This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json) Hash identifier: ocVc5qJThmAcHBc/QORBV0ooUCzrZ2fCgKfWuNuhlbA= Subject key identifier: E5:91:28:55:BB:5E:2B:8E:15:48:73:83:DD:FA:05:49:8C:70:EC:F7 Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed Certificate serial: 019B2C2F9A88F1299C7BB46D0F0D684D3A7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft Manifest number: 177B Signing time: Wed 17 Dec 2025 12:01:15 +0000 Manifest this update: Wed 17 Dec 2025 12:01:15 +0000 Manifest next update: Thu 18 Dec 2025 12:01:15 +0000 Files and hashes: 1: kMIoPYj99g2K5sWXNcD0fsxHkHM.roa (hash: FopABAV6PSptIp6OTBNiTRgtYU723NWq9ChEZhzR3FM=) 2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: cOP1vI6kKkHMLwv/CQQs5A2N+/Agu9EdD6ey9HVj19A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:9a:88:f1:29:9c:7b:b4:6d:0f:0d:68:4d:3a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed Validity Not Before: Dec 17 12:01:15 2025 GMT Not After : Dec 18 12:01:15 2025 GMT Subject: CN=e5912855bb5e2b8e15487383ddfa05498c70ecf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:eb:7a:90:19:88:e6:72:61:f9:2a:ab:1f: 73:5b:0e:bd:ca:61:22:a4:ae:d8:ad:f2:e6:16:fd: 34:e6:3a:88:43:ea:c2:87:ef:c3:0e:69:f2:b9:ca: da:1a:45:13:89:6c:fd:0f:08:ab:e1:08:1e:b8:50: fe:c6:32:eb:df:6b:b6:3c:f5:8b:1e:df:4c:89:d7: 89:ce:10:d1:61:d1:7b:f0:b4:12:0c:c1:f8:88:16: d3:36:9a:1b:65:81:51:14:a7:c9:cf:c0:b3:20:55: 8e:1a:3e:48:89:11:64:99:97:03:5b:19:6c:eb:e7: cd:a8:c0:f1:54:d8:34:6f:61:d5:4a:ac:80:38:4b: 4d:ee:af:05:80:03:5b:18:c2:6c:1b:11:e1:22:a0: 61:64:53:b3:37:4a:4e:38:af:6e:08:87:2e:c0:79: 55:f6:91:66:ac:b1:42:c0:23:8c:f2:d7:15:77:8f: cf:4f:d9:66:4f:12:4d:67:68:e4:ce:d7:a8:55:31: ec:06:72:88:5d:e6:52:b6:57:8c:ba:a4:78:02:f8: c8:0d:f4:38:15:b1:4d:34:b0:dd:79:c2:11:8b:d9: 60:a9:4d:a4:81:02:51:42:fd:86:ef:30:15:b3:98: b4:d3:1f:85:01:96:99:ec:e1:71:65:8c:f0:f3:e4: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:28:55:BB:5E:2B:8E:15:48:73:83:DD:FA:05:49:8C:70:EC:F7 X509v3 Authority Key Identifier: keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:62:e7:fa:bc:1a:90:6c:03:7e:a4:3f:90:d9:db:3e:74:08: c0:70:d0:71:64:49:76:a1:01:80:13:60:2e:d7:99:69:78:73: 9f:4b:cf:b7:14:66:fe:3e:e4:3c:ea:12:6c:05:00:8a:0c:43: 4d:25:d1:6c:da:13:9e:e2:51:65:e1:b0:24:93:aa:70:ed:9b: 9d:90:ea:52:ac:51:40:93:cd:79:ac:5f:51:10:47:fc:75:08: 34:73:f5:0b:83:7d:c2:82:cb:33:3f:0c:5a:4c:34:e4:7b:83: eb:e8:5d:97:71:09:c1:8c:98:ad:72:c6:ec:74:60:17:eb:2f: 82:0c:52:75:16:c6:5a:01:94:e2:48:bb:9d:61:db:20:c6:ce: 71:16:26:b2:2f:b0:3c:f5:d8:29:6a:54:58:5f:22:a3:e1:bb: 24:84:87:d7:dc:68:f9:79:e1:70:f0:56:b3:66:a5:07:83:e7: 6f:38:90:d5:03:dc:26:c1:47:3e:f2:c5:02:f8:23:5d:73:26: d4:64:6a:c7:d5:70:cf:2d:e9:1e:3a:71:7c:cc:10:09:38:e9: 67:3f:3e:60:8a:7d:62:cd:9b:3d:0c:a9:96:ef:00:61:24:17: d6:d5:f5:0b:34:ef:31:b2:05:35:1f:5f:18:b3:c3:5d:f0:6b: 83:0d:d0:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL5qI8Smce7RtDw1oTTp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTJiYjNkYTY1Y2FhYjUyNDg1MWVmODZjZTliYWE2MjA3 NGUxZWQwHhcNMjUxMjE3MTIwMTE1WhcNMjUxMjE4MTIwMTE1WjAzMTEwLwYDVQQD EyhlNTkxMjg1NWJiNWUyYjhlMTU0ODczODNkZGZhMDU0OThjNzBlY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDrrepAZiOZyYfkqqx9zWw69ymEi pK7YrfLmFv005jqIQ+rCh+/DDmnyucraGkUTiWz9Dwir4QgeuFD+xjLr32u2PPWL Ht9MideJzhDRYdF78LQSDMH4iBbTNpobZYFRFKfJz8CzIFWOGj5IiRFkmZcDWxls 6+fNqMDxVNg0b2HVSqyAOEtN7q8FgANbGMJsGxHhIqBhZFOzN0pOOK9uCIcuwHlV 9pFmrLFCwCOM8tcVd4/PT9lmTxJNZ2jkzteoVTHsBnKIXeZStleMuqR4AvjIDfQ4 FbFNNLDdecIRi9lgqU2kgQJRQv2G7zAVs5i00x+FAZaZ7OFxZYzw8+QTeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWRKFW7XiuOFUhzg936BUmMcOz3MB8GA1UdIwQY MBaAFMQSuz2mXKq1JIUe+GzpuqYgdOHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgt OWI5MzJlY2QyZWNjLzEveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgtOWI5MzJlY2QyZWNj LzEveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2Ln+rwa kGwDfqQ/kNnbPnQIwHDQcWRJdqEBgBNgLteZaXhzn0vPtxRm/j7kPOoSbAUAigxD TSXRbNoTnuJRZeGwJJOqcO2bnZDqUqxRQJPNeaxfURBH/HUINHP1C4N9woLLMz8M Wkw05HuD6+hdl3EJwYyYrXLG7HRgF+svggxSdRbGWgGU4ki7nWHbIMbOcRYmsi+w PPXYKWpUWF8io+G7JISH19xo+XnhcPBWs2alB4PnbziQ1QPcJsFHPvLFAvgjXXMm 1GRqx9Vwzy3pHjpxfMwQCTjpZz8+YIp9Ys2bPQyplu8AYSQX1tX1CzTvMbIFNR9f GLPDXfBrgw3QiA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:18 2025 by rpki-client