This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json) Hash identifier: llXY1CuioKaeQ02SdduICwahyTDkZLVZeEBdJ33Lvdg= Subject key identifier: 57:4B:EE:59:13:2E:66:F5:23:95:4D:F1:4C:66:99:09:B6:AE:E2:51 Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0 Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0 Certificate serial: 019B4249AA1CF7A32E225736631FD0FDBEAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 19:01:22 +0000 Manifest this update: Sun 21 Dec 2025 19:01:22 +0000 Manifest next update: Mon 22 Dec 2025 19:01:22 +0000 Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=) 2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=) 3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: ntKSSoBw7URObZPSQT9b2wIQ903z6xIzdgj+s7nUp8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:aa:1c:f7:a3:2e:22:57:36:63:1f:d0:fd:be:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0 Validity Not Before: Dec 21 19:01:22 2025 GMT Not After : Dec 22 19:01:22 2025 GMT Subject: CN=574bee59132e66f523954df14c669909b6aee251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:b4:6d:f7:fc:cc:9b:8b:f8:54:48:be:89: 0e:7a:2e:d6:ae:c2:42:b6:99:5f:e3:20:a0:b9:0b: dd:20:ca:19:7b:53:d4:f6:32:a8:d1:8d:12:7c:38: 05:b8:02:d2:9c:a0:1c:b4:85:c5:92:03:71:22:e2: 27:fc:80:63:68:33:d4:90:f4:e4:5b:d0:2e:20:04: 06:41:93:b3:04:12:91:c5:c0:a3:d1:7f:23:5e:30: ca:61:7c:08:c7:9b:83:3d:94:89:10:a7:83:d1:97: 65:58:b5:53:03:3d:f8:3c:2b:89:c2:08:a3:b9:bc: 1c:bd:e4:db:23:9d:bd:d7:6b:f8:53:a4:26:ff:79: a5:13:bf:5b:92:58:8a:7a:e9:2e:8a:6c:d7:2e:ad: 88:5b:f5:d3:95:09:1f:e5:36:67:9e:51:72:cd:d7: 23:91:73:32:a0:2f:0f:c3:57:43:fe:e6:ca:83:32: 31:4d:b0:da:09:7e:01:bc:86:14:7d:b6:d7:73:f6: a5:8c:a7:34:8e:a0:c6:18:33:17:e1:13:a3:6d:84: 4b:79:11:f5:6e:6b:81:95:f4:d0:2c:97:e1:f2:3a: fc:a4:95:f5:09:6f:ab:7a:36:59:b7:78:03:be:75: 20:15:16:d1:8f:80:80:a8:2f:7a:61:18:fe:b7:df: f2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4B:EE:59:13:2E:66:F5:23:95:4D:F1:4C:66:99:09:B6:AE:E2:51 X509v3 Authority Key Identifier: keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d1:fe:c2:2d:9f:33:e4:18:73:d2:3e:b5:45:d5:75:64:6a: 0e:8e:83:06:16:53:db:75:e0:64:ed:09:22:60:d8:ca:8b:d8: 65:a6:33:bb:6c:ad:be:35:62:c1:d5:ec:1e:72:d2:65:2f:c4: 7f:b5:38:b8:e5:ee:1b:3f:46:13:df:a4:7a:85:f3:b2:a3:b3: 24:84:70:77:d8:86:d2:b4:d7:83:7e:d9:08:bd:98:92:8f:67: 26:3a:f3:1f:f6:f6:ee:bf:3e:fb:7c:18:09:3c:5a:cd:aa:91: fb:b5:6f:f4:37:e5:fa:43:56:1d:b2:0b:d5:ab:ed:26:4e:f0: 22:b5:61:33:64:3c:ac:0c:ed:9f:84:53:d2:ab:1a:b1:5b:3b: 55:44:07:dc:3d:67:7c:66:48:54:e1:c5:63:35:96:37:90:f3: b8:29:e3:c3:fa:a3:a4:ff:e0:7e:a5:e6:1b:c5:a6:23:01:96: 64:2a:5d:1d:a9:ee:5b:40:c8:2e:db:e2:50:8e:aa:1f:df:6c: a9:56:14:cc:9c:b1:b0:86:35:c3:05:55:5d:5f:ff:aa:9b:19: 3d:78:d0:9f:1a:5a:2b:3e:a2:25:24:44:f3:05:0c:78:da:0e: 04:fe:05:22:56:c2:ef:bb:f3:f3:23:69:c6:04:21:9f:fd:20: b4:98:b0:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSaoc96MuIlc2Yx/Q/b6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0 YTM4ZTAwHhcNMjUxMjIxMTkwMTIyWhcNMjUxMjIyMTkwMTIyWjAzMTEwLwYDVQQD Eyg1NzRiZWU1OTEzMmU2NmY1MjM5NTRkZjE0YzY2OTkwOWI2YWVlMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUK0bff8zJuL+FRIvokOei7WrsJC tplf4yCguQvdIMoZe1PU9jKo0Y0SfDgFuALSnKActIXFkgNxIuIn/IBjaDPUkPTk W9AuIAQGQZOzBBKRxcCj0X8jXjDKYXwIx5uDPZSJEKeD0ZdlWLVTAz34PCuJwgij ubwcveTbI52912v4U6Qm/3mlE79bkliKeukuimzXLq2IW/XTlQkf5TZnnlFyzdcj kXMyoC8Pw1dD/ubKgzIxTbDaCX4BvIYUfbbXc/aljKc0jqDGGDMX4ROjbYRLeRH1 bmuBlfTQLJfh8jr8pJX1CW+rejZZt3gDvnUgFRbRj4CAqC96YRj+t9/y3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdL7lkTLmb1I5VN8UxmmQm2ruJRMB8GA1UdIwQY MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt MmRiMjI0NWYyOTg1LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1 LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNH+wi2f M+QYc9I+tUXVdWRqDo6DBhZT23XgZO0JImDYyovYZaYzu2ytvjViwdXsHnLSZS/E f7U4uOXuGz9GE9+keoXzsqOzJIRwd9iG0rTXg37ZCL2Yko9nJjrzH/b27r8++3wY CTxazaqR+7Vv9Dfl+kNWHbIL1avtJk7wIrVhM2Q8rAztn4RT0qsasVs7VUQH3D1n fGZIVOHFYzWWN5DzuCnjw/qjpP/gfqXmG8WmIwGWZCpdHanuW0DILtviUI6qH99s qVYUzJyxsIY1wwVVXV//qpsZPXjQnxpaKz6iJSRE8wUMeNoOBP4FIlbC77vz8yNp xgQhn/0gtJiwNw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:03:00 2025 by rpki-client