This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: HpGT3eWJ7SJSQmqbtccVoLqA7jX2weXhYNzYV2JqQ24= Subject key identifier: B9:3C:33:AE:78:DC:E8:47:0E:78:9C:2C:98:93:61:67:40:47:26:19 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B39463C113AAE9F25962EB153C2F6FA98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 17BE Signing time: Sat 20 Dec 2025 01:01:02 +0000 Manifest this update: Sat 20 Dec 2025 01:01:02 +0000 Manifest next update: Sun 21 Dec 2025 01:01:02 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 3: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 4: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 5: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 6: MFsAIGGhjwkS7QqCImE8k8j0fHE.roa (hash: agrbR9N2CmVo23L0pspB3pCZ8XyUH28RrwKnFVhuak4=) 7: UtmhEOLu5jyXyfL-TtwHoqXAAqY.roa (hash: YHko28qzK0fZNdpEAvngg8c4tJnZb9FKoBOSEJpAqxI=) 8: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 9: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 10: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 11: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: xK3tYB1JKQu0BNNv1D0MWAu+yt27HqDe5fzmAD0NW1Y=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:3c:11:3a:ae:9f:25:96:2e:b1:53:c2:f6:fa:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Dec 20 01:01:02 2025 GMT Not After : Dec 21 01:01:02 2025 GMT Subject: CN=b93c33ae78dce8470e789c2c9893616740472619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:60:e4:7b:72:0f:6f:78:fd:63:a4:92:c1: 57:89:49:54:5b:1d:b0:b7:f4:67:94:e4:96:c6:02: b1:54:e1:6b:9d:86:79:a2:07:31:e8:a1:23:1e:52: 71:1f:f1:46:6e:14:1f:08:94:94:f8:9c:bf:9d:1e: 2a:83:3a:63:1f:3c:8f:22:36:2e:52:38:1a:70:50: bf:8d:ff:45:19:55:82:ce:34:0f:0c:e0:c7:52:b2: be:d0:57:e5:6f:26:9f:7f:45:36:aa:f0:40:00:b2: 0f:53:3e:db:9c:dc:93:f8:d7:16:7a:7c:dd:21:ff: df:5e:3a:73:c3:3e:ee:71:63:bf:d6:b2:39:e8:0f: 67:21:71:31:e8:c1:26:f2:17:58:21:c5:22:0a:e1: 46:56:92:d2:8c:6d:6e:7f:92:51:f9:15:1f:51:67: 76:0c:af:46:4f:16:03:b7:55:0d:78:7e:bf:e2:28: 1b:93:7b:12:9f:98:15:c2:44:94:25:d4:02:36:9a: 8a:a3:ca:5f:cb:31:97:0f:08:74:4b:59:80:c7:36: 1c:17:28:88:f5:f0:6c:59:db:f1:be:09:06:c0:83: 92:2d:06:4e:06:b0:76:40:8d:20:61:38:89:49:79: 09:b9:a7:52:a9:a6:a1:82:97:88:5b:db:bc:c0:a1: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:33:AE:78:DC:E8:47:0E:78:9C:2C:98:93:61:67:40:47:26:19 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8b:fc:36:f0:6f:77:96:fd:da:b0:bb:df:8d:bc:62:3f:82: c5:74:6d:53:5f:5b:1d:7c:96:4c:25:ad:4c:0f:92:0d:8a:d3: 14:cb:34:a7:b4:df:70:8a:f8:cc:9c:18:17:78:d6:2a:2f:1f: 53:47:2d:59:34:c6:b9:7b:6e:ad:e3:18:e6:fe:ca:54:fd:f8: c9:2a:79:09:d0:ba:56:1e:63:e8:9b:0f:6a:0b:4e:55:cc:ef: 8f:01:55:ba:25:4d:94:bf:d0:47:ce:9f:24:c7:a7:d4:1e:1c: fc:31:e0:03:36:e5:49:43:d6:31:c6:c3:8c:a3:e2:58:36:ff: 99:29:6c:7d:15:99:77:b0:a9:24:98:b3:2d:c6:2f:68:15:1d: 5a:48:c3:43:8b:09:c9:26:15:0b:15:8c:5a:95:39:49:69:55: 66:fd:2b:43:ad:31:ee:28:fd:b7:1d:04:51:78:d2:43:f4:17: 2a:01:3c:38:46:03:1f:fb:98:d3:a2:ac:97:25:c6:01:2d:47: a6:10:f9:35:fc:5d:22:2f:d8:20:a2:bb:a4:2e:ca:f2:20:65: 81:8f:0c:6f:16:2c:66:e8:a4:97:f6:42:5e:e4:b7:32:1b:c8: 5a:4b:87:89:bf:94:5b:d3:78:31:4d:ca:29:74:be:bf:d9:fb: 75:ad:33:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RjwROq6fJZYusVPC9vqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUxMjIwMDEwMTAyWhcNMjUxMjIxMDEwMTAyWjAzMTEwLwYDVQQD EyhiOTNjMzNhZTc4ZGNlODQ3MGU3ODljMmM5ODkzNjE2NzQwNDcyNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9xg5HtyD294/WOkksFXiUlUWx2w t/RnlOSWxgKxVOFrnYZ5ogcx6KEjHlJxH/FGbhQfCJSU+Jy/nR4qgzpjHzyPIjYu UjgacFC/jf9FGVWCzjQPDODHUrK+0Fflbyaff0U2qvBAALIPUz7bnNyT+NcWenzd If/fXjpzwz7ucWO/1rI56A9nIXEx6MEm8hdYIcUiCuFGVpLSjG1uf5JR+RUfUWd2 DK9GTxYDt1UNeH6/4igbk3sSn5gVwkSUJdQCNpqKo8pfyzGXDwh0S1mAxzYcFyiI 9fBsWdvxvgkGwIOSLQZOBrB2QI0gYTiJSXkJuadSqaahgpeIW9u8wKEgLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk8M6543OhHDnicLJiTYWdARyYZMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYv8NvBv d5b92rC73428Yj+CxXRtU19bHXyWTCWtTA+SDYrTFMs0p7TfcIr4zJwYF3jWKi8f U0ctWTTGuXtureMY5v7KVP34ySp5CdC6Vh5j6JsPagtOVczvjwFVuiVNlL/QR86f JMen1B4c/DHgAzblSUPWMcbDjKPiWDb/mSlsfRWZd7CpJJizLcYvaBUdWkjDQ4sJ ySYVCxWMWpU5SWlVZv0rQ60x7ij9tx0EUXjSQ/QXKgE8OEYDH/uY06KslyXGAS1H phD5NfxdIi/YIKK7pC7K8iBlgY8MbxYsZuikl/ZCXuS3MhvIWkuHib+UW9N4MU3K KXS+v9n7da0zlQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:04:02 2025 by rpki-client