This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json) Hash identifier: SKQ4BfArNfJE/4B1aD2tcYWe5RT9bxMMJRk3US35fGk= Subject key identifier: FC:B4:4A:57:4B:B1:F2:99:1C:AC:B5:EF:0D:79:29:A5:18:D0:14:DD Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Certificate serial: 019B39B44EA57D7CEB82BE1DFD5089271CAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft Manifest number: 148E Signing time: Sat 20 Dec 2025 03:01:16 +0000 Manifest this update: Sat 20 Dec 2025 03:01:16 +0000 Manifest next update: Sun 21 Dec 2025 03:01:16 +0000 Files and hashes: 1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=) 2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=) 3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=) 4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=) 5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: WLv3LoEwNj8lk8s5ScgfyIWBVpRoNbJNuwyThmSVKPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:4e:a5:7d:7c:eb:82:be:1d:fd:50:89:27:1c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Validity Not Before: Dec 20 03:01:16 2025 GMT Not After : Dec 21 03:01:16 2025 GMT Subject: CN=fcb44a574bb1f2991cacb5ef0d7929a518d014dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:9c:9c:ca:34:43:a2:4e:3f:ba:2e:85:e8: 9e:94:be:77:86:69:57:6d:e3:75:bb:2f:4b:57:59: 61:ce:dd:64:54:5e:b9:f6:9f:88:4a:ef:93:24:97: 81:6d:17:0d:ce:fe:b6:9a:78:1b:b1:03:13:cc:1b: bb:ff:8b:6a:54:93:b9:65:8f:af:01:9b:07:f0:4e: 42:5d:ec:54:9c:48:ed:b1:72:f8:60:95:8b:a6:b6: 6a:9e:bf:4b:4f:14:99:51:1e:15:24:af:6b:67:1d: 79:1e:e1:47:c8:fe:a1:97:78:19:ce:28:0d:5f:53: ec:8f:1f:3b:e3:0a:2d:ef:6b:3d:5b:ec:a7:55:da: 9c:17:08:5d:a5:c3:25:65:02:cc:b7:db:f0:e1:37: 2f:11:cc:86:e9:83:ff:a7:6f:d3:dd:2d:06:bc:9e: 7e:3f:63:34:86:be:be:48:87:bf:ac:63:11:73:cc: 87:6f:13:2f:51:90:03:4a:39:2c:02:8a:72:14:53: 95:98:b6:69:6b:08:ef:ec:35:e9:71:67:7f:80:de: 4e:59:69:68:ca:0e:e3:0f:6f:81:f6:28:14:b2:48: 80:a2:1b:32:b1:37:ae:1f:2b:86:b9:42:d8:27:a2: 80:08:94:d4:ce:00:cf:4f:00:5f:be:20:bb:17:af: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B4:4A:57:4B:B1:F2:99:1C:AC:B5:EF:0D:79:29:A5:18:D0:14:DD X509v3 Authority Key Identifier: keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:bc:18:b7:e3:77:ff:dd:dd:b2:25:a8:e2:25:6b:ad:d0:50: d0:ea:6b:fb:cc:a5:7a:86:22:7f:dd:f4:f9:fc:d0:09:53:0f: 77:92:a2:a1:b1:2f:28:7d:a2:6b:95:74:be:a5:8d:09:56:fa: 97:71:cd:f5:dd:46:b2:10:cc:8d:ce:b2:ee:eb:ab:1a:fc:9d: 53:0c:e7:22:6b:0a:64:aa:d9:98:c9:c4:9c:1b:0a:c7:10:38: 85:66:cb:9b:f9:1c:89:e6:a9:0f:2d:db:a9:2a:ac:7a:a0:33: 8d:96:42:b9:4e:ac:dd:83:a4:5c:cc:8f:85:e6:df:98:16:68: f1:e2:1f:a8:83:0a:d6:75:34:31:34:b2:c3:5a:2d:5c:4e:17: f8:dc:bf:64:f5:11:d6:a9:78:9c:1e:46:85:36:51:ee:4a:9e: 48:53:78:ee:6d:ef:ee:8f:b1:3c:a0:fb:72:26:1d:1e:41:bb: 78:5f:e0:6f:04:ba:c1:ee:e6:dc:0b:e9:56:d1:f8:9e:9e:27: cf:8a:7c:67:8f:e5:ac:7f:50:23:e7:e2:bb:3d:f6:e3:98:de: a4:b7:89:d4:d4:e4:31:f3:39:6e:fb:c8:4b:82:a5:6b:bf:7e: 77:86:91:9d:91:8a:71:eb:13:66:6a:d6:01:7b:60:24:36:f4: 98:0e:fd:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tE6lfXzrgr4d/VCJJxysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz NGI1ZDEwHhcNMjUxMjIwMDMwMTE2WhcNMjUxMjIxMDMwMTE2WjAzMTEwLwYDVQQD EyhmY2I0NGE1NzRiYjFmMjk5MWNhY2I1ZWYwZDc5MjlhNTE4ZDAxNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfOcnMo0Q6JOP7ouheielL53hmlX beN1uy9LV1lhzt1kVF659p+ISu+TJJeBbRcNzv62mngbsQMTzBu7/4tqVJO5ZY+v AZsH8E5CXexUnEjtsXL4YJWLprZqnr9LTxSZUR4VJK9rZx15HuFHyP6hl3gZzigN X1Psjx874wot72s9W+ynVdqcFwhdpcMlZQLMt9vw4TcvEcyG6YP/p2/T3S0GvJ5+ P2M0hr6+SIe/rGMRc8yHbxMvUZADSjksAopyFFOVmLZpawjv7DXpcWd/gN5OWWlo yg7jD2+B9igUskiAohsysTeuHyuGuULYJ6KACJTUzgDPTwBfviC7F69S7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy0SldLsfKZHKy17w15KaUY0BTdMB8GA1UdIwQY MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1 LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbwYt+N3 /93dsiWo4iVrrdBQ0Opr+8yleoYif930+fzQCVMPd5KiobEvKH2ia5V0vqWNCVb6 l3HN9d1GshDMjc6y7uurGvydUwznImsKZKrZmMnEnBsKxxA4hWbLm/kcieapDy3b qSqseqAzjZZCuU6s3YOkXMyPhebfmBZo8eIfqIMK1nU0MTSyw1otXE4X+Ny/ZPUR 1ql4nB5GhTZR7kqeSFN47m3v7o+xPKD7ciYdHkG7eF/gbwS6we7m3AvpVtH4np4n z4p8Z4/lrH9QI+fiuz3245jepLeJ1NTkMfM5bvvIS4Kla79+d4aRnZGKcesTZmrW AXtgJDb0mA79yQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:14:56 2025 by rpki-client