This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft File: xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json) Hash identifier: +xtEBpzacwV9seQetqeWDD1rfdxfPFECnbiqgqfllXc= Subject key identifier: 05:D9:54:FF:A7:61:09:A6:43:9B:03:52:EF:A8:1D:66:DB:D0:D9:35 Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866 Certificate serial: 019B3BD944A886E06C147CC9A7C7AE74A652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft Manifest number: 17BE Signing time: Sat 20 Dec 2025 13:00:53 +0000 Manifest this update: Sat 20 Dec 2025 13:00:53 +0000 Manifest next update: Sun 21 Dec 2025 13:00:53 +0000 Files and hashes: 1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=) 2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=) 3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=) 4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=) 5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: n2GynlrQHePdye5ZnicnQyfOjedCpzPuMjgw/+0ZNK4=) 6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:44:a8:86:e0:6c:14:7c:c9:a7:c7:ae:74:a6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866 Validity Not Before: Dec 20 13:00:53 2025 GMT Not After : Dec 21 13:00:53 2025 GMT Subject: CN=05d954ffa76109a6439b0352efa81d66dbd0d935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:7f:d7:83:78:78:71:24:78:a8:0c:48:2e: e8:a6:0a:e7:fc:12:c9:e3:d8:83:ff:ed:66:58:ec: 8f:ee:aa:f3:9f:3e:e8:8a:59:f2:77:d2:24:ac:d5: f9:9d:c3:4b:c9:0d:c9:a5:3e:ae:02:ac:82:a2:a6: e2:c6:2e:4f:44:5d:1c:38:ff:a8:b0:7e:ca:ff:12: af:89:4c:fe:93:cb:ba:92:6e:d5:fa:81:34:70:bc: 5f:47:cf:bb:31:57:a9:a1:cc:2e:fe:d6:17:6c:4d: 68:fc:7b:6b:ea:0e:d6:60:2f:9d:71:5f:af:99:a5: ac:70:cc:e9:71:eb:fd:69:62:3f:81:55:77:ba:d8: 04:c4:67:ec:f2:8a:c7:a6:ea:84:aa:a2:bd:08:92: 2b:b3:12:4c:e9:11:cb:c2:7d:f5:18:16:bd:2f:cf: 34:17:ba:5f:10:65:66:d0:d1:53:6e:e5:53:de:90: a4:ae:7b:af:1e:15:86:74:d3:96:70:9f:c9:5e:a6: c6:b2:61:a0:b8:80:0c:92:da:a8:0d:96:dc:f8:2c: 06:30:f8:88:83:81:4f:81:e6:5a:44:40:ea:cb:08: ac:53:e4:2a:f1:09:96:ee:0b:6c:98:9e:e7:2c:e3: fe:a2:b7:75:23:ea:ee:76:9e:21:e2:ab:ae:97:f9: 2e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D9:54:FF:A7:61:09:A6:43:9B:03:52:EF:A8:1D:66:DB:D0:D9:35 X509v3 Authority Key Identifier: keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:11:21:50:7b:36:85:a4:ea:c3:ac:81:09:22:7e:76:c6:97: 3b:2f:ad:de:c1:6d:fe:58:3b:f3:68:5e:ed:42:51:49:34:67: 91:4f:96:24:e3:c0:c6:14:23:3f:47:7a:0e:e2:80:85:4c:b4: b1:2e:65:ad:f2:20:dd:10:30:11:c0:80:e3:50:8d:de:b9:60: 61:a9:a3:47:9e:ff:f9:3b:c3:11:6e:8f:e4:4e:91:8f:e6:68: 3a:f5:68:aa:bb:5c:e6:12:af:d5:a0:6d:d1:26:e6:a9:76:2c: 47:05:3b:81:26:4a:02:34:97:8d:39:d2:d6:ab:16:66:82:5e: d8:62:0e:bb:64:57:38:40:e5:e4:4a:49:11:48:20:5d:71:47: ea:df:64:86:11:4a:cb:a0:06:41:b3:5c:a0:95:bc:20:28:22: 87:6c:c3:e4:02:d4:1d:cd:96:9e:90:58:80:f7:b8:6d:bc:27: 5d:f4:e5:73:2e:5d:74:fe:9f:d5:24:16:1f:24:06:5b:db:03: 6e:a8:6b:51:fb:81:17:50:3b:cc:55:b7:2b:55:c8:c9:6b:6f: 20:62:17:f8:15:26:50:63:da:55:01:38:09:3a:7e:2c:5f:6f: 00:81:7a:76:eb:d9:cb:8a:9d:09:d3:ec:39:78:46:aa:9e:d9: d7:bf:f3:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72USohuBsFHzJp8eudKZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl Mjc4NjYwHhcNMjUxMjIwMTMwMDUzWhcNMjUxMjIxMTMwMDUzWjAzMTEwLwYDVQQD EygwNWQ5NTRmZmE3NjEwOWE2NDM5YjAzNTJlZmE4MWQ2NmRiZDBkOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+l/14N4eHEkeKgMSC7opgrn/BLJ 49iD/+1mWOyP7qrznz7oilnyd9IkrNX5ncNLyQ3JpT6uAqyCoqbixi5PRF0cOP+o sH7K/xKviUz+k8u6km7V+oE0cLxfR8+7MVepocwu/tYXbE1o/Htr6g7WYC+dcV+v maWscMzpcev9aWI/gVV3utgExGfs8orHpuqEqqK9CJIrsxJM6RHLwn31GBa9L880 F7pfEGVm0NFTbuVT3pCkrnuvHhWGdNOWcJ/JXqbGsmGguIAMktqoDZbc+CwGMPiI g4FPgeZaREDqywisU+Qq8QmW7gtsmJ7nLOP+ord1I+rudp4h4quul/kufwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXZVP+nYQmmQ5sDUu+oHWbb0Nk1MB8GA1UdIwQY MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt Y2U1ZTAxZTcxYzkxLzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBEhUHs2 haTqw6yBCSJ+dsaXOy+t3sFt/lg782he7UJRSTRnkU+WJOPAxhQjP0d6DuKAhUy0 sS5lrfIg3RAwEcCA41CN3rlgYamjR57/+TvDEW6P5E6Rj+ZoOvVoqrtc5hKv1aBt 0SbmqXYsRwU7gSZKAjSXjTnS1qsWZoJe2GIOu2RXOEDl5EpJEUggXXFH6t9khhFK y6AGQbNcoJW8ICgih2zD5ALUHc2WnpBYgPe4bbwnXfTlcy5ddP6f1SQWHyQGW9sD bqhrUfuBF1A7zFW3K1XIyWtvIGIX+BUmUGPaVQE4CTp+LF9vAIF6duvZy4qdCdPs OXhGqp7Z17/zFg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:59:29 2025 by rpki-client