This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json) Hash identifier: R04RTZiYL96HoX4ZvwBPeQ/4WwdqQ8k6gzzrKHCZzNk= Subject key identifier: EB:DD:85:A9:F7:00:47:04:ED:F5:D8:70:C2:9A:B3:A5:5D:F2:BA:AD Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873 Certificate serial: 019B3D22F5C513F25E37C9E7A1FF7E2DFD6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft Manifest number: 1793 Signing time: Sat 20 Dec 2025 19:00:59 +0000 Manifest this update: Sat 20 Dec 2025 19:00:59 +0000 Manifest next update: Sun 21 Dec 2025 19:00:59 +0000 Files and hashes: 1: X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa (hash: tfPHTT8XE2UFNzu3VKtqQ2wZ9tqFTwpzr3+xuc/NotQ=) 2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=) 3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: F3FZ00ShhW5RGwXsaEjpTLYJbPGhoj2MkRZT+W+oZUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:f5:c5:13:f2:5e:37:c9:e7:a1:ff:7e:2d:fd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873 Validity Not Before: Dec 20 19:00:59 2025 GMT Not After : Dec 21 19:00:59 2025 GMT Subject: CN=ebdd85a9f7004704edf5d870c29ab3a55df2baad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:c9:32:25:b8:51:36:6a:94:81:19:88:af: 4b:6d:8a:58:f7:ee:79:e7:a1:99:90:5c:1f:23:ff: 73:25:a9:10:9f:9a:4f:30:85:52:fb:c9:2f:10:26: 7d:6c:93:8b:17:5e:27:f3:55:16:67:90:0b:b4:c8: 50:fa:0d:ca:4c:49:0a:87:6b:3a:67:8f:45:46:8a: c4:d9:30:5e:47:40:c8:73:c5:d2:2a:b4:5f:66:ba: bf:db:21:9f:90:f4:94:8a:6a:89:73:d6:d1:cc:b4: 00:5b:ca:f0:34:89:d0:37:be:79:02:50:49:24:26: b1:d3:8a:81:ac:46:82:b2:7b:ae:7a:2b:da:b0:1e: 83:e6:14:ef:48:f5:2d:25:aa:b7:cc:d8:38:ca:39: 99:25:f3:51:0e:40:b0:63:48:50:ea:2f:4e:64:46: 64:c3:12:7a:0a:20:51:1f:fd:6d:dd:49:b8:13:7f: d7:cb:70:53:94:0e:90:49:35:5d:1f:aa:d8:f1:49: fd:28:47:35:40:c1:59:67:32:63:cd:6f:1c:85:26: 8b:65:0c:04:90:40:dc:97:e5:e4:c4:da:9d:00:9f: 37:7c:61:33:36:8c:69:6c:8c:11:5f:d4:ee:80:13: 10:8d:94:33:1b:35:38:63:93:33:d8:a5:66:56:ce: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DD:85:A9:F7:00:47:04:ED:F5:D8:70:C2:9A:B3:A5:5D:F2:BA:AD X509v3 Authority Key Identifier: keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fd:30:27:6b:48:b1:25:df:ee:c5:f1:64:0f:45:de:26:86: 22:84:9d:9b:2b:b5:0a:9e:21:f4:52:53:54:96:14:a5:39:4a: 0f:ff:d3:73:17:a9:24:92:ec:63:d2:74:b6:4f:ce:26:1f:46: 87:d9:fd:e8:6b:90:5a:47:c3:8c:ae:c0:3a:83:85:6f:6a:22: f6:91:b5:20:f0:05:3f:2c:31:a2:41:7a:6b:ba:ed:c7:be:30: 96:60:dd:cb:c4:b2:4a:dc:36:73:3d:e1:a3:ad:a6:9e:41:fa: 61:f5:3a:c9:7f:68:61:e2:ea:94:36:78:c1:de:a7:c1:19:e5: 0e:d3:f9:65:27:cf:80:89:ae:33:fb:92:0f:43:91:b0:24:2a: 0f:d3:0f:64:13:08:c6:99:22:02:64:76:5b:f7:5b:34:a4:a3: 39:68:58:78:bf:fe:aa:c1:f2:65:66:c6:31:dd:15:e8:74:43: dd:b8:49:30:7d:4b:ed:7e:62:a7:14:3c:55:bb:00:7b:c1:0c: 3f:ff:08:a4:3a:8d:5e:a6:1c:8e:5c:81:c9:b8:e0:24:d8:2f: 49:98:06:bb:b4:28:1d:86:eb:d7:e0:06:3c:6c:07:77:54:1b: 25:f6:2c:29:71:48:47:03:a6:25:34:53:ff:b2:ed:29:7e:35: bf:d9:c4:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IvXFE/JeN8nnof9+Lf1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2 YWU4NzMwHhcNMjUxMjIwMTkwMDU5WhcNMjUxMjIxMTkwMDU5WjAzMTEwLwYDVQQD EyhlYmRkODVhOWY3MDA0NzA0ZWRmNWQ4NzBjMjlhYjNhNTVkZjJiYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6HJMiW4UTZqlIEZiK9LbYpY9+55 56GZkFwfI/9zJakQn5pPMIVS+8kvECZ9bJOLF14n81UWZ5ALtMhQ+g3KTEkKh2s6 Z49FRorE2TBeR0DIc8XSKrRfZrq/2yGfkPSUimqJc9bRzLQAW8rwNInQN755AlBJ JCax04qBrEaCsnuueivasB6D5hTvSPUtJaq3zNg4yjmZJfNRDkCwY0hQ6i9OZEZk wxJ6CiBRH/1t3Um4E3/Xy3BTlA6QSTVdH6rY8Un9KEc1QMFZZzJjzW8chSaLZQwE kEDcl+XkxNqdAJ83fGEzNoxpbIwRX9TugBMQjZQzGzU4Y5Mz2KVmVs7/dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvdhan3AEcE7fXYcMKas6Vd8rqtMB8GA1UdIwQY MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt NDlhNjU0NTc4NmU2LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2 LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACP0wJ2tI sSXf7sXxZA9F3iaGIoSdmyu1Cp4h9FJTVJYUpTlKD//TcxepJJLsY9J0tk/OJh9G h9n96GuQWkfDjK7AOoOFb2oi9pG1IPAFPywxokF6a7rtx74wlmDdy8SyStw2cz3h o62mnkH6YfU6yX9oYeLqlDZ4wd6nwRnlDtP5ZSfPgImuM/uSD0ORsCQqD9MPZBMI xpkiAmR2W/dbNKSjOWhYeL/+qsHyZWbGMd0V6HRD3bhJMH1L7X5ipxQ8VbsAe8EM P/8IpDqNXqYcjlyBybjgJNgvSZgGu7QoHYbr1+AGPGwHd1QbJfYsKXFIRwOmJTRT /7LtKX41v9nEpA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:33:19 2025 by rpki-client