This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json) Hash identifier: wCiDHxlLy2Hi6/lhUoGCU6FNHdDBIzrxiRLqrcKTKTk= Subject key identifier: C6:36:B1:DA:FE:F1:3A:AC:8C:F1:36:7E:C6:00:30:1C:C0:0B:50:D8 Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Certificate serial: 019B36B3C709280774D8DBB801454BAE852F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft Manifest number: 0213 Signing time: Fri 19 Dec 2025 13:01:50 +0000 Manifest this update: Fri 19 Dec 2025 13:01:50 +0000 Manifest next update: Sat 20 Dec 2025 13:01:50 +0000 Files and hashes: 1: NGw8ktOj6OOwsyhqpmQcxVz3HFU.roa (hash: Z7YWYHXxapOgTQP+VOKpEFoycxd68wL+FS31DhS3NVc=) 2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: gQFx3kK6F2DXXUYTDB1h6Wsw7tMCTcFkPbEIAs20CoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:c7:09:28:07:74:d8:db:b8:01:45:4b:ae:85:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Validity Not Before: Dec 19 13:01:50 2025 GMT Not After : Dec 20 13:01:50 2025 GMT Subject: CN=c636b1dafef13aac8cf1367ec600301cc00b50d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ec:cf:05:12:c6:7f:6c:c0:12:37:3c:05:b0: f9:a1:4b:a3:34:cf:32:f8:33:8a:ba:a7:d2:19:1f: 1e:e2:a9:8d:5a:7d:bd:fc:df:b9:e5:9f:48:df:00: 91:9c:b2:44:cb:5b:92:0a:9d:63:e8:13:46:41:15: aa:d4:74:be:1a:ff:1d:63:c7:6a:77:b0:ee:d5:eb: ff:18:5f:e8:fd:4d:cf:e8:fa:8e:41:90:fd:65:51: e1:d2:0b:6a:fc:40:bf:a3:ec:38:b0:35:cc:57:e7: 3c:27:39:02:35:92:da:50:eb:e7:9b:38:93:1a:bd: 60:ca:a7:58:eb:97:c2:36:bb:df:7d:57:62:aa:35: b2:38:2e:d5:5f:97:37:e2:f0:8c:cf:40:e4:96:86: 6b:b3:fa:ad:36:1b:9d:50:d0:9e:a9:d5:92:1b:1d: 67:45:b8:d0:c2:4f:4b:18:ff:04:2b:0f:8f:a4:46: f3:62:a0:e5:ac:1c:e1:1a:3f:8a:91:56:63:a1:df: 3d:2e:41:eb:a7:be:74:b4:f8:fc:f0:5d:af:61:80: 74:6a:00:89:08:7f:7c:f3:31:9b:df:92:35:49:59: d9:e1:43:8c:97:6a:7f:de:be:45:f8:11:bb:f8:f4: 17:cc:a7:61:c2:4a:0a:9b:99:c0:36:55:bc:e9:36: 26:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:36:B1:DA:FE:F1:3A:AC:8C:F1:36:7E:C6:00:30:1C:C0:0B:50:D8 X509v3 Authority Key Identifier: keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b0:e2:20:27:32:7c:3f:bf:bf:f2:6b:35:81:69:44:a1:96: 07:d8:68:eb:a0:93:f0:32:b5:ff:68:f6:35:1d:b8:a7:8a:f9: b4:11:8d:76:cd:d2:76:13:e3:0f:07:f7:df:95:63:d6:50:34: 26:df:c0:41:be:19:cb:40:a1:2f:18:25:29:78:02:57:a9:7c: 8a:a1:b5:4f:7a:0c:fe:93:38:2c:89:87:a7:a6:b3:85:1e:49: 65:76:8d:82:42:9f:99:b2:38:aa:80:bf:99:d1:e4:cd:39:fc: 0b:c2:62:60:c8:0e:c2:13:bb:a1:c8:0d:7b:bc:36:16:42:a5: 22:a3:57:be:f2:61:71:6c:18:50:b4:b4:9b:a6:31:dc:a2:d1: e8:09:8a:eb:f6:33:fa:be:69:f3:fd:d5:a1:e2:34:49:b7:2d: 94:15:11:65:02:a0:aa:a7:ec:b2:5f:ed:eb:e2:e5:21:17:05: cb:89:fc:29:00:85:77:9a:19:f5:65:85:46:9b:d4:01:ec:e4: 18:2d:f0:7f:6f:0b:c5:bf:51:5d:3f:4e:a7:a7:96:ca:ed:5a: 3a:d8:2e:a4:b0:ac:86:87:86:8b:a8:a9:0c:5e:71:fc:17:0a: 45:5a:22:19:ee:13:ac:80:6f:38:c5:fb:a1:df:2d:99:d2:7e: 67:fd:da:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s8cJKAd02Nu4AUVLroUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz YTI3YzYwHhcNMjUxMjE5MTMwMTUwWhcNMjUxMjIwMTMwMTUwWjAzMTEwLwYDVQQD EyhjNjM2YjFkYWZlZjEzYWFjOGNmMTM2N2VjNjAwMzAxY2MwMGI1MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqezPBRLGf2zAEjc8BbD5oUujNM8y +DOKuqfSGR8e4qmNWn29/N+55Z9I3wCRnLJEy1uSCp1j6BNGQRWq1HS+Gv8dY8dq d7Du1ev/GF/o/U3P6PqOQZD9ZVHh0gtq/EC/o+w4sDXMV+c8JzkCNZLaUOvnmziT Gr1gyqdY65fCNrvffVdiqjWyOC7VX5c34vCMz0DkloZrs/qtNhudUNCeqdWSGx1n RbjQwk9LGP8EKw+PpEbzYqDlrBzhGj+KkVZjod89LkHrp750tPj88F2vYYB0agCJ CH988zGb35I1SVnZ4UOMl2p/3r5F+BG7+PQXzKdhwkoKm5nANlW86TYmRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMY2sdr+8TqsjPE2fsYAMBzAC1DYMB8GA1UdIwQY MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt OGIzMDFiYWMzMGM5LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5 LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7DiICcy fD+/v/JrNYFpRKGWB9ho66CT8DK1/2j2NR24p4r5tBGNds3SdhPjDwf335Vj1lA0 Jt/AQb4Zy0ChLxglKXgCV6l8iqG1T3oM/pM4LImHp6azhR5JZXaNgkKfmbI4qoC/ mdHkzTn8C8JiYMgOwhO7ocgNe7w2FkKlIqNXvvJhcWwYULS0m6Yx3KLR6AmK6/Yz +r5p8/3VoeI0SbctlBURZQKgqqfssl/t6+LlIRcFy4n8KQCFd5oZ9WWFRpvUAezk GC3wf28Lxb9RXT9Op6eWyu1aOtgupLCshoeGi6ipDF5x/BcKRVoiGe4TrIBvOMX7 od8tmdJ+Z/3a9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:24 2025 by rpki-client