This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft File: xGn-PYgsk-OOi2ooajF33Bfpmsc.mft (raw, json) Hash identifier: kxrpj7eUyOL9+VHCEQ/Z3eHhzusOszYoENhVHgFQWuA= Subject key identifier: 06:C6:10:F5:98:57:E9:89:D4:90:5E:46:6C:6F:70:E9:94:6E:F5:B8 Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7 Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7 Certificate serial: 019B35322C9922D135C1E4DD799BB8DE3774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 06:00:39 +0000 Manifest this update: Fri 19 Dec 2025 06:00:39 +0000 Manifest next update: Sat 20 Dec 2025 06:00:39 +0000 Files and hashes: 1: EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa (hash: pUBA00I+CQC2RPjmIddeqkkbXGoBJUyoSnMxqvr2Gas=) 2: VWhDL_pbFyyRh5F_p1365369fw8.roa (hash: h0UGnV1yT7TAR4sgEMb7SSbuBaNRRDcOsgJUpZU75gM=) 3: kj9ql8RD4BaCDh5-_M73OwgTWbs.roa (hash: jzhcUtv+MxlXKawfYrhFAm0TnRIuov89FILEyM8GEDQ=) 4: mz6tpSTyWG1tpsywf2xFprKsdgk.roa (hash: TcXisvKqSL089bUIJMzgiUZfK9JnlvU+0pDp8FZCWe4=) 5: xGn-PYgsk-OOi2ooajF33Bfpmsc.crl (hash: HNSE6SC3+0uN1XEAEBD/AeL4QGGdHrF597Jzogwzj4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:2c:99:22:d1:35:c1:e4:dd:79:9b:b8:de:37:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7 Validity Not Before: Dec 19 06:00:39 2025 GMT Not After : Dec 20 06:00:39 2025 GMT Subject: CN=06c610f59857e989d4905e466c6f70e9946ef5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:5a:d8:7f:b1:e6:2a:d2:e2:82:21:cf:40: d4:0d:00:f2:7b:ac:39:bd:96:2b:7a:4d:75:86:ad: 86:41:c2:e5:44:b2:18:a5:e7:b3:c8:07:e7:34:a4: ac:21:24:9b:7a:0c:52:fa:cc:36:66:71:fc:97:72: 50:ba:2d:36:f9:21:ec:9d:4d:25:a0:9e:55:33:08: 3d:96:d0:21:3b:f2:c3:db:cf:7b:df:06:47:ba:26: e9:23:81:dd:b6:46:77:e7:5d:51:ae:86:ad:8a:d7: 7e:ee:75:ff:37:c1:f4:a2:85:6d:18:64:0c:21:3a: 54:4e:2a:40:7f:72:ef:0d:7b:93:2f:23:dc:ea:d0: 32:ff:83:f8:26:66:75:27:1e:03:07:36:60:68:dc: 2b:af:09:30:5d:5e:11:57:fe:03:e0:b4:3b:64:a9: 8f:83:22:f4:6d:d8:7c:93:8f:61:97:c5:b6:9c:94: df:83:bc:87:66:ab:78:91:74:d4:2b:aa:80:9c:86: c3:e8:8a:6e:63:82:78:36:68:3a:44:f1:d6:b9:05: b0:d3:12:7f:14:5d:74:74:66:e5:4a:ca:3e:56:dc: 6b:30:6e:a0:c8:24:bd:59:ae:aa:11:86:53:2b:a6: 6e:11:c8:24:ce:de:ee:40:59:c0:22:00:33:b3:89: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C6:10:F5:98:57:E9:89:D4:90:5E:46:6C:6F:70:E9:94:6E:F5:B8 X509v3 Authority Key Identifier: keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a4:f4:9e:ca:47:89:2d:0e:ad:0a:b6:54:03:fa:43:d3:09: 6a:bd:ab:82:99:51:2e:34:57:27:85:90:eb:c9:b7:0a:50:2c: 12:8d:bf:90:54:30:70:33:35:50:11:66:5c:ea:3f:2b:7b:47: 49:19:a2:4e:fe:3b:23:83:d7:85:83:d1:b3:01:00:05:9e:a2: a2:51:3f:ff:82:fd:39:35:30:9e:e0:ea:a9:54:58:72:83:2b: 6d:fd:45:d1:d3:46:7c:3d:3a:aa:74:b2:37:42:cd:2c:db:e0: db:c8:37:e9:60:cb:a3:b6:cd:b1:b8:08:bf:36:b5:5b:34:5f: db:a2:31:0a:9d:ac:33:98:77:cf:27:00:cd:f5:73:9f:a4:8a: 32:e3:3a:7d:5d:ec:bd:f5:6d:51:dd:3a:04:9a:0f:16:a5:d6: 3e:07:16:05:98:98:b4:b7:78:e4:a0:93:ea:ac:5b:9a:8b:f3: fc:33:f1:27:11:e3:dd:ac:e7:03:39:50:7d:72:24:9a:d4:77: 54:be:40:40:53:a2:bd:87:a3:36:7c:e0:ec:5e:07:a2:7b:ae: 86:f6:8a:51:07:d6:53:b8:d1:04:48:73:9a:d8:c3:a7:bf:29: 55:0c:38:45:91:7d:91:78:89:07:1d:83:93:18:9c:c3:83:77: 37:3e:fe:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MiyZItE1weTdeZu43jd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NjlmZTNkODgyYzkzZTM4ZThiNmEyODZhMzE3N2RjMTdl OTlhYzcwHhcNMjUxMjE5MDYwMDM5WhcNMjUxMjIwMDYwMDM5WjAzMTEwLwYDVQQD EygwNmM2MTBmNTk4NTdlOTg5ZDQ5MDVlNDY2YzZmNzBlOTk0NmVmNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRZa2H+x5irS4oIhz0DUDQDye6w5 vZYrek11hq2GQcLlRLIYpeezyAfnNKSsISSbegxS+sw2ZnH8l3JQui02+SHsnU0l oJ5VMwg9ltAhO/LD28973wZHuibpI4HdtkZ3511Rroatitd+7nX/N8H0ooVtGGQM ITpUTipAf3LvDXuTLyPc6tAy/4P4JmZ1Jx4DBzZgaNwrrwkwXV4RV/4D4LQ7ZKmP gyL0bdh8k49hl8W2nJTfg7yHZqt4kXTUK6qAnIbD6IpuY4J4Nmg6RPHWuQWw0xJ/ FF10dGblSso+VtxrMG6gyCS9Wa6qEYZTK6ZuEcgkzt7uQFnAIgAzs4k/AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbGEPWYV+mJ1JBeRmxvcOmUbvW4MB8GA1UdIwQY MBaAFMRp/j2ILJPjjotqKGoxd9wX6ZrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEduLVBZZ3NrLU9PaTJvb2FqRjMzQmZwbXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jNDc1YWItZmRkNS00OTJmLTgxM2Et NjFkOWEyM2YzNDExLzEveEduLVBZZ3NrLU9PaTJvb2FqRjMzQmZwbXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jNDc1YWItZmRkNS00OTJmLTgxM2EtNjFkOWEyM2YzNDEx LzEveEduLVBZZ3NrLU9PaTJvb2FqRjMzQmZwbXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKT0nspH iS0OrQq2VAP6Q9MJar2rgplRLjRXJ4WQ68m3ClAsEo2/kFQwcDM1UBFmXOo/K3tH SRmiTv47I4PXhYPRswEABZ6iolE//4L9OTUwnuDqqVRYcoMrbf1F0dNGfD06qnSy N0LNLNvg28g36WDLo7bNsbgIvza1WzRf26IxCp2sM5h3zycAzfVzn6SKMuM6fV3s vfVtUd06BJoPFqXWPgcWBZiYtLd45KCT6qxbmovz/DPxJxHj3aznAzlQfXIkmtR3 VL5AQFOivYejNnzg7F4HonuuhvaKUQfWU7jRBEhzmtjDp78pVQw4RZF9kXiJBx2D kxicw4N3Nz7+Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:22:20 2025 by rpki-client