This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json) Hash identifier: j6+6OAalGlMA657ZLZVgTfa3Ag6wIt3oYDwdRMFyKEU= Subject key identifier: 6E:24:C8:12:98:98:D7:53:74:56:C3:D3:4F:44:13:5D:F3:0F:DB:E2 Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Certificate serial: 019B1193FE19A5C516B93E47FD53B76F377F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 08:01:10 +0000 Manifest this update: Fri 12 Dec 2025 08:01:10 +0000 Manifest next update: Sat 13 Dec 2025 08:01:10 +0000 Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=) 2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: YGnIgrRP+WznQIpf2xt8zqts3PorxJNq9wIATQEZJ2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:fe:19:a5:c5:16:b9:3e:47:fd:53:b7:6f:37:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Validity Not Before: Dec 12 08:01:10 2025 GMT Not After : Dec 13 08:01:10 2025 GMT Subject: CN=6e24c8129898d7537456c3d34f44135df30fdbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:ba:92:c2:37:a7:fb:e2:a5:b0:e9:f5:12: 2f:ce:14:8b:3a:a8:ad:f0:d2:49:38:43:22:4b:7e: 0e:22:32:e7:8d:3a:7c:22:a8:72:49:6c:3f:56:dc: 80:76:02:b0:f8:43:fb:ef:2e:1d:dc:56:a1:13:eb: a0:a8:be:0b:56:2d:4c:14:70:fb:e7:c3:a8:e2:31: 31:cb:f0:41:d4:d6:1f:6a:07:39:bb:50:cd:a5:de: 11:92:68:ed:4b:0a:88:83:04:5c:77:e7:c7:28:9d: 36:ad:0a:15:fa:16:cc:f8:c4:29:e9:ad:6b:a7:19: 92:c0:a5:38:8c:63:58:ce:f0:67:f4:98:89:66:7f: ff:b8:2a:80:7e:74:a0:5f:87:99:a5:50:a4:86:a9: 89:ef:5d:f8:cc:d2:66:b8:5d:3b:3f:1f:80:5b:55: a2:18:b4:f7:bc:a4:41:1a:20:3f:fa:ff:5e:5a:69: e3:b2:e7:15:a1:7d:f7:92:56:bf:99:9a:19:21:83: 23:a8:1d:c5:10:9e:d7:21:5e:e4:90:36:41:1d:35: 21:30:76:19:44:77:8d:15:2b:a1:64:b5:b3:78:86: 39:6c:4a:b1:f1:7e:51:1d:e3:6d:ae:6d:73:02:f6: b8:36:ff:10:d4:7a:05:b3:df:dc:01:b8:7a:6b:73: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:24:C8:12:98:98:D7:53:74:56:C3:D3:4F:44:13:5D:F3:0F:DB:E2 X509v3 Authority Key Identifier: keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d2:3e:fd:1f:74:7e:d9:e2:d6:65:b8:ff:43:5d:4f:6b:11: ef:95:0b:91:8a:e8:73:f4:5d:3e:74:31:97:14:88:aa:8a:9e: cc:74:08:aa:1b:17:f8:55:70:ed:d2:e4:4a:c5:fa:cb:f0:ac: f3:55:be:e1:f9:3a:86:bd:73:31:6c:62:1c:dd:26:ce:f6:c2: 94:3d:af:27:f0:08:0f:ee:c7:3a:c3:58:89:49:f6:09:92:23: 1a:d3:59:e1:88:e2:20:43:11:0d:d9:7c:47:9d:2a:a8:d8:e2: a5:5e:ed:cf:b3:32:74:e0:f7:7a:69:3d:44:d6:b8:d0:3b:14: 4e:62:ab:a4:d1:e4:b4:89:70:f6:e9:b0:aa:20:ac:43:b8:94: 61:ab:50:9f:0e:fd:43:22:4d:b7:05:65:e1:f5:1e:65:63:a5: 62:0d:69:92:db:8a:3c:09:36:3a:95:c9:77:ff:58:d0:e8:c0: 2b:8c:fb:77:c2:3e:bb:73:60:01:a0:fd:44:52:e4:b9:2f:c2: aa:ea:19:39:7d:ac:ac:52:3c:5b:eb:a5:2d:fc:a5:70:c2:33: f9:3b:25:3d:d6:91:1a:ff:4c:c8:ed:d9:d8:e6:8b:2e:54:9b: 9d:1b:a1:85:df:1a:75:a5:b1:f0:60:93:37:0f:70:03:7a:02: ec:b3:e7:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk/4ZpcUWuT5H/VO3bzd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi NjdlNDkwHhcNMjUxMjEyMDgwMTEwWhcNMjUxMjEzMDgwMTEwWjAzMTEwLwYDVQQD Eyg2ZTI0YzgxMjk4OThkNzUzNzQ1NmMzZDM0ZjQ0MTM1ZGYzMGZkYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U66ksI3p/vipbDp9RIvzhSLOqit 8NJJOEMiS34OIjLnjTp8IqhySWw/VtyAdgKw+EP77y4d3FahE+ugqL4LVi1MFHD7 58Oo4jExy/BB1NYfagc5u1DNpd4RkmjtSwqIgwRcd+fHKJ02rQoV+hbM+MQp6a1r pxmSwKU4jGNYzvBn9JiJZn//uCqAfnSgX4eZpVCkhqmJ7134zNJmuF07Px+AW1Wi GLT3vKRBGiA/+v9eWmnjsucVoX33kla/mZoZIYMjqB3FEJ7XIV7kkDZBHTUhMHYZ RHeNFSuhZLWzeIY5bEqx8X5RHeNtrm1zAva4Nv8Q1HoFs9/cAbh6a3P9BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4kyBKYmNdTdFbD009EE13zD9viMB8GA1UdIwQY MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt YTQ4NmJlMzU2OWE3LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3 LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadI+/R90 ftni1mW4/0NdT2sR75ULkYroc/RdPnQxlxSIqoqezHQIqhsX+FVw7dLkSsX6y/Cs 81W+4fk6hr1zMWxiHN0mzvbClD2vJ/AID+7HOsNYiUn2CZIjGtNZ4YjiIEMRDdl8 R50qqNjipV7tz7MydOD3emk9RNa40DsUTmKrpNHktIlw9umwqiCsQ7iUYatQnw79 QyJNtwVl4fUeZWOlYg1pktuKPAk2OpXJd/9Y0OjAK4z7d8I+u3NgAaD9RFLkuS/C quoZOX2srFI8W+ulLfylcMIz+TslPdaRGv9MyO3Z2OaLLlSbnRuhhd8adaWx8GCT Nw9wA3oC7LPnQQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:46:22 2025 by rpki-client