This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json) Hash identifier: 8Kgk6HtoWSLRekxKX3XPgpOnRWiZs8F3+Qf3YOrhw68= Subject key identifier: 40:C9:9A:73:56:93:88:22:04:6F:3B:D6:E0:38:49:1E:A1:3D:1D:34 Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Certificate serial: 019B4D0426F1C04276A6BD22B57242BDE696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft Manifest number: 172D Signing time: Tue 23 Dec 2025 21:01:16 +0000 Manifest this update: Tue 23 Dec 2025 21:01:16 +0000 Manifest next update: Wed 24 Dec 2025 21:01:16 +0000 Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=) 2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: wbinwGOdbhpUg+dqspNuZxnDf4c6sJUaLjLG1I0XjE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:26:f1:c0:42:76:a6:bd:22:b5:72:42:bd:e6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Validity Not Before: Dec 23 21:01:16 2025 GMT Not After : Dec 24 21:01:16 2025 GMT Subject: CN=40c99a7356938822046f3bd6e038491ea13d1d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:29:7d:bf:f7:bc:94:89:80:03:a3:a8:78: f8:df:4e:53:77:32:c2:e7:22:d6:86:6f:80:db:40: 05:64:08:f9:47:60:6d:10:20:4e:50:55:b0:85:70: 18:ab:63:62:77:dc:a7:4c:4f:a0:ae:92:52:b6:5f: be:f6:81:e4:e6:01:47:0f:1b:0e:02:61:47:1c:5a: 75:76:e4:fa:d9:4b:24:47:78:bf:92:4c:a5:b2:82: 02:9a:88:a6:6f:ab:4a:94:b0:d9:91:91:db:d2:f1: 02:30:00:00:4b:ca:7d:3a:1b:5d:6c:02:b7:38:82: d7:17:1c:31:d1:81:bf:6f:70:ae:8e:65:13:e7:13: fe:8e:25:2d:ff:dd:d7:ef:ce:16:fb:60:c6:61:d2: 4b:a0:31:e5:0e:cc:dc:3b:de:43:8c:e4:fc:c2:69: 60:7d:88:71:b5:c1:92:c4:10:3a:be:70:2c:69:77: fb:99:b9:7e:1b:6a:2a:82:d7:00:29:f6:99:b4:95: 24:de:0c:07:28:73:72:f1:a5:0f:44:3c:54:64:d5: 28:c4:ad:97:a9:d4:d9:22:bd:78:3b:88:41:33:c1: d3:f3:6e:e6:3d:eb:77:21:dd:f5:b4:10:c0:61:43: 58:87:0a:67:80:b8:8a:59:6a:df:ce:3b:a2:5b:5d: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C9:9A:73:56:93:88:22:04:6F:3B:D6:E0:38:49:1E:A1:3D:1D:34 X509v3 Authority Key Identifier: keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a6:f6:4a:17:88:1c:97:fb:f9:76:71:59:a0:bd:84:22:f5: 6a:88:ce:ff:09:ea:0a:73:16:ba:a1:02:59:a7:ae:9e:c0:bb: 76:44:65:75:30:20:66:8c:a2:de:19:1e:df:60:05:52:12:96: 60:3a:09:61:45:44:2a:b5:1c:12:a9:2d:02:85:ef:07:00:9a: 83:34:e1:76:5b:1d:0b:c4:c3:1f:e1:95:26:dc:1c:7a:26:58: 6f:35:ce:07:56:74:3c:da:8e:d9:50:71:bb:85:3f:89:a8:58: 1c:d6:90:92:fa:bb:da:7d:e7:24:07:a7:9d:c4:2f:e3:f8:95: 38:5f:e4:72:b0:d2:27:d0:9e:84:bd:b6:e3:7e:0c:09:c0:5a: 92:a2:14:3d:1f:5d:3a:14:f5:ac:52:52:6b:dd:69:70:f9:3c: cb:5e:17:11:35:ce:3e:61:53:61:15:26:bc:24:5f:d3:81:63: 78:1e:2b:fc:15:fc:12:d0:d7:79:b9:06:f5:53:75:2f:92:2c: 17:c0:68:63:59:81:0a:c0:c8:ed:2a:1e:2c:db:bf:14:ea:2a: 13:eb:19:d3:6b:ad:b2:ff:bd:8f:a4:63:62:66:31:43:0e:6b: 69:87:d6:5e:18:87:29:ad:38:bd:eb:44:ce:b9:e2:4f:01:81: 4b:2a:e2:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBCbxwEJ2pr0itXJCveaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw YjdlZjgwHhcNMjUxMjIzMjEwMTE2WhcNMjUxMjI0MjEwMTE2WjAzMTEwLwYDVQQD Eyg0MGM5OWE3MzU2OTM4ODIyMDQ2ZjNiZDZlMDM4NDkxZWExM2QxZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOMpfb/3vJSJgAOjqHj4305TdzLC 5yLWhm+A20AFZAj5R2BtECBOUFWwhXAYq2Nid9ynTE+grpJStl++9oHk5gFHDxsO AmFHHFp1duT62UskR3i/kkylsoICmoimb6tKlLDZkZHb0vECMAAAS8p9OhtdbAK3 OILXFxwx0YG/b3CujmUT5xP+jiUt/93X784W+2DGYdJLoDHlDszcO95DjOT8wmlg fYhxtcGSxBA6vnAsaXf7mbl+G2oqgtcAKfaZtJUk3gwHKHNy8aUPRDxUZNUoxK2X qdTZIr14O4hBM8HT827mPet3Id31tBDAYUNYhwpngLiKWWrfzjuiW10xKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDJmnNWk4giBG871uA4SR6hPR00MB8GA1UdIwQY MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1 LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJab2SheI HJf7+XZxWaC9hCL1aojO/wnqCnMWuqECWaeunsC7dkRldTAgZoyi3hke32AFUhKW YDoJYUVEKrUcEqktAoXvBwCagzThdlsdC8TDH+GVJtwceiZYbzXOB1Z0PNqO2VBx u4U/iahYHNaQkvq72n3nJAenncQv4/iVOF/kcrDSJ9CehL22434MCcBakqIUPR9d OhT1rFJSa91pcPk8y14XETXOPmFTYRUmvCRf04FjeB4r/BX8EtDXebkG9VN1L5Is F8BoY1mBCsDI7SoeLNu/FOoqE+sZ02utsv+9j6RjYmYxQw5raYfWXhiHKa04vetE zrniTwGBSyriFg== -----END CERTIFICATE-----Generated at Wed Dec 24 03:01:39 2025 by rpki-client