This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json) Hash identifier: pkEF6klkwoY6mWCoAn4ONvH3bxrKMC7zpdME5RPwrdQ= Subject key identifier: A3:EC:43:16:7F:76:F6:A0:48:86:64:00:E9:10:B4:96:84:FE:4C:0B Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09 Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09 Certificate serial: 019B47A6B570C77C4F31E5D3C2F30BB0D0EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 20:01:06 +0000 Manifest this update: Mon 22 Dec 2025 20:01:06 +0000 Manifest next update: Tue 23 Dec 2025 20:01:06 +0000 Files and hashes: 1: S4M1yLaoUkBNpr3z25JQH_BGArI.roa (hash: u9aDojpNlhB36wlUGghNH/x88dKTjNyPYfwfTMBmtv4=) 2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: Qz6Gkzop68f5oSEYi7DQPsLUU6cit/nKLRKMpBxWnRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:b5:70:c7:7c:4f:31:e5:d3:c2:f3:0b:b0:d0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09 Validity Not Before: Dec 22 20:01:06 2025 GMT Not After : Dec 23 20:01:06 2025 GMT Subject: CN=a3ec43167f76f6a048866400e910b49684fe4c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:29:96:d8:b5:d9:ee:0f:2e:9b:16:53:7a: 86:83:4a:8f:0d:7f:c2:89:7f:ea:25:bf:c7:aa:b4: ef:84:e2:1c:1f:ff:12:96:77:1d:e6:ad:69:03:af: 74:f7:45:6c:8d:cb:11:b2:89:e0:75:93:92:92:f4: 9e:13:f4:59:e7:80:04:32:20:c3:0c:96:be:df:06: 44:da:51:dc:c8:3f:95:dc:66:cd:ca:0f:9e:bc:76: 98:1b:e9:ae:e4:bd:ab:1a:66:d6:59:ca:3b:65:bc: 91:74:6a:25:67:6e:d6:f9:b5:b7:ab:aa:d2:7d:24: 1a:ec:b4:8c:09:dc:31:8d:b6:9d:90:aa:0c:24:66: c9:b7:63:3d:73:19:4c:80:1c:1a:bc:f3:36:d3:67: 66:5b:64:05:01:82:04:84:a0:77:f3:27:06:ec:0f: f3:6c:d6:48:db:89:0c:d7:2f:35:97:c6:c0:9c:02: 4b:e5:b4:d3:74:63:7d:05:1b:6c:67:3d:3c:f1:d4: 04:39:7a:e0:a8:9f:de:64:fe:da:0d:88:39:26:57: ad:b8:2c:19:13:eb:5a:94:21:c2:93:d9:7d:3a:ad: 41:06:5a:30:0f:85:d0:03:28:b8:86:6c:7a:59:af: c2:7a:7a:be:3c:23:fe:05:d0:8b:17:07:e3:47:5b: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EC:43:16:7F:76:F6:A0:48:86:64:00:E9:10:B4:96:84:FE:4C:0B X509v3 Authority Key Identifier: keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4e:08:eb:0c:57:30:a8:e9:32:28:00:ef:76:7b:2d:71:dc: a0:54:c8:63:05:c3:0e:93:42:be:d8:f7:b4:41:ae:ea:67:58: 77:70:d5:77:d3:55:81:6a:5f:1f:5f:8b:88:26:cc:1c:3c:9a: bb:17:90:d4:c4:a1:d5:c0:10:aa:3a:b6:f4:02:b1:21:64:2c: 76:4d:54:84:b7:0a:e2:0f:1e:8e:59:93:e4:26:ec:eb:39:e2: f5:19:4f:75:f9:1d:72:f0:e4:ee:3d:b4:44:d3:cd:39:10:2c: 2e:6c:6e:74:d6:a7:59:e2:e9:ef:b9:a0:8b:eb:6f:2b:00:13: 18:2b:0f:63:4f:1e:66:39:4f:4e:c7:d8:c5:86:1b:dd:18:91: b3:b3:45:6b:65:5b:1e:bd:e1:33:b1:ca:24:3c:7e:a1:32:9b: 4e:21:79:ee:6b:f2:18:80:80:bb:2a:6d:ea:69:de:15:9b:2f: ab:51:fd:a7:df:19:d5:89:6e:2e:fd:c6:d1:9a:3f:48:ef:56: 2a:e6:ff:73:71:74:ef:0f:ef:14:30:31:61:79:65:47:1e:4f: fb:d0:8a:9d:d0:d7:26:0e:ee:be:92:72:52:fe:6d:fc:8c:e5: 25:e8:57:ff:fa:bf:44:70:53:1f:89:8f:04:f8:d8:5b:b7:29: cc:3b:9f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHprVwx3xPMeXTwvMLsNDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTE5ZTc1MjAwMzkyZjFhMmYwOGJlOTkwNzMyZDgwNDdi MjhiMDkwHhcNMjUxMjIyMjAwMTA2WhcNMjUxMjIzMjAwMTA2WjAzMTEwLwYDVQQD EyhhM2VjNDMxNjdmNzZmNmEwNDg4NjY0MDBlOTEwYjQ5Njg0ZmU0YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U4plti12e4PLpsWU3qGg0qPDX/C iX/qJb/HqrTvhOIcH/8Slncd5q1pA69090VsjcsRsongdZOSkvSeE/RZ54AEMiDD DJa+3wZE2lHcyD+V3GbNyg+evHaYG+mu5L2rGmbWWco7ZbyRdGolZ27W+bW3q6rS fSQa7LSMCdwxjbadkKoMJGbJt2M9cxlMgBwavPM202dmW2QFAYIEhKB38ycG7A/z bNZI24kM1y81l8bAnAJL5bTTdGN9BRtsZz088dQEOXrgqJ/eZP7aDYg5JletuCwZ E+talCHCk9l9Oq1BBlowD4XQAyi4hmx6Wa/Cenq+PCP+BdCLFwfjR1tkvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPsQxZ/dvagSIZkAOkQtJaE/kwLMB8GA1UdIwQY MBaAFMURnnUgA5LxovCL6ZBzLYBHsosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2Qt ZDgxOWNlZDVkMzVhLzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2QtZDgxOWNlZDVkMzVh LzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE4I6wxX MKjpMigA73Z7LXHcoFTIYwXDDpNCvtj3tEGu6mdYd3DVd9NVgWpfH1+LiCbMHDya uxeQ1MSh1cAQqjq29AKxIWQsdk1UhLcK4g8ejlmT5Cbs6zni9RlPdfkdcvDk7j20 RNPNORAsLmxudNanWeLp77mgi+tvKwATGCsPY08eZjlPTsfYxYYb3RiRs7NFa2Vb Hr3hM7HKJDx+oTKbTiF57mvyGICAuypt6mneFZsvq1H9p98Z1YluLv3G0Zo/SO9W Kub/c3F07w/vFDAxYXllRx5P+9CKndDXJg7uvpJyUv5t/IzlJehX//q/RHBTH4mP BPjYW7cpzDuf3Q== -----END CERTIFICATE-----Generated at Tue Dec 23 02:53:56 2025 by rpki-client