This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json) Hash identifier: CiU5yy5ltRpMloaXr9X+d1RDKVUz6cNQlxYmT4Y/3IE= Subject key identifier: 97:28:1F:AB:10:BE:EB:82:14:EB:0A:1C:3D:5A:92:8C:AE:F9:27:4D Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Certificate serial: 019B1125F40DAC670FFD9F24FF2F6FB158A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft Manifest number: 1686 Signing time: Fri 12 Dec 2025 06:00:58 +0000 Manifest this update: Fri 12 Dec 2025 06:00:58 +0000 Manifest next update: Sat 13 Dec 2025 06:00:58 +0000 Files and hashes: 1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=) 2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=) 3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=) 4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=) 5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: GK+NxJ4fMQVxTPn5qai0iEXtIlkcHYLsz8Hnl2UTrik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:f4:0d:ac:67:0f:fd:9f:24:ff:2f:6f:b1:58:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60 Validity Not Before: Dec 12 06:00:58 2025 GMT Not After : Dec 13 06:00:58 2025 GMT Subject: CN=97281fab10beeb8214eb0a1c3d5a928caef9274d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:13:e1:ff:b7:85:ab:05:f2:40:fd:09:f0: 03:f5:54:a5:70:99:af:f4:73:f1:c5:dd:b4:55:40: c4:95:d8:0a:38:d2:19:84:75:9a:1d:d8:66:30:29: b1:d6:67:1d:f1:e1:b8:c1:9c:3d:c1:a5:b2:42:f7: 9f:bb:b5:be:58:2f:72:b0:83:79:ca:21:58:70:4c: fb:a1:69:e9:d2:ab:79:17:1c:4e:d7:20:b8:22:26: 6f:48:ae:02:ea:9f:bd:da:36:63:4a:a7:5e:04:81: c0:89:9c:77:9e:a5:4c:a3:c7:b4:83:6b:b0:7c:42: f0:a4:6a:4a:6b:1a:c6:20:19:93:10:e8:7f:9b:d7: c2:3b:89:f5:78:09:7b:d9:2a:f6:d6:ea:1d:92:7c: a1:14:af:9e:d7:7e:92:e5:a5:1a:0e:ff:23:6c:18: e1:f9:89:ca:dc:b3:d8:da:ca:e0:03:54:89:03:3e: de:4e:ff:8e:67:0f:83:7a:89:e7:f5:9b:4e:8a:8e: 49:e4:72:6e:61:f2:b3:96:25:9b:4d:ad:43:06:3e: fd:a6:bc:08:e8:64:72:df:d3:e0:d9:97:db:94:5f: 1b:11:00:0d:5e:e1:6e:7a:d6:61:21:6e:75:c1:52: ba:7d:02:42:eb:5b:6a:d3:6b:ab:7b:4f:83:f0:e6: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:28:1F:AB:10:BE:EB:82:14:EB:0A:1C:3D:5A:92:8C:AE:F9:27:4D X509v3 Authority Key Identifier: keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b9:72:69:3b:d8:c7:94:06:dc:8e:ad:f6:99:26:53:e5:a0: dd:fe:ad:dc:c4:26:e6:53:f8:05:12:94:d7:4c:f7:72:c4:26: 08:98:e1:2f:16:be:81:c3:48:b0:ff:f6:40:d4:41:d4:fb:62: 87:58:8c:c8:01:04:40:a7:0d:2e:32:dd:08:89:fb:14:29:17: fc:ce:d9:16:ff:26:3f:9a:ac:41:e8:76:af:b6:3d:2a:2c:9a: 55:97:39:1a:f4:57:88:dd:47:48:28:c3:5c:e8:74:e8:a2:53: 95:d2:e5:e2:74:ac:65:f2:39:5d:54:d8:51:1d:bf:60:e0:cc: 39:52:1a:a5:c7:1e:c1:07:84:3b:5c:f2:d9:74:f5:f2:dd:fe: 3d:e6:a2:4a:26:8e:f6:11:38:49:fe:52:16:a1:16:10:b2:08: 3d:60:78:43:66:ee:0b:45:df:ab:68:94:1d:66:69:e9:a0:67: 80:09:6a:e8:93:37:30:21:a1:71:6f:6f:06:aa:9d:55:27:1c: 74:11:1d:93:67:d7:b1:0f:6e:7f:a8:93:64:04:99:5d:55:1a: 89:66:17:74:96:a7:43:7d:98:ac:0a:b7:30:92:81:e9:6c:71: a6:8c:e7:cd:2a:34:87:24:4e:0e:d1:5b:3a:88:dc:1b:f9:fb: 30:cd:f5:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJfQNrGcP/Z8k/y9vsVihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Mzg4MDdhYmI5Y2UxNWI3YTg5MjU5MmI2ZjAwM2YxYTNl MTZiNjAwHhcNMjUxMjEyMDYwMDU4WhcNMjUxMjEzMDYwMDU4WjAzMTEwLwYDVQQD Eyg5NzI4MWZhYjEwYmVlYjgyMTRlYjBhMWMzZDVhOTI4Y2FlZjkyNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBUT4f+3hasF8kD9CfAD9VSlcJmv 9HPxxd20VUDEldgKONIZhHWaHdhmMCmx1mcd8eG4wZw9waWyQvefu7W+WC9ysIN5 yiFYcEz7oWnp0qt5FxxO1yC4IiZvSK4C6p+92jZjSqdeBIHAiZx3nqVMo8e0g2uw fELwpGpKaxrGIBmTEOh/m9fCO4n1eAl72Sr21uodknyhFK+e136S5aUaDv8jbBjh +YnK3LPY2srgA1SJAz7eTv+OZw+Deonn9ZtOio5J5HJuYfKzliWbTa1DBj79prwI 6GRy39Pg2ZfblF8bEQANXuFuetZhIW51wVK6fQJC61tq02ure0+D8OYjbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcoH6sQvuuCFOsKHD1akoyu+SdNMB8GA1UdIwQY MBaAFMc4gHq7nOFbeoklkrbwA/Gj4WtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWIt M2QxZjMwZTA5MjNiLzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWItM2QxZjMwZTA5MjNi LzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOblyaTvY x5QG3I6t9pkmU+Wg3f6t3MQm5lP4BRKU10z3csQmCJjhLxa+gcNIsP/2QNRB1Pti h1iMyAEEQKcNLjLdCIn7FCkX/M7ZFv8mP5qsQeh2r7Y9KiyaVZc5GvRXiN1HSCjD XOh06KJTldLl4nSsZfI5XVTYUR2/YODMOVIapccewQeEO1zy2XT18t3+PeaiSiaO 9hE4Sf5SFqEWELIIPWB4Q2buC0Xfq2iUHWZp6aBngAlq6JM3MCGhcW9vBqqdVScc dBEdk2fXsQ9uf6iTZASZXVUaiWYXdJanQ32YrAq3MJKB6WxxpoznzSo0hyRODtFb OojcG/n7MM31uw== -----END CERTIFICATE-----Generated at Fri Dec 12 09:24:09 2025 by rpki-client