This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json) Hash identifier: pAhgCL5OGADadoVOYlcrblt+j4d2HkAkav4zgfcfc/U= Subject key identifier: A7:96:C0:CF:D7:12:E6:98:65:C0:A4:DB:EB:A4:B7:D6:06:06:26:42 Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4 Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4 Certificate serial: 019B4E4DB5545BC6BE438F7CD0A4DD382F9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft Manifest number: 07E1 Signing time: Wed 24 Dec 2025 03:01:14 +0000 Manifest this update: Wed 24 Dec 2025 03:01:14 +0000 Manifest next update: Thu 25 Dec 2025 03:01:14 +0000 Files and hashes: 1: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (hash: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=) 2: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: xFcn8Sc0IFvfu7CO2mrIHfRLmIChcd1iOEOXICfyXHI=) 3: z5AaUIsCUfsHWnAtqAIr_d8n8do.roa (hash: rmzyF9COLH0iNSyMo0DleMzCkcEN6+9Om4xVkdPkL6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:b5:54:5b:c6:be:43:8f:7c:d0:a4:dd:38:2f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4 Validity Not Before: Dec 24 03:01:14 2025 GMT Not After : Dec 25 03:01:14 2025 GMT Subject: CN=a796c0cfd712e69865c0a4dbeba4b7d606062642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:29:25:31:7a:26:33:ad:5d:60:53:97:32: 67:ff:78:b7:37:06:b0:9e:ed:b1:fd:bd:c4:f5:7d: fe:b6:5b:03:da:c9:eb:94:6f:55:d9:bc:9a:0d:71: 18:f0:db:eb:ee:6c:3c:c5:82:ce:99:26:3c:9a:95: 1c:d3:35:02:b6:c3:b6:75:72:0f:8d:36:18:b8:b7: 34:b4:70:89:be:c5:b4:6c:70:9a:ee:4a:07:48:ad: 86:c9:17:1d:76:8f:df:94:e5:9c:94:3c:16:3c:6f: 98:a3:2f:ff:f1:af:d4:fe:3d:20:b8:7c:f7:19:15: e6:f3:7e:fb:21:59:f8:78:93:ed:3b:a9:34:40:d4: 47:f9:56:07:a6:4b:6f:4e:57:63:bc:5f:22:b5:e1: bb:0e:1a:b3:80:ab:5e:59:f7:72:f8:95:2d:ae:56: 1f:56:35:c7:10:8f:1d:5a:19:56:5b:9e:ae:95:43: 5d:21:ad:94:43:77:37:b1:17:4f:37:d5:be:80:f0: 37:fc:c4:4f:99:be:92:85:44:ac:48:73:17:a5:70: 33:1e:3d:f1:3d:82:fa:05:de:7d:2d:52:1f:51:36: eb:2e:c0:8e:58:4b:95:eb:23:4e:e2:ac:f2:06:a8: e8:df:2d:aa:2f:e4:75:bf:cb:32:e1:6d:3d:5d:20: b8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:96:C0:CF:D7:12:E6:98:65:C0:A4:DB:EB:A4:B7:D6:06:06:26:42 X509v3 Authority Key Identifier: keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:86:d1:77:3f:dd:4a:51:a9:42:34:b7:4d:4e:69:87:45:e8: 8b:2e:7b:25:35:d0:3e:56:ba:bf:0b:a7:b6:02:a8:4d:84:d2: b0:5d:1a:75:0d:ee:3f:fb:cd:ae:be:0d:3e:fd:6f:a5:f8:25: 52:65:ae:62:23:03:d9:0b:51:0f:72:20:09:ba:4c:73:43:d2: 79:d5:a5:38:9e:df:34:0f:9b:66:32:8f:e8:6d:9b:77:ff:43: 0c:ef:35:c7:2a:6e:32:3a:a7:66:a9:df:56:c6:4e:5a:26:9c: e7:7d:11:7b:46:06:4a:0f:f6:4e:92:8f:10:f6:27:9f:2c:bb: f3:b7:bc:b5:d9:e4:9f:05:d3:e5:38:0f:e5:68:83:90:de:9b: 38:ba:9f:c1:64:22:58:bd:e2:90:84:ec:64:6f:13:a3:f1:35: f8:07:da:23:30:40:e9:ef:f3:9f:a9:df:f1:48:28:e7:e3:e9: f7:82:d4:6c:55:a1:34:36:5c:53:b9:c2:17:06:f6:af:6d:1b: 63:4b:87:1f:15:b2:b9:5e:3b:c5:97:ca:fb:99:24:43:3b:7e: 53:69:04:3a:20:a1:5f:d4:7d:8f:bc:95:9b:fb:6a:45:68:f6: 33:df:a7:0f:f5:d2:49:3b:1b:c9:9a:86:1c:4e:87:92:27:57: 44:ec:5c:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTbVUW8a+Q4980KTdOC+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTg1MDE3M2M4ZDI4ZDVhZmJmOTEwOTFjYTYzZTVkYTNj NzVlZDQwHhcNMjUxMjI0MDMwMTE0WhcNMjUxMjI1MDMwMTE0WjAzMTEwLwYDVQQD EyhhNzk2YzBjZmQ3MTJlNjk4NjVjMGE0ZGJlYmE0YjdkNjA2MDYyNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVkpJTF6JjOtXWBTlzJn/3i3Nwaw nu2x/b3E9X3+tlsD2snrlG9V2byaDXEY8Nvr7mw8xYLOmSY8mpUc0zUCtsO2dXIP jTYYuLc0tHCJvsW0bHCa7koHSK2GyRcddo/flOWclDwWPG+Yoy//8a/U/j0guHz3 GRXm8377IVn4eJPtO6k0QNRH+VYHpktvTldjvF8iteG7DhqzgKteWfdy+JUtrlYf VjXHEI8dWhlWW56ulUNdIa2UQ3c3sRdPN9W+gPA3/MRPmb6ShUSsSHMXpXAzHj3x PYL6Bd59LVIfUTbrLsCOWEuV6yNO4qzyBqjo3y2qL+R1v8sy4W09XSC4ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeWwM/XEuaYZcCk2+ukt9YGBiZCMB8GA1UdIwQY MBaAFMYYUBc8jSjVr7+RCRymPl2jx17UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUt YmI4ZGViYzAwMzg4LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUtYmI4ZGViYzAwMzg4 LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALobRdz/d SlGpQjS3TU5ph0Xoiy57JTXQPla6vwuntgKoTYTSsF0adQ3uP/vNrr4NPv1vpfgl UmWuYiMD2QtRD3IgCbpMc0PSedWlOJ7fNA+bZjKP6G2bd/9DDO81xypuMjqnZqnf VsZOWiac530Re0YGSg/2TpKPEPYnnyy787e8tdnknwXT5TgP5WiDkN6bOLqfwWQi WL3ikITsZG8To/E1+AfaIzBA6e/zn6nf8Ugo5+Pp94LUbFWhNDZcU7nCFwb2r20b Y0uHHxWyuV47xZfK+5kkQzt+U2kEOiChX9R9j7yVm/tqRWj2M9+nD/XSSTsbyZqG HE6HkidXROxchQ== -----END CERTIFICATE-----Generated at Wed Dec 24 11:27:39 2025 by rpki-client