This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: KA94YFP8Psq63bHU0+ApuzJQubZnhDv9g1qhk+RyCVQ= Subject key identifier: 51:94:35:8E:EF:05:37:53:C7:29:DE:A7:9E:F1:6E:2B:EE:29:EA:49 Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019B104A7F7C913FA739351CFCB34C867323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 0F75 Signing time: Fri 12 Dec 2025 02:01:16 +0000 Manifest this update: Fri 12 Dec 2025 02:01:16 +0000 Manifest next update: Sat 13 Dec 2025 02:01:16 +0000 Files and hashes: 1: 1-h5OCB8JpMYjopLDVkrKQwK2dpM.roa (hash: d3AbXN4lYtYyEUM8E0v7gWJmAkvZX7xtSRa43xkdCaQ=) 2: 4BRf9QEM8HRGBLk-AoS4Oo-qwJE.roa (hash: 5AHXjtuq+kTYWfnBOXLhKcC6BCQTDutSSrluB2da0xU=) 3: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=) 4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=) 5: JaK5nEHPaQ0eg4QVia6pq3nQtT8.asa (hash: zedp2dasOOuQWUFRKt1kDWC26clgR3XYNTuR7fBJPis=) 6: V2_sT2jDOr8MNnfYkhj5mMdvMaM.asa (hash: wVzZdXFDBv7mOQErQUozopppuOlT1ZjyUfEdZpNO8vQ=) 7: W2igZCKEosi-mfbhRXPXIOTNq9g.roa (hash: ttgFPCRGHj86SopPcwo8WI2fNU1bbHVqZycyehToXcM=) 8: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=) 9: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=) 10: k-o-zmp6E6M3w6lzVcLiVZ5iVV4.asa (hash: Uz7NKhkWs+9EDYle9gncDdJ37LyWdJWLb6DGxc1DGk4=) 11: sBswLDnyePuF7Wb4bNeFEX6khaA.roa (hash: q527iz5VwNMqqpTHR8opQ9UxQkOaCpJMBwKrLwpuxmM=) 12: t1mwU24RWx_QtHlt8VAyAaicScc.asa (hash: qul+FoGF3pEOmc/vqfxBeRQ9gtI1SffvAcYIByELYPs=) 13: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: raNvM7HsGVIcG5MI8UIkean4pB7L01SvwJTbmyhnXTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:7f:7c:91:3f:a7:39:35:1c:fc:b3:4c:86:73:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Dec 12 02:01:16 2025 GMT Not After : Dec 13 02:01:16 2025 GMT Subject: CN=5194358eef053753c729dea79ef16e2bee29ea49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:a4:10:5e:61:0f:d2:11:23:d2:b4:74:32: 6c:1a:b6:3b:55:0c:9b:2c:4a:47:82:15:f4:61:c4: aa:20:2e:30:1b:a2:0d:2e:8f:ab:39:48:7f:e0:63: 7d:ce:2e:10:3f:91:fc:12:5f:3b:c6:bf:1d:79:13: 7b:ef:60:8e:1e:b3:72:04:6c:ca:79:da:25:b4:84: 0a:3e:36:6f:23:b8:87:4a:76:95:33:a3:71:e3:8a: 9c:c2:65:56:9b:02:b5:dc:2b:de:1b:d4:d2:54:18: 3c:08:89:2e:b9:4c:d0:83:20:75:75:63:5d:99:e5: c8:84:74:a0:7e:d6:b4:21:60:94:6d:22:ca:8c:df: 6d:f8:2b:57:c5:14:88:d4:76:55:84:bc:c0:5a:b2: 60:5b:1f:84:93:da:e1:82:ae:2b:38:90:b5:ac:ab: dd:41:fe:e3:72:7f:68:d8:cc:3c:8a:66:f1:3e:74: 36:94:b4:68:cb:a4:e8:0c:a2:4b:a0:d2:be:4d:bc: 6c:d7:0b:3e:cb:ff:5d:67:be:dd:ba:f7:fb:7d:ea: d3:27:9f:ad:57:ae:21:13:9d:7d:ee:7a:4f:2b:35: 2d:a2:ca:38:ad:2c:69:34:fc:18:26:9b:99:54:83: 01:a2:8c:be:ef:b0:1b:15:b8:1d:ea:55:28:0e:76: 1a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:94:35:8E:EF:05:37:53:C7:29:DE:A7:9E:F1:6E:2B:EE:29:EA:49 X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:93:09:98:70:74:ef:3b:81:0b:7c:78:99:39:90:57:5f:19: 9e:59:c5:fe:09:76:b9:42:81:ea:6d:8a:52:c0:3f:91:85:85: 87:38:9d:25:60:e9:d9:63:a9:4b:3b:d1:2f:e7:59:23:a2:43: 80:78:0c:5e:02:c5:59:69:85:c9:4e:0d:e7:60:85:57:0a:48: ec:a9:47:46:89:fb:68:8a:fd:d3:f0:1a:ec:c2:89:c1:30:36: 0f:97:a8:69:87:0b:30:f2:9c:eb:78:d8:eb:f2:be:10:18:22: ea:8f:42:47:8e:32:ae:e4:8d:1e:f0:f1:56:37:ee:84:53:32: 51:4d:85:93:23:75:88:37:f4:04:53:3f:de:4f:b5:b1:df:18: 3a:08:41:6e:59:a7:bd:40:2c:6c:98:05:91:e2:66:7f:a3:b0: ec:2c:d6:8d:94:73:2a:2f:fa:37:75:d3:50:1d:82:d2:d3:25: 85:ac:ec:70:69:04:96:df:56:a7:09:72:d6:d5:d2:06:5c:74: 22:38:cb:c9:dd:d2:90:42:69:43:6b:1f:3b:9b:b3:07:4c:cd: c1:2b:24:49:02:82:93:8b:ef:ca:1c:89:34:ab:bc:45:d3:8f: 26:3c:eb:75:6c:fc:a0:ef:b6:41:ca:db:6f:de:e8:b7:5a:50: 55:82:16:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSn98kT+nOTUc/LNMhnMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjUxMjEyMDIwMTE2WhcNMjUxMjEzMDIwMTE2WjAzMTEwLwYDVQQD Eyg1MTk0MzU4ZWVmMDUzNzUzYzcyOWRlYTc5ZWYxNmUyYmVlMjllYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp++kEF5hD9IRI9K0dDJsGrY7VQyb LEpHghX0YcSqIC4wG6INLo+rOUh/4GN9zi4QP5H8El87xr8deRN772COHrNyBGzK edoltIQKPjZvI7iHSnaVM6Nx44qcwmVWmwK13CveG9TSVBg8CIkuuUzQgyB1dWNd meXIhHSgfta0IWCUbSLKjN9t+CtXxRSI1HZVhLzAWrJgWx+Ek9rhgq4rOJC1rKvd Qf7jcn9o2Mw8imbxPnQ2lLRoy6ToDKJLoNK+Tbxs1ws+y/9dZ77duvf7ferTJ5+t V64hE5197npPKzUtoso4rSxpNPwYJpuZVIMBooy+77AbFbgd6lUoDnYaEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGUNY7vBTdTxynep57xbivuKepJMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZMJmHB0 7zuBC3x4mTmQV18ZnlnF/gl2uUKB6m2KUsA/kYWFhzidJWDp2WOpSzvRL+dZI6JD gHgMXgLFWWmFyU4N52CFVwpI7KlHRon7aIr90/Aa7MKJwTA2D5eoaYcLMPKc63jY 6/K+EBgi6o9CR44yruSNHvDxVjfuhFMyUU2FkyN1iDf0BFM/3k+1sd8YOghBblmn vUAsbJgFkeJmf6Ow7CzWjZRzKi/6N3XTUB2C0tMlhazscGkElt9Wpwly1tXSBlx0 IjjLyd3SkEJpQ2sfO5uzB0zNwSskSQKCk4vvyhyJNKu8RdOPJjzrdWz8oO+2Qcrb b97ot1pQVYIWEg== -----END CERTIFICATE-----Generated at Fri Dec 12 11:54:34 2025 by rpki-client