This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json) Hash identifier: gFLY12x7L2SqP/El0oIv6AY/L1+PDzz6w7l9laKMeIg= Subject key identifier: 94:96:D1:10:9F:17:92:BA:48:7F:46:67:2D:C2:F2:EC:31:C1:19:4D Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84 Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184 Certificate serial: 019B41369C94A0FFF553B39A094DDD67F3CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 14:00:56 +0000 Manifest this update: Sun 21 Dec 2025 14:00:56 +0000 Manifest next update: Mon 22 Dec 2025 14:00:56 +0000 Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=) 2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: tdaSY9+wkPLSYEwzETpjLfYhfJNr1pc9yLzwgbsow3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:9c:94:a0:ff:f5:53:b3:9a:09:4d:dd:67:f3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184 Validity Not Before: Dec 21 14:00:56 2025 GMT Not After : Dec 22 14:00:56 2025 GMT Subject: CN=9496d1109f1792ba487f46672dc2f2ec31c1194d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:60:27:23:5a:39:69:3e:75:cb:ce:e9:5d: 44:f8:f6:4d:c6:5d:07:21:93:f4:36:50:48:fb:92: 69:19:7b:77:bc:2c:95:ce:84:6d:fc:99:ad:f4:1c: b7:bc:91:37:66:e1:d3:be:41:7c:38:26:c0:07:71: 02:4d:df:a0:55:61:2e:74:cd:bb:5b:99:c9:0d:7a: 43:4e:42:5b:52:af:5f:57:28:b2:06:1f:da:a6:ba: d1:c3:64:ef:1d:11:c6:2d:94:22:0f:94:94:d5:62: 5b:0a:39:d6:d9:3b:66:fc:dc:17:c3:b0:91:b0:f1: 31:b0:de:44:e1:86:bd:97:29:ac:94:a8:c5:d0:7e: ad:6b:94:f6:e5:c1:2b:f0:30:61:84:ac:83:ed:fa: fb:ec:26:73:ec:b2:48:03:dc:99:6a:b0:27:30:76: 46:70:95:da:44:98:04:24:0e:01:01:53:90:d7:47: fd:dd:6a:39:86:77:81:61:96:b4:d4:4c:16:8c:63: 66:cf:ff:c4:76:bc:4f:91:fc:1f:e2:b1:9d:c2:9f: ce:af:4c:2a:72:b8:b3:a7:78:bb:73:30:cc:af:f6: e7:26:ce:44:19:c8:0e:00:ea:88:dd:63:e2:29:74: 0b:76:cb:0e:55:f7:b5:2e:87:de:db:83:9d:cb:8b: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:96:D1:10:9F:17:92:BA:48:7F:46:67:2D:C2:F2:EC:31:C1:19:4D X509v3 Authority Key Identifier: keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:14:52:0b:9d:73:cf:bf:96:f5:b0:a6:aa:4f:bf:15:98:ef: fe:3d:84:5d:c3:5e:1b:44:bc:d8:c1:44:76:21:be:f6:a0:9a: 46:fb:98:88:f8:5d:e1:e2:e9:c4:98:89:d2:f1:34:3f:28:69: 4e:7c:ed:af:a2:28:81:a6:1d:40:77:7f:4e:77:7f:00:f7:29: eb:93:67:b7:ae:0f:09:cb:09:53:7f:b1:17:45:6d:23:8c:35: 3c:06:86:7d:fa:1d:7e:76:17:a6:dd:2f:35:00:85:6f:c5:5f: 07:1d:e0:26:8f:f3:d8:d0:1a:7f:15:2b:4c:3a:50:25:18:ec: 51:32:27:12:67:f5:39:df:a1:07:72:0b:f2:2e:37:e0:11:d5: c1:36:01:c9:d2:14:42:f9:bf:0e:2c:39:d5:b9:c5:d1:0f:c0: 33:c9:3d:99:94:06:be:ab:3a:b3:e0:85:88:ea:d7:95:97:e9: a8:ff:9e:fe:b9:56:fc:ee:cb:3c:47:bb:9d:84:fa:ab:13:af: b9:6d:3d:05:58:85:15:3a:e3:02:d2:e9:6c:55:97:de:b6:2a: 6d:a3:5d:76:76:51:17:cd:2f:33:51:e0:07:47:fe:0c:17:48: 22:6b:ac:9c:73:64:a2:2a:a3:b4:b1:48:5e:bb:ae:99:06:e7: 37:ee:34:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpyUoP/1U7OaCU3dZ/PLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzQzNWY0YmUyYzU0M2JmMzQ4M2UzNzdmODAzMTRkMjgy MzAxODQwHhcNMjUxMjIxMTQwMDU2WhcNMjUxMjIyMTQwMDU2WjAzMTEwLwYDVQQD Eyg5NDk2ZDExMDlmMTc5MmJhNDg3ZjQ2NjcyZGMyZjJlYzMxYzExOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubZgJyNaOWk+dcvO6V1E+PZNxl0H IZP0NlBI+5JpGXt3vCyVzoRt/Jmt9By3vJE3ZuHTvkF8OCbAB3ECTd+gVWEudM27 W5nJDXpDTkJbUq9fVyiyBh/aprrRw2TvHRHGLZQiD5SU1WJbCjnW2Ttm/NwXw7CR sPExsN5E4Ya9lymslKjF0H6ta5T25cEr8DBhhKyD7fr77CZz7LJIA9yZarAnMHZG cJXaRJgEJA4BAVOQ10f93Wo5hneBYZa01EwWjGNmz//EdrxPkfwf4rGdwp/Or0wq crizp3i7czDMr/bnJs5EGcgOAOqI3WPiKXQLdssOVfe1Lofe24Ody4tmswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSW0RCfF5K6SH9GZy3C8uwxwRlNMB8GA1UdIwQY MBaAFMU0NfS+LFQ780g+N3+AMU0oIwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWIt OWY0ZmU0Y2QwMjQ2LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWItOWY0ZmU0Y2QwMjQ2 LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxRSC51z z7+W9bCmqk+/FZjv/j2EXcNeG0S82MFEdiG+9qCaRvuYiPhd4eLpxJiJ0vE0Pyhp Tnztr6IogaYdQHd/Tnd/APcp65Nnt64PCcsJU3+xF0VtI4w1PAaGffodfnYXpt0v NQCFb8VfBx3gJo/z2NAafxUrTDpQJRjsUTInEmf1Od+hB3IL8i434BHVwTYBydIU Qvm/Diw51bnF0Q/AM8k9mZQGvqs6s+CFiOrXlZfpqP+e/rlW/O7LPEe7nYT6qxOv uW09BViFFTrjAtLpbFWX3rYqbaNddnZRF80vM1HgB0f+DBdIImusnHNkoiqjtLFI XruumQbnN+40Fw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:37:38 2025 by rpki-client