This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json) Hash identifier: SBq6zk445QZF2Wj1JShxEhXjxsWVohzFARAoIDMEezI= Subject key identifier: 49:85:77:48:A6:47:DC:22:FC:C7:B2:38:41:17:22:AA:2B:4C:7D:BF Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4 Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4 Certificate serial: 019B3CEC438DC35D7278CD54E9BDF3E48A88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft Manifest number: 07D8 Signing time: Sat 20 Dec 2025 18:01:15 +0000 Manifest this update: Sat 20 Dec 2025 18:01:15 +0000 Manifest next update: Sun 21 Dec 2025 18:01:15 +0000 Files and hashes: 1: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (hash: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=) 2: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: ErxINaB2tfX4MdDOKnyB+txxf9NdxPMtAhEmXLBF2n0=) 3: z5AaUIsCUfsHWnAtqAIr_d8n8do.roa (hash: rmzyF9COLH0iNSyMo0DleMzCkcEN6+9Om4xVkdPkL6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:43:8d:c3:5d:72:78:cd:54:e9:bd:f3:e4:8a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4 Validity Not Before: Dec 20 18:01:15 2025 GMT Not After : Dec 21 18:01:15 2025 GMT Subject: CN=49857748a647dc22fcc7b238411722aa2b4c7dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:38:60:94:4f:19:f9:60:33:aa:79:98:ba: 09:51:45:b1:42:30:ea:cb:ec:7a:65:9d:9e:0a:df: a8:1a:c6:49:2e:d3:3f:52:56:11:68:91:e5:4a:d9: e7:88:90:2a:fc:91:77:44:cd:26:d3:a6:5f:c9:ec: 0d:7d:01:c8:ae:7d:22:54:06:21:78:ca:05:2d:d1: 07:99:71:df:1c:ce:1e:7c:fe:55:3b:d1:6f:7b:e7: b2:45:fb:b0:41:a8:d7:21:d3:00:67:80:5e:6b:89: 2c:16:32:73:78:b8:6b:c7:59:ba:cc:48:15:58:e1: 73:7a:67:71:54:bd:c0:7a:af:4d:ea:29:18:af:5b: 48:a4:c6:46:d1:65:37:73:e0:1d:bf:41:75:fe:56: 9a:5c:87:d9:7d:27:0a:5b:7f:c1:74:86:6e:62:95: 13:d3:63:8b:1c:0f:05:ac:fa:32:de:2e:19:46:c6: f2:08:c1:7a:db:af:c8:24:e5:28:4a:fd:89:6b:22: 36:f5:f0:06:d8:b9:30:3c:85:31:ff:f6:1d:26:fd: 84:a0:2c:4a:d0:3c:a9:dd:b2:2b:68:21:02:c7:d0: 91:fd:77:38:9d:1a:04:0a:a5:8e:76:80:ff:61:f1: d3:18:99:e2:3c:31:36:39:ad:7e:8d:e6:40:0e:9c: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:85:77:48:A6:47:DC:22:FC:C7:B2:38:41:17:22:AA:2B:4C:7D:BF X509v3 Authority Key Identifier: keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e6:e4:03:bb:6a:dc:cb:de:7c:27:e3:ae:5d:e2:ab:9f:5a: 0f:18:0c:08:93:ac:ea:63:0e:98:92:8f:f5:e8:8b:d9:9e:83: 8e:53:0e:f7:a0:fe:0e:07:81:70:be:89:d9:a0:28:ac:1a:fb: 8e:ef:f2:58:c9:90:bd:d8:c7:f3:b4:d1:38:b8:0e:d4:69:03: bd:91:72:93:9a:e0:12:24:34:67:84:25:a4:8a:9e:c5:29:db: f0:aa:eb:9c:ea:a2:f2:c6:51:0f:5e:a7:5a:74:b1:fd:c6:af: b9:09:f4:f2:11:2f:74:6c:0e:f9:57:ed:2f:b2:e2:b7:ac:0c: 31:81:e8:a9:f7:72:10:ca:08:35:f8:a4:ec:b7:26:69:b9:04: 93:21:c6:7c:6b:3a:cb:dd:b9:7d:a6:e6:eb:af:16:71:7c:19: a1:99:20:3c:54:0a:36:99:d3:02:c7:5d:a1:c9:61:8c:a6:9e: 42:2b:59:62:1c:21:6f:0a:7a:1f:6f:64:b4:b1:b2:0f:ee:bb: 7d:61:e6:62:db:86:9f:b7:38:2f:ee:2d:d7:bd:c7:5c:52:6c: 0e:06:af:29:a8:36:37:e9:f4:03:54:cd:86:cb:50:b6:7d:90: 51:c8:76:b8:52:69:ee:56:a9:1e:1f:4f:15:0b:21:50:2f:d6: db:90:a8:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87EONw11yeM1U6b3z5IqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTg1MDE3M2M4ZDI4ZDVhZmJmOTEwOTFjYTYzZTVkYTNj NzVlZDQwHhcNMjUxMjIwMTgwMTE1WhcNMjUxMjIxMTgwMTE1WjAzMTEwLwYDVQQD Eyg0OTg1Nzc0OGE2NDdkYzIyZmNjN2IyMzg0MTE3MjJhYTJiNGM3ZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzo4YJRPGflgM6p5mLoJUUWxQjDq y+x6ZZ2eCt+oGsZJLtM/UlYRaJHlStnniJAq/JF3RM0m06ZfyewNfQHIrn0iVAYh eMoFLdEHmXHfHM4efP5VO9Fve+eyRfuwQajXIdMAZ4Bea4ksFjJzeLhrx1m6zEgV WOFzemdxVL3Aeq9N6ikYr1tIpMZG0WU3c+Adv0F1/laaXIfZfScKW3/BdIZuYpUT 02OLHA8FrPoy3i4ZRsbyCMF626/IJOUoSv2JayI29fAG2LkwPIUx//YdJv2EoCxK 0Dyp3bIraCECx9CR/Xc4nRoECqWOdoD/YfHTGJniPDE2Oa1+jeZADpxzSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmFd0imR9wi/MeyOEEXIqorTH2/MB8GA1UdIwQY MBaAFMYYUBc8jSjVr7+RCRymPl2jx17UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUt YmI4ZGViYzAwMzg4LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUtYmI4ZGViYzAwMzg4 LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdebkA7tq 3MvefCfjrl3iq59aDxgMCJOs6mMOmJKP9eiL2Z6DjlMO96D+DgeBcL6J2aAorBr7 ju/yWMmQvdjH87TROLgO1GkDvZFyk5rgEiQ0Z4QlpIqexSnb8KrrnOqi8sZRD16n WnSx/cavuQn08hEvdGwO+VftL7Lit6wMMYHoqfdyEMoINfik7LcmabkEkyHGfGs6 y925fabm668WcXwZoZkgPFQKNpnTAsddoclhjKaeQitZYhwhbwp6H29ktLGyD+67 fWHmYtuGn7c4L+4t173HXFJsDgavKag2N+n0A1TNhstQtn2QUch2uFJp7lapHh9P FQshUC/W25CovQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:19:33 2025 by rpki-client