This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json) Hash identifier: YiTPiBwxDcDiTq52h4e/USuz0ZbeulmTopvf0SclyEQ= Subject key identifier: D6:3A:64:38:F4:EB:32:75:2D:50:A5:DD:F6:A4:B1:5F:CA:DD:B9:36 Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7 Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7 Certificate serial: 019B3FB6088BBA5469214CE4D123BF775980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft Manifest number: 158B Signing time: Sun 21 Dec 2025 07:00:52 +0000 Manifest this update: Sun 21 Dec 2025 07:00:52 +0000 Manifest next update: Mon 22 Dec 2025 07:00:52 +0000 Files and hashes: 1: ueBb6XAUF6o0wgWHrBMyAvCjDcw.roa (hash: FG2GqOv/aixTR0aGnuCtGnWbZFyWEpFgUNZYVCVmlOI=) 2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: ZFkP4RBlxCBAM2/jPX+N9+IMMGgcvTBijnHYf+iV1dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:08:8b:ba:54:69:21:4c:e4:d1:23:bf:77:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7 Validity Not Before: Dec 21 07:00:52 2025 GMT Not After : Dec 22 07:00:52 2025 GMT Subject: CN=d63a6438f4eb32752d50a5ddf6a4b15fcaddb936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:3d:aa:85:20:65:11:55:41:81:7d:56:a4: c1:b2:c5:f3:3c:c8:e1:3d:56:90:02:c6:39:f2:81: e6:17:2e:06:67:d7:ac:29:23:30:61:08:95:01:72: 29:94:a2:0a:78:c5:ca:da:ff:3a:ae:7c:9b:ad:ba: 35:17:09:2e:d5:92:47:67:29:ea:25:a6:73:22:36: d5:b6:bd:cd:c7:69:06:04:c6:f3:08:a7:5a:94:3d: bf:8a:96:a2:b0:4a:f4:be:ea:cf:cf:9e:2a:26:87: 8c:e2:25:32:cf:63:6d:c9:c4:0a:57:da:c9:c0:3a: 08:d9:3d:a6:8d:14:be:92:ed:d6:98:c6:5e:4e:ec: 42:11:a6:44:7e:59:16:10:d7:01:87:91:0a:62:27: d9:e6:3a:ea:dd:5b:34:79:e8:3a:10:bd:a8:7c:ab: fb:25:b6:e6:e7:fb:88:11:44:83:48:af:5f:3a:2b: 7c:28:d0:c9:f2:9d:5d:a7:96:ea:db:55:07:90:80: 28:19:45:4e:e0:7d:e6:82:31:f6:66:07:90:14:1b: ab:4d:7f:30:19:93:db:90:3a:6d:2e:97:fa:e3:d4: bf:48:9b:07:f3:49:d4:d0:c0:de:39:6c:90:2a:4c: 03:3c:3b:e5:26:ab:14:6f:f0:51:bd:a5:c9:9f:40: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3A:64:38:F4:EB:32:75:2D:50:A5:DD:F6:A4:B1:5F:CA:DD:B9:36 X509v3 Authority Key Identifier: keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0c:c9:8c:4d:4c:78:89:71:24:03:78:b0:f8:cd:42:72:c1: 57:58:ce:d9:41:ea:7c:bd:86:6a:ef:e3:f1:d4:5b:81:15:91: b9:a1:bf:9a:4c:16:78:1e:45:37:02:e8:66:cd:79:68:fb:bb: 99:04:b1:bb:cc:74:74:c6:6c:7b:71:2c:be:0a:08:68:30:4c: 5c:ed:41:3d:18:09:1d:64:59:b8:1c:4f:b7:2c:de:da:e2:47: 62:44:2d:73:4a:fe:f3:3c:10:d2:12:df:4f:19:57:a2:bc:6f: b7:41:82:07:52:5e:77:8b:50:da:25:22:03:b0:b2:60:b4:32: 64:5b:a8:1f:95:be:64:95:e8:dd:6a:a6:35:d9:00:33:73:d0: 78:4f:29:f2:16:0f:ad:18:08:e8:14:04:63:97:8a:8e:e2:88: ae:71:f0:91:50:39:8f:ff:42:8b:25:ee:e6:d7:b9:c0:18:ee: ce:aa:4b:b8:03:26:7c:ea:5c:ca:50:bd:b0:fd:ac:d2:43:10: 9b:9f:98:a3:9b:9f:23:b7:44:69:82:59:e2:54:df:18:e1:ed: 82:37:e5:01:67:4f:6a:e8:6c:41:61:45:c2:fd:75:a9:f4:3c: 44:0c:a3:f0:b5:30:0d:62:de:aa:f7:fe:71:f8:87:27:39:06: 63:46:f7:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tgiLulRpIUzk0SO/d1mAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTY3NGZlZTU1NTY3MjgxNzVlZmI1NmVhYThiOTlmMzgx NWFmYTcwHhcNMjUxMjIxMDcwMDUyWhcNMjUxMjIyMDcwMDUyWjAzMTEwLwYDVQQD EyhkNjNhNjQzOGY0ZWIzMjc1MmQ1MGE1ZGRmNmE0YjE1ZmNhZGRiOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA09qoUgZRFVQYF9VqTBssXzPMjh PVaQAsY58oHmFy4GZ9esKSMwYQiVAXIplKIKeMXK2v86rnybrbo1Fwku1ZJHZynq JaZzIjbVtr3Nx2kGBMbzCKdalD2/ipaisEr0vurPz54qJoeM4iUyz2NtycQKV9rJ wDoI2T2mjRS+ku3WmMZeTuxCEaZEflkWENcBh5EKYifZ5jrq3Vs0eeg6EL2ofKv7 Jbbm5/uIEUSDSK9fOit8KNDJ8p1dp5bq21UHkIAoGUVO4H3mgjH2ZgeQFBurTX8w GZPbkDptLpf649S/SJsH80nU0MDeOWyQKkwDPDvlJqsUb/BRvaXJn0BQCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNY6ZDj06zJ1LVCl3faksV/K3bk2MB8GA1UdIwQY MBaAFMUWdP7lVWcoF177VuqouZ84Fa+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYt M2NiZTFhZjNiODJjLzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYtM2NiZTFhZjNiODJj LzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngzJjE1M eIlxJAN4sPjNQnLBV1jO2UHqfL2Gau/j8dRbgRWRuaG/mkwWeB5FNwLoZs15aPu7 mQSxu8x0dMZse3EsvgoIaDBMXO1BPRgJHWRZuBxPtyze2uJHYkQtc0r+8zwQ0hLf TxlXorxvt0GCB1Jed4tQ2iUiA7CyYLQyZFuoH5W+ZJXo3WqmNdkAM3PQeE8p8hYP rRgI6BQEY5eKjuKIrnHwkVA5j/9CiyXu5te5wBjuzqpLuAMmfOpcylC9sP2s0kMQ m5+Yo5ufI7dEaYJZ4lTfGOHtgjflAWdPauhsQWFFwv11qfQ8RAyj8LUwDWLeqvf+ cfiHJzkGY0b3vA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:24:57 2025 by rpki-client