This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json) Hash identifier: EbsWKkN59iOZJaXFdJsFBT7z3a0dXKd4EojGx9PVb7w= Subject key identifier: 1A:2A:53:65:A5:3A:B9:B6:8C:91:F8:8D:4D:86:C4:EC:E4:6F:F8:EC Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f Certificate serial: 019B68E92E5474FDA609CFC4FE4E7F11890D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft Manifest number: 1587 Signing time: Mon 29 Dec 2025 07:01:10 +0000 Manifest this update: Mon 29 Dec 2025 07:01:10 +0000 Manifest next update: Tue 30 Dec 2025 07:01:10 +0000 Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=) 2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=) 3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: Q+HStiKqA0IcG5FRBhSkd3GOCHcgqzd/vm9lQ/l1Dzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:2e:54:74:fd:a6:09:cf:c4:fe:4e:7f:11:89:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f Validity Not Before: Dec 29 07:01:10 2025 GMT Not After : Dec 30 07:01:10 2025 GMT Subject: CN=1a2a5365a53ab9b68c91f88d4d86c4ece46ff8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:2e:fe:7c:85:eb:5c:88:97:b4:94:ed:ef: 76:52:6a:7e:d2:ac:6a:80:f9:20:0c:af:5b:d2:3e: ba:24:99:f1:43:ac:9c:c1:e5:92:2b:46:64:9e:09: 50:05:e7:57:11:b8:5d:c9:3b:d9:5d:c0:5d:c7:4f: e4:1f:a1:f2:d2:9e:73:0c:cd:cd:63:16:d6:9e:28: 8f:af:bb:3a:0b:2d:db:3f:44:1f:5f:be:02:fe:f1: e3:b9:55:55:61:7e:ff:9f:06:37:75:e5:a7:3c:4a: 60:68:08:37:18:db:c3:30:5a:14:c2:e6:37:1e:9b: 78:fb:d4:d3:87:2b:43:98:37:9e:d0:89:b6:4a:73: 9c:cd:63:cc:b1:3b:9a:c4:aa:01:f7:79:46:90:35: e1:dc:2e:11:1d:b8:33:ef:e1:d5:89:52:e5:69:9a: 49:20:8e:1d:e5:8d:76:65:6c:a2:2f:c7:98:13:02: f0:fb:01:ea:20:54:11:e3:ed:8d:c3:93:12:c4:ec: 9f:f6:4a:4d:d5:82:05:ca:f4:0f:34:ca:b8:27:23: c4:39:60:e0:31:92:4e:da:2b:52:06:96:d6:ed:28: 47:ee:fc:34:d1:12:ae:f5:41:58:43:5d:ef:5f:ac: c8:51:19:f2:37:ec:a9:3e:9f:b9:9a:21:b7:7d:8e: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:53:65:A5:3A:B9:B6:8C:91:F8:8D:4D:86:C4:EC:E4:6F:F8:EC X509v3 Authority Key Identifier: keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f1:fc:22:3f:32:70:fc:5c:86:52:39:e1:6b:96:0f:3a:0d: 58:0d:d2:3b:23:f3:df:b6:c5:77:53:31:52:aa:1d:d5:bb:06: 6b:80:a8:03:f2:08:bc:76:cf:e4:ee:f5:45:60:7d:78:0a:96: f5:81:99:c8:b3:58:57:86:cb:ef:9b:77:8a:06:e0:06:e2:87: b1:76:4e:63:3d:48:43:38:3c:f5:79:a9:67:1b:e0:61:fa:5d: 16:c6:eb:c1:c3:21:b9:90:5e:11:8c:bc:c4:c5:82:47:1f:cf: 51:de:f5:61:52:5c:10:62:c8:68:2a:36:ec:43:20:d1:8f:23: c6:2a:6f:2f:63:bd:a3:bc:69:79:40:a2:b5:60:3d:3f:9a:f5: 7e:c8:55:f9:90:dc:d4:cd:54:0c:f9:78:02:7b:11:e0:e6:7e: 88:a7:59:6f:49:2d:7b:fe:d0:d0:fe:ea:e5:e6:71:bf:1a:db: 2e:71:c3:2b:93:32:2a:1a:0f:fd:0d:68:f8:40:3a:cf:3a:63: cf:85:f6:3b:92:20:57:ad:a1:0a:ce:01:50:f9:b3:83:61:96: 23:22:54:20:d6:dc:5c:07:f1:8a:7e:90:ec:fd:60:69:4f:cf: 50:7f:77:d1:86:b3:3b:de:bb:fc:fe:e0:a9:ac:25:80:84:a9: fa:d0:18:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6S5UdP2mCc/E/k5/EYkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmRjNjBkMTZkZmUxNjQ5ZDg2YzE2OTNlMTc4NThjMjMw NjM4N2YwHhcNMjUxMjI5MDcwMTEwWhcNMjUxMjMwMDcwMTEwWjAzMTEwLwYDVQQD EygxYTJhNTM2NWE1M2FiOWI2OGM5MWY4OGQ0ZDg2YzRlY2U0NmZmOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwou/nyF61yIl7SU7e92Ump+0qxq gPkgDK9b0j66JJnxQ6ycweWSK0ZknglQBedXEbhdyTvZXcBdx0/kH6Hy0p5zDM3N YxbWniiPr7s6Cy3bP0QfX74C/vHjuVVVYX7/nwY3deWnPEpgaAg3GNvDMFoUwuY3 Hpt4+9TThytDmDee0Im2SnOczWPMsTuaxKoB93lGkDXh3C4RHbgz7+HViVLlaZpJ II4d5Y12ZWyiL8eYEwLw+wHqIFQR4+2Nw5MSxOyf9kpN1YIFyvQPNMq4JyPEOWDg MZJO2itSBpbW7ShH7vw00RKu9UFYQ13vX6zIURnyN+ypPp+5miG3fY7qDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoqU2WlOrm2jJH4jU2GxOzkb/jsMB8GA1UdIwQY MBaAFMZtxg0W3+FknYbBaT4XhYwjBjh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQt ZDRmZWQ1MDg1MzkyLzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQtZDRmZWQ1MDg1Mzky LzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfH8Ij8y cPxchlI54WuWDzoNWA3SOyPz37bFd1MxUqod1bsGa4CoA/IIvHbP5O71RWB9eAqW 9YGZyLNYV4bL75t3igbgBuKHsXZOYz1IQzg89XmpZxvgYfpdFsbrwcMhuZBeEYy8 xMWCRx/PUd71YVJcEGLIaCo27EMg0Y8jxipvL2O9o7xpeUCitWA9P5r1fshV+ZDc 1M1UDPl4AnsR4OZ+iKdZb0kte/7Q0P7q5eZxvxrbLnHDK5MyKhoP/Q1o+EA6zzpj z4X2O5IgV62hCs4BUPmzg2GWIyJUINbcXAfxin6Q7P1gaU/PUH930YazO967/P7g qawlgISp+tAYkA== -----END CERTIFICATE-----Generated at Mon Dec 29 14:53:07 2025 by rpki-client