This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json) Hash identifier: HqXl1G2RnrVtm/tiZE+9oJU7Ao6HYGdIwcmCO+IUTbs= Subject key identifier: BC:92:79:18:F2:40:93:D4:E0:29:5D:3F:A6:7A:4E:5E:07:55:44:1B Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c Certificate serial: 019B3AFE1253E21B113B14CF964EABA83339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 09:01:27 +0000 Manifest this update: Sat 20 Dec 2025 09:01:27 +0000 Manifest next update: Sun 21 Dec 2025 09:01:27 +0000 Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=) 2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=) 3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: Ir8nKFpdDUnqTskPGTo+520ARwQet7TPiJ1Ms9fkQXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:12:53:e2:1b:11:3b:14:cf:96:4e:ab:a8:33:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c Validity Not Before: Dec 20 09:01:27 2025 GMT Not After : Dec 21 09:01:27 2025 GMT Subject: CN=bc927918f24093d4e0295d3fa67a4e5e0755441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:5a:93:9a:19:2e:6e:eb:79:dd:57:66:d4: cd:80:5b:09:cf:32:a6:05:88:19:34:64:db:6c:ae: 1e:17:6e:34:12:7f:bb:99:42:22:58:83:b3:35:53: bd:c2:ec:9f:78:92:b0:be:d1:71:c2:eb:56:ea:8f: 84:e9:40:ba:71:65:e3:11:7d:76:2f:68:8d:78:c7: 13:0b:56:19:e9:fd:4f:04:2a:d2:af:2c:f2:d8:6b: db:4c:ac:f0:4e:2e:d4:7b:2e:31:04:49:b8:be:fb: ee:53:9b:0e:0a:0f:d6:9e:4b:14:35:bc:4b:f0:11: fa:13:ce:88:4f:cc:f7:79:bf:bd:3d:05:26:16:27: e4:b6:37:e5:3b:5b:7e:93:53:68:b0:82:ac:47:53: ab:39:c8:2a:48:a8:c1:fb:e3:23:0b:fd:64:72:1b: 52:88:ee:53:d4:f3:01:da:96:b7:8d:aa:23:c5:d2: c7:67:9f:f6:6a:43:aa:ca:60:66:36:64:18:be:00: ac:6f:65:c1:ae:ab:46:2e:dc:35:92:0a:49:90:71: a8:50:ec:5e:82:6b:03:db:74:5b:8b:01:97:15:6c: 83:1d:5c:c6:8d:5f:1f:bc:4e:e3:4d:59:86:c1:9f: 3e:d5:59:87:a7:c5:a1:2c:6e:2c:fd:c9:89:cd:2a: 29:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:79:18:F2:40:93:D4:E0:29:5D:3F:A6:7A:4E:5E:07:55:44:1B X509v3 Authority Key Identifier: keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c2:41:8b:3b:89:4a:51:bf:ee:f4:bc:f6:d6:ad:d7:e0:4b: 10:e9:2a:3b:53:72:c8:f6:23:da:d2:22:16:aa:1b:f3:6d:f4: ae:49:32:f0:b2:d0:e1:0d:80:32:f1:62:89:a6:5e:ad:c8:65: 78:d4:79:84:bb:49:62:79:92:c6:59:16:4a:c3:a7:5e:36:ca: 5f:b8:3d:90:27:63:2c:63:a6:5c:ec:cb:52:1e:cc:ad:67:0b: 31:fd:bc:41:16:de:5a:f1:f1:18:05:f3:7b:58:5c:3a:69:e7: c9:23:2c:0e:91:21:ed:ff:63:39:ee:b9:f2:36:62:1f:3a:ca: 07:74:9e:f7:5d:70:6e:01:fb:76:7f:50:77:af:6b:01:47:5f: c4:51:50:11:e3:0f:4a:b7:ca:58:3a:e1:dc:56:55:1e:91:1a: 25:39:2a:67:17:b5:45:65:41:97:72:6f:22:45:6f:4b:de:43: 8d:07:df:84:61:b4:4d:6c:02:60:71:5f:c1:a5:01:87:8e:75: 32:f9:28:47:a5:c6:5a:c1:74:67:43:9c:4d:aa:83:6f:7a:7b: cb:db:aa:cf:13:3a:50:65:3d:d7:bf:ab:b2:1c:d1:56:b1:cc: 0b:e4:5c:ae:79:aa:96:70:83:de:3a:20:0a:51:9c:df:5a:88: 65:12:b5:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/hJT4hsROxTPlk6rqDM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OWIxZjc2YmI1YmFjNmQwYzc5NmJhNDcxMzBjNzY4YjFj NzNiMWMwHhcNMjUxMjIwMDkwMTI3WhcNMjUxMjIxMDkwMTI3WjAzMTEwLwYDVQQD EyhiYzkyNzkxOGYyNDA5M2Q0ZTAyOTVkM2ZhNjdhNGU1ZTA3NTU0NDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Oxak5oZLm7red1XZtTNgFsJzzKm BYgZNGTbbK4eF240En+7mUIiWIOzNVO9wuyfeJKwvtFxwutW6o+E6UC6cWXjEX12 L2iNeMcTC1YZ6f1PBCrSryzy2GvbTKzwTi7Uey4xBEm4vvvuU5sOCg/WnksUNbxL 8BH6E86IT8z3eb+9PQUmFifktjflO1t+k1NosIKsR1OrOcgqSKjB++MjC/1kchtS iO5T1PMB2pa3jaojxdLHZ5/2akOqymBmNmQYvgCsb2XBrqtGLtw1kgpJkHGoUOxe gmsD23RbiwGXFWyDHVzGjV8fvE7jTVmGwZ8+1VmHp8WhLG4s/cmJzSopgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLySeRjyQJPU4CldP6Z6Tl4HVUQbMB8GA1UdIwQY MBaAFMSbH3a7W6xtDHlrpHEwx2ixxzscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQt NGFkNDAzNWZhZTdiLzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84Njg2Y2QtMWYxYy00ODQ1LTgxMmQtNGFkNDAzNWZhZTdi LzEveEpzZmRydGJyRzBNZVd1a2NUREhhTEhIT3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMJBizuJ SlG/7vS89tat1+BLEOkqO1NyyPYj2tIiFqob8230rkky8LLQ4Q2AMvFiiaZerchl eNR5hLtJYnmSxlkWSsOnXjbKX7g9kCdjLGOmXOzLUh7MrWcLMf28QRbeWvHxGAXz e1hcOmnnySMsDpEh7f9jOe658jZiHzrKB3Se911wbgH7dn9Qd69rAUdfxFFQEeMP SrfKWDrh3FZVHpEaJTkqZxe1RWVBl3JvIkVvS95DjQffhGG0TWwCYHFfwaUBh451 MvkoR6XGWsF0Z0OcTaqDb3p7y9uqzxM6UGU917+rshzRVrHMC+RcrnmqlnCD3jog ClGc31qIZRK11g== -----END CERTIFICATE-----Generated at Sat Dec 20 13:41:25 2025 by rpki-client