This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json) Hash identifier: mPkj6ZhPlZbCFm6hrti3bI7Sb+6kjuL+vIL+I57TsTE= Subject key identifier: C4:42:6E:D7:10:CC:6A:F3:20:EC:7D:70:29:62:B9:6C:12:17:C5:0E Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Certificate serial: 019B37FCECAECDD75647529FA1A5B0A45B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft Manifest number: 0AB4 Signing time: Fri 19 Dec 2025 19:01:21 +0000 Manifest this update: Fri 19 Dec 2025 19:01:21 +0000 Manifest next update: Sat 20 Dec 2025 19:01:21 +0000 Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=) 2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: mn5H5KxqX2jp+MqdxOn3M0/YaPPZ9wFHJNnqvdCYV34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:ec:ae:cd:d7:56:47:52:9f:a1:a5:b0:a4:5b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Validity Not Before: Dec 19 19:01:21 2025 GMT Not After : Dec 20 19:01:21 2025 GMT Subject: CN=c4426ed710cc6af320ec7d702962b96c1217c50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:dd:52:3e:13:8f:94:4b:64:e2:e4:8f:05: 06:2b:14:08:1f:62:63:b9:6b:78:fd:63:01:29:4b: 7d:7e:f1:a3:5c:31:68:8d:45:b5:62:e4:71:9b:17: b8:0e:8f:87:4e:db:cb:dd:e9:18:10:72:f7:ef:19: aa:bd:c8:21:aa:4b:f6:81:5e:62:86:28:4b:b6:21: e7:4f:2b:4e:fc:32:2d:01:30:c7:63:a9:de:2e:f0: 9d:88:be:f2:99:ab:4c:3a:cf:2f:22:34:e6:46:b0: 5b:96:88:75:d5:f8:26:b9:0b:e4:da:89:c6:35:b7: 58:52:7f:d1:14:a5:5d:8e:0c:6f:ab:4a:5a:da:11: 2a:d4:6f:37:b1:22:e5:aa:ec:28:f6:3f:06:a6:21: 31:9b:f0:fa:00:85:de:5f:4d:4a:ab:32:f8:dc:f6: 38:17:56:ce:a6:48:c2:2e:d0:b4:0d:af:48:66:8e: ff:a1:1f:f0:04:59:70:27:83:ed:b1:a7:15:01:99: 5d:f5:1b:bd:fd:08:a3:b4:c3:5d:1c:06:89:2c:c4: b3:f4:ef:77:23:7b:55:57:23:29:35:65:74:83:68: 8b:9c:ad:64:bb:4f:df:f6:90:6f:ba:2a:4d:83:80: c8:cf:0a:e2:bb:df:40:8f:de:02:0d:d8:77:57:9a: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:42:6E:D7:10:CC:6A:F3:20:EC:7D:70:29:62:B9:6C:12:17:C5:0E X509v3 Authority Key Identifier: keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3c:16:bb:ad:1d:4c:a6:03:92:4d:86:37:d4:89:86:3e:84: 11:2a:e3:e7:b4:1c:ad:44:ac:70:ee:be:cd:73:ef:c9:99:66: 6c:c6:ad:8b:d3:55:e1:15:04:9a:45:01:d7:97:37:0c:04:b5: 32:7a:88:f8:cb:6d:2d:7b:60:df:70:74:3a:4b:89:dc:32:3a: 38:f3:bc:a4:ac:8b:6f:cc:17:d9:fe:b7:ba:40:ff:bb:1e:01: 70:a0:79:4c:d3:ed:63:ec:1a:c9:ac:a8:61:ba:f2:39:09:79: 46:f6:26:1e:ee:58:e1:5b:f7:09:b4:41:0f:42:83:9f:dc:b5: 2d:d2:be:ee:7f:70:ee:6c:31:d7:a3:a0:34:77:0e:50:93:d9: b1:74:38:2a:38:67:a7:69:62:6b:c8:c5:9f:ef:17:26:00:c8: 98:b4:de:7d:af:de:7a:52:1a:f7:69:d6:8f:ab:2a:c9:f8:0a: 8f:f1:c1:8b:c9:28:21:0c:8f:e1:62:88:89:14:b8:42:ca:b7: 43:fb:99:61:c7:6c:b4:7a:f1:c8:74:92:51:7a:bd:02:51:c9: 1e:7e:26:93:8e:51:a5:db:4b:41:09:99:14:28:52:77:2d:c1: 0d:e3:83:ae:0c:d3:54:75:36:17:0a:ca:8f:0f:f5:37:6e:38: f1:66:56:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/OyuzddWR1KfoaWwpFt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3 MDFhNDgwHhcNMjUxMjE5MTkwMTIxWhcNMjUxMjIwMTkwMTIxWjAzMTEwLwYDVQQD EyhjNDQyNmVkNzEwY2M2YWYzMjBlYzdkNzAyOTYyYjk2YzEyMTdjNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJLdUj4Tj5RLZOLkjwUGKxQIH2Jj uWt4/WMBKUt9fvGjXDFojUW1YuRxmxe4Do+HTtvL3ekYEHL37xmqvcghqkv2gV5i hihLtiHnTytO/DItATDHY6neLvCdiL7ymatMOs8vIjTmRrBbloh11fgmuQvk2onG NbdYUn/RFKVdjgxvq0pa2hEq1G83sSLlquwo9j8GpiExm/D6AIXeX01KqzL43PY4 F1bOpkjCLtC0Da9IZo7/oR/wBFlwJ4PtsacVAZld9Ru9/QijtMNdHAaJLMSz9O93 I3tVVyMpNWV0g2iLnK1ku0/f9pBvuipNg4DIzwriu99Aj94CDdh3V5oRMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRCbtcQzGrzIOx9cCliuWwSF8UOMB8GA1UdIwQY MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5 LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjwWu60d TKYDkk2GN9SJhj6EESrj57QcrUSscO6+zXPvyZlmbMati9NV4RUEmkUB15c3DAS1 MnqI+MttLXtg33B0OkuJ3DI6OPO8pKyLb8wX2f63ukD/ux4BcKB5TNPtY+wayayo YbryOQl5RvYmHu5Y4Vv3CbRBD0KDn9y1LdK+7n9w7mwx16OgNHcOUJPZsXQ4Kjhn p2lia8jFn+8XJgDImLTefa/eelIa92nWj6sqyfgKj/HBi8koIQyP4WKIiRS4Qsq3 Q/uZYcdstHrxyHSSUXq9AlHJHn4mk45RpdtLQQmZFChSdy3BDeODrgzTVHU2FwrK jw/1N2448WZWoA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:16:49 2025 by rpki-client