This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json) Hash identifier: EgYbPaCrSsi9UOJVu8PmH2QhUNwo2oQJ0PJ3sMdLIXA= Subject key identifier: 42:DD:A5:0B:EB:D3:AC:35:C1:74:C2:60:F9:7A:F8:9C:C9:FB:EC:62 Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213 Certificate serial: 019B397CDE9EB141BFAA903AB57C7F4F3152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft Manifest number: 0DA0 Signing time: Sat 20 Dec 2025 02:00:43 +0000 Manifest this update: Sat 20 Dec 2025 02:00:43 +0000 Manifest next update: Sun 21 Dec 2025 02:00:43 +0000 Files and hashes: 1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=) 2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=) 3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=) 4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: 4YIA49s5y1s5NZjh9YGOjqOniBNgJIdfyUUrlMrO8t0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:de:9e:b1:41:bf:aa:90:3a:b5:7c:7f:4f:31:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213 Validity Not Before: Dec 20 02:00:43 2025 GMT Not After : Dec 21 02:00:43 2025 GMT Subject: CN=42dda50bebd3ac35c174c260f97af89cc9fbec62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:6b:c9:ac:04:ae:fc:34:43:e1:15:04:b0: 5b:9b:b7:7b:9c:47:3b:32:66:cc:60:48:5a:5c:88: e7:d2:29:0d:4a:3d:5c:e1:28:a4:6b:35:79:12:87: 6f:02:66:ad:4a:73:6b:b0:2f:fb:54:fc:45:b5:62: a2:0c:5a:7b:35:7f:aa:58:0f:89:65:91:0e:3a:0c: ea:c9:80:eb:4e:25:79:fd:a0:b3:fb:38:6b:44:88: 67:25:8e:93:fb:0c:a3:63:d8:46:b4:6e:9d:79:15: 82:c5:0b:89:7a:d3:7b:11:ed:53:7c:d6:7e:65:6e: 74:1f:05:75:0f:2f:cd:a2:4f:8c:8d:b6:86:9e:5d: 03:cb:b4:30:87:4c:3e:e5:11:40:28:bd:84:d2:bc: b5:a4:65:bf:0b:0c:db:3b:c8:c6:a1:8e:4f:28:c2: 1c:c9:95:c6:07:56:2a:06:a1:4d:e6:e8:d6:19:a7: c0:fa:35:39:b2:be:6b:6d:c5:48:52:02:02:2c:7f: 60:46:46:ce:67:da:7e:52:7d:2e:08:f9:db:76:e4: d3:46:52:d5:70:82:42:6e:50:d6:19:3c:cb:b2:cf: f7:71:62:fd:64:77:28:01:1e:b0:41:7b:ce:59:67: 9d:28:f4:72:69:6c:5a:d4:22:86:a4:f7:7d:cd:dd: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DD:A5:0B:EB:D3:AC:35:C1:74:C2:60:F9:7A:F8:9C:C9:FB:EC:62 X509v3 Authority Key Identifier: keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:43:37:dd:46:c1:92:82:d6:fd:9e:51:0c:c9:9f:8e:40:5d: dc:6c:f4:2b:80:b0:87:50:13:ff:b8:79:02:fb:5f:e4:56:db: 95:2c:a0:80:0a:69:e0:55:e7:7a:6e:51:85:94:17:e1:e8:f7: 2a:a8:ed:4d:6a:ff:3a:57:3f:67:c6:1a:76:cf:a4:9a:85:0c: 79:dc:7e:75:06:7c:a5:4c:e8:54:8a:5b:59:2d:21:95:7b:c2: 08:47:ab:13:c9:f6:a1:96:b7:00:04:f8:4a:27:d3:ed:24:9c: 42:b7:e0:47:ff:38:b4:19:0a:17:d8:af:7f:10:0b:23:45:c7: 1b:21:70:7b:bf:42:de:a4:63:18:21:88:51:7c:45:b5:dd:3f: 35:84:bd:4d:db:c2:dd:c3:c3:0b:e3:60:6e:56:02:3c:47:e4: fb:09:bc:a8:1c:dd:57:8a:32:31:3b:7a:ac:dc:96:61:6d:cf: 8d:5d:30:02:d5:66:1c:70:3c:fb:c2:f2:68:a9:e6:7f:bc:ce: e5:b5:b8:ba:fc:19:80:e0:5c:00:61:9a:88:3b:8a:f7:20:07: 18:11:de:65:e2:4b:49:a7:76:c6:32:e4:0e:11:a7:6e:a6:49: e2:44:ff:12:d1:7a:ab:e3:0c:4b:eb:72:e9:c2:6a:52:59:24: e0:00:9e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fN6esUG/qpA6tXx/TzFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1 NzcyMTMwHhcNMjUxMjIwMDIwMDQzWhcNMjUxMjIxMDIwMDQzWjAzMTEwLwYDVQQD Eyg0MmRkYTUwYmViZDNhYzM1YzE3NGMyNjBmOTdhZjg5Y2M5ZmJlYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0dryawErvw0Q+EVBLBbm7d7nEc7 MmbMYEhaXIjn0ikNSj1c4SikazV5EodvAmatSnNrsC/7VPxFtWKiDFp7NX+qWA+J ZZEOOgzqyYDrTiV5/aCz+zhrRIhnJY6T+wyjY9hGtG6deRWCxQuJetN7Ee1TfNZ+ ZW50HwV1Dy/Nok+MjbaGnl0Dy7Qwh0w+5RFAKL2E0ry1pGW/CwzbO8jGoY5PKMIc yZXGB1YqBqFN5ujWGafA+jU5sr5rbcVIUgICLH9gRkbOZ9p+Un0uCPnbduTTRlLV cIJCblDWGTzLss/3cWL9ZHcoAR6wQXvOWWedKPRyaWxa1CKGpPd9zd2oLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELdpQvr06w1wXTCYPl6+JzJ++xiMB8GA1UdIwQY MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt YjhlYTE4ZWI3NWY0LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0 LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy0M33UbB koLW/Z5RDMmfjkBd3Gz0K4Cwh1AT/7h5Avtf5FbblSyggApp4FXnem5RhZQX4ej3 KqjtTWr/Olc/Z8Yads+kmoUMedx+dQZ8pUzoVIpbWS0hlXvCCEerE8n2oZa3AAT4 SifT7SScQrfgR/84tBkKF9ivfxALI0XHGyFwe79C3qRjGCGIUXxFtd0/NYS9TdvC 3cPDC+NgblYCPEfk+wm8qBzdV4oyMTt6rNyWYW3PjV0wAtVmHHA8+8LyaKnmf7zO 5bW4uvwZgOBcAGGaiDuK9yAHGBHeZeJLSad2xjLkDhGnbqZJ4kT/EtF6q+MMS+ty 6cJqUlkk4ACeaA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:34:07 2025 by rpki-client