This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json) Hash identifier: ccHJ0D4Af5p14t/t8g07phTfJrtA/0XVuAJ3+v68J7Y= Subject key identifier: 46:E9:81:BE:52:59:84:7F:CF:4E:B5:CE:3A:C6:35:D4:91:A7:C5:79 Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7 Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7 Certificate serial: 019B3C7EB935BB19866CDF08F41CF6DB9377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:01:36 +0000 Manifest this update: Sat 20 Dec 2025 16:01:36 +0000 Manifest next update: Sun 21 Dec 2025 16:01:36 +0000 Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=) 2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=) 3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: VeYfhSYJ7mhv4XiN1bRgNILFx6Ya4aE0GO2cJoq+5qY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:b9:35:bb:19:86:6c:df:08:f4:1c:f6:db:93:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7 Validity Not Before: Dec 20 16:01:36 2025 GMT Not After : Dec 21 16:01:36 2025 GMT Subject: CN=46e981be5259847fcf4eb5ce3ac635d491a7c579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:b9:74:07:e4:29:e5:48:7f:8a:96:ab:91: 00:55:1c:1c:8b:ca:7b:db:d3:6d:e5:43:6b:24:6c: 5a:b5:68:6f:ad:e9:3e:e5:a6:6b:6a:29:af:ae:43: c9:b4:4a:db:03:1e:c2:a2:cf:00:e8:f1:dd:d8:71: ba:62:58:4e:18:9a:8e:75:35:29:0c:c1:39:df:cf: 70:d9:11:d3:26:4a:7f:53:dc:ff:f6:f4:9f:49:39: 37:31:62:dd:a2:25:50:1f:81:53:e8:ec:23:c4:88: 42:52:bc:a8:94:88:68:c6:e9:cb:b0:69:45:34:a7: 74:5d:27:fd:85:0f:5d:71:60:1d:ba:45:3c:f4:57: 6d:04:a3:33:11:d6:0a:64:3e:5c:84:e3:54:e0:37: 97:9d:86:9d:39:f5:c6:6d:83:e9:96:ab:d8:e7:59: 6c:90:d1:28:92:28:33:34:0f:f2:5d:ad:f9:14:fa: 18:38:d3:49:6d:2e:04:75:dc:06:57:35:30:77:58: 08:25:b3:e7:b2:ed:80:27:9d:96:c5:14:1a:e2:ed: e3:02:9a:17:1a:95:6f:21:90:25:d0:a5:29:38:8f: 5a:0f:75:d4:cf:a5:81:5e:3b:66:4e:85:20:29:47: c7:72:cb:b9:bf:da:7f:b6:c3:c9:7b:01:b7:b3:64: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:81:BE:52:59:84:7F:CF:4E:B5:CE:3A:C6:35:D4:91:A7:C5:79 X509v3 Authority Key Identifier: keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5a:8c:d1:63:53:eb:c9:7c:5b:bf:f1:89:5e:34:09:c1:91: f2:6a:39:ad:f8:f4:93:37:04:70:69:94:5d:44:5d:25:7f:10: 4e:05:b3:0b:ea:d5:3b:a2:f5:81:e5:3c:89:77:2a:20:34:bb: 29:d3:5d:ac:74:37:fd:de:0a:b5:4b:47:c2:8a:39:21:d0:42: 17:40:2d:b9:06:52:12:28:19:96:5a:7b:a0:54:bb:37:2c:34: 00:94:2a:8d:cf:31:3b:e4:96:ef:8a:76:58:07:0f:10:db:93: 64:83:bb:a9:8a:53:aa:3d:f7:22:42:be:ce:fe:a6:61:00:9b: 0b:1a:5c:15:51:05:d1:01:16:b5:5d:80:fb:e6:ab:be:11:49: 8a:7a:ec:b6:f8:92:7b:81:57:b4:be:35:6f:0c:4a:e0:2a:16: d3:7d:b1:02:80:e5:22:19:77:2a:a2:dd:3c:7d:fa:50:67:93: d8:7e:1d:2b:20:0c:63:4a:f7:6e:8a:af:35:ca:a0:bb:54:80: 41:34:f7:fa:c2:69:56:fe:39:5d:79:06:02:49:39:9a:df:35: 56:8d:a0:4b:04:bd:00:ab:77:f5:b1:6b:13:2c:d5:da:ae:ff: 6a:17:e5:c7:ff:a9:07:e2:d8:5b:39:b6:d7:3e:a9:04:5f:37: e2:05:46:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8frk1uxmGbN8I9Bz225N3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YWJkMzczY2M1OTUwNjBmMWEzMzA3NmI1M2UxMTYyNTEy YzNjZDcwHhcNMjUxMjIwMTYwMTM2WhcNMjUxMjIxMTYwMTM2WjAzMTEwLwYDVQQD Eyg0NmU5ODFiZTUyNTk4NDdmY2Y0ZWI1Y2UzYWM2MzVkNDkxYTdjNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h65dAfkKeVIf4qWq5EAVRwci8p7 29Nt5UNrJGxatWhvrek+5aZraimvrkPJtErbAx7Cos8A6PHd2HG6YlhOGJqOdTUp DME5389w2RHTJkp/U9z/9vSfSTk3MWLdoiVQH4FT6OwjxIhCUryolIhoxunLsGlF NKd0XSf9hQ9dcWAdukU89FdtBKMzEdYKZD5chONU4DeXnYadOfXGbYPplqvY51ls kNEokigzNA/yXa35FPoYONNJbS4EddwGVzUwd1gIJbPnsu2AJ52WxRQa4u3jApoX GpVvIZAl0KUpOI9aD3XUz6WBXjtmToUgKUfHcsu5v9p/tsPJewG3s2TEQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbpgb5SWYR/z061zjrGNdSRp8V5MB8GA1UdIwQY MBaAFMar03PMWVBg8aMwdrU+EWJRLDzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUt OWYxNTBjOGVhOTcxLzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUtOWYxNTBjOGVhOTcx LzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVqM0WNT 68l8W7/xiV40CcGR8mo5rfj0kzcEcGmUXURdJX8QTgWzC+rVO6L1geU8iXcqIDS7 KdNdrHQ3/d4KtUtHwoo5IdBCF0AtuQZSEigZllp7oFS7Nyw0AJQqjc8xO+SW74p2 WAcPENuTZIO7qYpTqj33IkK+zv6mYQCbCxpcFVEF0QEWtV2A++arvhFJinrstviS e4FXtL41bwxK4CoW032xAoDlIhl3KqLdPH36UGeT2H4dKyAMY0r3boqvNcqgu1SA QTT3+sJpVv45XXkGAkk5mt81Vo2gSwS9AKt39bFrEyzV2q7/ahflx/+pB+LYWzm2 1z6pBF834gVG9w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:43 2025 by rpki-client