This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: FCFCxbK2SVP7mC/kNSQ245443sq7tY1RPIJLvDCamtA= Subject key identifier: E3:79:EF:D1:72:57:4B:CF:A6:D1:80:C9:E5:72:5B:05:64:C8:CC:65 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B37FC96976D1B0965DE6EFEA2C2848B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 179F Signing time: Fri 19 Dec 2025 19:00:59 +0000 Manifest this update: Fri 19 Dec 2025 19:00:59 +0000 Manifest next update: Sat 20 Dec 2025 19:00:59 +0000 Files and hashes: 1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=) 2: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=) 3: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=) 4: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=) 5: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=) 6: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=) 7: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=) 8: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=) 9: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=) 10: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=) 11: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=) 12: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=) 13: LMtRng0E4WdgNogX80c8NyqlkAM.roa (hash: qv368wWIYT4JbqGVynmszG8XD4EtlxBoXRYb6b5la4Y=) 14: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=) 15: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=) 16: PfuePBqyE9oSuvuOqPl2yYw0_nM.roa (hash: I912gPvDq9Xcn/nApuI3hIUcz4zJdPzL8TmlGrNFHYI=) 17: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=) 18: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=) 19: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=) 20: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=) 21: Xj0PZjPK0RU2SfivoTAJWcwycX0.roa (hash: Ar0sJAdRtbgHuGtFPdebLx8F1m4THn6pyvxz8KE1pEQ=) 22: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=) 23: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=) 24: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=) 25: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=) 26: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=) 27: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=) 28: pjy8PyfSvNUQlPszOO5cOkwdArs.roa (hash: TNGMqiKHKD6FG8zce/9C12pTugM7KKwm8HQFMxYXHWs=) 29: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (hash: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=) 30: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=) 31: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=) 32: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: Dlw4nPzOwYCVOg4zTQs/BIoGmJV79qd8v70EZCIGgHo=) 33: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=) 34: zeZ61iX-XErVVOagrLymRhqtVs4.roa (hash: /TVn1IqCr3rkgm7hee64o/NjLqoDVeiwVYa0FN7+DSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:96:97:6d:1b:09:65:de:6e:fe:a2:c2:84:8b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Dec 19 19:00:59 2025 GMT Not After : Dec 20 19:00:59 2025 GMT Subject: CN=e379efd172574bcfa6d180c9e5725b0564c8cc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:dc:cc:39:7c:29:7a:18:53:10:11:0e:89: f3:43:2d:d8:f2:0c:c2:b1:43:e1:4d:4d:76:f9:99: 5f:24:1a:c7:9c:4f:2b:cd:2e:26:b3:20:b8:bc:56: 60:8e:0c:11:1b:06:f1:47:f1:70:70:12:d9:2f:80: 3d:c0:79:e4:bc:dc:cf:4c:3e:85:fc:98:3b:7c:59: ef:25:39:2f:9b:aa:90:75:f8:b7:49:b7:cb:c7:fd: 2e:61:fc:f5:1e:a6:cf:ee:b2:5f:81:63:00:dc:34: ce:58:28:7f:c8:13:2b:3c:c2:1e:e2:d9:ce:c2:7f: cf:3e:6b:c7:fc:01:a2:46:c5:09:57:16:f5:04:5a: 74:53:63:67:64:ca:43:5c:76:21:2f:3c:99:cc:a1: 57:20:9a:3b:23:06:83:0d:a4:ac:8e:0c:c5:0f:3b: b0:e7:a0:4e:07:9f:2f:53:e3:c9:e5:22:1d:f7:c4: 50:71:33:ab:0a:50:6b:cf:2f:fd:55:a4:f4:12:48: e6:b9:bc:80:36:2f:51:ec:df:47:db:c5:e0:73:34: 23:5d:cd:46:e3:83:22:9b:f4:29:29:d5:97:fd:f8: 16:79:be:d0:9e:5e:5d:86:7c:0d:ac:2b:e0:ad:db: 00:ec:b2:8f:64:8f:34:94:f9:d7:52:51:30:35:6d: 4a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:79:EF:D1:72:57:4B:CF:A6:D1:80:C9:E5:72:5B:05:64:C8:CC:65 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:23:48:35:d3:14:6d:cc:b8:29:a9:fe:fd:b5:7e:9a:88:e0: 88:46:f3:ee:c9:49:f9:e0:9f:2b:e2:5a:5c:c6:02:1c:c9:0a: 11:22:d7:c6:7b:6a:ec:ff:20:81:1a:bc:14:e0:7d:8c:19:98: 92:ca:cf:ca:80:89:be:33:2f:a7:93:85:9d:29:e2:5e:dd:26: d9:18:80:82:a7:9f:10:1e:e8:c3:43:19:fa:b0:a2:ac:d6:4f: 48:47:91:fd:c0:66:89:e6:62:4a:63:31:33:f7:64:06:ae:02: 44:21:3a:c7:55:04:34:a8:fe:63:57:0e:5e:01:93:98:64:6e: 1f:64:12:25:41:b4:c3:36:78:f8:f2:37:05:a6:dd:31:19:a7: 95:01:99:45:43:69:9c:ca:4d:e7:34:be:79:3c:d5:5e:7f:5f: 5b:3f:78:81:76:df:32:48:82:30:f6:23:d0:fb:e9:c4:95:fe: 32:01:25:72:85:ff:06:cf:14:cc:d0:56:03:b7:70:f9:5d:f6: ce:d8:85:47:a9:a5:95:9a:ed:13:00:f1:bb:ae:23:28:18:31: 6f:9d:c2:52:c5:cf:fc:8e:dd:42:51:97:f7:a4:b3:76:8b:82: ca:f0:5d:34:75:df:95:52:bb:5e:7c:6e:b1:6a:92:ff:d5:2f: 70:2a:ba:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/JaXbRsJZd5u/qLChIteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUxMjE5MTkwMDU5WhcNMjUxMjIwMTkwMDU5WjAzMTEwLwYDVQQD EyhlMzc5ZWZkMTcyNTc0YmNmYTZkMTgwYzllNTcyNWIwNTY0YzhjYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00jczDl8KXoYUxARDonzQy3Y8gzC sUPhTU12+ZlfJBrHnE8rzS4msyC4vFZgjgwRGwbxR/FwcBLZL4A9wHnkvNzPTD6F /Jg7fFnvJTkvm6qQdfi3SbfLx/0uYfz1HqbP7rJfgWMA3DTOWCh/yBMrPMIe4tnO wn/PPmvH/AGiRsUJVxb1BFp0U2NnZMpDXHYhLzyZzKFXIJo7IwaDDaSsjgzFDzuw 56BOB58vU+PJ5SId98RQcTOrClBrzy/9VaT0EkjmubyANi9R7N9H28XgczQjXc1G 44Mim/QpKdWX/fgWeb7Qnl5dhnwNrCvgrdsA7LKPZI80lPnXUlEwNW1K6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON579FyV0vPptGAyeVyWwVkyMxlMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSNINdMU bcy4Kan+/bV+mojgiEbz7slJ+eCfK+JaXMYCHMkKESLXxntq7P8ggRq8FOB9jBmY ksrPyoCJvjMvp5OFnSniXt0m2RiAgqefEB7ow0MZ+rCirNZPSEeR/cBmieZiSmMx M/dkBq4CRCE6x1UENKj+Y1cOXgGTmGRuH2QSJUG0wzZ4+PI3BabdMRmnlQGZRUNp nMpN5zS+eTzVXn9fWz94gXbfMkiCMPYj0PvpxJX+MgElcoX/Bs8UzNBWA7dw+V32 ztiFR6mllZrtEwDxu64jKBgxb53CUsXP/I7dQlGX96SzdouCyvBdNHXflVK7Xnxu sWqS/9UvcCq6Tw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:51:29 2025 by rpki-client