This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json) Hash identifier: F81c5bknXxEGf6nRiIRRE3WpPBtUnL28X0q2q3Hy2y4= Subject key identifier: D4:99:FB:BA:3F:0C:E8:6C:2C:AB:9A:D0:B3:87:5D:7C:17:7F:A7:37 Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Certificate serial: 019B194D2E7B8B7C3735A7E2DEE5B2C59C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft Manifest number: 1773 Signing time: Sat 13 Dec 2025 20:00:46 +0000 Manifest this update: Sat 13 Dec 2025 20:00:46 +0000 Manifest next update: Sun 14 Dec 2025 20:00:46 +0000 Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=) 2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: CKihgTBDHW/7KK2ClWTYBL9ZSLMmUXt9Gokl8LICkmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:2e:7b:8b:7c:37:35:a7:e2:de:e5:b2:c5:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49 Validity Not Before: Dec 13 20:00:46 2025 GMT Not After : Dec 14 20:00:46 2025 GMT Subject: CN=d499fbba3f0ce86c2cab9ad0b3875d7c177fa737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:4a:ae:69:72:25:ce:85:0e:cd:8c:51:f7: 91:24:4e:fa:ad:dc:fe:40:a5:32:f7:de:46:5b:94: 3f:e3:96:47:90:f6:19:c2:04:8c:0f:a8:6e:15:fb: 23:e1:e7:de:53:33:a9:c5:d8:87:a4:d0:47:51:cd: 47:9c:5c:58:2d:ad:93:a0:0e:f2:97:53:6d:45:f3: f0:ca:a0:20:1a:e7:6b:ca:06:aa:8d:89:a2:4f:8b: 7b:b2:97:73:ca:9d:25:72:39:8c:a9:d7:15:04:86: 39:f6:1c:63:6e:b0:47:68:71:d5:6f:bd:b7:6c:44: 52:89:38:de:81:67:b8:ef:73:93:49:d5:14:46:fe: a8:00:ba:bd:4e:30:87:1f:10:d5:48:53:5d:3b:a5: 2e:4a:25:70:f7:34:bf:02:22:ca:43:72:2c:a8:bc: 4f:5b:11:88:f3:b6:51:f5:28:b6:5d:71:6f:5b:a8: a5:af:c3:12:6e:d8:22:e9:d1:d9:6b:33:1c:62:ff: 48:e6:9c:98:da:d6:61:10:ab:a0:a2:85:5d:34:68: 8c:18:1e:a3:9f:1a:54:ca:87:ff:64:ff:1c:4b:a1: bf:a8:8c:01:31:6a:46:20:d1:7d:f4:62:34:2a:72: 49:c9:9b:4b:ce:91:26:42:84:60:d4:64:0a:95:fa: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:99:FB:BA:3F:0C:E8:6C:2C:AB:9A:D0:B3:87:5D:7C:17:7F:A7:37 X509v3 Authority Key Identifier: keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:bb:ba:de:76:cc:a6:46:53:28:ab:66:04:20:cc:2d:b8:f8: 89:1c:bc:e8:93:ee:9b:88:00:77:07:6d:8c:86:71:05:f3:b9: d1:35:28:39:c5:3d:fd:ea:db:1e:2c:38:75:94:68:72:c7:59: 07:f7:1e:1a:3f:91:da:53:c5:83:f9:44:9e:42:a0:45:f3:2c: 3c:8a:66:67:15:1a:c0:64:7f:06:08:29:32:1d:21:47:2f:f6: 4b:97:d2:fe:79:2c:e4:72:ec:5d:89:fd:5c:c5:6b:74:9c:39: 74:2b:d7:f9:ef:33:75:fb:11:0f:0f:4d:00:b8:f1:c6:bb:23: 66:e5:57:a0:73:1c:03:6c:b6:0f:da:a6:93:ae:e6:1b:fa:48: 0a:df:18:74:6d:2a:e6:fe:88:34:ba:aa:06:d0:64:6a:9e:31: 65:b7:ae:15:26:90:e9:0f:f3:17:62:3a:02:e0:2c:6c:ff:15: ec:72:11:3f:7e:f3:7c:39:75:b0:99:ec:6a:8b:18:5d:43:22: f8:79:bc:ee:c2:80:b2:5f:23:e8:72:83:a5:a4:9e:54:11:39: 06:77:7a:e7:87:fb:36:09:f5:b6:1b:56:ca:7b:a6:36:e8:b9: 89:c0:f9:67:25:ba:8f:53:5b:f4:f1:1e:f4:e2:54:a2:2b:2d: 3a:27:3f:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTS57i3w3Nafi3uWyxZxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi NjdlNDkwHhcNMjUxMjEzMjAwMDQ2WhcNMjUxMjE0MjAwMDQ2WjAzMTEwLwYDVQQD EyhkNDk5ZmJiYTNmMGNlODZjMmNhYjlhZDBiMzg3NWQ3YzE3N2ZhNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs75KrmlyJc6FDs2MUfeRJE76rdz+ QKUy995GW5Q/45ZHkPYZwgSMD6huFfsj4efeUzOpxdiHpNBHUc1HnFxYLa2ToA7y l1NtRfPwyqAgGudrygaqjYmiT4t7spdzyp0lcjmMqdcVBIY59hxjbrBHaHHVb723 bERSiTjegWe473OTSdUURv6oALq9TjCHHxDVSFNdO6UuSiVw9zS/AiLKQ3IsqLxP WxGI87ZR9Si2XXFvW6ilr8MSbtgi6dHZazMcYv9I5pyY2tZhEKugooVdNGiMGB6j nxpUyof/ZP8cS6G/qIwBMWpGINF99GI0KnJJyZtLzpEmQoRg1GQKlfqObQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSZ+7o/DOhsLKua0LOHXXwXf6c3MB8GA1UdIwQY MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt YTQ4NmJlMzU2OWE3LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3 LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcru63nbM pkZTKKtmBCDMLbj4iRy86JPum4gAdwdtjIZxBfO50TUoOcU9/erbHiw4dZRocsdZ B/ceGj+R2lPFg/lEnkKgRfMsPIpmZxUawGR/BggpMh0hRy/2S5fS/nks5HLsXYn9 XMVrdJw5dCvX+e8zdfsRDw9NALjxxrsjZuVXoHMcA2y2D9qmk67mG/pICt8YdG0q 5v6INLqqBtBkap4xZbeuFSaQ6Q/zF2I6AuAsbP8V7HIRP37zfDl1sJnsaosYXUMi +Hm87sKAsl8j6HKDpaSeVBE5Bnd654f7Ngn1thtWynumNui5icD5ZyW6j1Nb9PEe 9OJUoistOic/SQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:57 2025 by rpki-client