This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft File: xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json) Hash identifier: xjriPfF3XkO1HQq4P1oVwjIHfXRfgGtT5Zhp+hWT5ug= Subject key identifier: 44:BF:5F:D2:58:97:D4:AD:E9:09:4B:95:CE:20:22:56:2E:83:2E:BA Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Certificate serial: 019B3AC6AC5517C8FC7AF480F69E66116F63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft Manifest number: 05CE Signing time: Sat 20 Dec 2025 08:00:57 +0000 Manifest this update: Sat 20 Dec 2025 08:00:57 +0000 Manifest next update: Sun 21 Dec 2025 08:00:57 +0000 Files and hashes: 1: 3Gbnet98ld2uF50D7YCjLTfkMpA.roa (hash: VXqXm4z6E41hAlJYaZsYhRtFw5yW6/XPRFTdwUW8xG4=) 2: sE_yBIBHGOP00_8ICipXACLmvpc.roa (hash: FyBE1dNPqJ1LeCxUv53xtEACyPL7Fifk2VrXCbMm6MU=) 3: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: ATf1DP10JhyxqtaooG1p4Ihp9um//dF7NNOWSE/7CTY=) 4: y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa (hash: xuqlNaZw0JfK1zeCz1wuG1Q98hbdJatlBMg2l2xV/d8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:ac:55:17:c8:fc:7a:f4:80:f6:9e:66:11:6f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Validity Not Before: Dec 20 08:00:57 2025 GMT Not After : Dec 21 08:00:57 2025 GMT Subject: CN=44bf5fd25897d4ade9094b95ce2022562e832eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:d3:9d:a4:7a:2f:87:c0:88:d3:e4:ef:c1: 6a:df:50:8f:ea:89:90:8c:ec:dd:fb:f3:47:b0:19: e4:f0:c3:7b:37:16:f3:00:9a:80:64:9b:e9:44:fc: d6:c9:89:bd:cb:5b:aa:64:fa:fd:e8:78:bf:92:6a: 59:ac:94:b9:df:51:ff:d5:1f:d5:b3:a4:36:b7:9c: a6:1b:2d:44:86:a5:1f:e7:09:8e:92:3a:fd:27:92: 37:f8:34:b4:f3:64:33:31:ce:69:70:49:54:b8:88: 57:56:b6:be:0b:97:25:62:9c:1a:3a:0a:c6:aa:00: c8:92:66:13:08:56:fc:4b:c8:8b:e9:27:76:cf:23: b0:52:db:06:3d:d5:2b:db:6e:24:0a:d5:f6:dd:65: 00:e5:af:f8:eb:d3:d4:4d:76:82:ac:9d:f6:4f:21: a8:da:f9:80:c1:04:cc:29:f4:82:6d:ef:8a:11:25: bf:eb:d6:79:63:55:4c:75:f9:31:2c:8c:42:13:97: a3:02:9e:fa:fd:4a:81:83:11:e3:b2:2c:66:1e:a6: 67:fa:73:78:cb:c7:93:d0:4e:57:47:b6:01:7c:e9: c0:74:8c:a5:f6:bd:f2:29:35:ea:23:81:e9:a4:12: 60:a7:54:31:26:a7:8d:a0:96:ab:4b:4b:59:6d:a3: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BF:5F:D2:58:97:D4:AD:E9:09:4B:95:CE:20:22:56:2E:83:2E:BA X509v3 Authority Key Identifier: keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0e:f1:88:53:e9:9c:da:a2:b2:ac:a4:9f:a3:b6:40:28:92: 30:e1:74:57:58:35:30:66:23:be:35:22:93:1e:ad:d1:75:97: 5b:61:5e:03:8a:50:f6:94:c6:92:a7:40:88:05:dc:4a:9d:f3: 1d:c9:ca:7b:43:88:55:08:9e:d5:b7:ff:0b:35:2d:ab:3b:90: 55:97:cb:c7:62:e8:9a:11:04:83:73:f7:62:62:19:e0:1d:87: eb:a6:80:fd:ea:a1:15:52:25:d7:cb:ca:0a:59:aa:e0:c6:1b: d6:c8:e9:9c:19:80:9d:c4:82:3e:e2:eb:35:c6:4b:f9:d4:44: 36:d3:36:bc:83:8a:a1:42:6b:70:ce:45:0e:e4:d1:40:fe:d0: ac:85:33:a1:70:bf:0b:9b:af:26:64:f9:e6:d3:62:35:11:07: 0a:83:42:b4:5f:78:f5:a4:11:a3:81:00:3d:21:c5:57:12:79: a4:f5:71:3c:4f:0f:5b:19:c5:a0:fe:82:7e:a7:03:c3:9d:6a: f7:1a:8c:69:ac:7b:77:75:73:ad:bf:65:66:c6:7c:36:1d:50: 26:21:d9:95:c9:1a:91:09:c2:ec:10:fc:65:77:9a:30:ce:2b: 93:90:0e:96:10:6c:9b:5c:cc:11:10:b7:3a:c2:20:4b:59:61: af:26:a9:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xqxVF8j8evSA9p5mEW9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTFmMzQ1YTUwM2NiOGM4YTlkZTQyN2U4ODEyZWZmZjIx YjIyYjUwHhcNMjUxMjIwMDgwMDU3WhcNMjUxMjIxMDgwMDU3WjAzMTEwLwYDVQQD Eyg0NGJmNWZkMjU4OTdkNGFkZTkwOTRiOTVjZTIwMjI1NjJlODMyZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZvTnaR6L4fAiNPk78Fq31CP6omQ jOzd+/NHsBnk8MN7NxbzAJqAZJvpRPzWyYm9y1uqZPr96Hi/kmpZrJS531H/1R/V s6Q2t5ymGy1EhqUf5wmOkjr9J5I3+DS082QzMc5pcElUuIhXVra+C5clYpwaOgrG qgDIkmYTCFb8S8iL6Sd2zyOwUtsGPdUr224kCtX23WUA5a/469PUTXaCrJ32TyGo 2vmAwQTMKfSCbe+KESW/69Z5Y1VMdfkxLIxCE5ejAp76/UqBgxHjsixmHqZn+nN4 y8eT0E5XR7YBfOnAdIyl9r3yKTXqI4HppBJgp1QxJqeNoJarS0tZbaOK7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFES/X9JYl9St6QlLlc4gIlYugy66MB8GA1UdIwQY MBaAFMaR80WlA8uMip3kJ+iBLv/yGyK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEt ZTdjYWY1ZTViY2JhLzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEtZTdjYWY1ZTViY2Jh LzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQ7xiFPp nNqisqykn6O2QCiSMOF0V1g1MGYjvjUikx6t0XWXW2FeA4pQ9pTGkqdAiAXcSp3z HcnKe0OIVQie1bf/CzUtqzuQVZfLx2LomhEEg3P3YmIZ4B2H66aA/eqhFVIl18vK Clmq4MYb1sjpnBmAncSCPuLrNcZL+dRENtM2vIOKoUJrcM5FDuTRQP7QrIUzoXC/ C5uvJmT55tNiNREHCoNCtF949aQRo4EAPSHFVxJ5pPVxPE8PWxnFoP6CfqcDw51q 9xqMaax7d3Vzrb9lZsZ8Nh1QJiHZlckakQnC7BD8ZXeaMM4rk5AOlhBsm1zMERC3 OsIgS1lhryapsA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:29:35 2025 by rpki-client