This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: HoNUP77Np4IJs6nhHnPglaCJa16bIf1VXadOYDtp1OQ= Subject key identifier: 28:36:F2:F9:17:FC:82:E2:BE:80:DC:7A:CB:B9:15:70:22:80:25:D1 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B42EED0EF9D63918F3B707B845D973F1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 17C3 Signing time: Sun 21 Dec 2025 22:01:45 +0000 Manifest this update: Sun 21 Dec 2025 22:01:45 +0000 Manifest next update: Mon 22 Dec 2025 22:01:45 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 3: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 4: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 5: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 6: MFsAIGGhjwkS7QqCImE8k8j0fHE.roa (hash: agrbR9N2CmVo23L0pspB3pCZ8XyUH28RrwKnFVhuak4=) 7: UtmhEOLu5jyXyfL-TtwHoqXAAqY.roa (hash: YHko28qzK0fZNdpEAvngg8c4tJnZb9FKoBOSEJpAqxI=) 8: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 9: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 10: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 11: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: PErc1Z4jqOR+goZuRLtaKuUI3GsH9Sec0eL9ok1nWos=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:d0:ef:9d:63:91:8f:3b:70:7b:84:5d:97:3f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Dec 21 22:01:45 2025 GMT Not After : Dec 22 22:01:45 2025 GMT Subject: CN=2836f2f917fc82e2be80dc7acbb91570228025d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:18:09:1b:b7:c6:a3:e2:6f:1f:d9:df:6d: a6:f2:3b:be:35:bf:7b:6e:e2:d6:18:da:e1:70:4b: 59:66:14:eb:01:e1:91:c2:79:9f:de:59:8e:fc:60: 0f:4e:97:3b:ec:5a:5e:71:e8:5c:de:33:c2:d2:05: 2f:48:6d:6d:da:84:98:59:05:be:1b:6c:c8:2c:1e: cc:da:a1:cf:03:d0:09:2f:2f:85:97:01:59:da:e7: 61:b9:a0:2a:06:cf:9d:bc:45:a2:a1:65:de:06:94: e6:b0:8f:e0:48:95:a3:71:58:21:53:b1:33:81:16: ca:85:41:b0:dc:40:7c:e6:33:6f:c9:13:7f:92:2f: 77:23:46:d1:bb:d6:74:d8:ff:a5:11:66:0f:90:17: ed:d1:89:1f:cb:93:da:58:b8:ad:9f:8d:6d:6b:ca: a3:2c:21:4e:bc:cc:c6:89:87:02:7a:8e:1e:58:7e: 67:83:d4:a0:72:e9:8d:22:88:8c:2a:1f:f3:2a:f8: ee:cd:c8:a4:5f:64:ec:c3:16:bc:b8:d5:aa:dc:e6: 14:73:a2:eb:4b:04:2f:db:30:7d:88:0b:9c:8b:64: 30:0f:b0:01:33:84:59:52:64:dc:38:17:ee:bb:13: 90:2b:d8:b8:08:b7:be:8e:33:5c:72:76:cf:35:06: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:36:F2:F9:17:FC:82:E2:BE:80:DC:7A:CB:B9:15:70:22:80:25:D1 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:31:70:9a:15:84:bc:d3:b7:0c:11:7d:53:c6:17:35:97:e6: 3e:22:95:aa:66:ec:3f:e1:93:d1:c1:5b:75:bc:8a:51:f0:82: fa:1d:a7:43:20:3e:15:f5:df:6d:a9:49:4f:68:81:30:d2:90: ac:23:25:84:fa:e9:e7:6c:44:7c:6d:9b:06:d6:ec:ac:53:e2: 9c:33:10:74:67:ac:58:d2:25:90:ed:f3:b1:39:d0:bb:98:97: f6:9d:28:0c:fd:5d:0e:23:20:3e:c8:e0:ff:47:51:cc:c1:ca: 11:54:5b:1f:93:cf:07:ee:09:63:6f:2a:cf:48:7a:79:f3:6d: f2:78:a4:ff:c5:6b:79:b3:b9:b4:cb:9d:9e:71:7f:ce:08:44: fc:7e:fa:ac:62:67:33:6c:d7:5a:e9:f2:c6:44:d5:13:d5:c8: b6:45:66:d7:62:d3:33:c4:74:b1:33:0c:69:af:ba:7d:0d:f5: ff:4d:72:95:a9:ed:bd:29:a3:14:d4:37:1c:02:59:1b:55:dc: 76:52:84:16:20:ca:38:e9:25:6f:52:46:11:d2:70:5a:a9:3b: 1c:5a:ec:34:e6:67:57:4b:31:7e:68:92:7b:ce:31:05:08:4e: 41:15:fa:fc:d9:1a:d9:e4:08:59:27:33:05:ef:a9:16:7d:f5: 69:3c:06:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7tDvnWORjztwe4Rdlz8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUxMjIxMjIwMTQ1WhcNMjUxMjIyMjIwMTQ1WjAzMTEwLwYDVQQD EygyODM2ZjJmOTE3ZmM4MmUyYmU4MGRjN2FjYmI5MTU3MDIyODAyNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf8YCRu3xqPibx/Z322m8ju+Nb97 buLWGNrhcEtZZhTrAeGRwnmf3lmO/GAPTpc77Fpecehc3jPC0gUvSG1t2oSYWQW+ G2zILB7M2qHPA9AJLy+FlwFZ2udhuaAqBs+dvEWioWXeBpTmsI/gSJWjcVghU7Ez gRbKhUGw3EB85jNvyRN/ki93I0bRu9Z02P+lEWYPkBft0Ykfy5PaWLitn41ta8qj LCFOvMzGiYcCeo4eWH5ng9SgcumNIoiMKh/zKvjuzcikX2Tswxa8uNWq3OYUc6Lr SwQv2zB9iAuci2QwD7ABM4RZUmTcOBfuuxOQK9i4CLe+jjNccnbPNQZxEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg28vkX/ILivoDcesu5FXAigCXRMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajFwmhWE vNO3DBF9U8YXNZfmPiKVqmbsP+GT0cFbdbyKUfCC+h2nQyA+FfXfbalJT2iBMNKQ rCMlhPrp52xEfG2bBtbsrFPinDMQdGesWNIlkO3zsTnQu5iX9p0oDP1dDiMgPsjg /0dRzMHKEVRbH5PPB+4JY28qz0h6efNt8nik/8VrebO5tMudnnF/zghE/H76rGJn M2zXWunyxkTVE9XItkVm12LTM8R0sTMMaa+6fQ31/01ylantvSmjFNQ3HAJZG1Xc dlKEFiDKOOklb1JGEdJwWqk7HFrsNOZnV0sxfmiSe84xBQhOQRX6/Nka2eQIWScz Be+pFn31aTwG6g== -----END CERTIFICATE-----Generated at Mon Dec 22 07:51:40 2025 by rpki-client