This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json) Hash identifier: g3L2k2z8xLQ2Ycpa/QnJPFPvjRXYyrjrE7/myTZxvL4= Subject key identifier: 46:05:0A:BC:11:56:54:33:A5:DF:31:3C:5E:2A:F7:A9:6C:C7:BF:EF Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Certificate serial: 019B439286C7516E6D4B4621D41382EF9B98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft Manifest number: 0ABA Signing time: Mon 22 Dec 2025 01:00:34 +0000 Manifest this update: Mon 22 Dec 2025 01:00:34 +0000 Manifest next update: Tue 23 Dec 2025 01:00:34 +0000 Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=) 2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: hZe/gPAp7ruuM4RuFxFNBr2Zi2/niEwrQKd2iVebrFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:86:c7:51:6e:6d:4b:46:21:d4:13:82:ef:9b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Validity Not Before: Dec 22 01:00:34 2025 GMT Not After : Dec 23 01:00:34 2025 GMT Subject: CN=46050abc11565433a5df313c5e2af7a96cc7bfef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:25:ca:99:3c:6b:da:14:61:3c:fe:9a:bb:6b: 62:d6:2a:d6:a6:75:c8:25:df:ca:da:52:ed:49:d0: 35:4e:46:a7:5b:e1:ea:92:ea:2b:4f:ff:8c:13:ac: 09:53:0b:34:02:30:dd:a8:a8:48:96:18:25:a3:df: 7b:e5:86:13:f4:21:fa:70:8e:cc:f5:c2:cc:cb:3e: 4b:e4:0e:98:c9:87:53:e0:f6:62:6e:95:c6:22:b0: e8:54:b6:82:01:86:39:8d:98:38:be:b0:2a:64:52: ad:99:59:77:ef:5c:15:53:3c:7a:fe:8e:4c:22:1f: 45:5f:a9:59:0d:7a:d8:09:1d:ab:cb:51:c6:46:42: 8c:87:e4:5b:31:1d:2a:d1:ab:cb:3a:27:b5:ac:5e: 44:84:fc:17:9d:24:3b:75:44:4c:84:ce:1c:f1:c6: 0c:c2:68:71:8e:d4:60:ab:eb:38:be:63:9f:ed:16: 5a:28:a3:49:de:b5:eb:8c:9a:8f:c9:7b:43:1e:59: 0e:85:22:4e:cb:11:4f:d5:ee:71:2d:e3:88:bd:75: e8:b3:a0:ea:1b:17:49:aa:f1:c4:2d:d3:2e:3e:e7: ee:26:e2:a8:a4:cd:d6:09:9b:79:fe:f0:4e:a2:42: 45:8c:c8:d4:73:3a:dd:f8:1e:b9:b7:ed:75:9b:71: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:05:0A:BC:11:56:54:33:A5:DF:31:3C:5E:2A:F7:A9:6C:C7:BF:EF X509v3 Authority Key Identifier: keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b8:5c:34:a6:6a:b7:df:cd:73:77:b9:ff:0d:89:0e:f5:dc: 38:7f:be:0c:c7:08:7f:6b:98:03:76:6a:02:03:6f:d3:67:21: f9:e3:fd:72:02:e2:1d:d5:99:26:33:09:41:d3:31:5e:a5:da: 1f:f9:76:30:01:b8:2c:7b:1b:ff:3d:f5:85:68:d0:68:9d:ad: 97:5a:eb:2e:76:93:9f:68:02:04:04:4a:6a:6d:03:b8:f9:38: 3b:ea:54:01:da:8a:db:1f:e5:00:20:c1:d1:48:b5:eb:ca:19: 59:09:d4:8f:60:e9:e0:d5:13:43:c7:ba:ee:93:a1:8a:ed:6f: d1:5b:75:67:9f:71:49:fb:e2:89:22:af:7e:94:48:7b:df:94: 34:71:00:91:28:11:14:0e:c1:57:d9:eb:1c:ac:0a:8e:90:73: b2:8f:61:50:c2:f9:e8:ce:b2:52:69:07:8c:10:f8:67:19:04: c0:18:59:ae:c9:1d:d4:24:1b:13:4b:ea:9f:7e:17:ef:02:91: 7b:8b:3a:9a:52:20:a5:d7:89:1e:08:eb:d1:c4:69:d5:f8:40: ba:b9:ac:ba:53:b4:43:85:45:50:b5:9d:48:ff:32:15:af:04: 35:23:6d:4c:52:54:3b:c1:b3:9c:2f:e4:88:7f:42:6a:6a:c2: 58:ee:37:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkobHUW5tS0Yh1BOC75uYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3 MDFhNDgwHhcNMjUxMjIyMDEwMDM0WhcNMjUxMjIzMDEwMDM0WjAzMTEwLwYDVQQD Eyg0NjA1MGFiYzExNTY1NDMzYTVkZjMxM2M1ZTJhZjdhOTZjYzdiZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yXKmTxr2hRhPP6au2ti1irWpnXI Jd/K2lLtSdA1TkanW+HqkuorT/+ME6wJUws0AjDdqKhIlhglo9975YYT9CH6cI7M 9cLMyz5L5A6YyYdT4PZibpXGIrDoVLaCAYY5jZg4vrAqZFKtmVl371wVUzx6/o5M Ih9FX6lZDXrYCR2ry1HGRkKMh+RbMR0q0avLOie1rF5EhPwXnSQ7dURMhM4c8cYM wmhxjtRgq+s4vmOf7RZaKKNJ3rXrjJqPyXtDHlkOhSJOyxFP1e5xLeOIvXXos6Dq GxdJqvHELdMuPufuJuKopM3WCZt5/vBOokJFjMjUczrd+B65t+11m3FL/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYFCrwRVlQzpd8xPF4q96lsx7/vMB8GA1UdIwQY MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5 LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7hcNKZq t9/Nc3e5/w2JDvXcOH++DMcIf2uYA3ZqAgNv02ch+eP9cgLiHdWZJjMJQdMxXqXa H/l2MAG4LHsb/z31hWjQaJ2tl1rrLnaTn2gCBARKam0DuPk4O+pUAdqK2x/lACDB 0Ui168oZWQnUj2Dp4NUTQ8e67pOhiu1v0Vt1Z59xSfviiSKvfpRIe9+UNHEAkSgR FA7BV9nrHKwKjpBzso9hUML56M6yUmkHjBD4ZxkEwBhZrskd1CQbE0vqn34X7wKR e4s6mlIgpdeJHgjr0cRp1fhAurmsulO0Q4VFULWdSP8yFa8ENSNtTFJUO8GznC/k iH9CamrCWO43SA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:27:24 2025 by rpki-client