This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: FR1ai4sp5xpU8zZuB3y4hLKVh41mDDW5CtQnfSUF2fg= Subject key identifier: 2A:06:9B:BF:DB:FF:2D:79:57:04:E8:77:1A:BA:F5:E8:10:9F:43:3F Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019B0E92E416425F52C2C80E72328547A9F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 178C Signing time: Thu 11 Dec 2025 18:01:06 +0000 Manifest this update: Thu 11 Dec 2025 18:01:06 +0000 Manifest next update: Fri 12 Dec 2025 18:01:06 +0000 Files and hashes: 1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=) 2: 9cZF6t0pRfYwb-LBxfj6qIf6oIs.roa (hash: rmhC0UPonVIgMVCi3q+pS4LXi85gqp0ddqXa/K7E7qg=) 3: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=) 4: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=) 5: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=) 6: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=) 7: PWoTLfI1GBVWXAdLNRuMVldxrk4.roa (hash: Be3sB5DnBNtLR4E5AJd2Iddf4oH46RSRRAT/o6NWkO0=) 8: XVtsR7QApMnuJxBGbKhRiugNLuM.roa (hash: mBXTHq+MNZP6clXD4om9o4T9lzXQfLi50+F1yKfLWMA=) 9: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 7aSI2hM2CUT8tqXkY1pEOO3kDStH+wvhaQFjLFZ19cQ=) 10: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=) 11: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:e4:16:42:5f:52:c2:c8:0e:72:32:85:47:a9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Dec 11 18:01:06 2025 GMT Not After : Dec 12 18:01:06 2025 GMT Subject: CN=2a069bbfdbff2d795704e8771abaf5e8109f433f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:85:79:fb:fc:fc:c1:94:7e:cb:31:be:44:30: 9b:c7:5e:a1:b8:75:5a:78:18:c8:78:c1:1b:a5:5b: e1:b3:e7:f5:fe:f1:79:3f:5b:10:05:8c:c0:2d:d3: 07:c1:84:68:30:3b:74:2f:a7:35:ff:1d:01:c4:9b: 41:48:18:7d:24:96:bc:22:6d:f1:0f:20:62:c9:1d: 28:de:db:0e:54:5f:ac:bb:f3:f5:95:b7:d0:0e:2c: 74:86:b6:b5:12:ce:6f:8c:43:67:7e:93:58:00:00: c6:20:2c:bd:7c:56:15:ba:9c:5f:20:11:01:bf:96: 48:76:35:cf:cf:5a:a5:55:c9:c5:01:81:83:5e:1f: c4:7a:0e:46:5c:61:d2:6f:d1:0d:78:52:78:49:53: 57:75:97:ec:e4:da:26:1d:17:ef:eb:e7:be:0b:b7: 33:04:ba:7e:11:71:81:3e:1d:37:60:16:e8:ee:e3: db:6c:6b:7e:98:e3:c3:6a:72:30:1d:a0:c7:86:db: 56:ff:97:fa:76:62:2a:4b:3f:e8:36:4c:5a:48:47: 66:48:4d:de:38:4f:cf:94:0d:b7:63:75:1b:90:4a: 53:61:7d:db:70:b0:fd:64:cb:50:d9:f9:cf:f8:4e: f8:29:a4:c3:34:c6:33:28:f7:f8:21:60:87:ef:43: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:06:9B:BF:DB:FF:2D:79:57:04:E8:77:1A:BA:F5:E8:10:9F:43:3F X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6f:c7:18:3c:e7:68:46:8f:1a:fa:64:f5:8b:7a:0a:a5:95: ac:de:5b:d6:ea:4b:de:48:6b:e6:d9:c1:e5:f2:3a:91:18:95: 0a:a3:87:34:29:f2:b4:ab:39:c2:91:fd:43:46:38:cf:83:11: a7:e1:6b:ff:de:db:93:99:a0:91:d9:f7:ab:65:ed:91:61:57: 9b:8d:f5:af:1a:08:3e:32:9b:0f:52:9a:ef:8f:2b:46:f7:28: 6d:fc:88:ee:f1:5a:9d:33:aa:cb:66:5e:b4:62:38:18:5e:58: 02:c2:c8:5e:18:73:e7:d4:0c:bd:52:50:6b:1d:59:2a:ae:a9: a7:15:0e:ac:bb:3c:4e:da:bf:a3:6e:26:30:ba:6a:3b:47:67: fe:76:e6:f5:b3:ff:c8:5f:01:1c:4b:59:f5:5e:d2:bd:8b:a1: 44:da:db:48:a9:f0:a0:26:7a:99:b2:06:10:63:b9:40:a7:49: 4a:56:97:cf:ae:4c:0a:70:41:ae:0b:00:ed:66:9f:9e:4e:fe: 10:39:f5:a3:19:85:7b:0e:7e:3c:0f:4f:9e:01:11:07:52:10: 8f:61:63:48:3d:ad:d2:0b:74:7f:36:3c:88:4a:1a:85:b6:72: 14:f9:ef:3d:a0:b5:64:6b:4d:29:ff:31:21:25:ee:8f:58:20: 64:a0:8d:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkuQWQl9SwsgOcjKFR6n1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjUxMjExMTgwMTA2WhcNMjUxMjEyMTgwMTA2WjAzMTEwLwYDVQQD EygyYTA2OWJiZmRiZmYyZDc5NTcwNGU4NzcxYWJhZjVlODEwOWY0MzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YV5+/z8wZR+yzG+RDCbx16huHVa eBjIeMEbpVvhs+f1/vF5P1sQBYzALdMHwYRoMDt0L6c1/x0BxJtBSBh9JJa8Im3x DyBiyR0o3tsOVF+su/P1lbfQDix0hra1Es5vjENnfpNYAADGICy9fFYVupxfIBEB v5ZIdjXPz1qlVcnFAYGDXh/Eeg5GXGHSb9ENeFJ4SVNXdZfs5NomHRfv6+e+C7cz BLp+EXGBPh03YBbo7uPbbGt+mOPDanIwHaDHhttW/5f6dmIqSz/oNkxaSEdmSE3e OE/PlA23Y3UbkEpTYX3bcLD9ZMtQ2fnP+E74KaTDNMYzKPf4IWCH70OlfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoGm7/b/y15VwTodxq69egQn0M/MB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2/HGDzn aEaPGvpk9Yt6CqWVrN5b1upL3khr5tnB5fI6kRiVCqOHNCnytKs5wpH9Q0Y4z4MR p+Fr/97bk5mgkdn3q2XtkWFXm431rxoIPjKbD1Ka748rRvcobfyI7vFanTOqy2Ze tGI4GF5YAsLIXhhz59QMvVJQax1ZKq6ppxUOrLs8Ttq/o24mMLpqO0dn/nbm9bP/ yF8BHEtZ9V7SvYuhRNrbSKnwoCZ6mbIGEGO5QKdJSlaXz65MCnBBrgsA7Wafnk7+ EDn1oxmFew5+PA9PngERB1IQj2FjSD2t0gt0fzY8iEoahbZyFPnvPaC1ZGtNKf8x ISXuj1ggZKCN0w== -----END CERTIFICATE-----Generated at Fri Dec 12 01:27:12 2025 by rpki-client