This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: LeRDHxb+g+wScX3LsllOWONgkkswW9AoeZs0x548mg8= Subject key identifier: 21:A0:8D:E0:1C:AD:98:EB:8F:9D:09:C6:D0:3F:27:69:D1:96:33:3D Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019B3D232C8EF71066A2583A467AE8E1246A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 166A Signing time: Sat 20 Dec 2025 19:01:13 +0000 Manifest this update: Sat 20 Dec 2025 19:01:13 +0000 Manifest next update: Sun 21 Dec 2025 19:01:13 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: O9epNS0NrOI-bOL5KKfYRX4De8A.roa (hash: G611SXA/jC4vDIlVwFGLwWk81ZAiML9tAZ+IqKvstVo=) 6: VKWObPFDBc-jGCeYU56YA-6t1Cw.roa (hash: KPhyop9Bdu13gG3nAoBktF8fNM6NO652iDQfc8w2K04=) 7: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: mzDTmILECrg6ef87lFPTq6Y/XUsA0W8srjHWAHGunvM=) 9: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 10: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:2c:8e:f7:10:66:a2:58:3a:46:7a:e8:e1:24:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Dec 20 19:01:13 2025 GMT Not After : Dec 21 19:01:13 2025 GMT Subject: CN=21a08de01cad98eb8f9d09c6d03f2769d196333d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:81:9e:c6:82:04:12:43:5c:09:60:8d:7a: df:f3:7b:4c:6f:2e:ca:d5:80:ed:d2:ca:f1:71:dc: de:0b:8d:8f:75:33:c3:01:ee:b8:b7:93:b1:96:99: b5:07:cb:c7:20:f9:55:6a:27:40:14:e7:92:f5:4c: 4a:ec:ac:5f:98:7d:9e:9a:53:b7:3f:95:99:6a:f4: 29:3c:55:9b:47:69:09:b6:73:4e:49:49:fd:43:d0: d6:9c:5d:c8:6a:55:d6:2a:2d:df:b0:2d:05:14:2c: 07:ba:f4:a9:32:9c:58:44:87:cc:17:d1:79:70:88: 5d:a0:a6:17:d6:b8:53:cb:de:6e:91:a2:91:7a:94: 0e:df:af:c3:f2:22:cf:0f:67:be:65:db:5d:49:52: 36:3d:51:27:53:bb:e6:0d:1f:19:41:f7:09:37:f3: bd:a7:ac:ba:00:ed:ef:16:c5:21:73:41:4c:66:dc: 64:cc:8f:00:68:fb:f6:21:c9:9b:14:c7:f1:e9:8f: 61:94:22:af:bd:35:1a:28:b1:f9:7d:4c:38:c3:5b: 0c:75:20:c9:f5:e3:ac:09:e2:20:b5:98:56:d6:da: 53:bd:08:35:2b:e1:14:5d:47:ec:10:55:04:cf:97: f4:fa:f4:65:ca:3e:67:1c:43:7d:23:80:bf:8c:cc: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A0:8D:E0:1C:AD:98:EB:8F:9D:09:C6:D0:3F:27:69:D1:96:33:3D X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:70:be:46:63:e8:b8:bd:af:28:a2:1e:d0:c7:73:28:a7:52: a1:4e:ca:46:70:18:23:98:0d:bd:c2:59:5c:71:c2:e2:02:3b: 78:12:d0:7f:e0:13:b5:b9:e4:57:00:47:31:96:c9:af:a4:fa: 91:16:8f:50:a8:fd:11:e1:5a:55:6f:11:19:78:aa:07:3a:b7: 03:3e:52:26:f7:5a:d4:e2:06:36:02:ec:df:6f:e1:0c:01:bb: c0:99:15:da:b0:52:e2:93:dd:95:90:ec:c9:94:60:64:0c:8b: 41:75:e0:e7:c3:62:a4:c7:a2:1c:9f:35:00:cc:ac:a2:20:c0: 5f:e5:1c:eb:f8:7c:a2:6e:4b:d3:41:85:88:06:58:04:15:d6: 3a:ed:ac:00:d3:80:3c:29:58:60:ea:c2:0a:c9:03:67:0b:3d: c1:c7:d5:8e:51:9f:64:c1:9e:a1:f0:be:b9:ee:d5:f7:63:98: c1:1b:a1:da:16:e4:4f:04:77:45:b3:0b:ec:d4:ba:de:02:c7: d4:dc:3c:ff:c8:1d:b4:0d:fe:5c:63:bc:80:57:78:31:a2:c9: 2a:82:64:2f:46:6d:89:7c:c8:c8:03:85:0c:25:42:fb:bd:5e: 06:6b:71:87:54:d7:9d:6d:f8:46:1e:af:4b:28:ff:c1:72:c4: ee:4e:43:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IyyO9xBmolg6Rnro4SRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUxMjIwMTkwMTEzWhcNMjUxMjIxMTkwMTEzWjAzMTEwLwYDVQQD EygyMWEwOGRlMDFjYWQ5OGViOGY5ZDA5YzZkMDNmMjc2OWQxOTYzMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFqBnsaCBBJDXAlgjXrf83tMby7K 1YDt0srxcdzeC42PdTPDAe64t5Oxlpm1B8vHIPlVaidAFOeS9UxK7KxfmH2emlO3 P5WZavQpPFWbR2kJtnNOSUn9Q9DWnF3IalXWKi3fsC0FFCwHuvSpMpxYRIfMF9F5 cIhdoKYX1rhTy95ukaKRepQO36/D8iLPD2e+ZdtdSVI2PVEnU7vmDR8ZQfcJN/O9 p6y6AO3vFsUhc0FMZtxkzI8AaPv2IcmbFMfx6Y9hlCKvvTUaKLH5fUw4w1sMdSDJ 9eOsCeIgtZhW1tpTvQg1K+EUXUfsEFUEz5f0+vRlyj5nHEN9I4C/jMwClwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGgjeAcrZjrj50JxtA/J2nRljM9MB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXC+RmPo uL2vKKIe0MdzKKdSoU7KRnAYI5gNvcJZXHHC4gI7eBLQf+ATtbnkVwBHMZbJr6T6 kRaPUKj9EeFaVW8RGXiqBzq3Az5SJvda1OIGNgLs32/hDAG7wJkV2rBS4pPdlZDs yZRgZAyLQXXg58NipMeiHJ81AMysoiDAX+Uc6/h8om5L00GFiAZYBBXWOu2sANOA PClYYOrCCskDZws9wcfVjlGfZMGeofC+ue7V92OYwRuh2hbkTwR3RbML7NS63gLH 1Nw8/8gdtA3+XGO8gFd4MaLJKoJkL0ZtiXzIyAOFDCVC+71eBmtxh1TXnW34Rh6v Syj/wXLE7k5DFA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:27:53 2025 by rpki-client