This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json) Hash identifier: n5x1pe84o0yVvyssXtcGfO+KuhsFiaCNla8OwhdxfWo= Subject key identifier: 26:14:B6:D5:E2:D9:19:4E:0D:74:9A:5D:09:06:28:C4:CA:14:F5:6A Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Certificate serial: 019B3A9062399B388DEB252450DA7BC50BD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft Manifest number: 1796 Signing time: Sat 20 Dec 2025 07:01:39 +0000 Manifest this update: Sat 20 Dec 2025 07:01:39 +0000 Manifest next update: Sun 21 Dec 2025 07:01:39 +0000 Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=) 2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: CrnrALVwmuxejdvNem+p5Q0tGOf8Tqzn51rvNFzi5JA=) 3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:62:39:9b:38:8d:eb:25:24:50:da:7b:c5:0b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Validity Not Before: Dec 20 07:01:39 2025 GMT Not After : Dec 21 07:01:39 2025 GMT Subject: CN=2614b6d5e2d9194e0d749a5d090628c4ca14f56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:92:f7:f1:3c:f2:85:24:80:3f:3f:f0:20: 7f:40:7c:0a:00:e8:83:25:b6:24:7f:d7:64:3f:79: 37:70:b6:4f:29:8c:c8:e7:50:42:ad:bb:a9:d5:32: 14:b7:71:38:11:5c:67:8a:a0:0a:f0:3c:eb:47:2b: 29:13:5d:5c:9d:c7:9d:34:d2:ab:3b:8c:75:90:d4: 89:39:8c:92:1e:af:9a:c0:0f:fc:1e:ea:ee:cf:17: ed:c5:83:a3:d1:67:02:9a:97:4c:d2:36:a9:16:97: d9:11:61:39:22:a7:27:d1:35:7f:77:b8:5e:a5:12: 76:20:9c:fc:c7:19:cb:98:8a:15:72:a3:78:d9:46: a5:5b:8d:32:53:61:13:03:86:7c:3d:7d:d9:09:38: ec:e8:ed:d0:14:82:29:4c:92:06:85:6d:8a:40:04: 57:eb:2f:11:a7:f2:2a:77:d8:44:ff:1a:36:3d:17: 73:96:e7:24:1b:c7:cc:34:a5:66:fd:11:3d:fc:3c: 00:ee:60:f9:11:ec:1d:8c:da:e2:35:5c:dc:c9:aa: 00:ee:b6:77:61:35:0e:79:b0:6c:da:e5:59:6a:2b: c6:45:d5:c3:0a:79:f4:b5:0b:a2:25:a0:45:11:8c: db:1d:3d:be:19:5d:02:11:ec:11:51:41:90:19:e8: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:14:B6:D5:E2:D9:19:4E:0D:74:9A:5D:09:06:28:C4:CA:14:F5:6A X509v3 Authority Key Identifier: keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:2c:67:56:db:cf:9d:42:76:9a:98:58:46:19:0d:cc:cc:04: f6:fd:36:0e:2a:ed:e2:3c:1d:09:7e:8e:71:b7:fd:e1:84:1d: 4f:58:0c:8b:0a:fb:c0:21:72:68:29:2f:95:ff:68:96:f9:99: 8f:57:bb:f9:3c:44:ea:88:f5:d1:20:ed:fb:34:2c:66:4c:44: 03:8e:38:c1:98:24:5f:74:44:4d:9d:79:ec:58:e6:35:7c:52: d8:92:db:6a:9c:11:48:4e:08:1d:41:e6:3f:54:d0:8f:53:46: 7f:1c:f6:60:83:cb:d0:d6:5c:93:f5:ba:6e:80:37:35:94:91: 62:86:e4:2c:23:07:16:31:ad:8c:7f:69:4a:15:cd:0a:54:85: cc:4d:40:49:2e:85:4b:53:e1:2a:cb:e2:b6:06:74:99:86:df: 0a:b2:3c:47:74:34:86:2b:97:ac:a2:36:10:a8:93:79:be:98: 33:d2:97:f9:f4:11:d7:d3:46:70:77:55:c4:c9:5d:3b:d9:53: 31:1f:df:4e:97:29:e3:64:73:73:3b:f0:e3:8f:14:02:2b:69: 30:a7:a4:13:c1:92:ad:73:c5:93:fa:1c:7d:2b:a4:d8:ba:7b: 94:f8:e1:48:18:ef:25:ee:4a:ae:f6:8d:27:04:72:3b:89:b5: db:07:a0:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kGI5mziN6yUkUNp7xQvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDZiZjFmZjgxNmJlMGJhNGM2MjE3MTIzNDIzMzBhOWZh ZDhiZGEwHhcNMjUxMjIwMDcwMTM5WhcNMjUxMjIxMDcwMTM5WjAzMTEwLwYDVQQD EygyNjE0YjZkNWUyZDkxOTRlMGQ3NDlhNWQwOTA2MjhjNGNhMTRmNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylGS9/E88oUkgD8/8CB/QHwKAOiD JbYkf9dkP3k3cLZPKYzI51BCrbup1TIUt3E4EVxniqAK8DzrRyspE11cncedNNKr O4x1kNSJOYySHq+awA/8HuruzxftxYOj0WcCmpdM0japFpfZEWE5Iqcn0TV/d7he pRJ2IJz8xxnLmIoVcqN42UalW40yU2ETA4Z8PX3ZCTjs6O3QFIIpTJIGhW2KQARX 6y8Rp/Iqd9hE/xo2PRdzluckG8fMNKVm/RE9/DwA7mD5EewdjNriNVzcyaoA7rZ3 YTUOebBs2uVZaivGRdXDCnn0tQuiJaBFEYzbHT2+GV0CEewRUUGQGejArwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYUttXi2RlODXSaXQkGKMTKFPVqMB8GA1UdIwQY MBaAFF5Gvx/4Fr4LpMYhcSNCMwqfrYvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUt YjhkYjE1YjUzMWEyLzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUtYjhkYjE1YjUzMWEy LzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSxnVtvP nUJ2mphYRhkNzMwE9v02Dirt4jwdCX6Ocbf94YQdT1gMiwr7wCFyaCkvlf9olvmZ j1e7+TxE6oj10SDt+zQsZkxEA444wZgkX3RETZ157FjmNXxS2JLbapwRSE4IHUHm P1TQj1NGfxz2YIPL0NZck/W6boA3NZSRYobkLCMHFjGtjH9pShXNClSFzE1ASS6F S1PhKsvitgZ0mYbfCrI8R3Q0hiuXrKI2EKiTeb6YM9KX+fQR19NGcHdVxMldO9lT MR/fTpcp42Rzczvw448UAitpMKekE8GSrXPFk/ocfSuk2Lp7lPjhSBjvJe5KrvaN JwRyO4m12wegTg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:44:12 2025 by rpki-client