This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json) Hash identifier: dx1LPOBIBF/q7e7ok3HI4516QoKiROv5GOhQmiXKaaE= Subject key identifier: 40:98:34:48:CE:4C:1A:C7:78:0F:5D:D1:87:2F:90:5A:B5:7E:CF:94 Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Certificate serial: 019B454A95378017195AFDA30CAD71CB8609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft Manifest number: 1729 Signing time: Mon 22 Dec 2025 09:01:14 +0000 Manifest this update: Mon 22 Dec 2025 09:01:14 +0000 Manifest next update: Tue 23 Dec 2025 09:01:14 +0000 Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=) 2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: moWeJ4tlyGhXPv2FMY5R9qla+fz7GhIyQq7qGAZ3oWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:95:37:80:17:19:5a:fd:a3:0c:ad:71:cb:86:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Validity Not Before: Dec 22 09:01:14 2025 GMT Not After : Dec 23 09:01:14 2025 GMT Subject: CN=40983448ce4c1ac7780f5dd1872f905ab57ecf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:99:ce:34:d6:fa:f2:e6:42:89:e4:f6:e3: 4f:66:55:fc:7f:45:12:10:97:43:cf:dc:e1:69:46: 57:3e:12:28:11:1d:81:3f:55:65:22:b4:be:fc:59: 7e:e4:db:06:87:ef:43:71:1f:17:ce:cf:75:8d:01: 8d:1d:3b:86:2a:b4:42:e3:97:5d:32:e3:55:97:00: c3:aa:dc:55:98:2f:bc:04:15:14:8d:49:a7:7e:57: 80:13:c6:f2:24:75:36:c5:13:82:27:6b:7b:8f:17: 3e:8c:7c:39:ca:82:ea:8c:29:a8:fc:f3:c9:a7:f6: 09:50:f5:1e:d5:c5:26:f6:44:8e:45:f4:3f:15:1d: 1c:52:a6:93:9d:fc:b6:73:23:ac:4e:ce:d7:63:53: 5f:7e:b0:cd:09:ca:43:27:f9:69:73:ff:e8:30:4f: 16:07:26:bc:46:7b:dc:ef:aa:ff:84:c9:f9:00:80: ed:c7:32:55:65:77:2e:0d:24:a9:d8:c0:d1:00:11: 58:16:5d:cf:ec:5a:e0:63:c3:8f:32:1b:fe:56:c9: e6:d2:1e:92:ce:c0:4d:f1:83:e4:2a:92:11:be:b9: b7:e1:41:9e:94:29:3d:bc:56:ba:2a:d2:0c:d4:ff: 91:38:07:71:a8:da:ee:c8:73:d7:9d:60:1f:ea:1f: fa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:98:34:48:CE:4C:1A:C7:78:0F:5D:D1:87:2F:90:5A:B5:7E:CF:94 X509v3 Authority Key Identifier: keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:59:12:6f:83:1b:9d:31:d0:e9:5f:50:31:8a:ba:e4:00:39: 19:2e:a9:fd:cd:b3:b4:3c:3f:0b:56:9a:f7:e2:e4:52:92:a5: a3:20:02:e5:fb:ba:c3:4b:24:07:c6:52:22:57:4b:2a:df:b0: f2:e7:2b:2c:ed:8a:ae:7a:52:37:e3:2d:00:54:fb:da:ca:d5: 6a:bb:b4:d2:63:8d:cc:f2:ba:8a:c2:57:13:38:94:8c:70:f0: e8:e8:22:8c:44:da:72:d3:34:70:c8:ac:c3:f5:96:5e:23:c0: d9:f4:e8:ee:19:46:78:cd:03:59:5f:50:71:1d:70:69:2e:b1: ae:48:32:b6:3a:ac:0a:f9:14:60:aa:25:6f:52:0b:ed:a2:94: da:be:a0:35:e0:48:fc:73:aa:5e:17:da:ce:05:60:7a:bb:f6: 1f:d7:d7:d3:22:e2:cf:02:e0:92:a1:c7:71:07:ec:ff:11:89: dc:ec:39:8c:71:45:57:8c:6b:9e:48:96:0e:ec:b5:2f:7a:84: 57:68:c3:81:54:1a:1e:a0:04:b8:0a:c7:90:0c:a5:61:42:ce: 43:f3:02:72:2e:bc:fa:8d:de:9f:20:54:56:66:08:1e:e0:e9: 19:04:73:ca:28:ed:d6:bc:07:6f:17:0a:e1:7d:db:53:03:49: ad:a1:35:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSpU3gBcZWv2jDK1xy4YJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw YjdlZjgwHhcNMjUxMjIyMDkwMTE0WhcNMjUxMjIzMDkwMTE0WjAzMTEwLwYDVQQD Eyg0MDk4MzQ0OGNlNGMxYWM3NzgwZjVkZDE4NzJmOTA1YWI1N2VjZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEeZzjTW+vLmQonk9uNPZlX8f0US EJdDz9zhaUZXPhIoER2BP1VlIrS+/Fl+5NsGh+9DcR8Xzs91jQGNHTuGKrRC45dd MuNVlwDDqtxVmC+8BBUUjUmnfleAE8byJHU2xROCJ2t7jxc+jHw5yoLqjCmo/PPJ p/YJUPUe1cUm9kSORfQ/FR0cUqaTnfy2cyOsTs7XY1NffrDNCcpDJ/lpc//oME8W Bya8Rnvc76r/hMn5AIDtxzJVZXcuDSSp2MDRABFYFl3P7FrgY8OPMhv+Vsnm0h6S zsBN8YPkKpIRvrm34UGelCk9vFa6KtIM1P+ROAdxqNruyHPXnWAf6h/6cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECYNEjOTBrHeA9d0YcvkFq1fs+UMB8GA1UdIwQY MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1 LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVkSb4Mb nTHQ6V9QMYq65AA5GS6p/c2ztDw/C1aa9+LkUpKloyAC5fu6w0skB8ZSIldLKt+w 8ucrLO2KrnpSN+MtAFT72srVaru00mONzPK6isJXEziUjHDw6OgijETactM0cMis w/WWXiPA2fTo7hlGeM0DWV9QcR1waS6xrkgytjqsCvkUYKolb1IL7aKU2r6gNeBI /HOqXhfazgVgerv2H9fX0yLizwLgkqHHcQfs/xGJ3Ow5jHFFV4xrnkiWDuy1L3qE V2jDgVQaHqAEuArHkAylYULOQ/MCci68+o3enyBUVmYIHuDpGQRzyijt1rwHbxcK 4X3bUwNJraE1Xg== -----END CERTIFICATE-----Generated at Mon Dec 22 16:28:08 2025 by rpki-client