This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json) Hash identifier: 4+/vEnuSQ2oZYeEKk71htGvcotdQ27ACbQtweV4Nmxo= Subject key identifier: 3E:5A:32:C6:DD:C2:FA:53:65:2D:E0:54:0F:04:24:13:26:44:E2:7C Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Certificate serial: 019B0DB752FAEF16E36A33FAAC246E65F55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft Manifest number: 177D Signing time: Thu 11 Dec 2025 14:01:16 +0000 Manifest this update: Thu 11 Dec 2025 14:01:16 +0000 Manifest next update: Fri 12 Dec 2025 14:01:16 +0000 Files and hashes: 1: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (hash: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=) 2: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (hash: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=) 3: kJyTZGrKIJP-guAGkQfidQemnN0.roa (hash: 5VNjlZQ2lTGQgsP/MAa7aAdGIHpHVpDviDdJ3Ul/giI=) 4: oZ13AtjecChXKw5f_3lLaOPw8Ks.roa (hash: /XejTxxPIA/m0yG5qUhn06Ei20l/pmuOP7i6MWx0h1U=) 5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: UcxGtrhWB7NiOT9xuOTyWoKSJPv8aOeuNEQ4dqHeHFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:52:fa:ef:16:e3:6a:33:fa:ac:24:6e:65:f5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05 Validity Not Before: Dec 11 14:01:16 2025 GMT Not After : Dec 12 14:01:16 2025 GMT Subject: CN=3e5a32c6ddc2fa53652de0540f0424132644e27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:c0:e8:3e:ba:04:95:4c:ef:d7:49:a4:b5: 76:30:b5:d6:d9:04:e6:ad:7a:4a:7e:13:c9:d0:03: cc:80:95:a7:2b:34:ab:58:3c:ba:92:2f:bf:ef:b7: 35:80:39:14:8a:20:bc:8e:93:f9:c4:b3:b9:21:62: 69:6d:b7:f0:19:d5:65:d5:98:ab:04:6f:1e:22:71: 2c:8a:de:1c:e3:e1:0a:1d:83:76:85:d0:58:ca:5a: 5c:f9:24:f3:8b:eb:20:05:9c:ed:ca:35:02:20:72: 46:13:c2:22:08:0a:dc:cd:0a:c6:9e:8c:ee:f8:f7: 69:65:25:83:f2:3b:b7:19:1c:1b:06:55:37:a4:d8: c6:7f:19:9e:00:c7:2d:22:12:9e:c6:01:20:b1:78: d6:92:59:1c:2b:78:6e:d1:4d:f8:43:9b:11:fd:de: d3:77:91:32:df:9d:ae:45:84:c1:4c:94:9e:42:eb: 44:b3:b8:91:b7:1e:d1:53:24:68:ac:02:f2:03:f1: 67:1a:d0:28:c4:dd:5b:d0:e3:bf:c0:8b:05:12:62: 91:91:f4:93:96:f0:22:4f:5f:82:64:11:12:f1:6c: 16:64:91:fa:bc:32:98:be:6f:4b:1a:f9:9a:c2:31: ec:2d:ab:1a:af:d5:3a:42:f2:36:63:2f:6c:76:ef: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5A:32:C6:DD:C2:FA:53:65:2D:E0:54:0F:04:24:13:26:44:E2:7C X509v3 Authority Key Identifier: keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:18:0f:9d:f3:e3:83:78:6d:ef:6a:0b:a3:2c:c7:98:36:ba: 05:8c:08:97:80:2c:79:5c:12:b2:2b:5e:36:0c:4d:eb:58:9f: 83:54:ed:c0:18:82:55:89:bf:4d:37:17:01:32:61:6d:b1:a0: 55:c2:18:6d:2e:a6:f0:c2:36:22:35:bf:e8:ea:92:9a:21:bd: 21:2d:bf:e4:b9:5f:f0:4c:a5:79:fa:0a:ea:db:ce:97:37:27: 86:e2:78:f7:ab:7c:78:f5:4c:39:77:eb:79:0b:e0:cc:89:26: cf:4a:bb:07:fb:10:70:24:6a:2b:16:5f:63:9e:d1:e2:7e:d1: 8f:97:dc:f1:3a:9e:f2:35:e4:65:51:69:94:2f:86:18:0c:32: 92:9d:44:eb:2a:2e:b3:64:53:7c:88:5f:24:74:46:e1:2a:de: 5a:02:f0:7b:5b:e8:15:2f:e1:b2:28:0d:3c:cc:d7:51:02:da: f4:04:7d:62:52:e1:ca:9d:09:26:52:d9:0a:38:e5:a4:87:a9: fa:0c:e0:62:b7:fa:0b:bf:f7:c8:3f:d8:96:af:f4:22:1f:da: a7:e1:06:9c:63:1c:ba:89:2b:f9:f5:d8:af:07:56:7b:e3:70: ef:c5:61:36:66:e7:1f:ad:cd:49:8f:07:ff:fa:c3:f4:60:32: 1c:65:0a:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNt1L67xbjajP6rCRuZfVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0 NmVlMDUwHhcNMjUxMjExMTQwMTE2WhcNMjUxMjEyMTQwMTE2WjAzMTEwLwYDVQQD EygzZTVhMzJjNmRkYzJmYTUzNjUyZGUwNTQwZjA0MjQxMzI2NDRlMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqzA6D66BJVM79dJpLV2MLXW2QTm rXpKfhPJ0APMgJWnKzSrWDy6ki+/77c1gDkUiiC8jpP5xLO5IWJpbbfwGdVl1Zir BG8eInEsit4c4+EKHYN2hdBYylpc+STzi+sgBZztyjUCIHJGE8IiCArczQrGnozu +PdpZSWD8ju3GRwbBlU3pNjGfxmeAMctIhKexgEgsXjWklkcK3hu0U34Q5sR/d7T d5Ey352uRYTBTJSeQutEs7iRtx7RUyRorALyA/FnGtAoxN1b0OO/wIsFEmKRkfST lvAiT1+CZBES8WwWZJH6vDKYvm9LGvmawjHsLasar9U6QvI2Yy9sdu9InwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5aMsbdwvpTZS3gVA8EJBMmROJ8MB8GA1UdIwQY MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3 LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxgPnfPj g3ht72oLoyzHmDa6BYwIl4AseVwSsiteNgxN61ifg1TtwBiCVYm/TTcXATJhbbGg VcIYbS6m8MI2IjW/6OqSmiG9IS2/5Llf8EylefoK6tvOlzcnhuJ496t8ePVMOXfr eQvgzIkmz0q7B/sQcCRqKxZfY57R4n7Rj5fc8Tqe8jXkZVFplC+GGAwykp1E6you s2RTfIhfJHRG4SreWgLwe1voFS/hsigNPMzXUQLa9AR9YlLhyp0JJlLZCjjlpIep +gzgYrf6C7/3yD/Ylq/0Ih/ap+EGnGMcuokr+fXYrwdWe+Nw78VhNmbnH63NSY8H //rD9GAyHGUKjw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:39 2025 by rpki-client