This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json) Hash identifier: 4/gE48+O3JBjGsL72c89t69J+RW/BXo+fIVF/hCwClg= Subject key identifier: 17:D8:7A:1E:16:F8:5E:66:86:CB:1A:97:76:88:12:C8:C8:4C:82:C9 Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Certificate serial: 019B1080BCA5EC7BB18FD5B7806A115F1407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft Manifest number: 1791 Signing time: Fri 12 Dec 2025 03:00:30 +0000 Manifest this update: Fri 12 Dec 2025 03:00:30 +0000 Manifest next update: Sat 13 Dec 2025 03:00:30 +0000 Files and hashes: 1: 3V6q1-UeO36fLmJlReM_Gz13sMA.roa (hash: PylpUbq0fhCG4XR5C05AhKT8758HGTKJAPQDgwx9IwI=) 2: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=) 3: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=) 4: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=) 5: kwPr5vzt3-ySJo5MI-LQFyEqrD0.roa (hash: wgaBbEuKlBEgI0/63TFwHnJqqn8xIpVCdKTwEP7oyo4=) 6: pNjGXJ-Sea4Ni2pVy1WIRiDYEDE.roa (hash: nLlZJFuKRcHnPRrTWYdH+coSN27tpwhU2HPjFKfGC1o=) 7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: nQtb7dKKZY9gdDzKJKgnxLJ/3pYeoC5u3kV8vzz3KyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:80:bc:a5:ec:7b:b1:8f:d5:b7:80:6a:11:5f:14:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Validity Not Before: Dec 12 03:00:30 2025 GMT Not After : Dec 13 03:00:30 2025 GMT Subject: CN=17d87a1e16f85e6686cb1a97768812c8c84c82c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:3a:8c:07:62:52:10:90:7e:09:bb:5b:6f: 06:18:a3:f3:d6:f3:57:9b:8a:b0:56:aa:3d:3a:e2: bf:0c:27:32:da:c1:d9:6f:88:76:19:82:46:43:b3: 76:35:69:b5:75:9e:40:97:08:b3:b7:8a:b8:ca:f7: 2b:0d:76:6d:8c:01:cd:64:07:f3:c9:c4:25:7a:0b: 27:12:86:1b:e6:d7:ac:a5:6a:52:b6:d5:b3:64:df: 2d:d8:7e:35:d0:3a:a9:7b:b2:5a:bb:96:9c:e0:34: 6f:8b:16:c7:84:64:d1:94:96:15:09:a9:dd:fb:f1: 8b:ee:39:30:f1:46:69:49:fe:cb:f5:15:5a:d4:3b: 6b:71:bc:fa:1c:26:59:d2:8e:66:fa:53:a6:b4:01: 2b:95:10:2d:86:9f:af:7a:43:35:46:d4:74:99:49: e9:91:89:05:d7:09:96:37:a9:7a:0e:19:5c:1a:4f: 25:de:96:bb:e5:0b:61:ff:25:68:b8:66:12:42:d0: 15:65:ef:8b:76:cb:e5:01:f5:b3:ee:5e:90:87:58: c6:95:45:22:97:19:0f:7a:fe:04:34:d8:e2:ae:b3: ad:4b:fc:d0:2e:a8:55:3c:0c:64:8f:95:21:b7:b0: e2:e3:21:76:da:b3:4c:6c:f7:d4:cd:d2:23:ad:3c: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D8:7A:1E:16:F8:5E:66:86:CB:1A:97:76:88:12:C8:C8:4C:82:C9 X509v3 Authority Key Identifier: keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8d:3f:10:e0:2f:ac:cc:7a:0c:45:87:ea:46:0d:a5:34:f8: a5:84:e4:2f:a1:68:70:a7:48:0e:1e:49:15:60:ed:8f:ba:6c: fa:e8:fc:c0:39:90:7b:88:cd:58:82:5a:0d:4e:db:cc:5f:bb: 94:ca:d3:1d:d9:42:16:71:bd:fa:e6:6e:5f:b8:42:40:23:4c: 72:ef:64:6d:1d:84:82:07:6e:45:f5:c3:ad:a5:83:b3:f3:85: c1:f3:d9:4a:84:ad:b5:7c:c0:e8:d8:44:53:63:f4:9a:b9:8e: c0:e9:97:d6:85:51:d9:83:99:4a:43:eb:f4:ce:db:c5:45:51: b8:80:0e:cb:7e:dd:b1:95:11:0c:75:e7:06:30:e1:d1:d9:4e: 0d:ae:19:ff:b2:56:85:cb:0b:19:88:44:c5:39:25:cf:9f:98: fd:0f:7c:39:6a:92:73:49:88:b9:68:bc:f1:ea:c0:3d:d5:38: 20:48:c9:2c:84:9b:73:32:53:78:8a:b3:bb:b8:a0:df:4c:17: 84:f1:06:40:a2:da:66:79:15:5f:de:e9:2e:15:ac:7c:e4:aa: cf:f7:de:4d:d9:78:eb:b1:c2:1e:64:54:85:1b:bc:d7:84:46: de:43:57:cd:bb:2c:99:25:1e:b5:c3:ce:94:91:d7:b0:d9:49: 29:17:c0:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgLyl7Huxj9W3gGoRXxQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz YTBjZTIwHhcNMjUxMjEyMDMwMDMwWhcNMjUxMjEzMDMwMDMwWjAzMTEwLwYDVQQD EygxN2Q4N2ExZTE2Zjg1ZTY2ODZjYjFhOTc3Njg4MTJjOGM4NGM4MmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH06jAdiUhCQfgm7W28GGKPz1vNX m4qwVqo9OuK/DCcy2sHZb4h2GYJGQ7N2NWm1dZ5Alwizt4q4yvcrDXZtjAHNZAfz ycQlegsnEoYb5tespWpSttWzZN8t2H410Dqpe7Jau5ac4DRvixbHhGTRlJYVCand +/GL7jkw8UZpSf7L9RVa1Dtrcbz6HCZZ0o5m+lOmtAErlRAthp+vekM1RtR0mUnp kYkF1wmWN6l6DhlcGk8l3pa75Qth/yVouGYSQtAVZe+LdsvlAfWz7l6Qh1jGlUUi lxkPev4ENNjirrOtS/zQLqhVPAxkj5Uht7Di4yF22rNMbPfUzdIjrTzPFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfYeh4W+F5mhssal3aIEsjITILJMB8GA1UdIwQY MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt NTZjYzM5ZGI2ZWQ2LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2 LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnY0/EOAv rMx6DEWH6kYNpTT4pYTkL6FocKdIDh5JFWDtj7ps+uj8wDmQe4jNWIJaDU7bzF+7 lMrTHdlCFnG9+uZuX7hCQCNMcu9kbR2EggduRfXDraWDs/OFwfPZSoSttXzA6NhE U2P0mrmOwOmX1oVR2YOZSkPr9M7bxUVRuIAOy37dsZURDHXnBjDh0dlODa4Z/7JW hcsLGYhExTklz5+Y/Q98OWqSc0mIuWi88erAPdU4IEjJLISbczJTeIqzu7ig30wX hPEGQKLaZnkVX97pLhWsfOSqz/feTdl467HCHmRUhRu814RG3kNXzbssmSUetcPO lJHXsNlJKRfAiw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:39:01 2025 by rpki-client