This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft File: xHC41L-HFAS8pTx3gVME7y6k4co.mft (raw, json) Hash identifier: PlpuidcI/1BjK93eivJGiWlS59+rY8HqUGimlNAJ3mY= Subject key identifier: 84:F9:AB:0D:0B:52:A1:27:14:DB:27:BC:C8:6B:4B:DE:A9:34:1D:4E Authority key identifier: C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA Certificate issuer: /CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca Certificate serial: 019B3C104306E2B61CA859568B7681547D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft Manifest number: 016D Signing time: Sat 20 Dec 2025 14:00:57 +0000 Manifest this update: Sat 20 Dec 2025 14:00:57 +0000 Manifest next update: Sun 21 Dec 2025 14:00:57 +0000 Files and hashes: 1: N1QJr3d4xPAL0pWw7bMpfGQLYDw.roa (hash: bdncW/PZlPA4ydR5a6GdEoycfKMOIvrr26MW7cKXUvM=) 2: xHC41L-HFAS8pTx3gVME7y6k4co.crl (hash: e/Y5/BW0njK5nw8T7MMj3xfiwRyP9ZotlCtw+pF3pSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:43:06:e2:b6:1c:a8:59:56:8b:76:81:54:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca Validity Not Before: Dec 20 14:00:57 2025 GMT Not After : Dec 21 14:00:57 2025 GMT Subject: CN=84f9ab0d0b52a12714db27bcc86b4bdea9341d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:a8:d1:bc:38:23:fc:69:7f:6e:f3:bd:50: 52:5e:8a:d6:f0:cf:90:a3:c8:3a:60:61:e2:60:71: ce:ef:6d:92:3a:8b:41:11:7d:fd:30:e7:8e:43:5b: 8a:74:31:39:ce:99:3b:f2:1a:34:35:14:35:80:3c: 75:3c:32:64:e8:2a:2e:aa:e5:33:7c:36:07:ea:19: ae:89:6a:68:08:67:14:eb:92:35:7a:34:3d:c5:23: ce:ab:63:5a:4f:d2:5e:aa:c1:8e:90:3d:13:67:90: 8e:4b:87:e7:b4:db:48:3e:10:64:00:8f:64:a0:b8: f8:67:c3:64:de:40:01:3a:f3:81:74:63:f2:35:75: 66:f8:04:dc:f8:cb:81:73:15:76:49:93:6a:17:66: ca:b8:26:44:6d:04:55:a7:33:eb:05:5e:fc:6a:fb: eb:ca:e1:e8:af:53:83:3f:10:64:11:a7:35:1e:15: 4c:a1:89:30:64:63:f7:92:b8:12:ef:fa:ef:41:b5: 65:ae:21:69:41:89:79:04:e6:1e:b7:9e:e7:7e:63: 25:03:ca:c6:71:b8:7a:1a:e9:e2:9d:25:a9:83:2c: f8:03:87:53:c3:5c:eb:3b:6d:c9:1d:80:10:08:71: 49:e4:1c:8f:ba:d2:e6:31:62:45:0d:5c:49:ba:48: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F9:AB:0D:0B:52:A1:27:14:DB:27:BC:C8:6B:4B:DE:A9:34:1D:4E X509v3 Authority Key Identifier: keyid:C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4d:3c:e0:9c:1c:4b:3a:44:81:00:df:36:5d:ab:9d:e8:43: 22:5f:af:12:2c:c2:cd:e3:77:5f:d0:be:7e:5a:7b:a6:68:7e: aa:37:eb:c9:6f:51:38:d1:00:a7:95:e4:55:96:b8:f3:97:db: 72:a5:0a:ce:3c:6f:79:6a:c2:73:16:38:c3:99:6a:27:07:af: 32:d6:b3:1e:71:0f:aa:bf:b4:f8:2f:fb:b1:b0:fb:2d:31:48: f8:73:05:63:cc:66:1d:cd:47:4c:88:2b:d5:4a:64:5b:8e:82: fd:e3:e3:42:5c:92:a0:b7:7f:b8:54:5e:57:71:34:5a:e5:24: a9:c5:14:82:db:d5:d0:cd:eb:ce:1e:d1:14:2d:bc:90:3e:ca: 40:8a:4c:7f:bd:40:8b:d9:96:bd:a9:a4:63:af:ec:e6:ed:98: e2:9f:00:a4:5a:72:0d:ba:5a:3d:e1:1f:ab:2f:c2:18:ff:9b: ed:41:93:d9:ec:fb:d1:53:0c:06:7a:34:87:7c:98:ee:08:fe: b3:f3:06:5a:c3:b4:73:f9:39:76:1d:48:ef:78:3c:51:c2:09: 2d:ef:9e:2e:c3:dc:35:57:7d:36:f7:b7:08:fe:77:f9:95:02: 2c:88:56:00:91:07:0f:6f:13:df:06:86:a5:a9:b1:e8:4d:9a: b0:d0:26:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EEMG4rYcqFlWi3aBVH1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NzBiOGQ0YmY4NzE0MDRiY2E1M2M3NzgxNTMwNGVmMmVh NGUxY2EwHhcNMjUxMjIwMTQwMDU3WhcNMjUxMjIxMTQwMDU3WjAzMTEwLwYDVQQD Eyg4NGY5YWIwZDBiNTJhMTI3MTRkYjI3YmNjODZiNGJkZWE5MzQxZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1Oo0bw4I/xpf27zvVBSXorW8M+Q o8g6YGHiYHHO722SOotBEX39MOeOQ1uKdDE5zpk78ho0NRQ1gDx1PDJk6CouquUz fDYH6hmuiWpoCGcU65I1ejQ9xSPOq2NaT9JeqsGOkD0TZ5COS4fntNtIPhBkAI9k oLj4Z8Nk3kABOvOBdGPyNXVm+ATc+MuBcxV2SZNqF2bKuCZEbQRVpzPrBV78avvr yuHor1ODPxBkEac1HhVMoYkwZGP3krgS7/rvQbVlriFpQYl5BOYet57nfmMlA8rG cbh6GuninSWpgyz4A4dTw1zrO23JHYAQCHFJ5ByPutLmMWJFDVxJukgCfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIT5qw0LUqEnFNsnvMhrS96pNB1OMB8GA1UdIwQY MBaAFMRwuNS/hxQEvKU8d4FTBO8upOHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEhDNDFMLUhGQVM4cFR4M2dWTUU3eTZrNGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNGJhOGYtNWU2MS00ZGNjLWJhMGIt ZjYyNGVkNWY0NmZlLzEveEhDNDFMLUhGQVM4cFR4M2dWTUU3eTZrNGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hNGJhOGYtNWU2MS00ZGNjLWJhMGItZjYyNGVkNWY0NmZl LzEveEhDNDFMLUhGQVM4cFR4M2dWTUU3eTZrNGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU084Jwc SzpEgQDfNl2rnehDIl+vEizCzeN3X9C+flp7pmh+qjfryW9RONEAp5XkVZa485fb cqUKzjxveWrCcxY4w5lqJwevMtazHnEPqr+0+C/7sbD7LTFI+HMFY8xmHc1HTIgr 1UpkW46C/ePjQlySoLd/uFReV3E0WuUkqcUUgtvV0M3rzh7RFC28kD7KQIpMf71A i9mWvamkY6/s5u2Y4p8ApFpyDbpaPeEfqy/CGP+b7UGT2ez70VMMBno0h3yY7gj+ s/MGWsO0c/k5dh1I73g8UcIJLe+eLsPcNVd9Nve3CP53+ZUCLIhWAJEHD28T3waG pamx6E2asNAmZw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:51:31 2025 by rpki-client