This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft File: xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft (raw, json) Hash identifier: 3jaG1KKjM35/ZH6PlIka7Z/GzpjgKF+yveRuSGLyWbU= Subject key identifier: 21:20:28:EE:20:A7:87:B0:14:74:BE:61:52:7A:78:AE:D0:C0:28:86 Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44 Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044 Certificate serial: 019B4B150ED8BCA3537756E684D7533D8793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 12:00:29 +0000 Manifest this update: Tue 23 Dec 2025 12:00:29 +0000 Manifest next update: Wed 24 Dec 2025 12:00:29 +0000 Files and hashes: 1: nEhO-4IOflDc16smasjo46yXDrU.roa (hash: TGudjeK9/qruL2a7Ja97DNoAnaGXmeBxOzedTAd1+AI=) 2: xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl (hash: UxivYhfuHEvLwyPIhnDz5MO0Wk/i2fSkw85QInxiRe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:0e:d8:bc:a3:53:77:56:e6:84:d7:53:3d:87:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044 Validity Not Before: Dec 23 12:00:29 2025 GMT Not After : Dec 24 12:00:29 2025 GMT Subject: CN=212028ee20a787b01474be61527a78aed0c02886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:b3:2c:25:0c:1b:7d:54:39:94:65:f3:3b: 07:12:4e:56:28:5d:7b:2d:55:49:e3:b7:07:5e:77: 53:3d:8c:13:bf:3d:21:3d:3e:97:04:9f:29:3c:9e: dc:6b:2a:36:fd:e3:b5:7e:ec:d2:99:bf:21:ef:57: 52:bd:75:7b:9c:8f:1a:07:be:64:36:0b:96:1e:aa: df:8d:7b:53:c4:13:e1:17:fc:23:1b:72:33:80:f2: 2b:5a:f1:ac:ff:7e:5b:6e:46:12:bb:55:0d:c6:da: ac:90:70:24:dd:43:0c:c6:df:fc:80:ab:67:42:be: 14:92:73:20:03:07:d1:6e:6a:b7:9a:44:5c:59:86: 4e:15:2d:28:ff:bd:b0:e3:8e:02:5a:e3:f1:f1:6f: c8:2e:9d:a4:7b:fe:87:e2:fa:b3:d0:d5:18:f8:e1: 8b:35:cf:b3:52:f6:82:4f:eb:f0:46:41:e7:f0:df: 61:da:45:15:0d:95:92:40:6d:9d:f9:b4:11:7c:ce: d3:12:3a:16:81:f4:ac:c6:0c:04:dc:66:35:73:b5: 6f:a0:bb:50:93:0c:c3:6d:fa:8a:8f:ed:1e:20:c1: 89:18:17:52:ec:84:aa:e1:7e:e1:e7:df:64:32:ce: fe:0f:d3:33:85:6e:de:ac:3f:a3:49:96:37:93:7d: b5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:20:28:EE:20:A7:87:B0:14:74:BE:61:52:7A:78:AE:D0:C0:28:86 X509v3 Authority Key Identifier: keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ce:09:0e:06:b7:2f:29:d8:1e:16:90:f5:6a:9b:75:74:90: cd:06:e0:f2:e3:52:37:ee:5a:9a:30:1b:40:3e:93:7f:4d:32: 99:40:89:bd:8a:6b:73:8c:3f:f6:05:9d:90:3f:73:e5:88:bf: 48:33:58:79:00:48:24:64:6c:33:06:8d:ef:87:fc:e4:ce:1e: 43:9d:7f:fd:86:6d:94:e0:86:2c:35:a6:04:f8:3e:7d:71:ef: 1d:dd:fc:66:90:64:5c:1c:ce:4c:72:19:48:8d:52:39:23:c9: 81:f4:69:6d:a4:dc:cc:23:67:c6:f2:27:58:9e:2f:9e:69:5c: 7a:ed:8b:35:70:4f:cc:fe:5b:b7:7f:56:50:cd:c6:f4:be:37: 0b:2e:b6:d1:77:c5:38:36:96:a7:c7:fd:1d:ec:71:75:e5:17: 75:e2:48:2e:ac:86:9c:3a:12:8e:5c:46:54:30:4a:ee:e8:60: 7b:33:46:81:28:60:65:7d:80:66:74:a6:e8:59:cc:76:9b:e8: f6:5f:10:5b:cf:4a:38:60:b3:67:d5:ee:bd:d2:c2:23:30:a2: e8:fb:55:50:6b:94:2f:1c:a3:fb:a8:a1:6a:9e:b3:13:11:20: d0:ec:37:18:b7:12:fc:36:dd:74:65:97:ff:84:fd:b9:94:b3: e2:d5:60:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFQ7YvKNTd1bmhNdTPYeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZmY5MzUwNTdjM2JkYmFkYmRmNDlmMzQzNTYyYzVlMzAw MTYwNDQwHhcNMjUxMjIzMTIwMDI5WhcNMjUxMjI0MTIwMDI5WjAzMTEwLwYDVQQD EygyMTIwMjhlZTIwYTc4N2IwMTQ3NGJlNjE1MjdhNzhhZWQwYzAyODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs6zLCUMG31UOZRl8zsHEk5WKF17 LVVJ47cHXndTPYwTvz0hPT6XBJ8pPJ7cayo2/eO1fuzSmb8h71dSvXV7nI8aB75k NguWHqrfjXtTxBPhF/wjG3IzgPIrWvGs/35bbkYSu1UNxtqskHAk3UMMxt/8gKtn Qr4UknMgAwfRbmq3mkRcWYZOFS0o/72w444CWuPx8W/ILp2ke/6H4vqz0NUY+OGL Nc+zUvaCT+vwRkHn8N9h2kUVDZWSQG2d+bQRfM7TEjoWgfSsxgwE3GY1c7VvoLtQ kwzDbfqKj+0eIMGJGBdS7ISq4X7h599kMs7+D9MzhW7erD+jSZY3k321nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEgKO4gp4ewFHS+YVJ6eK7QwCiGMB8GA1UdIwQY MBaAFMT/k1BXw726299J80NWLF4wAWBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yYjA1OWEtMzI1ZC00Mzg1LTgxMWYt MTdlMWEyNTY5NTY4LzEveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yYjA1OWEtMzI1ZC00Mzg1LTgxMWYtMTdlMWEyNTY5NTY4 LzEveFAtVFVGZkR2YnJiMzBuelExWXNYakFCWUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW84JDga3 LynYHhaQ9WqbdXSQzQbg8uNSN+5amjAbQD6Tf00ymUCJvYprc4w/9gWdkD9z5Yi/ SDNYeQBIJGRsMwaN74f85M4eQ51//YZtlOCGLDWmBPg+fXHvHd38ZpBkXBzOTHIZ SI1SOSPJgfRpbaTczCNnxvInWJ4vnmlceu2LNXBPzP5bt39WUM3G9L43Cy620XfF ODaWp8f9HexxdeUXdeJILqyGnDoSjlxGVDBK7uhgezNGgShgZX2AZnSm6FnMdpvo 9l8QW89KOGCzZ9XuvdLCIzCi6PtVUGuULxyj+6ihap6zExEg0Ow3GLcS/DbddGWX /4T9uZSz4tVgrw== -----END CERTIFICATE-----Generated at Tue Dec 23 16:24:08 2025 by rpki-client