This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json) Hash identifier: F+HfuWq7whHa0j5vYDojlGbgpo1k3wP/WFYFKmi98co= Subject key identifier: EF:3A:62:1D:3B:D7:D4:DF:E5:CA:DF:D5:D2:19:0C:7E:4B:9F:DF:60 Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Certificate serial: 019B281B8519156A597CBB815C050A5AC9D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 17:00:50 +0000 Manifest this update: Tue 16 Dec 2025 17:00:50 +0000 Manifest next update: Wed 17 Dec 2025 17:00:50 +0000 Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=) 2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=) 3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: OcG0GIUGQHloe4F+YLNDZLinUtPba90cxtTOIQczf84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:85:19:15:6a:59:7c:bb:81:5c:05:0a:5a:c9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Validity Not Before: Dec 16 17:00:50 2025 GMT Not After : Dec 17 17:00:50 2025 GMT Subject: CN=ef3a621d3bd7d4dfe5cadfd5d2190c7e4b9fdf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:09:b0:6c:08:83:0b:73:b6:74:dd:78:8b: 18:88:0e:d5:7d:b5:ee:bc:af:36:1b:4a:5e:92:34: 47:2e:52:e3:c8:16:db:cc:b6:d3:6a:4a:7f:c8:25: b4:ec:f8:6a:ba:26:b7:b2:98:51:58:ef:03:f6:30: 32:a2:e0:6d:90:e5:84:24:2f:78:7f:df:94:97:b7: 4f:ee:b3:7c:5b:ba:b2:60:93:b5:c0:63:88:cc:26: a8:6b:3a:92:a0:0e:ab:16:51:a4:a5:7f:7d:8a:23: ef:00:f0:61:81:94:62:fc:80:a8:ea:31:78:98:25: e2:cd:18:83:f8:7f:0e:f5:fa:84:2c:e0:1e:3a:20: bc:3f:c1:00:7a:74:81:e3:0a:42:78:0d:a0:1d:63: 16:32:2a:06:6c:f0:32:05:aa:a9:aa:54:94:8e:35: 55:63:17:05:86:cb:b5:fe:d2:61:37:ac:46:fd:c3: ce:00:10:30:37:d4:31:cc:26:b6:ee:c9:16:1b:43: 11:5c:7e:39:22:cd:d1:b3:db:1c:74:15:c7:15:34: d9:0d:73:7b:e1:e3:72:78:3e:5a:7a:82:44:22:8f: 40:71:7c:7b:e8:18:05:27:e3:e4:3b:12:43:7c:a8: 75:9c:3c:18:e6:c1:36:31:1c:99:ff:cb:35:be:02: fb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3A:62:1D:3B:D7:D4:DF:E5:CA:DF:D5:D2:19:0C:7E:4B:9F:DF:60 X509v3 Authority Key Identifier: keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:78:94:48:f3:5e:10:b0:85:be:5c:dc:4e:1c:fc:53:79:33: 24:cf:d3:82:fc:b6:5f:88:d5:26:e0:91:4b:7a:af:80:e6:4a: 38:b1:2d:bd:94:6b:fa:f7:0a:20:5e:1c:bd:54:7a:aa:51:34: 69:17:e9:01:61:e9:f0:ce:48:59:02:ac:b6:14:ee:dd:a9:cf: b9:28:e5:a5:3f:c5:81:82:1c:28:3e:25:c9:e0:5d:f6:31:67: 17:cf:3a:c8:7d:cf:75:31:b0:ba:5a:52:64:4b:84:f8:93:b8: 11:fa:06:7e:23:28:f7:35:94:c7:20:a1:09:cd:9f:f8:1e:db: 80:04:73:5a:e6:b4:de:23:2f:94:20:b8:a0:8e:b9:91:08:e6: 31:5f:59:1f:78:2f:13:79:e0:2b:15:08:73:0a:d4:5b:64:48: c5:d6:ad:c2:1b:df:58:0e:bc:a5:7b:07:44:df:01:7d:34:c5: d0:b1:88:fa:ab:7e:58:3b:a2:af:b5:27:c7:ee:de:94:62:27: 5a:9c:4a:b8:7d:a4:14:86:2c:d0:8d:0f:2f:a8:a5:16:ed:16: 04:9f:77:be:08:fe:bd:63:76:ac:2b:57:05:08:e8:d5:c6:a3: 5b:6e:23:78:b9:57:ea:39:96:98:84:98:4c:a1:4d:eb:3f:37: 8c:ea:ab:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG4UZFWpZfLuBXAUKWsnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl OTZjMzUwHhcNMjUxMjE2MTcwMDUwWhcNMjUxMjE3MTcwMDUwWjAzMTEwLwYDVQQD EyhlZjNhNjIxZDNiZDdkNGRmZTVjYWRmZDVkMjE5MGM3ZTRiOWZkZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ekJsGwIgwtztnTdeIsYiA7VfbXu vK82G0pekjRHLlLjyBbbzLbTakp/yCW07Phquia3sphRWO8D9jAyouBtkOWEJC94 f9+Ul7dP7rN8W7qyYJO1wGOIzCaoazqSoA6rFlGkpX99iiPvAPBhgZRi/ICo6jF4 mCXizRiD+H8O9fqELOAeOiC8P8EAenSB4wpCeA2gHWMWMioGbPAyBaqpqlSUjjVV YxcFhsu1/tJhN6xG/cPOABAwN9QxzCa27skWG0MRXH45Is3Rs9scdBXHFTTZDXN7 4eNyeD5aeoJEIo9AcXx76BgFJ+PkOxJDfKh1nDwY5sE2MRyZ/8s1vgL7lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO86Yh0719Tf5crf1dIZDH5Ln99gMB8GA1UdIwQY MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4 LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXiUSPNe ELCFvlzcThz8U3kzJM/Tgvy2X4jVJuCRS3qvgOZKOLEtvZRr+vcKIF4cvVR6qlE0 aRfpAWHp8M5IWQKsthTu3anPuSjlpT/FgYIcKD4lyeBd9jFnF886yH3PdTGwulpS ZEuE+JO4EfoGfiMo9zWUxyChCc2f+B7bgARzWua03iMvlCC4oI65kQjmMV9ZH3gv E3ngKxUIcwrUW2RIxdatwhvfWA68pXsHRN8BfTTF0LGI+qt+WDuir7Unx+7elGIn WpxKuH2kFIYs0I0PL6ilFu0WBJ93vgj+vWN2rCtXBQjo1cajW24jeLlX6jmWmISY TKFN6z83jOqrzg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:24:05 2025 by rpki-client