This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft File: x0HESpzVjhJWkGY32TXDGQ9_6xo.mft (raw, json) Hash identifier: 4FjH52/P8ElKz7G9UIXOI1cBp4w+8eFLpod7IaECoZQ= Subject key identifier: 1C:20:50:07:76:61:50:B5:05:AA:43:8E:71:B6:7D:03:23:28:2D:1B Authority key identifier: C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A Certificate issuer: /CN=c741c44a9cd58e1256906637d935c3190f7feb1a Certificate serial: 019B5AF63B503FC06093468ECEA61B1988AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft Manifest number: 1539 Signing time: Fri 26 Dec 2025 14:00:45 +0000 Manifest this update: Fri 26 Dec 2025 14:00:45 +0000 Manifest next update: Sat 27 Dec 2025 14:00:45 +0000 Files and hashes: 1: qptSZ2XpOAOxaz7moTgQi3lsLeM.roa (hash: KtrtO/sBSgHAN1gAhTfDKw+KYUTZI/b5RNJ8EjfK/UU=) 2: x0HESpzVjhJWkGY32TXDGQ9_6xo.crl (hash: /0ImqNqaOtM3VCCuw3S8xYBtWkHjcdJv19IekPxjgA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:3b:50:3f:c0:60:93:46:8e:ce:a6:1b:19:88:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c741c44a9cd58e1256906637d935c3190f7feb1a Validity Not Before: Dec 26 14:00:45 2025 GMT Not After : Dec 27 14:00:45 2025 GMT Subject: CN=1c205007766150b505aa438e71b67d0323282d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:11:dd:4d:21:f1:4b:89:5f:f4:65:31:04: 4b:c5:f5:a4:05:77:58:68:9d:ca:60:a1:5a:a2:44: 6b:c3:08:dc:fc:31:c7:cd:83:de:c7:e6:39:c9:89: 2c:88:28:84:6a:97:38:11:2b:2c:21:a2:d4:41:9a: a4:3f:bf:3a:f0:63:5b:f0:fc:87:45:2d:a9:d3:ce: 97:a9:d1:56:10:dd:de:51:63:18:32:ae:0d:3c:fb: ed:cb:6e:08:a6:c2:ee:a3:65:cb:c9:6e:74:bd:4c: 1c:b2:2c:95:9e:06:a8:17:07:df:bc:80:b4:f0:a4: 71:72:9b:ab:98:a3:96:07:71:76:70:44:35:cd:56: 0c:ee:8f:e3:a2:37:3c:a9:89:06:90:ab:51:c0:db: 6a:9c:40:0a:d1:58:db:9a:50:52:36:35:93:dc:8c: 8b:e5:fa:26:87:f8:33:2a:3d:72:cb:a8:ee:e4:4c: 69:4f:39:2f:9f:50:2d:a2:f1:e9:96:42:24:64:ee: 9d:e5:8c:0e:d6:8b:7c:76:c4:f0:fe:71:e0:b2:5f: b1:d0:d1:db:9d:5c:7b:be:29:d9:f3:3f:ad:6d:2f: cc:60:f3:1f:f0:72:2c:c0:00:8b:c3:c3:d6:14:dc: a3:b3:29:0c:6f:e0:3c:13:fe:6d:9a:4b:b3:30:6f: a9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:20:50:07:76:61:50:B5:05:AA:43:8E:71:B6:7D:03:23:28:2D:1B X509v3 Authority Key Identifier: keyid:C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:56:61:6a:c0:05:64:a0:d5:f1:1d:96:97:d1:a2:1b:8c:26: 21:5d:76:d8:c4:9e:0c:5a:54:4d:af:55:81:4a:95:10:af:fc: 03:b0:ee:b0:c8:77:3c:11:84:47:d3:8b:7e:a3:5c:1f:c4:c4: 8d:75:aa:1b:78:90:81:19:26:79:34:6a:10:76:c8:c8:65:cf: 46:95:8f:82:22:38:2b:12:e9:ab:5c:fe:a2:67:0c:66:ae:47: 59:80:90:bb:65:c7:32:f3:ca:9c:8d:06:df:94:37:34:c5:88: 5d:bf:87:00:15:0d:80:9a:0f:70:39:7a:96:f2:d5:97:9a:df: 36:2a:30:b4:4c:7a:27:dc:df:c3:f6:8a:e4:d8:81:62:3a:c5: 5b:6b:d2:bd:a7:d9:ca:3c:37:6b:7a:47:07:07:87:07:eb:12: bc:86:5e:3f:1c:91:2b:f4:51:1d:fa:02:20:89:98:08:fa:e5: bc:f3:d1:23:8e:b7:c6:76:49:bb:49:47:4a:c8:58:9c:ec:b9: 36:11:fc:25:97:14:55:59:bb:86:01:92:84:6d:40:2f:73:11: 1a:e0:f0:ee:96:42:7e:f5:e3:c0:13:0f:0a:c7:a0:b9:c0:fe: bf:9b:20:13:34:6e:85:e1:7a:82:a3:31:bf:83:c9:4d:cc:da: 4f:dd:23:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9jtQP8Bgk0aOzqYbGYivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NDFjNDRhOWNkNThlMTI1NjkwNjYzN2Q5MzVjMzE5MGY3 ZmViMWEwHhcNMjUxMjI2MTQwMDQ1WhcNMjUxMjI3MTQwMDQ1WjAzMTEwLwYDVQQD EygxYzIwNTAwNzc2NjE1MGI1MDVhYTQzOGU3MWI2N2QwMzIzMjgyZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBsR3U0h8UuJX/RlMQRLxfWkBXdY aJ3KYKFaokRrwwjc/DHHzYPex+Y5yYksiCiEapc4ESssIaLUQZqkP7868GNb8PyH RS2p086XqdFWEN3eUWMYMq4NPPvty24IpsLuo2XLyW50vUwcsiyVngaoFwffvIC0 8KRxcpurmKOWB3F2cEQ1zVYM7o/jojc8qYkGkKtRwNtqnEAK0VjbmlBSNjWT3IyL 5fomh/gzKj1yy6ju5ExpTzkvn1AtovHplkIkZO6d5YwO1ot8dsTw/nHgsl+x0NHb nVx7vinZ8z+tbS/MYPMf8HIswACLw8PWFNyjsykMb+A8E/5tmkuzMG+phQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwgUAd2YVC1BapDjnG2fQMjKC0bMB8GA1UdIwQY MBaAFMdBxEqc1Y4SVpBmN9k1wxkPf+saMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDBIRVNwelZqaEpXa0dZMzJUWERHUTlfNnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xZWJjYjItNGVmMC00MmZmLTgxYjUt OWIxN2RlZjljMjMzLzEveDBIRVNwelZqaEpXa0dZMzJUWERHUTlfNnhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xZWJjYjItNGVmMC00MmZmLTgxYjUtOWIxN2RlZjljMjMz LzEveDBIRVNwelZqaEpXa0dZMzJUWERHUTlfNnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVZhasAF ZKDV8R2Wl9GiG4wmIV122MSeDFpUTa9VgUqVEK/8A7DusMh3PBGER9OLfqNcH8TE jXWqG3iQgRkmeTRqEHbIyGXPRpWPgiI4KxLpq1z+omcMZq5HWYCQu2XHMvPKnI0G 35Q3NMWIXb+HABUNgJoPcDl6lvLVl5rfNiowtEx6J9zfw/aK5NiBYjrFW2vSvafZ yjw3a3pHBweHB+sSvIZePxyRK/RRHfoCIImYCPrlvPPRI463xnZJu0lHSshYnOy5 NhH8JZcUVVm7hgGShG1AL3MRGuDw7pZCfvXjwBMPCsegucD+v5sgEzRuheF6gqMx v4PJTczaT90j1w== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:37 2025 by rpki-client