This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft File: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json) Hash identifier: oEAVpd0NaHQneXB8ltc13KR8SxhordIXlxHh5hGvA7s= Subject key identifier: 5F:CB:42:74:B1:46:08:48:00:08:C6:39:13:B0:7F:9E:09:93:AA:BC Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414 Certificate serial: 019B52616012636EE1E95A68AD88B4889396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft Manifest number: 034E Signing time: Wed 24 Dec 2025 22:01:11 +0000 Manifest this update: Wed 24 Dec 2025 22:01:11 +0000 Manifest next update: Thu 25 Dec 2025 22:01:11 +0000 Files and hashes: 1: DErHItNq7nABZO58YjUcqRebihE.roa (hash: ubfaZz+JuneQdJw4LkjXBWrUt9hJpsUiv6JFIG/nn8s=) 2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: Fzdu59DN5MolSS/MqQGFKms9rMp0lCEXqFk8MVO0Ef4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:60:12:63:6e:e1:e9:5a:68:ad:88:b4:88:93:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414 Validity Not Before: Dec 24 22:01:11 2025 GMT Not After : Dec 25 22:01:11 2025 GMT Subject: CN=5fcb4274b14608480008c63913b07f9e0993aabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:be:e7:34:f1:bb:f0:87:a8:7c:68:20:4a:09: ad:80:ef:05:03:ac:95:10:3a:f4:44:ff:0e:34:c9: e5:9a:51:3d:cf:ac:92:ac:0b:08:8d:1e:ae:38:7d: d3:0b:0a:5d:76:52:ff:5f:61:4e:39:7c:78:d0:13: 54:08:6a:5b:29:07:3d:dc:1e:38:3a:f8:c2:8f:e3: b6:21:57:ee:50:ca:f4:25:0d:75:1f:08:d2:5d:03: 4f:75:f0:96:cd:80:da:06:e7:b8:61:3a:35:57:80: 54:fd:be:af:b3:2d:82:d1:29:f8:72:1d:60:ea:c4: b4:b1:6a:0a:9e:66:fe:bf:b3:17:eb:fc:cd:1c:4f: 74:ec:62:83:a8:02:2e:09:00:ae:0e:5d:0e:74:03: 20:9d:9d:7e:96:64:ce:92:69:19:9a:64:eb:52:3f: ae:ca:62:f1:0f:81:c4:da:3b:db:78:9d:c0:4c:72: 45:98:13:f5:28:f0:e5:12:b5:1c:f6:f9:63:75:27: c5:2c:9e:37:28:cd:48:81:ec:b6:28:f4:39:07:64: c4:58:42:8c:5b:0f:2a:2b:6b:4b:7b:f6:34:ce:44: d3:b9:ca:f8:6c:7b:e9:67:64:8e:08:2f:01:26:f2: 34:48:b4:4a:c5:f4:63:01:29:36:38:1a:92:74:6a: d5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CB:42:74:B1:46:08:48:00:08:C6:39:13:B0:7F:9E:09:93:AA:BC X509v3 Authority Key Identifier: keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:29:48:fe:1d:94:2d:22:75:44:5f:e4:08:42:34:3c:9c:61: c9:65:cf:63:db:4d:62:09:f6:0e:88:68:c3:b1:d5:8e:71:9a: d0:1e:08:69:52:50:5f:79:34:d4:64:a5:6f:04:9a:2d:7c:7d: 13:ea:d3:91:25:9d:32:7b:4e:4e:ba:92:b6:ea:bd:4c:c7:59: c8:76:13:94:a3:0e:bf:b9:4b:b7:55:16:5e:71:94:49:42:d8: 04:c9:35:c6:49:ac:d3:d1:b2:f9:0f:b1:6e:fb:2e:f6:9b:81: dd:6f:b3:37:c2:7e:cf:a5:fa:23:69:47:69:14:26:67:40:52: 0b:68:78:78:30:48:0b:f5:5e:7f:94:2e:ec:41:c5:14:bf:e5: 0e:d9:28:4a:1b:65:31:9a:ba:77:3a:c9:27:38:77:ca:51:2f: 03:d5:b5:f8:8a:13:59:81:4a:ae:cb:54:41:31:a5:64:54:36: 10:56:f9:41:aa:ef:0a:09:29:de:9d:43:2c:16:06:1c:85:e7: 0f:1a:0b:67:06:3d:49:70:cb:8d:8b:49:cc:3a:47:7f:0a:b1: b9:d3:16:7d:1d:d8:e5:49:bb:45:3c:a2:07:6d:06:1b:87:c4: 03:a8:df:a2:70:f8:68:ba:e9:a4:7d:89:59:37:57:94:44:0f: 44:00:b8:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYWASY27h6VporYi0iJOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YWNjOWUyOTk5NjQ3ZDgwMWQ0NjA2ZWM5NGQ2YjcyMWY3 YTY0MTQwHhcNMjUxMjI0MjIwMTExWhcNMjUxMjI1MjIwMTExWjAzMTEwLwYDVQQD Eyg1ZmNiNDI3NGIxNDYwODQ4MDAwOGM2MzkxM2IwN2Y5ZTA5OTNhYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir7nNPG78IeofGggSgmtgO8FA6yV EDr0RP8ONMnlmlE9z6ySrAsIjR6uOH3TCwpddlL/X2FOOXx40BNUCGpbKQc93B44 OvjCj+O2IVfuUMr0JQ11HwjSXQNPdfCWzYDaBue4YTo1V4BU/b6vsy2C0Sn4ch1g 6sS0sWoKnmb+v7MX6/zNHE907GKDqAIuCQCuDl0OdAMgnZ1+lmTOkmkZmmTrUj+u ymLxD4HE2jvbeJ3ATHJFmBP1KPDlErUc9vljdSfFLJ43KM1Igey2KPQ5B2TEWEKM Ww8qK2tLe/Y0zkTTucr4bHvpZ2SOCC8BJvI0SLRKxfRjASk2OBqSdGrV+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/LQnSxRghIAAjGOROwf54Jk6q8MB8GA1UdIwQY MBaAFMSsyeKZlkfYAdRgbslNa3IfemQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEt YTA0YTJjOWFmZGVlLzEveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEtYTA0YTJjOWFmZGVl LzEveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASilI/h2U LSJ1RF/kCEI0PJxhyWXPY9tNYgn2Dohow7HVjnGa0B4IaVJQX3k01GSlbwSaLXx9 E+rTkSWdMntOTrqStuq9TMdZyHYTlKMOv7lLt1UWXnGUSULYBMk1xkms09Gy+Q+x bvsu9puB3W+zN8J+z6X6I2lHaRQmZ0BSC2h4eDBIC/Vef5Qu7EHFFL/lDtkoShtl MZq6dzrJJzh3ylEvA9W1+IoTWYFKrstUQTGlZFQ2EFb5QarvCgkp3p1DLBYGHIXn DxoLZwY9SXDLjYtJzDpHfwqxudMWfR3Y5Um7RTyiB20GG4fEA6jfonD4aLrppH2J WTdXlEQPRAC4Cw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:07 2025 by rpki-client