This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json) Hash identifier: s1YmfVhQvXZ3XDLrI7qzIc92GLUnYpf0su/vR7OclDg= Subject key identifier: 85:B7:E1:5B:DF:59:35:E8:83:80:60:15:CA:02:D8:93:3E:2C:F1:63 Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Certificate serial: 019B38A1F8ADEBD246DEB9EA18EC2A59E1EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft Manifest number: 0B1C Signing time: Fri 19 Dec 2025 22:01:37 +0000 Manifest this update: Fri 19 Dec 2025 22:01:37 +0000 Manifest next update: Sat 20 Dec 2025 22:01:37 +0000 Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=) 2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=) 3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=) 4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: yBRn+QFETZ6e9dvketXOUMhY2hMzIL1niR2ZNN06kuY=) 5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=) 6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=) 7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=) 8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:f8:ad:eb:d2:46:de:b9:ea:18:ec:2a:59:e1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Validity Not Before: Dec 19 22:01:37 2025 GMT Not After : Dec 20 22:01:37 2025 GMT Subject: CN=85b7e15bdf5935e883806015ca02d8933e2cf163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:bf:e4:23:fc:9a:62:db:bb:93:97:9e:ff: eb:23:c7:3d:37:2c:40:da:6d:4c:ca:76:7e:92:b8: d4:70:a0:24:e3:d7:a4:cc:b6:87:21:ab:9d:a3:f4: 90:35:0d:c9:2e:c3:52:86:69:c7:bc:a6:3d:96:23: 27:cb:7f:02:d1:a4:ba:a2:ee:58:02:9a:b0:5c:c7: 67:87:97:2d:57:2b:7b:65:7f:22:ac:3e:96:77:9e: 85:c0:e0:8a:d3:e6:00:e2:63:40:29:9b:40:5e:60: e7:35:70:67:8a:93:f8:18:9e:83:25:37:68:d4:5d: c4:07:93:b7:14:7f:51:6d:82:de:3e:ca:6b:e1:84: 70:cd:ae:9b:22:82:8d:d3:b8:bf:c5:98:6a:71:96: cd:7a:a9:17:4b:a1:ea:5d:08:96:40:cf:cc:74:83: 4f:de:96:9a:f5:51:13:23:bf:32:c8:2d:2a:d7:0e: 03:28:c3:e3:0f:2a:7b:9c:c8:9b:60:81:f2:c4:96: 91:35:c2:16:8f:bb:d5:1e:de:c7:9c:97:cf:ce:1d: 41:25:34:ca:d8:e2:6a:f0:a5:94:77:f8:d4:79:c0: a2:44:72:a6:12:3a:9f:77:e2:0b:3a:c1:7f:3f:45: a5:69:11:ea:97:54:8c:18:0a:26:90:0c:0d:c5:56: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B7:E1:5B:DF:59:35:E8:83:80:60:15:CA:02:D8:93:3E:2C:F1:63 X509v3 Authority Key Identifier: keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1c:8f:b8:62:1e:11:72:03:d0:1c:c5:ac:04:f4:52:25:1a: a2:34:37:d0:67:91:ad:22:16:df:04:8a:9c:d0:68:fc:43:cf: 18:e2:08:af:32:b1:ea:a9:cd:3c:aa:a9:b0:dc:1b:43:14:f0: cf:e6:06:51:3f:4f:3b:ca:6b:ca:1f:c1:12:10:a4:d0:58:54: 0a:20:8e:06:8c:5c:a0:d6:bd:23:45:a1:b8:c7:e5:70:a0:e0: f3:12:0b:1e:8e:d6:c9:be:5e:e1:8b:ea:b2:9b:37:4e:3b:ab: d0:bd:f0:d1:1d:f2:96:17:24:09:2f:45:50:ec:f6:3a:70:50: 8b:cb:b4:4f:38:97:e7:46:8b:79:36:a4:36:86:98:8b:f3:6d: 70:25:6b:b6:63:da:cf:bc:d7:40:b3:8a:4a:5f:ea:05:e4:a6: 1b:68:62:34:bb:e5:45:2e:17:f4:25:1f:ea:a5:30:4e:ea:34: 2c:2f:be:ea:72:2c:93:0e:d0:31:1a:d4:7a:5f:92:4b:aa:7c: 53:fb:f1:f5:07:38:d7:e8:c7:d6:97:64:70:3b:cc:4f:50:bf: 0a:2f:f7:c7:8f:14:99:bd:93:9a:30:04:aa:15:2a:fb:d2:a3: d6:3e:7f:02:01:b4:dc:80:5d:1a:96:16:29:ba:1d:2c:d2:4e: 20:15:42:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ofit69JG3rnqGOwqWeHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl NmRiMGUwHhcNMjUxMjE5MjIwMTM3WhcNMjUxMjIwMjIwMTM3WjAzMTEwLwYDVQQD Eyg4NWI3ZTE1YmRmNTkzNWU4ODM4MDYwMTVjYTAyZDg5MzNlMmNmMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx6/5CP8mmLbu5OXnv/rI8c9NyxA 2m1MynZ+krjUcKAk49ekzLaHIaudo/SQNQ3JLsNShmnHvKY9liMny38C0aS6ou5Y ApqwXMdnh5ctVyt7ZX8irD6Wd56FwOCK0+YA4mNAKZtAXmDnNXBnipP4GJ6DJTdo 1F3EB5O3FH9RbYLePspr4YRwza6bIoKN07i/xZhqcZbNeqkXS6HqXQiWQM/MdINP 3paa9VETI78yyC0q1w4DKMPjDyp7nMibYIHyxJaRNcIWj7vVHt7HnJfPzh1BJTTK 2OJq8KWUd/jUecCiRHKmEjqfd+ILOsF/P0WlaRHql1SMGAomkAwNxVaNIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW34VvfWTXog4BgFcoC2JM+LPFjMB8GA1UdIwQY MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXByPuGIe EXID0BzFrAT0UiUaojQ30GeRrSIW3wSKnNBo/EPPGOIIrzKx6qnNPKqpsNwbQxTw z+YGUT9PO8pryh/BEhCk0FhUCiCOBoxcoNa9I0WhuMflcKDg8xILHo7Wyb5e4Yvq sps3Tjur0L3w0R3ylhckCS9FUOz2OnBQi8u0TziX50aLeTakNoaYi/NtcCVrtmPa z7zXQLOKSl/qBeSmG2hiNLvlRS4X9CUf6qUwTuo0LC++6nIskw7QMRrUel+SS6p8 U/vx9Qc41+jH1pdkcDvMT1C/Ci/3x48Umb2TmjAEqhUq+9Kj1j5/AgG03IBdGpYW KbodLNJOIBVClw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:03 2025 by rpki-client