This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json) Hash identifier: GCzY9SSPMbIskZDN9WU7qRwV6NDQ//o1RrTlotk22cc= Subject key identifier: 4E:5F:9F:16:5B:EE:EF:DD:74:3F:FB:AD:F7:AC:9A:05:19:CF:8C:7E Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Certificate serial: 019B3CEBD8FA6A1A335C78DD60271E98B7EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft Manifest number: 14F5 Signing time: Sat 20 Dec 2025 18:00:47 +0000 Manifest this update: Sat 20 Dec 2025 18:00:47 +0000 Manifest next update: Sun 21 Dec 2025 18:00:47 +0000 Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=) 2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: O2NWb+DBy2BdQfBMIiv1VSdvxMbP+sSb1jAy9i4zssA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d8:fa:6a:1a:33:5c:78:dd:60:27:1e:98:b7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Validity Not Before: Dec 20 18:00:47 2025 GMT Not After : Dec 21 18:00:47 2025 GMT Subject: CN=4e5f9f165beeefdd743ffbadf7ac9a0519cf8c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:f0:18:6c:08:35:77:2a:0b:ce:f4:54:21: 78:fb:08:f4:22:ff:fc:cb:66:94:2f:9f:f7:97:e2: 08:5a:ca:29:36:0b:fd:0f:b3:6a:d7:5d:97:78:63: 08:38:3f:e8:b8:87:3c:01:c8:7f:65:74:41:4d:c5: d7:6f:3e:f7:00:08:00:1d:80:5d:aa:de:c1:07:2c: f2:fc:80:b9:2e:f9:4d:29:46:f3:a7:2c:fb:f0:c2: 9d:c2:d9:3f:22:03:48:f7:90:4d:03:32:a8:d6:b7: cc:02:44:e4:4e:29:6f:a2:b6:0a:76:04:4a:6f:36: 18:c7:56:9f:f7:42:65:24:3d:b6:cb:2c:0b:14:15: 5a:34:d7:e8:d0:17:5e:c6:ef:8e:72:8e:54:cb:60: 3e:1f:7f:ae:1c:95:a3:35:de:0c:8e:8d:dc:c5:ad: ad:a3:0d:2e:c1:cf:74:06:6e:90:91:b7:3f:b2:2f: a9:b0:2d:57:cf:c2:32:47:cd:d7:27:5d:4c:74:41: 48:59:20:81:5e:15:56:37:23:00:36:03:76:b6:9d: b7:e5:e5:91:26:b5:79:ba:e8:f3:1e:cc:c5:b4:1d: aa:f8:89:24:6e:37:60:ff:0e:f0:fa:9d:8c:dc:cc: a6:ae:db:2b:0a:83:ef:00:ac:48:5f:13:08:b9:b9: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5F:9F:16:5B:EE:EF:DD:74:3F:FB:AD:F7:AC:9A:05:19:CF:8C:7E X509v3 Authority Key Identifier: keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:71:f9:92:3a:ab:6e:ee:50:47:9c:4d:f9:1b:46:de:6c:74: 4d:0c:f5:a2:e6:40:57:6c:0a:43:c1:8d:03:96:89:ee:62:4d: 8a:19:0b:47:a9:e3:b7:f1:09:61:54:ba:79:3b:f3:ad:cb:05: 85:36:cf:47:b3:1f:d5:4f:e9:09:b7:72:a8:71:ee:31:5e:f9: b9:73:6a:85:70:cf:44:86:7b:2f:fb:54:44:70:0b:75:d8:34: cd:0e:fa:79:b0:3f:12:a4:f3:c1:7c:45:89:e5:66:2c:b3:0d: 54:d0:82:5a:85:2f:48:28:cc:51:24:52:a3:67:74:2e:1d:55: 9c:fb:9b:d4:71:d4:69:50:29:2a:62:1f:be:db:6f:73:f3:61: b1:5e:63:48:b1:ee:25:bb:87:e1:d9:aa:e1:c1:fc:25:72:83: 9e:5a:3c:19:55:9e:0d:be:87:0a:2b:85:5e:57:30:3d:49:82: a2:80:f4:ba:ef:bc:6b:d0:65:af:8c:77:75:3f:91:44:38:7d: 38:0c:85:52:30:2f:32:d5:d1:ed:12:61:4e:21:74:a9:74:b1: fd:bc:fe:c4:f6:10:a6:16:bb:17:0a:aa:4d:51:53:d9:de:16: f6:52:85:82:99:38:b1:f3:14:ed:2e:ee:d9:92:24:bd:15:7d: 07:4a:0b:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869j6ahozXHjdYCcemLfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm ZGQ0YzYwHhcNMjUxMjIwMTgwMDQ3WhcNMjUxMjIxMTgwMDQ3WjAzMTEwLwYDVQQD Eyg0ZTVmOWYxNjViZWVlZmRkNzQzZmZiYWRmN2FjOWEwNTE5Y2Y4YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUPwGGwINXcqC870VCF4+wj0Iv/8 y2aUL5/3l+IIWsopNgv9D7Nq112XeGMIOD/ouIc8Ach/ZXRBTcXXbz73AAgAHYBd qt7BByzy/IC5LvlNKUbzpyz78MKdwtk/IgNI95BNAzKo1rfMAkTkTilvorYKdgRK bzYYx1af90JlJD22yywLFBVaNNfo0Bdexu+Oco5Uy2A+H3+uHJWjNd4Mjo3cxa2t ow0uwc90Bm6Qkbc/si+psC1Xz8IyR83XJ11MdEFIWSCBXhVWNyMANgN2tp235eWR JrV5uujzHszFtB2q+Ikkbjdg/w7w+p2M3MymrtsrCoPvAKxIXxMIublT4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5fnxZb7u/ddD/7rfesmgUZz4x+MB8GA1UdIwQY MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3H5kjqr bu5QR5xN+RtG3mx0TQz1ouZAV2wKQ8GNA5aJ7mJNihkLR6njt/EJYVS6eTvzrcsF hTbPR7Mf1U/pCbdyqHHuMV75uXNqhXDPRIZ7L/tURHALddg0zQ76ebA/EqTzwXxF ieVmLLMNVNCCWoUvSCjMUSRSo2d0Lh1VnPub1HHUaVApKmIfvttvc/NhsV5jSLHu JbuH4dmq4cH8JXKDnlo8GVWeDb6HCiuFXlcwPUmCooD0uu+8a9Blr4x3dT+RRDh9 OAyFUjAvMtXR7RJhTiF0qXSx/bz+xPYQpha7FwqqTVFT2d4W9lKFgpk4sfMU7S7u 2ZIkvRV9B0oLTg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:25 2025 by rpki-client