This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: 68VtqLPUeEA9SGg3NKRjHxI1NDdHm9891yS4pvDMEts= Subject key identifier: A1:B4:56:D4:C4:65:D9:ED:E0:5B:26:11:7A:1F:F0:80:3A:55:3A:F9 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B3C109B2C1215309407A7423F10A424FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 1044 Signing time: Sat 20 Dec 2025 14:01:19 +0000 Manifest this update: Sat 20 Dec 2025 14:01:19 +0000 Manifest next update: Sun 21 Dec 2025 14:01:19 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 7: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: pECxlC1d8Y5phdao1nDw+dCoNujXhiOyfFSQZqXA1nU=) 8: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 9: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 10: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) 11: l7iZbiV7r6tXyFTfuUPxFcrsM4M.roa (hash: G7fwAbhY4dToat2MKtWl3kp+QqFAqtJoJEL3kRG4KEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:9b:2c:12:15:30:94:07:a7:42:3f:10:a4:24:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Dec 20 14:01:19 2025 GMT Not After : Dec 21 14:01:19 2025 GMT Subject: CN=a1b456d4c465d9ede05b26117a1ff0803a553af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:8f:5a:a0:51:b5:06:f5:92:65:dc:57:ba: 73:93:65:cc:5e:6d:94:ce:b1:40:12:ba:15:b9:01: 22:fe:7f:be:9c:e6:21:6d:0c:e4:45:4f:b2:72:33: 34:46:31:0e:7d:b1:09:ec:b9:d4:c0:c4:43:8d:e7: f5:c0:04:77:b2:cc:3e:f3:54:b8:a2:bf:f3:4c:d7: ac:2d:ae:ef:2a:b8:a5:94:05:f2:49:46:33:2e:83: d3:73:b0:e8:8b:3d:c8:ca:19:e9:60:5d:d9:ad:3e: 7a:2b:69:35:83:f5:d7:96:38:09:d5:2a:19:6c:20: 86:c2:77:0a:72:16:0f:fd:ee:3c:b9:49:05:09:91: 2b:2f:6a:11:ac:05:4b:32:d1:2f:8a:9a:2f:c8:30: 51:36:fe:51:6d:7e:b9:7d:e3:6d:6f:aa:c3:6b:67: d9:8b:e3:5f:b1:c3:68:48:25:0a:64:2e:9b:21:06: f3:12:71:a0:67:e0:48:44:56:36:2d:42:d7:e0:bd: 78:52:ed:8c:d6:ad:dc:c6:75:dd:2f:19:bc:7a:d9: 82:ae:ca:ca:af:4a:61:72:8b:a6:4b:b4:2b:a6:4f: ea:9f:90:57:02:21:5e:13:c4:c2:14:fd:ff:79:c7: 1b:82:78:47:af:27:bf:a3:e1:ee:0f:75:26:ab:a8: 50:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B4:56:D4:C4:65:D9:ED:E0:5B:26:11:7A:1F:F0:80:3A:55:3A:F9 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1e:93:8c:24:bb:a3:e8:1c:8e:1c:ab:e7:8d:67:f5:0f:2e: 36:a8:9b:07:d0:f1:3e:0b:e3:f5:98:41:35:44:17:d5:4f:0b: 7c:f0:24:6f:6c:28:34:3f:5e:b4:04:f8:62:67:c6:d9:5d:c6: 02:70:5c:e0:47:e1:ca:c5:6c:82:fe:7f:35:b8:44:d1:e2:f7: 20:b5:83:fd:24:6b:52:d7:3f:af:cd:d0:78:a0:66:83:f8:8e: 0f:f6:34:58:12:78:74:e3:df:63:ca:d5:43:8c:fa:ef:36:4e: 0f:28:2c:85:42:59:c4:c5:76:86:74:9d:bb:d0:60:cd:c3:1a: d4:2e:ba:52:ba:51:14:5c:2f:c4:44:4e:a0:58:20:96:64:aa: 53:99:74:47:02:23:6f:88:35:d5:ef:13:b3:7c:00:15:93:e2: 94:74:08:14:f9:61:47:3e:0d:d8:83:9e:f3:ee:64:f3:ee:57: 7f:5c:cd:31:e1:61:c1:e4:22:dc:7c:b1:a1:ce:6d:11:b6:f5: 64:8f:65:89:f0:90:29:ea:88:07:3b:b3:b8:f2:95:58:29:d9: e8:fc:d3:db:fb:8d:d6:78:a6:d2:06:20:a9:96:d0:5a:40:d2: bb:2c:12:21:5c:c4:c6:9a:40:dc:18:78:8e:43:74:bf:5b:34: 5e:73:a9:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EJssEhUwlAenQj8QpCT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUxMjIwMTQwMTE5WhcNMjUxMjIxMTQwMTE5WjAzMTEwLwYDVQQD EyhhMWI0NTZkNGM0NjVkOWVkZTA1YjI2MTE3YTFmZjA4MDNhNTUzYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0yPWqBRtQb1kmXcV7pzk2XMXm2U zrFAEroVuQEi/n++nOYhbQzkRU+ycjM0RjEOfbEJ7LnUwMRDjef1wAR3ssw+81S4 or/zTNesLa7vKrillAXySUYzLoPTc7Doiz3IyhnpYF3ZrT56K2k1g/XXljgJ1SoZ bCCGwncKchYP/e48uUkFCZErL2oRrAVLMtEvipovyDBRNv5RbX65feNtb6rDa2fZ i+NfscNoSCUKZC6bIQbzEnGgZ+BIRFY2LULX4L14Uu2M1q3cxnXdLxm8etmCrsrK r0phcoumS7Qrpk/qn5BXAiFeE8TCFP3/eccbgnhHrye/o+HuD3Umq6hQXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG0VtTEZdnt4FsmEXof8IA6VTr5MB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhh6TjCS7 o+gcjhyr541n9Q8uNqibB9DxPgvj9ZhBNUQX1U8LfPAkb2woND9etAT4YmfG2V3G AnBc4EfhysVsgv5/NbhE0eL3ILWD/SRrUtc/r83QeKBmg/iOD/Y0WBJ4dOPfY8rV Q4z67zZODygshUJZxMV2hnSdu9BgzcMa1C66UrpRFFwvxEROoFgglmSqU5l0RwIj b4g11e8Ts3wAFZPilHQIFPlhRz4N2IOe8+5k8+5Xf1zNMeFhweQi3Hyxoc5tEbb1 ZI9lifCQKeqIBzuzuPKVWCnZ6PzT2/uN1nim0gYgqZbQWkDSuywSIVzExppA3Bh4 jkN0v1s0XnOp7g== -----END CERTIFICATE-----Generated at Sat Dec 20 16:59:17 2025 by rpki-client