This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json) Hash identifier: 01pWr5CTvwL0PySHkCe7pfYlnjDnr0AaNr6xp8OYeHE= Subject key identifier: 7C:F0:39:C2:E4:86:03:BB:AF:15:07:1C:43:CB:6C:0D:9F:89:BB:C3 Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4 Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4 Certificate serial: 019B25F64EB08FCAF4BFA42B4643CD16ADB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft Manifest number: 0294 Signing time: Tue 16 Dec 2025 07:00:57 +0000 Manifest this update: Tue 16 Dec 2025 07:00:57 +0000 Manifest next update: Wed 17 Dec 2025 07:00:57 +0000 Files and hashes: 1: HnXYP_nGkSYGI2gsUnR5joaBv0k.roa (hash: QHASI9erDv03GyXaVaSPKxwrTHTkAuv0FPn5tlS8GC8=) 2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: La14tI+mDTCh+ZJBSJqzOOfffCJf5U5dlx8p6cR0l5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:4e:b0:8f:ca:f4:bf:a4:2b:46:43:cd:16:ad:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4 Validity Not Before: Dec 16 07:00:57 2025 GMT Not After : Dec 17 07:00:57 2025 GMT Subject: CN=7cf039c2e48603bbaf15071c43cb6c0d9f89bbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:e7:19:be:5c:dd:98:4b:c8:ae:01:50:e5: 8b:e9:e1:2d:df:4e:76:20:cf:7c:7c:a5:4d:d0:60: ed:56:f4:f2:2e:9e:ee:38:8a:72:ee:57:17:1b:88: 42:f0:e4:bd:59:83:ef:ee:e9:6b:bd:3f:9d:da:a9: a7:52:cd:29:7b:cd:11:d1:2f:4d:2a:9f:fe:3f:91: bf:1f:5c:dc:5a:64:0c:94:59:28:aa:1c:a1:1b:39: da:a8:c9:38:69:84:dd:03:b2:6c:ee:26:14:36:6d: 1c:9d:ea:81:74:70:fd:f3:14:b1:eb:1f:4d:d9:18: a6:11:bb:5f:1d:66:5e:98:6d:d2:f2:fc:f6:b8:bf: c5:e2:e0:97:56:e9:a2:fa:d7:cd:8f:7a:22:1f:aa: 04:29:db:e2:42:10:c9:5d:cd:bf:f9:7f:aa:36:24: b6:e1:f8:d3:08:bd:91:26:2e:c9:02:33:36:8c:d0: 55:4b:f2:01:34:3d:b7:2c:a4:07:b9:c0:8d:fb:13: d7:4e:58:f8:20:37:33:4c:25:8f:60:be:cf:6e:c6: 4b:08:83:2f:f1:ae:84:78:08:11:e7:b4:ec:e4:88: 6c:21:cc:11:ad:20:bb:1c:95:28:34:57:56:61:14: 3e:7b:9f:3f:38:ed:7c:d0:c5:5b:5b:8d:a3:83:e5: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F0:39:C2:E4:86:03:BB:AF:15:07:1C:43:CB:6C:0D:9F:89:BB:C3 X509v3 Authority Key Identifier: keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5d:f5:98:4f:ef:11:a6:98:f6:7f:91:46:66:d0:8f:58:cf: f0:1f:4b:2c:f4:63:94:5d:ce:26:b0:b0:53:16:51:40:3d:f9: 05:ee:44:14:d6:2d:3a:0f:ff:b0:c2:67:53:95:b1:5e:44:f5: 74:58:48:a1:63:87:c2:52:91:88:d9:b1:ce:b5:6a:dd:64:6f: 2b:62:33:28:16:bc:d9:c7:16:5c:2f:a0:89:98:f3:af:0e:bc: 21:22:56:78:74:57:e7:15:a0:dc:64:79:25:c7:7a:d8:22:be: 91:c2:cb:05:d2:c8:8b:17:cb:a5:09:20:fb:ab:3b:a1:80:8d: 91:6f:80:bd:03:03:aa:1c:4c:0a:d9:25:78:93:44:ec:a6:19: 53:29:a4:14:2c:b4:b1:5b:a2:d4:64:98:e6:3a:c0:2f:44:7f: ff:b2:7a:a4:4a:6e:8b:2e:43:68:bc:c8:78:10:5d:73:2e:0e: 5a:0b:c4:6c:c5:89:d0:96:58:75:ff:1d:9e:9b:06:bf:31:c1: cd:a1:29:f5:d6:fb:d5:d6:a5:0d:93:92:f9:34:f3:b6:0e:46: 31:44:32:16:bc:f5:a7:22:cb:3e:cd:f0:e5:14:6d:c1:68:3a: a7:bf:f6:b1:2d:b6:21:ef:fd:e4:00:6f:58:77:f7:7c:a9:79: b5:47:75:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9k6wj8r0v6QrRkPNFq25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YzgyNjUwODljYmRkZTZhNmM1NzljZDc3NmI1ZjgwYzBm OGFkZDQwHhcNMjUxMjE2MDcwMDU3WhcNMjUxMjE3MDcwMDU3WjAzMTEwLwYDVQQD Eyg3Y2YwMzljMmU0ODYwM2JiYWYxNTA3MWM0M2NiNmMwZDlmODliYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntnnGb5c3ZhLyK4BUOWL6eEt3052 IM98fKVN0GDtVvTyLp7uOIpy7lcXG4hC8OS9WYPv7ulrvT+d2qmnUs0pe80R0S9N Kp/+P5G/H1zcWmQMlFkoqhyhGznaqMk4aYTdA7Js7iYUNm0cneqBdHD98xSx6x9N 2RimEbtfHWZemG3S8vz2uL/F4uCXVumi+tfNj3oiH6oEKdviQhDJXc2/+X+qNiS2 4fjTCL2RJi7JAjM2jNBVS/IBND23LKQHucCN+xPXTlj4IDczTCWPYL7PbsZLCIMv 8a6EeAgR57Ts5IhsIcwRrSC7HJUoNFdWYRQ+e58/OO180MVbW42jg+WOgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzwOcLkhgO7rxUHHEPLbA2fibvDMB8GA1UdIwQY MBaAFMXIJlCJy93mpsV5zXdrX4DA+K3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEt NDM4ODIwZmJhMjU0LzEveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEtNDM4ODIwZmJhMjU0 LzEveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll31mE/v EaaY9n+RRmbQj1jP8B9LLPRjlF3OJrCwUxZRQD35Be5EFNYtOg//sMJnU5WxXkT1 dFhIoWOHwlKRiNmxzrVq3WRvK2IzKBa82ccWXC+giZjzrw68ISJWeHRX5xWg3GR5 Jcd62CK+kcLLBdLIixfLpQkg+6s7oYCNkW+AvQMDqhxMCtkleJNE7KYZUymkFCy0 sVui1GSY5jrAL0R//7J6pEpuiy5DaLzIeBBdcy4OWgvEbMWJ0JZYdf8dnpsGvzHB zaEp9db71dalDZOS+TTztg5GMUQyFrz1pyLLPs3w5RRtwWg6p7/2sS22Ie/95ABv WHf3fKl5tUd1UA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:40:00 2025 by rpki-client