This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json) Hash identifier: BcnOAr9rIHm7ShK0rQv341Igw54q+kUPS2pJh+OJD8A= Subject key identifier: E6:83:15:28:0D:26:83:B2:BB:97:D9:0F:14:9B:45:96:90:59:6B:B4 Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32 Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132 Certificate serial: 019B3AFE51FA8AF702B1FFE46744E408CC50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft Manifest number: 06B0 Signing time: Sat 20 Dec 2025 09:01:43 +0000 Manifest this update: Sat 20 Dec 2025 09:01:43 +0000 Manifest next update: Sun 21 Dec 2025 09:01:43 +0000 Files and hashes: 1: kHiX8WHdFwuPFdrPXqiFRGBzUrk.roa (hash: otjzQBnh+aIeRc4Qh5LotaBSTmBU7xZUCsHLwTppJLQ=) 2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: P0mzwhYNj+s+B990s8igGi+pw/EJpUJcuWif7tiIfsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:51:fa:8a:f7:02:b1:ff:e4:67:44:e4:08:cc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132 Validity Not Before: Dec 20 09:01:43 2025 GMT Not After : Dec 21 09:01:43 2025 GMT Subject: CN=e68315280d2683b2bb97d90f149b459690596bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d7:66:12:0c:81:33:35:0d:7d:6c:24:d6:44: f0:39:e5:b2:4d:f8:5d:84:11:91:41:f5:85:f3:ed: 8c:c9:84:4c:ac:f2:ea:8a:19:dd:df:16:57:5d:56: 31:2f:c6:4f:42:3e:8e:37:c3:a6:12:5f:03:c9:8c: 41:0c:14:25:52:3a:9d:f8:0f:7c:f3:64:66:79:5c: e6:40:92:56:e5:99:ed:23:44:02:a6:c4:2c:fe:f3: 5a:66:ef:29:4c:45:eb:a7:7a:8f:ce:7f:e0:e0:78: 18:da:5d:15:64:20:de:c0:15:af:65:ac:84:a5:9c: 9f:15:4f:b8:17:7f:8f:81:57:8a:48:bb:6c:06:90: 15:f1:24:6c:27:66:0b:0a:51:54:4c:3f:01:83:34: 63:e7:c7:f4:50:50:29:60:50:51:08:94:1c:65:f9: 23:c8:2c:2d:11:64:22:54:d4:cf:3a:e0:1f:0f:73: 1c:76:aa:8a:a2:88:ed:e8:ec:11:88:32:96:0f:ac: 0f:bf:33:2d:d2:3d:c7:ae:3a:eb:d2:1d:6a:e1:e3: 56:94:f1:5b:de:41:f1:53:15:4b:3a:27:60:24:dc: 80:0c:4e:9d:bf:a8:7e:39:3e:48:b7:47:9d:d3:f6: 94:0b:c2:52:ae:db:87:db:5c:94:5d:95:08:51:ef: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:83:15:28:0D:26:83:B2:BB:97:D9:0F:14:9B:45:96:90:59:6B:B4 X509v3 Authority Key Identifier: keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:32:c5:66:36:4a:47:db:dd:67:86:16:d8:3a:61:97:60:1b: ea:1c:f7:aa:2c:66:ff:62:d3:44:50:d9:6d:95:0d:99:52:a4: 18:ce:23:df:98:e8:7e:4c:b7:1e:51:2f:b7:86:4f:83:a6:b2: bb:45:53:dc:72:e8:3d:7c:26:3e:c5:2e:f9:84:c4:08:93:f2: 56:48:b2:3e:b6:44:aa:f5:d9:b4:61:e6:2e:97:f2:0f:c2:d0: 7e:36:30:a1:92:02:dd:76:34:c3:7c:9d:aa:cd:ba:c8:08:fd: b1:6d:44:6a:16:09:e3:11:35:a7:05:41:09:fa:7b:aa:0e:25: f0:e0:8f:9c:ce:af:52:4f:31:8e:7b:67:f7:69:81:97:82:65: d0:82:08:87:1c:27:5b:96:3b:72:83:97:ca:7c:ac:48:32:28: 85:d2:b3:2f:f9:f4:4b:53:b9:e4:a0:f3:d5:9b:74:c0:0e:e2: 6a:cf:53:64:06:db:bb:ac:86:00:cf:e4:92:16:19:ed:47:27: c9:5b:ca:84:fb:65:6d:35:ab:f8:a9:ad:1b:2e:14:9e:66:8b: f2:cc:cf:fd:61:da:f8:84:b1:49:85:b8:ae:30:7b:f0:a6:b2: 4b:b2:3c:0c:e8:a3:49:52:d2:9d:d3:96:06:d4:ab:31:5f:2c: 94:d5:16:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/lH6ivcCsf/kZ0TkCMxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YmM1OWY4Zjc1NDRmMWVhNWJhNWMxOGIzOGUyNTczNTE3 YzkxMzIwHhcNMjUxMjIwMDkwMTQzWhcNMjUxMjIxMDkwMTQzWjAzMTEwLwYDVQQD EyhlNjgzMTUyODBkMjY4M2IyYmI5N2Q5MGYxNDliNDU5NjkwNTk2YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9dmEgyBMzUNfWwk1kTwOeWyTfhd hBGRQfWF8+2MyYRMrPLqihnd3xZXXVYxL8ZPQj6ON8OmEl8DyYxBDBQlUjqd+A98 82RmeVzmQJJW5ZntI0QCpsQs/vNaZu8pTEXrp3qPzn/g4HgY2l0VZCDewBWvZayE pZyfFU+4F3+PgVeKSLtsBpAV8SRsJ2YLClFUTD8BgzRj58f0UFApYFBRCJQcZfkj yCwtEWQiVNTPOuAfD3McdqqKoojt6OwRiDKWD6wPvzMt0j3Hrjrr0h1q4eNWlPFb 3kHxUxVLOidgJNyADE6dv6h+OT5It0ed0/aUC8JSrtuH21yUXZUIUe8w9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaDFSgNJoOyu5fZDxSbRZaQWWu0MB8GA1UdIwQY MBaAFMa8Wfj3VE8epbpcGLOOJXNRfJEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAt M2NhNDA5YjUzMTFmLzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAtM2NhNDA5YjUzMTFm LzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjLFZjZK R9vdZ4YW2Dphl2Ab6hz3qixm/2LTRFDZbZUNmVKkGM4j35jofky3HlEvt4ZPg6ay u0VT3HLoPXwmPsUu+YTECJPyVkiyPrZEqvXZtGHmLpfyD8LQfjYwoZIC3XY0w3yd qs26yAj9sW1EahYJ4xE1pwVBCfp7qg4l8OCPnM6vUk8xjntn92mBl4Jl0IIIhxwn W5Y7coOXynysSDIohdKzL/n0S1O55KDz1Zt0wA7ias9TZAbbu6yGAM/kkhYZ7Ucn yVvKhPtlbTWr+KmtGy4UnmaL8szP/WHa+ISxSYW4rjB78KayS7I8DOijSVLSndOW BtSrMV8slNUWyA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:28 2025 by rpki-client