This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json) Hash identifier: YEIgytjyxDoKN2wjUUiEmhpCa9cxe4tug4KQrg9Yg3U= Subject key identifier: 44:72:84:38:75:05:95:FE:57:AA:38:F1:8B:1A:3F:31:AF:C5:FE:DC Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da Certificate serial: 019B657A253D34D4F8A55DF4B75BA99215BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 15:01:02 +0000 Manifest this update: Sun 28 Dec 2025 15:01:02 +0000 Manifest next update: Mon 29 Dec 2025 15:01:02 +0000 Files and hashes: 1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=) 2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: NHjw3qgxAohBWbsRPWuF9w4f3tyVd3E0LLClbPJ8+oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:25:3d:34:d4:f8:a5:5d:f4:b7:5b:a9:92:15:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da Validity Not Before: Dec 28 15:01:02 2025 GMT Not After : Dec 29 15:01:02 2025 GMT Subject: CN=44728438750595fe57aa38f18b1a3f31afc5fedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:f6:e2:97:b6:1f:24:b0:eb:a3:20:e9:88: 5b:61:24:9f:e6:cc:fe:1a:2c:d0:a5:20:4f:e1:82: a0:39:db:46:4b:28:f9:d1:59:c8:11:5c:90:59:c2: 31:3a:ce:ff:6c:61:e2:a6:bc:d9:0a:8f:12:5e:2e: 23:7c:33:e2:fb:e8:c2:6f:ab:e3:7c:37:81:91:79: 78:c4:7f:20:66:40:44:7d:b8:09:16:f4:bd:e3:e4: 61:33:37:81:ca:d1:9e:0a:2a:74:f4:92:e7:38:0f: 14:16:25:d1:c5:b2:39:e4:73:40:69:79:1c:32:26: ab:53:60:75:d9:fd:db:bb:10:9f:c5:8a:90:2f:02: 9c:af:87:b3:37:8f:c5:93:c1:41:82:25:04:92:e8: 34:db:00:55:11:03:88:9c:9f:ef:5c:49:43:77:53: 48:88:34:f5:19:6a:e6:8f:07:bf:cd:f1:5c:58:8b: 55:65:3e:72:fa:f7:91:ab:85:29:6a:47:1c:42:dd: b8:44:ec:a3:d9:b6:7c:e2:dc:1e:0a:30:03:01:5d: c8:31:68:ff:e5:36:45:2c:79:5f:b6:cc:b8:83:06: ad:56:f6:c5:a4:b7:d9:aa:7a:c0:58:c4:43:db:15: 33:19:0a:e9:c3:91:6d:02:42:cd:9d:8d:94:3f:85: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:72:84:38:75:05:95:FE:57:AA:38:F1:8B:1A:3F:31:AF:C5:FE:DC X509v3 Authority Key Identifier: keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:67:31:36:01:71:5e:43:f5:42:ec:ef:a8:a2:e3:e6:61:3f: c4:fd:d6:ef:d0:d1:ab:09:7e:7d:f9:db:55:e8:93:50:4a:db: 66:24:57:19:55:ab:bd:3d:ab:2b:19:54:df:17:56:a2:fa:10: 66:17:e7:f6:61:87:9d:9e:f4:59:27:0a:f1:4f:45:bc:81:f3: d2:22:96:c8:c6:cc:bc:aa:e4:e1:21:34:81:27:84:53:a1:cb: 22:a1:a9:65:b7:1f:a9:95:ea:e6:c2:52:d8:fc:6c:6a:b8:d2: 48:80:9b:99:d8:b9:5e:ac:6a:fb:30:7d:71:b7:26:78:30:b4: c1:4d:78:6e:28:9b:61:20:58:ca:4f:b8:43:73:c4:cb:64:8a: d1:7d:35:49:6f:ff:d1:2c:47:32:b2:c8:fd:22:c4:b5:dc:83: 28:23:7c:5e:26:5c:ca:ca:8e:0c:87:7f:63:d0:4c:85:da:49: ff:2c:8f:f5:95:06:02:29:20:a0:b8:b1:bc:04:95:70:f9:9b: 09:6c:f3:7b:0a:d9:f4:7b:e5:a1:5a:94:4d:8f:8e:fb:90:5d: ee:b0:23:36:a7:da:0d:9d:0e:3b:82:06:3f:31:6f:44:35:ac: ce:15:5f:c8:ce:33:d6:67:51:b6:e1:59:ac:d1:5d:8e:09:92: b9:07:3f:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtleiU9NNT4pV30t1upkhW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MWVmMGFkNDNjN2I4ZTI2YzE3NWZkYzFmMTY5NmQwMDgx ZGM0ZGEwHhcNMjUxMjI4MTUwMTAyWhcNMjUxMjI5MTUwMTAyWjAzMTEwLwYDVQQD Eyg0NDcyODQzODc1MDU5NWZlNTdhYTM4ZjE4YjFhM2YzMWFmYzVmZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF724pe2HySw66Mg6YhbYSSf5sz+ GizQpSBP4YKgOdtGSyj50VnIEVyQWcIxOs7/bGHiprzZCo8SXi4jfDPi++jCb6vj fDeBkXl4xH8gZkBEfbgJFvS94+RhMzeBytGeCip09JLnOA8UFiXRxbI55HNAaXkc MiarU2B12f3buxCfxYqQLwKcr4ezN4/Fk8FBgiUEkug02wBVEQOInJ/vXElDd1NI iDT1GWrmjwe/zfFcWItVZT5y+veRq4UpakccQt24ROyj2bZ84tweCjADAV3IMWj/ 5TZFLHlftsy4gwatVvbFpLfZqnrAWMRD2xUzGQrpw5FtAkLNnY2UP4XquQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERyhDh1BZX+V6o48YsaPzGvxf7cMB8GA1UdIwQY MBaAFMce8K1Dx7jibBdf3B8WltAIHcTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMWMzYWEtYTJhNy00MmU3LTgwNDYt MjI0M2UzNjk4M2UzLzEveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMWMzYWEtYTJhNy00MmU3LTgwNDYtMjI0M2UzNjk4M2Uz LzEveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2cxNgFx XkP1QuzvqKLj5mE/xP3W79DRqwl+ffnbVeiTUErbZiRXGVWrvT2rKxlU3xdWovoQ Zhfn9mGHnZ70WScK8U9FvIHz0iKWyMbMvKrk4SE0gSeEU6HLIqGpZbcfqZXq5sJS 2PxsarjSSICbmdi5Xqxq+zB9cbcmeDC0wU14biibYSBYyk+4Q3PEy2SK0X01SW// 0SxHMrLI/SLEtdyDKCN8XiZcysqODId/Y9BMhdpJ/yyP9ZUGAikgoLixvASVcPmb CWzzewrZ9HvloVqUTY+O+5Bd7rAjNqfaDZ0OO4IGPzFvRDWszhVfyM4z1mdRtuFZ rNFdjgmSuQc/wA== -----END CERTIFICATE-----Generated at Mon Dec 29 00:46:08 2025 by rpki-client