This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json) Hash identifier: BM0aqCA8JEQSYAuivwkuAxhvV+hCBl+ndqLkLro7cDM= Subject key identifier: A7:8C:DF:48:3A:1C:4F:9E:EC:23:D4:87:16:2A:74:82:CE:7D:00:C0 Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Certificate serial: 019B1D2A165FE5FB267CA84F5FD08F18351D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft Manifest number: 177E Signing time: Sun 14 Dec 2025 14:00:56 +0000 Manifest this update: Sun 14 Dec 2025 14:00:56 +0000 Manifest next update: Mon 15 Dec 2025 14:00:56 +0000 Files and hashes: 1: SohsxVb4_Kx1Rps6s6KZFGiAlBo.roa (hash: DpkDv9v2RNex84dWsyB/0UohYl+9Px9l3sMzjXNHWcY=) 2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: ZCzYiftnzrbHTFN/qj7ZRhvZP0qnDPfU9k8Giywddkg=) 3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:16:5f:e5:fb:26:7c:a8:4f:5f:d0:8f:18:35:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Validity Not Before: Dec 14 14:00:56 2025 GMT Not After : Dec 15 14:00:56 2025 GMT Subject: CN=a78cdf483a1c4f9eec23d487162a7482ce7d00c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6b:10:e6:ba:2b:db:72:e0:b6:f2:6d:25:67: b9:0f:3e:16:e3:c5:a4:83:99:9d:37:a2:8c:87:bf: e9:04:5c:4c:e0:e6:c3:98:e1:7f:e3:ae:f4:cb:28: e3:3c:e5:a9:cc:45:8d:11:83:d0:7a:da:1d:52:5e: e4:c5:60:91:ba:52:dd:54:da:77:a4:df:f8:14:da: 87:f4:1a:2b:57:2f:e9:8d:fa:d1:af:1e:bb:44:c8: 93:12:57:88:f7:16:d6:b7:f8:c3:15:17:1e:61:fa: d2:2a:a4:13:f3:f5:0d:d8:58:33:58:e9:44:7a:22: 0e:93:0c:d5:9c:b0:17:9e:2d:b9:16:b9:2e:cd:51: 8d:62:63:7b:af:09:19:ce:64:f2:dc:e3:84:a1:a0: 69:a4:6e:90:1b:4d:15:b8:5a:17:30:5b:e6:36:08: fc:0a:03:14:8c:40:e6:e0:77:6a:fc:91:93:c2:a3: 49:25:2a:b1:83:ed:c6:6d:ed:9a:12:c6:0d:10:41: 73:37:23:bb:fa:b7:cf:16:1c:43:22:e3:ce:cf:42: 1d:ac:2b:d7:a6:34:13:ad:d4:dd:e3:d2:f8:8b:81: 2f:a7:ad:e3:d7:9e:7b:d0:40:63:b6:f5:8b:45:79: 41:66:5f:15:eb:b2:c5:99:e3:26:2d:f6:e3:75:18: c0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8C:DF:48:3A:1C:4F:9E:EC:23:D4:87:16:2A:74:82:CE:7D:00:C0 X509v3 Authority Key Identifier: keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:98:9c:4d:b7:7c:2c:8f:b0:15:64:57:ef:96:27:a3:16:ca: d4:78:ea:85:10:a9:c7:b8:95:d2:0d:62:bb:89:e6:03:ed:10: 4e:54:90:8d:3b:b5:35:c0:f6:1a:fc:a1:00:8b:18:8c:96:21: 3b:be:e9:11:f4:2f:a4:0c:4d:0c:cd:17:d6:70:0a:fa:17:db: fe:62:08:78:54:c1:38:0f:85:13:e7:2f:37:be:25:80:59:ab: d3:f3:36:90:78:90:92:47:d4:16:64:97:f2:20:b6:f4:62:a0: 42:e2:66:31:ae:75:14:cd:93:79:b0:3d:68:7c:b2:93:e3:af: 24:df:12:21:59:a5:28:b6:c5:a5:69:0b:72:29:fa:72:9a:19: 24:2e:73:30:25:6a:ec:f4:22:18:e8:5d:c4:1b:85:58:b4:a2: 11:61:b4:31:0f:dd:38:ee:c9:06:db:c3:8e:db:bd:c5:f9:05: f4:47:a9:03:47:3b:4e:d5:80:53:67:95:b3:39:2d:1f:ff:6a: 00:91:7e:86:ab:a7:af:cb:9f:b8:8c:25:cd:fb:be:8b:2a:d1: 0b:8c:1a:f8:d1:97:07:cc:b6:4f:6a:a1:0e:7c:91:ac:06:b7: 34:1d:b4:de:49:09:af:bd:25:c4:19:0a:c7:9a:62:24:a5:09: 38:6c:f4:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKhZf5fsmfKhPX9CPGDUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl NGRmMDAwHhcNMjUxMjE0MTQwMDU2WhcNMjUxMjE1MTQwMDU2WjAzMTEwLwYDVQQD EyhhNzhjZGY0ODNhMWM0ZjllZWMyM2Q0ODcxNjJhNzQ4MmNlN2QwMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GsQ5ror23LgtvJtJWe5Dz4W48Wk g5mdN6KMh7/pBFxM4ObDmOF/4670yyjjPOWpzEWNEYPQetodUl7kxWCRulLdVNp3 pN/4FNqH9BorVy/pjfrRrx67RMiTEleI9xbWt/jDFRceYfrSKqQT8/UN2FgzWOlE eiIOkwzVnLAXni25FrkuzVGNYmN7rwkZzmTy3OOEoaBppG6QG00VuFoXMFvmNgj8 CgMUjEDm4Hdq/JGTwqNJJSqxg+3Gbe2aEsYNEEFzNyO7+rfPFhxDIuPOz0IdrCvX pjQTrdTd49L4i4Evp63j15570EBjtvWLRXlBZl8V67LFmeMmLfbjdRjAawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeM30g6HE+e7CPUhxYqdILOfQDAMB8GA1UdIwQY MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5 LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpicTbd8 LI+wFWRX75YnoxbK1HjqhRCpx7iV0g1iu4nmA+0QTlSQjTu1NcD2GvyhAIsYjJYh O77pEfQvpAxNDM0X1nAK+hfb/mIIeFTBOA+FE+cvN74lgFmr0/M2kHiQkkfUFmSX 8iC29GKgQuJmMa51FM2TebA9aHyyk+OvJN8SIVmlKLbFpWkLcin6cpoZJC5zMCVq 7PQiGOhdxBuFWLSiEWG0MQ/dOO7JBtvDjtu9xfkF9EepA0c7TtWAU2eVszktH/9q AJF+hqunr8ufuIwlzfu+iyrRC4wa+NGXB8y2T2qhDnyRrAa3NB203kkJr70lxBkK x5piJKUJOGz0Rg== -----END CERTIFICATE-----Generated at Sun Dec 14 22:56:22 2025 by rpki-client