This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json) Hash identifier: ZT2HR0DhKIm7orCQaT/Xk+d/EvtLKe5tLFbQhuAFwlA= Subject key identifier: E1:9D:18:A0:BA:94:69:4C:09:C0:9C:45:30:3C:76:10:8B:10:B3:27 Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Certificate serial: 019B4D71EF1E8B76C05712001ECF7BA45CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 23:01:10 +0000 Manifest this update: Tue 23 Dec 2025 23:01:10 +0000 Manifest next update: Wed 24 Dec 2025 23:01:10 +0000 Files and hashes: 1: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (hash: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=) 2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: lm9EklD2OmCrHRDbA/A5L4F6cTojVDCTJTWE+0gWXRE=) 3: kDFFmEHOxxsPr1PqT9Wra3pOapo.roa (hash: PtmDDx7DD6q5hVM880BXHYOoqWKL19qOEEf16G0FZlQ=) 4: whsaqddiyDI8xyshxKkHo02Q7GA.roa (hash: GiAQ6ec8LMUk9UTzynBovpvos9gk3+nUpwnbIm92gbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:71:ef:1e:8b:76:c0:57:12:00:1e:cf:7b:a4:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f Validity Not Before: Dec 23 23:01:10 2025 GMT Not After : Dec 24 23:01:10 2025 GMT Subject: CN=e19d18a0ba94694c09c09c45303c76108b10b327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:27:44:66:75:57:2d:fe:9d:87:41:5b:98: 98:6e:e2:bc:53:96:00:2e:93:7b:51:b8:10:f6:61: bd:26:d2:a4:0c:d5:7e:b5:cf:d1:0b:53:fc:96:a7: e6:b8:74:8e:3a:9f:ac:61:6c:c5:75:5d:57:09:10: ae:f7:24:20:7e:69:62:6a:a5:b4:73:91:42:33:98: d8:a4:36:94:54:2c:67:f1:9d:51:c9:dc:fa:f9:48: 3d:85:b6:12:9c:d8:29:22:36:a3:40:28:c1:ff:15: 2b:00:0e:2c:6b:53:58:a9:a5:d2:b0:c3:6a:47:73: 40:3a:ef:ef:d3:37:3e:05:e6:b2:4a:91:a5:a6:b9: eb:1c:8d:83:bc:13:32:a3:1b:26:c1:e6:55:d4:dd: 94:c3:f4:4f:ce:11:61:86:2e:30:36:2b:16:dc:87: 9d:4d:42:d2:19:dd:69:12:99:98:1e:96:a7:dc:0b: af:ef:83:57:85:42:58:c1:f9:5b:bc:5e:8f:a9:c2: ac:ea:83:e1:b8:4e:18:b9:2d:82:84:d6:e5:b3:5d: cb:75:f8:17:83:61:84:dc:27:61:c5:09:9b:d9:6a: de:cf:54:35:a8:c3:e6:a1:a2:50:2e:b5:5a:9a:dc: 5d:16:7e:4d:de:e6:19:76:f1:18:cd:f9:cc:5e:9f: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9D:18:A0:BA:94:69:4C:09:C0:9C:45:30:3C:76:10:8B:10:B3:27 X509v3 Authority Key Identifier: keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:71:c4:37:37:6b:41:1e:3d:b0:8f:45:39:eb:9f:03:e1:70: 6f:53:77:0a:6f:35:bd:8a:e6:1a:0b:8e:e2:fe:b6:11:62:c9: 68:60:f9:13:28:2e:bd:de:67:50:e3:45:55:9a:e1:49:2b:32: 9d:e5:4d:4b:64:d7:31:ea:a4:8a:af:e6:01:fe:93:c8:c6:55: 13:ca:c0:97:04:5f:96:20:9d:b9:70:44:3a:b2:72:e4:71:e4: 24:99:55:97:84:24:44:34:e7:f4:e5:8e:9f:37:8f:76:2d:1d: 76:2e:22:22:a5:d9:b1:65:1d:94:c1:c4:e1:31:69:cc:70:33: d0:1e:13:26:f9:7d:4f:73:41:31:92:cd:cd:2f:d5:52:f4:0a: 41:40:a4:bd:96:5e:6e:bd:6d:19:a0:53:a7:11:85:6c:17:9f: 85:26:dd:80:17:72:a5:fd:4a:c9:00:79:45:4e:40:90:5f:a2: 55:81:51:bb:6d:25:68:6a:be:8c:82:ad:a1:88:82:ae:44:64: ca:2a:20:94:e5:eb:c4:ac:31:d4:b7:fd:90:b7:57:57:23:52: f2:aa:16:8a:81:a1:ec:d0:50:c5:f5:ba:56:ba:19:e7:05:89: 3a:ae:b1:a3:ec:a4:07:3f:70:be:17:bc:23:f1:92:d5:fc:d0: 95:ff:29:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNce8ei3bAVxIAHs97pFzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3 MDViMmYwHhcNMjUxMjIzMjMwMTEwWhcNMjUxMjI0MjMwMTEwWjAzMTEwLwYDVQQD EyhlMTlkMThhMGJhOTQ2OTRjMDljMDljNDUzMDNjNzYxMDhiMTBiMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg0nRGZ1Vy3+nYdBW5iYbuK8U5YA LpN7UbgQ9mG9JtKkDNV+tc/RC1P8lqfmuHSOOp+sYWzFdV1XCRCu9yQgfmliaqW0 c5FCM5jYpDaUVCxn8Z1Rydz6+Ug9hbYSnNgpIjajQCjB/xUrAA4sa1NYqaXSsMNq R3NAOu/v0zc+BeaySpGlprnrHI2DvBMyoxsmweZV1N2Uw/RPzhFhhi4wNisW3Ied TULSGd1pEpmYHpan3Auv74NXhUJYwflbvF6PqcKs6oPhuE4YuS2ChNbls13LdfgX g2GE3CdhxQmb2Wrez1Q1qMPmoaJQLrVamtxdFn5N3uYZdvEYzfnMXp+W+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGdGKC6lGlMCcCcRTA8dhCLELMnMB8GA1UdIwQY MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt MGUxZGI5OGFkMjMxLzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3HENzdr QR49sI9FOeufA+Fwb1N3Cm81vYrmGguO4v62EWLJaGD5Eyguvd5nUONFVZrhSSsy neVNS2TXMeqkiq/mAf6TyMZVE8rAlwRfliCduXBEOrJy5HHkJJlVl4QkRDTn9OWO nzePdi0ddi4iIqXZsWUdlMHE4TFpzHAz0B4TJvl9T3NBMZLNzS/VUvQKQUCkvZZe br1tGaBTpxGFbBefhSbdgBdypf1KyQB5RU5AkF+iVYFRu20laGq+jIKtoYiCrkRk yioglOXrxKwx1Lf9kLdXVyNS8qoWioGh7NBQxfW6VroZ5wWJOq6xo+ykBz9wvhe8 I/GS1fzQlf8pSQ== -----END CERTIFICATE-----Generated at Wed Dec 24 04:01:09 2025 by rpki-client