9:3e:91:9f:b8:fc:98:ba: 9a:b9:76:5d:c6:13:0a:cf:69:30:cc:95:fd:20:a4:ed:2a:fb: 65:73:ad:45:a7:eb:fd:49:26:b3:fd:c1:88:6e:d6:fb:6d:3e: 00:9d:05:39:ff:d4:27:d7:60:36:31:88:80:b5:df:58:0d:a7: da:80:61:86:32:96:24:f0:dc:29:55:96:0e:b3:32:a6:24:c9: 3c:9a:8f:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+sNheQncMelUb7AWrFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4 ZGNhODcwHhcNMjUxMjIwMTQwMDM0WhcNMjUxMjIxMTQwMDM0WjAzMTEwLwYDVQQD EyhlN2Y5ZGMzY2Q0ZDg0ZmRhYWZjNmRkZmM0MWUzMzA5NDBhYTA2ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspb25syWwsRJBVvt21i2Gal+sUit WFQsJnLGg9MMs9R61cE0vKkbl/7a5Zzo9SQKyNb91SZG8Un5BeKf+uMC2EdnUguL 73qY7drQPbKd8V2HjCiFKaxOp+JLPgMPrEkKn5Bct6rSxH5x5C8eY+INiB/NRgej aKKF+u/cIHZjDQXahCJhPjAJV/ZkRmPAYYhSKGmRN5zEHnP28MM6RFAxEbxcob2J GxmmdAT/3oL0j6UVb3SXr6loH1o62AeEnHE85e12agDlFmBh9jYJ4L8IkQGjGgQF We2xbyhMSmtdN+oqKTly1n5QqihDLpcACDn9hgA2EG/dZC9r8qsLCDa5mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOf53DzU2E/ar8bd/EHjMJQKoG3XMB8GA1UdIwQY MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVR8LdVTd 0s15SgQYw2/xkZGu/+MeykY1MiDmGHtYO24au1MT8l2d3ubwUTV2oTu4yhMmsoDm I4V9wEDVRg99ptQOXEO2dgdSfXbDm6nw+2Wm5Yw/+7qxhDeOWqf1+eKnaN+R11qn H08POVkUuKoP1+imGHo30oaJppxKbuMDQ8SOWTejm02hIr8Uom8HWe4dL8tmbVmb qcE8hSBqmh6j7Ec1daEvatxte6tR9ek+kZ+4/Ji6mrl2XcYTCs9pMMyV/SCk7Sr7 ZXOtRafr/Ukms/3BiG7W+20+AJ0FOf/UJ9dgNjGIgLXfWA2n2oBhhjKWJPDcKVWW DrMypiTJPJqPnw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:31 2025 by rpki-client