This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft File: xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json) Hash identifier: z4IZ1E+hCa5P/F4PCVGlUEhu7IMY8qwgGd5sA/9juMk= Subject key identifier: 78:DA:DE:5B:E3:59:B1:46:9D:32:AD:26:EF:1A:8D:83:81:D4:8A:CB Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85 Certificate issuer: /CN=c5e3f7f40c100dffdb18121c726199e85804c585 Certificate serial: 019B413709B89D067EFCE7EEC9ED3C0A6AE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 14:01:24 +0000 Manifest this update: Sun 21 Dec 2025 14:01:24 +0000 Manifest next update: Mon 22 Dec 2025 14:01:24 +0000 Files and hashes: 1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=) 2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: 8U8m8Jlbw1LvsFdzBC5jXyHcI9XvtPw039q9JnrA78Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:09:b8:9d:06:7e:fc:e7:ee:c9:ed:3c:0a:6a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585 Validity Not Before: Dec 21 14:01:24 2025 GMT Not After : Dec 22 14:01:24 2025 GMT Subject: CN=78dade5be359b1469d32ad26ef1a8d8381d48acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b7:f1:3b:ef:0a:72:04:c6:62:c9:19:6c:33: 7a:b0:ce:8a:5c:46:e9:f3:2a:d4:bc:e2:9b:e5:da: f2:74:79:22:11:93:fd:1e:80:c7:d3:2a:71:28:32: 5f:c9:19:16:c0:f2:6a:23:e1:46:c5:93:a1:ae:00: 8e:b4:b6:87:d4:00:43:54:a0:c9:5b:0f:d2:f3:4a: ea:42:92:4d:86:db:b2:8b:d8:48:94:42:47:6b:9f: aa:e8:e4:ea:71:8b:f4:05:e5:51:ed:52:97:38:59: c8:8f:de:d7:c9:5e:b9:8d:d0:ac:eb:4c:8b:38:d7: 1a:ad:88:42:cd:0e:6f:47:dd:30:a2:04:41:f3:1a: cc:eb:c9:83:3a:bf:02:20:cc:f2:30:9e:ac:2b:c8: 35:b5:ca:1c:16:57:b6:0c:d5:ac:5b:88:3f:11:56: f0:35:53:9a:2b:6a:f0:ea:a3:5f:11:b6:19:b7:dd: 10:73:4a:8b:2f:8d:3d:87:ed:fe:89:a9:14:5b:4f: 22:bb:d1:bd:73:09:d3:3e:d7:ba:b2:a9:a5:eb:b6: 1f:7e:a7:76:1c:b7:d1:7c:1f:50:26:38:40:38:fb: 3a:60:9a:47:b1:b8:bb:be:23:c5:4e:00:71:0f:98: 08:19:a5:50:cf:c3:b3:2c:98:ab:04:e3:28:95:c8: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DA:DE:5B:E3:59:B1:46:9D:32:AD:26:EF:1A:8D:83:81:D4:8A:CB X509v3 Authority Key Identifier: keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:87:36:62:89:e6:97:df:52:16:9d:4c:2f:c3:0d:82:f9:d9: ca:5c:31:c7:2b:00:59:23:e2:8c:3b:5b:8b:cb:b4:cc:1d:04: d5:2d:bc:ea:82:6b:c7:c9:7d:4a:70:49:c6:7d:22:10:77:cd: 13:f2:80:94:c5:43:61:f1:97:0b:e1:00:a5:ee:86:04:d7:4f: 48:b7:22:e2:c9:ee:f8:61:11:02:8d:2a:cf:5a:cd:fb:d7:00: 25:92:1b:27:57:78:3e:ad:43:1a:ab:57:52:15:ff:45:17:28: 67:fe:88:2a:4c:4a:cf:9b:7b:2f:04:d6:3a:1e:5e:7c:c8:36: b8:7b:70:9b:31:3b:a5:48:77:c3:28:bb:f8:16:7c:b9:28:b4: 01:7c:ad:20:fd:ea:0e:ea:96:a7:56:1a:53:36:5a:c2:29:85: bc:a7:75:29:20:22:53:a6:d4:91:d8:7c:6e:bc:d4:5a:17:88: 6c:09:98:72:69:89:9c:0e:66:a4:cc:9e:37:75:60:a1:bb:45: 86:92:3f:9f:9e:94:35:73:01:67:78:de:99:8c:50:76:cc:a1: 74:6f:bf:8d:8f:a5:2c:17:93:67:84:bd:de:b1:d5:c0:0e:35: 83:12:37:47:d2:1b:39:3a:bb:4c:bb:c8:a8:73:6a:fc:a9:c6: 35:24:98:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNwm4nQZ+/Ofuye08CmrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTNmN2Y0MGMxMDBkZmZkYjE4MTIxYzcyNjE5OWU4NTgw NGM1ODUwHhcNMjUxMjIxMTQwMTI0WhcNMjUxMjIyMTQwMTI0WjAzMTEwLwYDVQQD Eyg3OGRhZGU1YmUzNTliMTQ2OWQzMmFkMjZlZjFhOGQ4MzgxZDQ4YWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbfxO+8KcgTGYskZbDN6sM6KXEbp 8yrUvOKb5drydHkiEZP9HoDH0ypxKDJfyRkWwPJqI+FGxZOhrgCOtLaH1ABDVKDJ Ww/S80rqQpJNhtuyi9hIlEJHa5+q6OTqcYv0BeVR7VKXOFnIj97XyV65jdCs60yL ONcarYhCzQ5vR90wogRB8xrM68mDOr8CIMzyMJ6sK8g1tcocFle2DNWsW4g/EVbw NVOaK2rw6qNfEbYZt90Qc0qLL409h+3+iakUW08iu9G9cwnTPte6sqml67Yffqd2 HLfRfB9QJjhAOPs6YJpHsbi7viPFTgBxD5gIGaVQz8OzLJirBOMolchPHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHja3lvjWbFGnTKtJu8ajYOB1IrLMB8GA1UdIwQY MBaAFMXj9/QMEA3/2xgSHHJhmehYBMWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYWY2ZWQtYmFmNC00MWJmLTlmMjIt N2Q5NzJlMWQyZTYxLzEveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYWY2ZWQtYmFmNC00MWJmLTlmMjItN2Q5NzJlMWQyZTYx LzEveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoc2Yonm l99SFp1ML8MNgvnZylwxxysAWSPijDtbi8u0zB0E1S286oJrx8l9SnBJxn0iEHfN E/KAlMVDYfGXC+EApe6GBNdPSLci4snu+GERAo0qz1rN+9cAJZIbJ1d4Pq1DGqtX UhX/RRcoZ/6IKkxKz5t7LwTWOh5efMg2uHtwmzE7pUh3wyi7+BZ8uSi0AXytIP3q DuqWp1YaUzZawimFvKd1KSAiU6bUkdh8brzUWheIbAmYcmmJnA5mpMyeN3VgobtF hpI/n56UNXMBZ3jemYxQdsyhdG+/jY+lLBeTZ4S93rHVwA41gxI3R9IbOTq7TLvI qHNq/KnGNSSYlw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:15 2025 by rpki-client