This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json) Hash identifier: cKFqlERbnEp/MetVkWeNLN8YrApSzz7IYD5OSSrNdPY= Subject key identifier: D8:05:C5:2C:42:84:04:E2:62:31:17:49:59:DC:BA:0D:23:A4:A2:44 Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Certificate serial: 019B1C17CD715C0FCFE197364A510E8020B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft Manifest number: 15C4 Signing time: Sun 14 Dec 2025 09:01:20 +0000 Manifest this update: Sun 14 Dec 2025 09:01:20 +0000 Manifest next update: Mon 15 Dec 2025 09:01:20 +0000 Files and hashes: 1: VnsIEzhd4UJd5pyA_Dc2-bnO2FM.roa (hash: VlwFB7fAgr+iiENhL1pQbq6AXoNzH1bEvRoJP9yVGBU=) 2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: DA4zVG68CYWUFIGN4tf/4UPaePhmwY7EYSD9hVafbiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:cd:71:5c:0f:cf:e1:97:36:4a:51:0e:80:20:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Validity Not Before: Dec 14 09:01:20 2025 GMT Not After : Dec 15 09:01:20 2025 GMT Subject: CN=d805c52c428404e26231174959dcba0d23a4a244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:b4:bc:9b:47:c8:3e:64:04:e4:04:a1:87: 86:8b:5f:05:a5:a4:e4:99:a8:52:99:87:0a:e1:78: fc:7c:11:0e:57:2b:b9:10:ee:ba:41:a7:aa:32:fa: ca:81:47:f4:b9:61:9f:59:56:a8:52:dc:7b:e4:06: c0:c1:5d:8b:a4:70:15:8d:38:63:f2:81:4b:24:45: 5d:f9:5d:37:58:6c:c3:a3:68:4c:25:e7:97:4a:ad: b8:dc:c0:25:fb:0c:06:bd:5d:3c:d2:3c:45:ca:0d: f2:0b:3d:98:45:56:28:38:80:a4:f2:c2:e1:59:15: e6:cf:01:a6:2f:84:8b:ca:87:d8:7e:b3:c4:a6:03: 56:7d:57:c3:77:22:fc:19:b5:e2:05:c1:8e:40:e5: 40:63:82:17:78:05:db:f8:07:88:1c:fb:fc:99:ca: 2f:13:2a:b2:41:68:70:36:f4:54:4d:18:f7:c7:cb: 21:07:79:32:b5:bf:8d:e9:d1:45:12:e7:3b:62:de: b7:1f:8b:89:b0:a9:97:45:7c:99:25:c6:11:e5:fa: 55:88:78:35:ff:11:f7:ea:55:ad:4f:c0:a8:6a:db: 59:78:7b:21:1f:08:6f:77:d3:24:17:7f:bc:53:bf: 01:1b:c3:93:ac:89:cd:92:35:90:dc:98:10:fc:57: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:C5:2C:42:84:04:E2:62:31:17:49:59:DC:BA:0D:23:A4:A2:44 X509v3 Authority Key Identifier: keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:25:30:ed:41:44:d0:dc:38:9b:00:20:08:65:74:7b:9f:03: 75:49:d6:d5:94:ac:b4:0d:17:88:38:52:db:f8:15:f1:2d:c8: 92:17:fa:ce:6b:ff:32:ac:ed:f1:c7:72:fb:9a:c8:c7:df:ba: 82:94:3f:26:5b:b1:c2:fb:39:a2:58:78:6d:5b:59:57:bd:6c: 44:9a:b1:25:81:43:ad:2d:15:23:f6:51:25:c3:19:a5:c6:b4: 3b:b1:bb:0f:af:05:cc:e2:d6:b8:f7:15:0f:b9:bb:d6:e7:b9: ea:a2:d8:95:62:b0:61:ff:75:1e:ec:28:03:3d:b2:65:6d:b7: e8:95:26:9f:9a:c6:80:8a:23:5a:9c:4c:93:d5:04:2b:b7:53: a2:f3:9f:e9:90:d3:ad:e9:a1:53:c5:72:09:55:b6:f3:29:8d: 61:87:b0:9f:b1:8a:a4:c4:f8:ee:f8:a9:24:c8:68:e7:1e:3f: b3:0f:64:a7:c4:e9:ef:0a:1d:65:6f:37:24:dd:7c:c8:fa:e0: 75:d3:30:ed:19:65:bb:00:df:bd:94:33:6f:04:5b:3c:c8:72: 39:67:95:01:4c:c1:0f:da:83:96:1c:7e:82:63:f7:18:07:e3: b9:1d:c1:5c:e4:74:96:c9:c1:03:3d:bd:83:0c:ff:cd:e8:13: c1:c6:6c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF81xXA/P4Zc2SlEOgCC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj ZmJmYWYwHhcNMjUxMjE0MDkwMTIwWhcNMjUxMjE1MDkwMTIwWjAzMTEwLwYDVQQD EyhkODA1YzUyYzQyODQwNGUyNjIzMTE3NDk1OWRjYmEwZDIzYTRhMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R60vJtHyD5kBOQEoYeGi18FpaTk mahSmYcK4Xj8fBEOVyu5EO66QaeqMvrKgUf0uWGfWVaoUtx75AbAwV2LpHAVjThj 8oFLJEVd+V03WGzDo2hMJeeXSq243MAl+wwGvV080jxFyg3yCz2YRVYoOICk8sLh WRXmzwGmL4SLyofYfrPEpgNWfVfDdyL8GbXiBcGOQOVAY4IXeAXb+AeIHPv8mcov EyqyQWhwNvRUTRj3x8shB3kytb+N6dFFEuc7Yt63H4uJsKmXRXyZJcYR5fpViHg1 /xH36lWtT8CoattZeHshHwhvd9MkF3+8U78BG8OTrInNkjWQ3JgQ/FcOGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgFxSxChATiYjEXSVncug0jpKJEMB8GA1UdIwQY MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1 LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSUw7UFE 0Nw4mwAgCGV0e58DdUnW1ZSstA0XiDhS2/gV8S3Ikhf6zmv/Mqzt8cdy+5rIx9+6 gpQ/Jluxwvs5olh4bVtZV71sRJqxJYFDrS0VI/ZRJcMZpca0O7G7D68FzOLWuPcV D7m71ue56qLYlWKwYf91HuwoAz2yZW236JUmn5rGgIojWpxMk9UEK7dTovOf6ZDT remhU8VyCVW28ymNYYewn7GKpMT47vipJMho5x4/sw9kp8Tp7wodZW83JN18yPrg ddMw7RlluwDfvZQzbwRbPMhyOWeVAUzBD9qDlhx+gmP3GAfjuR3BXOR0lsnBAz29 gwz/zegTwcZsLQ== -----END CERTIFICATE-----Generated at Sun Dec 14 18:54:27 2025 by rpki-client