This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json) Hash identifier: xC/2BYe2Ak12Tf6e2VXo7k8kgwZz4eWRUPqQJal91RA= Subject key identifier: 30:69:E9:3E:96:13:71:28:E0:7D:FD:08:71:07:3E:5E:BA:A1:7E:DD Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503 Certificate serial: 019B24E3FB0D3F55F6BF08EDE18221CDF72D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft Manifest number: 0F38 Signing time: Tue 16 Dec 2025 02:01:19 +0000 Manifest this update: Tue 16 Dec 2025 02:01:19 +0000 Manifest next update: Wed 17 Dec 2025 02:01:19 +0000 Files and hashes: 1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=) 2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=) 3: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: NzyD6Qx/TBITE93kUfVEX0RURWglt7Zpjgb2dxAwJTQ=) 4: Z81p6D_dRIvEDGrIYx1WijPMCWI.roa (hash: B0c4eefCOibc6e3+7zDAkWkLSK4xkeiQAdhY0t08sgw=) 5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:fb:0d:3f:55:f6:bf:08:ed:e1:82:21:cd:f7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503 Validity Not Before: Dec 16 02:01:19 2025 GMT Not After : Dec 17 02:01:19 2025 GMT Subject: CN=3069e93e96137128e07dfd0871073e5ebaa17edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:3e:ba:f5:9e:7f:68:64:24:97:c3:96:14: 72:69:e6:9c:eb:8c:2b:ba:32:09:7d:5c:cf:70:f7: 77:e3:0f:38:d6:eb:11:fc:0c:d4:64:fc:fc:c1:23: b1:ec:44:15:5d:61:a4:4a:31:c3:ab:87:67:b2:3d: 4e:a1:b9:12:97:03:f8:89:fd:7a:19:bf:a4:d1:22: 87:b0:fe:80:9d:fc:bf:5d:89:98:6f:71:c1:8a:d1: a2:19:2f:5b:48:30:3b:77:a5:1d:14:fe:4e:9c:74: 66:da:46:26:0f:6f:d4:1e:4f:97:0e:59:24:2e:45: b0:f4:e7:1a:65:f5:93:08:99:91:8f:6d:83:69:c4: ce:ee:f5:14:f6:f7:3b:01:6c:6d:d2:45:0a:9c:07: 88:1b:b2:6e:4d:48:dc:04:66:9c:84:fe:b1:da:97: b1:60:e1:55:3e:b7:9c:e0:9b:a1:8c:36:6f:b5:ba: 85:ae:d4:4f:9b:fb:28:4b:ce:ce:d4:27:74:55:a3: e3:41:aa:09:4c:26:de:3d:3f:9d:e1:ca:2d:cd:7b: ba:37:3a:ad:c2:81:19:11:0a:c4:92:db:0a:97:12: 09:cd:a5:38:8c:b5:73:a8:81:66:d0:56:48:4e:a1: 70:7c:ab:1c:bb:64:93:81:db:1c:ce:4f:d6:cf:95: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:69:E9:3E:96:13:71:28:E0:7D:FD:08:71:07:3E:5E:BA:A1:7E:DD X509v3 Authority Key Identifier: keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d8:f0:9d:a2:87:b8:9b:56:3e:cd:a8:7d:6c:af:f9:ea:d0: ce:df:5a:5e:c3:f0:6b:85:2a:4a:09:64:95:3a:15:ae:59:af: 10:16:48:91:92:7d:77:69:7e:d6:c7:55:b4:89:5e:4c:d9:14: be:01:62:cd:35:64:08:21:e1:b3:56:42:55:97:9f:21:20:55: 42:7b:cb:71:9d:10:bd:fb:b7:26:24:a8:9d:7f:e5:16:36:97: 4d:67:37:ff:94:c3:42:a4:18:34:b0:80:5d:ac:86:03:ba:1a: 5d:2d:07:d2:ac:27:cc:c3:93:45:2a:ed:47:05:fe:e1:1f:55: 38:05:83:69:57:47:94:dd:10:9f:c7:19:f5:c7:70:8e:23:6b: 3e:12:e0:22:86:9b:65:09:8b:55:5b:5b:40:b8:59:6d:37:86: b3:da:f7:0b:b9:6a:f0:0f:74:2b:f6:9b:a6:ac:d4:e9:c2:91: ac:a0:43:87:ec:7c:b6:86:2f:a1:70:ce:4e:81:05:ae:a6:86: 24:fe:d7:25:5a:db:6a:ef:52:bb:5f:d8:22:4e:1f:b9:2e:19: 52:b9:0b:57:38:5d:9b:ba:57:2d:3c:fd:d3:2e:9f:31:29:54: c3:c0:5f:46:e6:84:99:67:18:80:d9:ee:0c:f3:33:83:0b:c6: 6a:76:79:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4/sNP1X2vwjt4YIhzfctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx OTM1MDMwHhcNMjUxMjE2MDIwMTE5WhcNMjUxMjE3MDIwMTE5WjAzMTEwLwYDVQQD EygzMDY5ZTkzZTk2MTM3MTI4ZTA3ZGZkMDg3MTA3M2U1ZWJhYTE3ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRM+uvWef2hkJJfDlhRyaeac64wr ujIJfVzPcPd34w841usR/AzUZPz8wSOx7EQVXWGkSjHDq4dnsj1OobkSlwP4if16 Gb+k0SKHsP6Anfy/XYmYb3HBitGiGS9bSDA7d6UdFP5OnHRm2kYmD2/UHk+XDlkk LkWw9OcaZfWTCJmRj22DacTO7vUU9vc7AWxt0kUKnAeIG7JuTUjcBGachP6x2pex YOFVPrec4JuhjDZvtbqFrtRPm/soS87O1Cd0VaPjQaoJTCbePT+d4cotzXu6Nzqt woEZEQrEktsKlxIJzaU4jLVzqIFm0FZITqFwfKscu2STgdsczk/Wz5USIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBp6T6WE3Eo4H39CHEHPl66oX7dMB8GA1UdIwQY MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt YzM2ZDFjNDYwZTJmLzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtjwnaKH uJtWPs2ofWyv+erQzt9aXsPwa4UqSglklToVrlmvEBZIkZJ9d2l+1sdVtIleTNkU vgFizTVkCCHhs1ZCVZefISBVQnvLcZ0Qvfu3JiSonX/lFjaXTWc3/5TDQqQYNLCA XayGA7oaXS0H0qwnzMOTRSrtRwX+4R9VOAWDaVdHlN0Qn8cZ9cdwjiNrPhLgIoab ZQmLVVtbQLhZbTeGs9r3C7lq8A90K/abpqzU6cKRrKBDh+x8toYvoXDOToEFrqaG JP7XJVrbau9Su1/YIk4fuS4ZUrkLVzhdm7pXLTz90y6fMSlUw8BfRuaEmWcYgNnu DPMzgwvGanZ5pQ== -----END CERTIFICATE-----Generated at Tue Dec 16 03:34:59 2025 by rpki-client