This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft File: Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft (raw, json) Hash identifier: VpFqvuUv4/sqSgR/mSva9wvs7/og+Bk6N/8cS/rabkc= Subject key identifier: 67:2A:A3:CE:DF:3B:EE:A0:3A:37:D0:18:34:A2:1F:BA:78:D8:4A:27 Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e Certificate serial: 019B3C7F7710592D0E183BBA70C87D181B10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 16:02:25 +0000 Manifest this update: Sat 20 Dec 2025 16:02:25 +0000 Manifest next update: Sun 21 Dec 2025 16:02:25 +0000 Files and hashes: 1: Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl (hash: mzQ9sgOmItNh6mXPLw+jwDGdqHIdRvSx+ajC0iOAXM4=) 2: dOe2C3PomUnQ6xc35HptdqNgMBQ.roa (hash: Xuv+aCcr1f8IKITCeJK5u15I1LDGKs+9hvrLxQLOxWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:77:10:59:2d:0e:18:3b:ba:70:c8:7d:18:1b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e Validity Not Before: Dec 20 16:02:25 2025 GMT Not After : Dec 21 16:02:25 2025 GMT Subject: CN=672aa3cedf3beea03a37d01834a21fba78d84a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:da:50:aa:26:22:3b:85:b1:54:27:28:ac:d4: 42:1e:f9:15:ea:29:1a:8b:4e:bc:cb:e6:dd:46:71: ea:60:93:e1:41:22:d6:0f:02:4c:a8:fc:13:f8:2f: 8b:c7:5d:80:09:15:62:f8:c6:56:59:6f:97:79:d1: ec:ae:cf:e6:4a:98:96:e6:43:55:8f:3e:26:28:90: 79:82:4c:e2:50:a6:04:62:6a:d6:bb:9a:69:08:d8: ee:e4:48:79:1e:24:c2:e1:86:a7:83:7f:82:69:5d: 5a:7f:db:10:cc:75:dd:e6:d1:63:b4:e4:5c:55:15: 2f:78:95:24:06:9e:3a:5a:21:e6:1f:60:51:37:9f: d2:5d:98:b9:48:6d:35:b3:d9:83:e6:8e:c6:a5:09: f7:6d:a2:c3:e8:98:78:b6:85:7d:6c:6e:81:f8:6e: 23:08:a3:32:ba:5d:9e:d0:e6:d8:f8:4d:f6:a2:37: c7:42:42:5c:c4:e6:32:b3:c5:38:78:97:12:bb:aa: 5b:4e:1f:86:e9:51:40:06:9f:92:3e:b3:ca:a8:89: b0:8b:5c:d4:08:e9:2b:1c:1b:83:1f:5d:51:7c:86: 4e:fb:17:9a:52:5f:04:81:ca:25:ec:ed:3f:0a:81: 76:67:2c:3a:5f:35:e6:cc:ef:b4:7b:1d:75:2e:13: 56:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2A:A3:CE:DF:3B:EE:A0:3A:37:D0:18:34:A2:1F:BA:78:D8:4A:27 X509v3 Authority Key Identifier: keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d9:29:93:de:80:0a:6e:d4:6d:86:43:e8:03:18:63:dc:39: 95:d8:90:c6:05:76:53:dd:b2:10:04:19:b3:63:be:90:c3:fc: 68:4c:db:4d:40:eb:13:1c:06:d1:85:f0:fc:42:2c:fe:fa:be: 31:38:24:92:e3:4d:ba:9f:ab:15:3f:49:e9:62:b6:3c:5c:6a: 5a:95:67:83:8a:55:17:6b:72:b4:38:f8:7d:eb:72:61:93:05: 5d:63:4a:9b:8b:fb:7d:1c:f9:85:72:b3:c1:43:7e:a5:9e:92: a7:20:0d:58:c8:d2:da:08:83:23:c2:1f:9a:48:01:9e:da:64: 6d:c0:aa:34:ba:a1:5f:54:9e:78:62:02:19:ff:12:21:2e:43: e7:4c:5a:17:e0:94:e7:79:80:19:e8:89:29:0b:b8:9f:0f:b4: 58:c1:0f:1b:d6:be:3b:48:dc:47:d0:0f:f1:51:44:50:66:40: 97:75:2c:ee:55:f0:f4:18:61:20:25:62:b1:b4:46:57:1e:6b: b9:48:33:b4:8f:9b:c8:65:9e:03:0f:71:73:13:71:49:5b:8a: 5b:fa:06:d9:f7:37:ef:1f:91:28:ba:bb:23:6a:87:f0:e2:74: d0:7e:30:50:5a:b8:77:e9:b6:66:82:56:34:0e:a5:ac:75:d6: 9f:c0:77:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f3cQWS0OGDu6cMh9GBsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGNiNmRhMzU4YThkMmQyNzBjMzA1ZjhiNjFmM2M5OTBk NTc2NmUwHhcNMjUxMjIwMTYwMjI1WhcNMjUxMjIxMTYwMjI1WjAzMTEwLwYDVQQD Eyg2NzJhYTNjZWRmM2JlZWEwM2EzN2QwMTgzNGEyMWZiYTc4ZDg0YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dpQqiYiO4WxVCcorNRCHvkV6ika i068y+bdRnHqYJPhQSLWDwJMqPwT+C+Lx12ACRVi+MZWWW+XedHsrs/mSpiW5kNV jz4mKJB5gkziUKYEYmrWu5ppCNju5Eh5HiTC4Yang3+CaV1af9sQzHXd5tFjtORc VRUveJUkBp46WiHmH2BRN5/SXZi5SG01s9mD5o7GpQn3baLD6Jh4toV9bG6B+G4j CKMyul2e0ObY+E32ojfHQkJcxOYys8U4eJcSu6pbTh+G6VFABp+SPrPKqImwi1zU COkrHBuDH11RfIZO+xeaUl8Egcol7O0/CoF2Zyw6XzXmzO+0ex11LhNWpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcqo87fO+6gOjfQGDSiH7p42EonMB8GA1UdIwQY MBaAFF6Mtto1io0tJwwwX4th88mQ1XZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMDI2NjEtYjU5MS00ZjVlLWIzNjkt Zjc0YTVmMmJjYjQ3LzEvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMDI2NjEtYjU5MS00ZjVlLWIzNjktZjc0YTVmMmJjYjQ3 LzEvWG95MjJqV0tqUzBuRERCZmkySHp5WkRWZG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdkpk96A Cm7UbYZD6AMYY9w5ldiQxgV2U92yEAQZs2O+kMP8aEzbTUDrExwG0YXw/EIs/vq+ MTgkkuNNup+rFT9J6WK2PFxqWpVng4pVF2tytDj4fetyYZMFXWNKm4v7fRz5hXKz wUN+pZ6SpyANWMjS2giDI8IfmkgBntpkbcCqNLqhX1SeeGICGf8SIS5D50xaF+CU 53mAGeiJKQu4nw+0WMEPG9a+O0jcR9AP8VFEUGZAl3Us7lXw9BhhICVisbRGVx5r uUgztI+byGWeAw9xcxNxSVuKW/oG2fc37x+RKLq7I2qH8OJ00H4wUFq4d+m2ZoJW NA6lrHXWn8B3KQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:20 2025 by rpki-client