This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json) Hash identifier: 194NGlGiLfDG10RdYNjub8Rexpw5gNKhjAExDKdaSds= Subject key identifier: 8A:E2:76:0B:F1:91:54:BE:1C:DD:E7:2C:4C:55:71:98:CA:73:F7:70 Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07 Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07 Certificate serial: 019B3E6CB303AB7F4D8AF6413784EDC16426 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft Manifest number: 0755 Signing time: Sun 21 Dec 2025 01:01:09 +0000 Manifest this update: Sun 21 Dec 2025 01:01:09 +0000 Manifest next update: Mon 22 Dec 2025 01:01:09 +0000 Files and hashes: 1: gAeMHhtFSbcycnERLLnOEpIkAko.roa (hash: e6fugfkqh4EKp2KogcF4JNMD2SRVe0PwewPhIKGPhCE=) 2: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: jH4jzZ1uSfsP1JGHyaSz4NeLZdHBedS+D+BRUziMfNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:b3:03:ab:7f:4d:8a:f6:41:37:84:ed:c1:64:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07 Validity Not Before: Dec 21 01:01:09 2025 GMT Not After : Dec 22 01:01:09 2025 GMT Subject: CN=8ae2760bf19154be1cdde72c4c557198ca73f770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:29:3e:a2:17:e0:4e:4d:d3:44:40:1c:96: 9f:55:f6:2b:88:6d:9d:7a:3a:79:37:96:ef:ca:66: 8c:32:b2:17:c9:84:9a:e0:d6:ce:06:e4:cb:2c:4b: 68:a7:73:35:53:e1:32:ba:ca:e7:b4:94:72:c2:be: 56:bb:33:44:97:d1:34:b0:1d:84:a8:ae:13:ee:62: 1a:c6:b5:5c:b8:5b:e3:e9:ff:e7:ba:22:6e:3c:e4: 83:b5:f7:ea:bb:23:5d:d0:7f:7a:1e:78:1b:f1:e2: 03:bf:f3:5f:22:49:26:76:01:14:c4:85:38:e6:ad: 7b:f4:d9:a0:78:84:69:60:a6:85:79:a7:8d:a8:f3: a9:4b:ff:4b:24:5c:1c:c1:0e:d9:a2:fe:78:0d:e1: b2:e4:a5:8a:2e:02:9b:dd:59:0f:70:80:ff:55:fa: 02:b7:fd:81:3d:b0:39:0c:1c:c1:0b:d3:16:de:4b: 6c:fd:44:ba:9a:dd:d6:d4:0c:93:79:51:99:70:82: 40:c6:6e:41:13:bd:0a:37:3a:fe:34:c2:d4:be:21: 03:7f:e7:92:5f:2b:fa:56:82:f3:ca:06:9a:03:63: 22:2a:45:fb:93:f9:14:d2:ba:4e:73:d7:1f:23:f8: 7a:ef:4f:97:5c:14:69:80:61:9c:80:db:0d:0f:4e: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E2:76:0B:F1:91:54:BE:1C:DD:E7:2C:4C:55:71:98:CA:73:F7:70 X509v3 Authority Key Identifier: keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3e:59:a5:ae:ec:df:4d:31:16:ab:13:bc:35:f0:dc:65:03: 56:ef:67:b2:cd:37:6e:4b:ca:c5:29:b6:86:27:33:d5:5c:fa: ac:38:71:6c:2f:35:b8:44:80:77:0b:7d:01:2b:3b:db:e9:9c: 7b:75:de:52:3f:e1:ad:a2:f5:0b:61:c2:c8:91:fa:ce:f6:68: e7:c0:e7:86:50:ce:53:eb:1f:55:f5:69:26:20:5a:60:69:79: 09:50:b7:8d:b4:0b:6e:b9:06:1b:17:a9:32:af:e9:b6:bd:f5: 93:b6:c8:af:5c:33:2c:f5:d1:5c:57:13:e3:99:c6:c4:2d:1c: 16:57:b2:ad:e9:27:65:80:0c:85:ce:b5:b4:fe:eb:23:15:a2: f8:d6:27:3f:13:de:00:2b:d2:81:c7:ec:f9:30:a3:50:31:fe: 1b:f5:08:0b:4a:8e:90:f9:4e:d9:af:d6:b1:62:ef:cd:12:73: 81:63:43:86:f5:1a:31:13:e1:4e:d6:a4:4f:27:fd:6e:21:82: 88:3f:22:60:50:95:6c:22:67:c1:e2:fa:d7:1c:82:66:23:98: 24:da:14:ff:f0:28:1e:27:61:95:9f:58:8e:8a:e7:11:88:c1: c4:32:cd:97:0b:40:5a:0b:26:71:de:1f:8d:1a:47:27:74:87: 01:f4:88:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bLMDq39NivZBN4TtwWQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZmMzOGIyYTEwMDM5NWZhOWI5OTE5YWQ3OTJlN2FjYjJk YjJlMDcwHhcNMjUxMjIxMDEwMTA5WhcNMjUxMjIyMDEwMTA5WjAzMTEwLwYDVQQD Eyg4YWUyNzYwYmYxOTE1NGJlMWNkZGU3MmM0YzU1NzE5OGNhNzNmNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxQpPqIX4E5N00RAHJafVfYriG2d ejp5N5bvymaMMrIXyYSa4NbOBuTLLEtop3M1U+EyusrntJRywr5WuzNEl9E0sB2E qK4T7mIaxrVcuFvj6f/nuiJuPOSDtffquyNd0H96Hngb8eIDv/NfIkkmdgEUxIU4 5q179NmgeIRpYKaFeaeNqPOpS/9LJFwcwQ7Zov54DeGy5KWKLgKb3VkPcID/VfoC t/2BPbA5DBzBC9MW3kts/US6mt3W1AyTeVGZcIJAxm5BE70KNzr+NMLUviEDf+eS Xyv6VoLzygaaA2MiKkX7k/kU0rpOc9cfI/h670+XXBRpgGGcgNsND064sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIridgvxkVS+HN3nLExVcZjKc/dwMB8GA1UdIwQY MBaAFMb8OLKhADlfqbmRmteS56yy2y4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgt YTg5YTcwMjhkNDI5LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgtYTg5YTcwMjhkNDI5 LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIz5Zpa7s 300xFqsTvDXw3GUDVu9nss03bkvKxSm2hicz1Vz6rDhxbC81uESAdwt9ASs72+mc e3XeUj/hraL1C2HCyJH6zvZo58DnhlDOU+sfVfVpJiBaYGl5CVC3jbQLbrkGGxep Mq/ptr31k7bIr1wzLPXRXFcT45nGxC0cFleyreknZYAMhc61tP7rIxWi+NYnPxPe ACvSgcfs+TCjUDH+G/UIC0qOkPlO2a/WsWLvzRJzgWNDhvUaMRPhTtakTyf9biGC iD8iYFCVbCJnweL61xyCZiOYJNoU//AoHidhlZ9YjornEYjBxDLNlwtAWgsmcd4f jRpHJ3SHAfSIFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:39:03 2025 by rpki-client