This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json) Hash identifier: WYPPcjNd8jX/KO17K4eZOdRbhh+9/jIrl2vztFtmYOo= Subject key identifier: 93:C2:37:C9:6C:56:FE:F2:5C:CC:62:DA:65:26:81:17:63:1C:D5:7F Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51 Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251 Certificate serial: 019B5298163A4EB95F796E10730DAAB4BBD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft Manifest number: 1797 Signing time: Wed 24 Dec 2025 23:00:57 +0000 Manifest this update: Wed 24 Dec 2025 23:00:57 +0000 Manifest next update: Thu 25 Dec 2025 23:00:57 +0000 Files and hashes: 1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=) 2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: 4fZXyXsRkgwAd94GZBcpjrzUNtI747h2qx0ZLq7pJf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:16:3a:4e:b9:5f:79:6e:10:73:0d:aa:b4:bb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251 Validity Not Before: Dec 24 23:00:57 2025 GMT Not After : Dec 25 23:00:57 2025 GMT Subject: CN=93c237c96c56fef25ccc62da65268117631cd57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:e8:1f:54:05:5f:46:1d:4a:3b:db:a9:41: 8e:52:80:4f:a3:db:2c:bc:92:71:e4:45:a9:bb:93: 87:cc:dd:c5:11:dd:68:21:eb:61:86:f8:05:08:0a: f3:bd:36:ba:b5:b6:ae:36:55:fe:e7:5c:ca:df:7b: 87:61:9e:1e:db:69:19:3e:77:0a:7e:63:6a:6f:6b: d6:47:a6:af:8a:b9:a4:eb:5f:ae:72:89:ec:29:c4: 43:35:08:d7:64:86:66:79:de:ca:62:db:c7:b8:20: be:89:e7:9a:a1:cc:db:44:cf:f9:b0:7b:d8:55:c5: 3d:03:72:89:10:72:02:80:50:25:41:ae:8c:b9:42: 47:61:97:3e:f2:b0:2e:60:ca:53:d1:a5:00:91:51: 54:c0:9c:59:d6:3f:cc:4d:96:41:f7:20:aa:7d:ec: d8:c8:6e:27:ea:41:62:59:cf:72:d0:aa:cf:e6:f5: 7c:58:d9:73:8b:c7:f7:44:43:4e:ea:07:8f:6c:e4: c8:4e:a5:51:c4:de:ce:d5:c1:34:4a:91:c9:d1:51: 34:5b:9e:01:49:a0:73:7f:c3:01:18:72:c7:b1:c8: db:1f:a1:02:d4:53:c4:6a:b2:dd:f9:0b:fb:2c:38: dd:26:15:9a:7a:4a:39:95:5e:a7:11:b8:2e:8b:1b: 01:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C2:37:C9:6C:56:FE:F2:5C:CC:62:DA:65:26:81:17:63:1C:D5:7F X509v3 Authority Key Identifier: keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c3:b1:b0:7e:16:2c:af:1c:8f:42:48:f4:38:02:41:70:c6: 2e:d1:d1:e9:fe:f2:e4:98:df:12:36:57:cb:c4:b5:38:b5:18: 3c:df:5c:48:d4:e3:bf:d5:96:c9:0c:91:6a:8b:17:01:2b:9a: 88:0b:7e:38:e7:f6:65:9c:4e:77:a9:b5:c1:45:28:80:b9:8e: 44:a0:9c:fd:40:07:d2:d7:86:c1:1a:03:de:99:77:5c:f0:2d: d3:ec:b2:be:12:d3:95:bf:f7:a9:d6:9d:c5:57:83:f5:a4:00: e8:4e:3a:e1:ad:8e:ca:18:fd:9a:dc:5b:42:fe:0b:f1:87:51: fe:61:00:a6:cb:e5:1c:8c:81:ea:9d:a0:8c:bc:56:b4:12:de: 69:d2:a3:37:56:bf:e6:07:31:7c:72:9f:e5:0e:31:9e:6e:34: 8b:e9:62:08:f8:90:34:e6:43:22:74:fa:57:bb:d7:5f:ce:ca: 59:1f:ae:66:68:8e:81:fd:d0:86:4e:d3:4e:65:a3:38:54:5c: 31:e6:37:9a:fc:83:ef:7b:3c:17:2c:ba:2f:7b:cb:d4:75:19: a2:29:10:1b:a0:b8:34:e7:04:fd:56:c0:24:de:5a:1f:fa:c9: e3:69:dc:55:a3:66:87:ae:96:10:fe:5d:87:c0:78:21:34:a8: 12:b0:7f:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmBY6TrlfeW4Qcw2qtLvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NjNjMzQ2MDNhOTQ2OTUyZmYyNzZlMGEyNWZkMzYxZmNh Y2YyNTEwHhcNMjUxMjI0MjMwMDU3WhcNMjUxMjI1MjMwMDU3WjAzMTEwLwYDVQQD Eyg5M2MyMzdjOTZjNTZmZWYyNWNjYzYyZGE2NTI2ODExNzYzMWNkNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon3oH1QFX0YdSjvbqUGOUoBPo9ss vJJx5EWpu5OHzN3FEd1oIethhvgFCArzvTa6tbauNlX+51zK33uHYZ4e22kZPncK fmNqb2vWR6avirmk61+uconsKcRDNQjXZIZmed7KYtvHuCC+ieeaoczbRM/5sHvY VcU9A3KJEHICgFAlQa6MuUJHYZc+8rAuYMpT0aUAkVFUwJxZ1j/MTZZB9yCqfezY yG4n6kFiWc9y0KrP5vV8WNlzi8f3RENO6gePbOTITqVRxN7O1cE0SpHJ0VE0W54B SaBzf8MBGHLHscjbH6EC1FPEarLd+Qv7LDjdJhWaeko5lV6nEbguixsBNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPCN8lsVv7yXMxi2mUmgRdjHNV/MB8GA1UdIwQY MBaAFMRjw0YDqUaVL/J24KJf02H8rPJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUt MDA2NDIwZTQzNDRkLzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUtMDA2NDIwZTQzNDRk LzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcOxsH4W LK8cj0JI9DgCQXDGLtHR6f7y5JjfEjZXy8S1OLUYPN9cSNTjv9WWyQyRaosXASua iAt+OOf2ZZxOd6m1wUUogLmORKCc/UAH0teGwRoD3pl3XPAt0+yyvhLTlb/3qdad xVeD9aQA6E464a2Oyhj9mtxbQv4L8YdR/mEApsvlHIyB6p2gjLxWtBLeadKjN1a/ 5gcxfHKf5Q4xnm40i+liCPiQNOZDInT6V7vXX87KWR+uZmiOgf3Qhk7TTmWjOFRc MeY3mvyD73s8Fyy6L3vL1HUZoikQG6C4NOcE/VbAJN5aH/rJ42ncVaNmh66WEP5d h8B4ITSoErB/Pw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:07 2025 by rpki-client