This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json) Hash identifier: Jcm2HAcd78zLQ+haGyBDau0bX9og7BEo8PqVofHWA+g= Subject key identifier: D9:CB:92:09:D9:AA:54:1B:B1:86:3E:9A:22:83:68:B7:F4:DD:D4:16 Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51 Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251 Certificate serial: 019B50A989804EC45E2F31E91FB5A4294532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 14:00:46 +0000 Manifest this update: Wed 24 Dec 2025 14:00:46 +0000 Manifest next update: Thu 25 Dec 2025 14:00:46 +0000 Files and hashes: 1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=) 2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: MTG9fPNq2/yt3hI8Vr9kEqWrpmYNQbRHtaPZDUCE2o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:89:80:4e:c4:5e:2f:31:e9:1f:b5:a4:29:45:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251 Validity Not Before: Dec 24 14:00:46 2025 GMT Not After : Dec 25 14:00:46 2025 GMT Subject: CN=d9cb9209d9aa541bb1863e9a228368b7f4ddd416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:6e:4b:7b:7d:ec:c1:ab:09:9f:c2:7b:ad: ac:4f:bb:26:22:3a:c2:d2:25:b1:60:07:85:53:eb: eb:e7:8e:29:08:ab:e8:20:70:29:4f:6b:e1:d3:d2: 64:0c:ee:b8:75:55:c8:21:d2:20:52:04:f7:d9:eb: 5c:84:45:ef:79:a9:b9:aa:e1:88:d7:de:b6:5a:4f: 39:c0:c4:14:3f:8a:dd:be:c2:dd:fa:b3:ef:1a:23: e3:a4:71:98:61:10:0a:6f:af:69:42:83:45:06:0b: 8b:be:e6:45:47:f9:52:0f:f3:f6:b5:ae:c9:5b:6b: b4:7e:8f:ef:9f:a7:19:62:08:84:64:ed:c7:40:71: 38:67:43:74:29:90:dc:df:d9:c3:67:66:28:ab:8e: 28:6e:9c:e4:c0:f8:2a:f1:0f:ee:3b:05:a0:3d:70: 57:6a:57:56:91:ec:a2:c2:29:7a:6e:ed:99:bb:5e: 19:79:22:fd:5f:da:a4:ab:a4:06:50:d3:b7:9f:44: 73:b1:22:c6:ce:72:44:9f:fa:a4:72:bb:49:ef:04: 88:2c:d5:b9:2b:76:cb:b9:db:a0:0c:be:48:be:c0: d5:a9:45:94:9d:2b:00:e6:be:c2:15:86:73:d3:59: e9:01:94:e1:b9:83:59:9b:82:cb:f9:6b:3c:2d:2f: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:92:09:D9:AA:54:1B:B1:86:3E:9A:22:83:68:B7:F4:DD:D4:16 X509v3 Authority Key Identifier: keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fc:3a:f8:8b:59:f1:1e:aa:7b:30:82:3a:ce:2c:de:c7:22: 05:fd:47:ef:4f:3d:da:70:28:a8:a3:e8:be:f7:ef:81:b2:67: 76:fd:14:0a:96:06:c2:69:81:5d:ae:d1:fb:67:83:ee:47:e0: 25:fd:c1:f6:f4:ed:60:80:3d:56:51:ee:33:e0:ce:86:d2:e1: 54:ea:92:66:a7:e9:3a:d6:39:b0:b6:22:eb:59:91:b1:56:7e: 08:5c:6c:f0:21:0f:68:bf:6d:fc:8f:ae:64:53:a1:68:ed:c6: fc:33:01:7b:d8:7a:f2:61:e3:5b:c3:9e:e5:d1:08:c5:d2:d2: 3c:d5:a5:59:e9:98:04:68:3e:35:5c:b6:e8:1d:31:6b:d2:ec: 65:ad:16:77:df:28:39:48:d4:c4:01:1c:88:6a:87:47:44:62: 09:c5:70:02:1b:b3:4b:d4:d1:7f:76:6b:09:f6:74:48:90:41: d7:ca:d5:67:17:00:47:eb:4b:01:51:ab:5a:f3:ae:2b:12:bc: 4d:6d:c4:cd:97:2b:b1:da:13:49:9f:38:10:41:1d:82:9c:2f: b9:59:b5:17:a3:f8:e3:1e:f7:c3:f8:4d:00:bf:6b:f4:72:a1: aa:39:da:f1:8b:21:82:4d:d2:4a:2c:4c:47:de:9a:48:ad:a3: b0:c4:47:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqYmATsReLzHpH7WkKUUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NjNjMzQ2MDNhOTQ2OTUyZmYyNzZlMGEyNWZkMzYxZmNh Y2YyNTEwHhcNMjUxMjI0MTQwMDQ2WhcNMjUxMjI1MTQwMDQ2WjAzMTEwLwYDVQQD EyhkOWNiOTIwOWQ5YWE1NDFiYjE4NjNlOWEyMjgzNjhiN2Y0ZGRkNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5NuS3t97MGrCZ/Ce62sT7smIjrC 0iWxYAeFU+vr544pCKvoIHApT2vh09JkDO64dVXIIdIgUgT32etchEXveam5quGI 1962Wk85wMQUP4rdvsLd+rPvGiPjpHGYYRAKb69pQoNFBguLvuZFR/lSD/P2ta7J W2u0fo/vn6cZYgiEZO3HQHE4Z0N0KZDc39nDZ2Yoq44obpzkwPgq8Q/uOwWgPXBX aldWkeyiwil6bu2Zu14ZeSL9X9qkq6QGUNO3n0RzsSLGznJEn/qkcrtJ7wSILNW5 K3bLudugDL5IvsDVqUWUnSsA5r7CFYZz01npAZThuYNZm4LL+Ws8LS/qiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnLkgnZqlQbsYY+miKDaLf03dQWMB8GA1UdIwQY MBaAFMRjw0YDqUaVL/J24KJf02H8rPJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUt MDA2NDIwZTQzNDRkLzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUtMDA2NDIwZTQzNDRk LzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPw6+ItZ 8R6qezCCOs4s3sciBf1H70892nAoqKPovvfvgbJndv0UCpYGwmmBXa7R+2eD7kfg Jf3B9vTtYIA9VlHuM+DOhtLhVOqSZqfpOtY5sLYi61mRsVZ+CFxs8CEPaL9t/I+u ZFOhaO3G/DMBe9h68mHjW8Oe5dEIxdLSPNWlWemYBGg+NVy26B0xa9LsZa0Wd98o OUjUxAEciGqHR0RiCcVwAhuzS9TRf3ZrCfZ0SJBB18rVZxcAR+tLAVGrWvOuKxK8 TW3EzZcrsdoTSZ84EEEdgpwvuVm1F6P44x73w/hNAL9r9HKhqjna8Yshgk3SSixM R96aSK2jsMRHWQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:48:34 2025 by rpki-client