This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft File: Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft (raw, json) Hash identifier: 60lzpqh6m5qKnpjqqJssybBfKXTlzNoRuq47lRH7YpI= Subject key identifier: 04:B1:98:76:00:41:C6:7D:5B:47:CC:12:FF:43:6E:EB:A0:66:C8:78 Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e Certificate serial: 019B3A911FEFD2EACE09DBEEB68B059FDD10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 07:02:27 +0000 Manifest this update: Sat 20 Dec 2025 07:02:27 +0000 Manifest next update: Sun 21 Dec 2025 07:02:27 +0000 Files and hashes: 1: Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl (hash: brcirMRW+e+GMF9asVue+kljml9m/hJxNJdYTc6m0ZM=) 2: dOe2C3PomUnQ6xc35HptdqNgMBQ.roa (hash: Xuv+aCcr1f8IKITCeJK5u15I1LDGKs+9hvrLxQLOxWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:1f:ef:d2:ea:ce:09:db:ee:b6:8b:05:9f:dd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e Validity Not Before: Dec 20 07:02:27 2025 GMT Not After : Dec 21 07:02:27 2025 GMT Subject: CN=04b198760041c67d5b47cc12ff436eeba066c878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:24:a2:23:6d:19:09:db:e0:3d:10:a5:a3: 48:b8:89:80:5e:c9:75:29:52:92:db:f5:ac:f0:e0: f2:19:80:57:7a:0f:7c:2c:8e:0d:ad:2a:c5:a5:48: f4:b6:9b:0a:54:08:15:2b:64:b5:01:f3:ec:34:97: 6f:4d:a9:8d:3b:3a:36:fa:45:0f:6b:b8:30:57:7f: 85:fc:cc:eb:b1:3e:ca:13:eb:ab:c1:0a:b6:9e:e0: 89:d5:2c:ca:c4:36:aa:71:8c:ec:19:01:81:84:c5: 24:c1:67:e1:54:5a:39:d6:1b:00:5c:ce:3e:37:20: 2d:f2:79:2c:ad:66:b1:39:10:84:78:1b:0e:97:94: b4:3a:c6:30:c1:e8:48:0e:b5:21:e9:64:7d:1a:0b: 9b:3f:0e:74:6a:88:f5:c1:3e:3b:f7:6a:86:7d:35: 57:12:5a:3a:28:cd:75:7f:67:17:1d:2f:92:ee:10: 4b:31:47:63:0f:33:cd:a4:b0:bc:50:29:d0:ec:e2: 7b:d4:af:6d:99:97:24:e3:7c:7e:74:4d:1b:34:e1: 72:e2:41:bf:31:02:2b:c2:5d:70:03:b0:e4:4f:6d: f7:ee:b1:03:b2:bb:b3:ba:ee:16:c0:45:33:30:c8: 1f:fc:22:21:bf:4a:ea:dc:18:a4:61:b6:b1:e9:1a: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B1:98:76:00:41:C6:7D:5B:47:CC:12:FF:43:6E:EB:A0:66:C8:78 X509v3 Authority Key Identifier: keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f8:b6:42:c3:6c:08:1a:90:36:87:76:a9:4f:7b:0b:c9:9f: 31:33:54:11:62:4c:fa:3e:ec:90:c6:f9:c2:88:cc:3f:31:5c: 9f:5b:7b:4a:6c:42:61:76:f1:58:d4:cd:17:c2:ca:9a:09:90: 3c:e6:06:8c:7f:7b:50:29:68:85:5c:a0:e3:9d:58:aa:6f:ff: be:15:ba:a0:94:5e:5d:6e:7c:93:1f:b7:51:e1:6c:3e:fb:2f: a0:c4:40:d2:40:88:3e:d0:f6:e3:5f:20:6e:85:5c:a7:26:a3: 96:45:df:ff:e8:23:e5:1a:cc:bc:07:8a:e4:36:88:b5:60:50: 37:2c:e1:da:61:4e:0d:31:1a:b7:78:b5:ba:bf:83:90:31:d4: 96:88:d8:db:a5:cc:73:e3:da:7b:68:28:a3:d8:66:46:bf:f1: 6c:16:56:36:6d:7a:fe:12:cb:6b:5a:d7:2d:4e:7d:eb:b3:5d: 96:4a:ab:87:3c:97:05:25:41:68:d4:ce:60:24:97:a8:a4:7e: 9b:86:68:96:b2:87:0d:50:9e:53:2b:23:e1:da:10:68:4b:8d: 0b:a1:17:b5:21:df:41:4d:1c:65:77:30:51:9f:17:98:af:01: 90:0f:ca:0f:2d:2b:43:75:d1:38:67:59:a3:05:44:bd:e3:9e: 7c:a0:09:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kR/v0urOCdvutosFn90QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGNiNmRhMzU4YThkMmQyNzBjMzA1ZjhiNjFmM2M5OTBk NTc2NmUwHhcNMjUxMjIwMDcwMjI3WhcNMjUxMjIxMDcwMjI3WjAzMTEwLwYDVQQD EygwNGIxOTg3NjAwNDFjNjdkNWI0N2NjMTJmZjQzNmVlYmEwNjZjODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3skoiNtGQnb4D0QpaNIuImAXsl1 KVKS2/Ws8ODyGYBXeg98LI4NrSrFpUj0tpsKVAgVK2S1AfPsNJdvTamNOzo2+kUP a7gwV3+F/MzrsT7KE+urwQq2nuCJ1SzKxDaqcYzsGQGBhMUkwWfhVFo51hsAXM4+ NyAt8nksrWaxORCEeBsOl5S0OsYwwehIDrUh6WR9GgubPw50aoj1wT4792qGfTVX Elo6KM11f2cXHS+S7hBLMUdjDzPNpLC8UCnQ7OJ71K9tmZck43x+dE0bNOFy4kG/ MQIrwl1wA7DkT2337rEDsruzuu4WwEUzMMgf/CIhv0rq3BikYbax6RrPZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASxmHYAQcZ9W0fMEv9DbuugZsh4MB8GA1UdIwQY MBaAFF6Mtto1io0tJwwwX4th88mQ1XZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMDI2NjEtYjU5MS00ZjVlLWIzNjkt Zjc0YTVmMmJjYjQ3LzEvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMDI2NjEtYjU5MS00ZjVlLWIzNjktZjc0YTVmMmJjYjQ3 LzEvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvi2QsNs CBqQNod2qU97C8mfMTNUEWJM+j7skMb5wojMPzFcn1t7SmxCYXbxWNTNF8LKmgmQ POYGjH97UClohVyg451Yqm//vhW6oJReXW58kx+3UeFsPvsvoMRA0kCIPtD2418g boVcpyajlkXf/+gj5RrMvAeK5DaItWBQNyzh2mFODTEat3i1ur+DkDHUlojY26XM c+Pae2goo9hmRr/xbBZWNm16/hLLa1rXLU5967NdlkqrhzyXBSVBaNTOYCSXqKR+ m4ZolrKHDVCeUysj4doQaEuNC6EXtSHfQU0cZXcwUZ8XmK8BkA/KDy0rQ3XROGdZ owVEveOefKAJ2A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:10 2025 by rpki-client