This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft File: Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json) Hash identifier: 9dbHoOVh9CPEOraVLtSZRwhYkVOlxZ/++gvnNH6f1x8= Subject key identifier: CB:01:2D:05:9E:02:9B:48:D1:A4:56:E9:B4:54:D9:2D:FF:CC:8F:62 Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Certificate serial: 019B390FA5BF6DBB85CEFDF6F7F836D29B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft Manifest number: 1AA7 Signing time: Sat 20 Dec 2025 00:01:25 +0000 Manifest this update: Sat 20 Dec 2025 00:01:25 +0000 Manifest next update: Sun 21 Dec 2025 00:01:25 +0000 Files and hashes: 1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=) 2: D0fe3TdltyZpkmCHkMbZWsSiD3U.roa (hash: AawXItee1xpD1dPxNwnFvoTBQ5rjR5B+tebM5pStWN0=) 3: J_uC0dJQDqHEPt-d--Cb9t-urwM.roa (hash: e8u82xuHOyBw07V/g8e5280CWEkS/COcM0hM2MysMng=) 4: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: FjfcJqPq6z0r+ZflA/i1rfMnwmpc6NMQ7QrXoftgyhM=) 5: ZfGgxOD9oKOLO00K2AU9JKrI1kQ.roa (hash: MxwT8vbLLXhabuxFnu//UYyIHp8dV7WQm7/O2tItwaI=) 6: okmt1S4hd7NrbW4f-tCxGrBU2rY.roa (hash: 7cs3FirAxa0B9mH+9gI5rKR6WF9kuQy/8mCwxNj88sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:a5:bf:6d:bb:85:ce:fd:f6:f7:f8:36:d2:9b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Validity Not Before: Dec 20 00:01:25 2025 GMT Not After : Dec 21 00:01:25 2025 GMT Subject: CN=cb012d059e029b48d1a456e9b454d92dffcc8f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:5a:71:9d:ae:1a:1c:9f:0e:db:24:6c:77: 1e:ba:fa:82:ca:68:bf:39:e3:ae:8e:56:cf:d0:9f: 4e:fc:77:f6:0d:9b:17:12:2b:62:0e:83:65:44:3b: 18:00:62:91:1e:a5:ca:9a:80:3a:fa:68:3d:09:b5: 33:77:58:9d:45:df:84:67:bf:14:6a:1a:d7:db:72: 7c:df:a9:19:8b:12:7a:85:58:ba:fa:60:18:8f:0a: d5:00:8d:09:cb:5d:09:bc:c5:43:14:96:97:35:e9: 73:16:fe:e1:a8:04:87:6c:be:72:db:9a:04:50:a7: 11:49:f0:bc:27:44:83:d8:32:9c:76:23:6f:ec:6a: f7:86:cf:cd:8f:ee:79:d2:39:05:34:63:d8:1b:b5: 4a:1b:f2:45:7e:19:cc:60:94:9f:58:d1:b0:bf:c8: 4a:d9:45:6d:ed:7a:39:1f:0f:d4:8b:5c:5c:fd:f8: b5:8f:42:f5:ae:ae:5b:38:56:d2:5d:42:7e:b3:6c: c5:e1:31:cb:04:44:f9:61:d4:db:41:d4:8c:f5:ba: 04:06:3f:f3:2a:1b:c7:5f:96:ea:3a:31:62:b8:e3: 97:c0:9c:8f:3f:a7:6c:fd:4f:59:dd:c0:62:4f:bd: ee:d8:77:29:2e:29:b7:91:1b:fd:7e:78:b2:28:c1: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:01:2D:05:9E:02:9B:48:D1:A4:56:E9:B4:54:D9:2D:FF:CC:8F:62 X509v3 Authority Key Identifier: keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:26:7c:dc:e1:8b:c8:73:e1:86:ac:e8:e9:78:93:e8:f4:bf: ae:39:cb:d3:0f:17:23:de:c9:a9:3c:23:03:21:a5:d1:f4:9a: 73:9a:d5:53:76:b5:3b:e5:25:c5:b5:94:f5:6f:1f:9e:10:40: b9:f3:62:d9:8f:f2:62:5d:88:92:f0:13:61:a1:03:ca:5f:4d: ea:86:a7:b6:f7:fe:13:5a:a5:c6:91:b3:1e:77:db:1b:4e:db: 3c:8e:e1:66:cf:9a:91:4d:71:fb:87:45:cc:4b:45:e0:da:9a: 97:c3:fd:53:00:60:e2:81:b3:7c:6c:5c:2e:69:58:95:36:99: 67:e9:cf:be:47:9b:1a:29:cf:ff:c5:3e:ce:71:cc:f2:89:e7: 53:14:a4:ee:0c:7b:86:f9:b0:40:92:96:80:2d:c2:c7:a6:f8: 64:b6:29:2d:f8:99:9f:fc:58:82:e9:78:38:5f:82:46:95:b9: 35:94:36:02:40:79:62:4c:3c:ad:62:4c:1f:2b:2b:ed:e6:d9: c6:54:47:9f:88:b2:3a:ee:08:7b:06:8e:01:17:76:39:48:3a: f8:f8:80:ba:b5:79:05:b5:98:8c:a1:cf:26:06:53:b1:d7:97: 26:bd:ff:45:78:12:d2:65:c8:88:fc:37:5c:17:d6:08:71:fc: 0a:bb:b3:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D6W/bbuFzv329/g20psXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk ZjNlMWUwHhcNMjUxMjIwMDAwMTI1WhcNMjUxMjIxMDAwMTI1WjAzMTEwLwYDVQQD EyhjYjAxMmQwNTllMDI5YjQ4ZDFhNDU2ZTliNDU0ZDkyZGZmY2M4ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR9acZ2uGhyfDtskbHceuvqCymi/ OeOujlbP0J9O/Hf2DZsXEitiDoNlRDsYAGKRHqXKmoA6+mg9CbUzd1idRd+EZ78U ahrX23J836kZixJ6hVi6+mAYjwrVAI0Jy10JvMVDFJaXNelzFv7hqASHbL5y25oE UKcRSfC8J0SD2DKcdiNv7Gr3hs/Nj+550jkFNGPYG7VKG/JFfhnMYJSfWNGwv8hK 2UVt7Xo5Hw/Ui1xc/fi1j0L1rq5bOFbSXUJ+s2zF4THLBET5YdTbQdSM9boEBj/z KhvHX5bqOjFiuOOXwJyPP6ds/U9Z3cBiT73u2HcpLim3kRv9fniyKMGzqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsBLQWeAptI0aRW6bRU2S3/zI9iMB8GA1UdIwQY MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt YjU5MDk1N2Q5NDE1LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1 LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciZ83OGL yHPhhqzo6XiT6PS/rjnL0w8XI97JqTwjAyGl0fSac5rVU3a1O+UlxbWU9W8fnhBA ufNi2Y/yYl2IkvATYaEDyl9N6oantvf+E1qlxpGzHnfbG07bPI7hZs+akU1x+4dF zEtF4Nqal8P9UwBg4oGzfGxcLmlYlTaZZ+nPvkebGinP/8U+znHM8onnUxSk7gx7 hvmwQJKWgC3Cx6b4ZLYpLfiZn/xYgul4OF+CRpW5NZQ2AkB5Ykw8rWJMHysr7ebZ xlRHn4iyOu4IewaOARd2OUg6+PiAurV5BbWYjKHPJgZTsdeXJr3/RXgS0mXIiPw3 XBfWCHH8CruzTA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:00:07 2025 by rpki-client