This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json) Hash identifier: jlgNwvS8SrbRXB9dA0dhnX6wiIJiakbGpOjD9dwruBU= Subject key identifier: 9C:93:56:F4:C4:59:BA:A5:01:6B:A3:7F:18:8F:DA:30:49:9F:A3:F0 Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b Certificate serial: 019B2EF939381FB803652084E41EEC7B05DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft Manifest number: 1483 Signing time: Thu 18 Dec 2025 01:00:43 +0000 Manifest this update: Thu 18 Dec 2025 01:00:43 +0000 Manifest next update: Fri 19 Dec 2025 01:00:43 +0000 Files and hashes: 1: 7CZAgUvQPu-wrbV-N9bEd3CgOWs.roa (hash: sMayzuz7AI9s61a/aq9HH1Cc6asWKL5qDPVUoL1bHKQ=) 2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: Zmu9Ov8kVfYLRanWChihMeZ4MYZ9t0h+oDSaePiALpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:39:38:1f:b8:03:65:20:84:e4:1e:ec:7b:05:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b Validity Not Before: Dec 18 01:00:43 2025 GMT Not After : Dec 19 01:00:43 2025 GMT Subject: CN=9c9356f4c459baa5016ba37f188fda30499fa3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:34:75:b8:81:0c:7c:1e:df:55:80:8a:23: 28:b8:c6:42:f3:ee:75:9b:ef:28:55:2e:c9:9a:f4: 22:f2:86:32:bd:b0:18:37:6c:1d:8f:55:b1:63:bf: 15:e3:ab:82:f5:8b:f3:07:da:57:f5:ea:a3:7d:7b: 50:29:df:ab:a7:5b:d3:90:ca:67:09:cf:4b:e7:b4: 01:27:c8:08:1f:f9:23:de:8a:a3:12:f9:28:57:24: 36:45:03:24:b1:4f:38:b0:22:49:f1:f7:e2:82:ed: 46:ce:9e:4b:e0:ff:87:f8:3c:4a:15:1c:90:5b:4d: 29:59:13:af:a0:a6:70:f9:50:b5:9e:4a:77:d5:e6: 1e:80:32:c7:de:66:49:63:97:a9:24:83:23:81:e1: bf:49:69:aa:61:1a:1d:38:50:1a:6e:d5:c1:2d:94: 0e:b3:e3:fa:6a:74:aa:6c:62:9f:07:6b:b0:76:8f: d5:ee:fb:ea:b5:1d:45:0d:da:f9:03:7c:d9:00:d6: d9:ed:ef:f7:b6:7a:be:7c:09:99:d8:c1:4e:44:09: c0:0c:28:92:5b:30:dc:de:29:71:f8:99:57:ad:f4: 55:cb:35:3e:81:a9:62:92:ec:67:e2:94:9d:9e:56: c1:e1:3d:22:e5:e1:ce:81:ab:28:33:ab:3b:16:fc: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:93:56:F4:C4:59:BA:A5:01:6B:A3:7F:18:8F:DA:30:49:9F:A3:F0 X509v3 Authority Key Identifier: keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b6:3e:af:a1:50:90:b8:8e:0d:56:1e:9c:9e:db:58:f3:f7: cc:75:55:1c:38:a7:a7:75:af:d6:8b:1d:c4:48:4e:70:5e:33: c9:dd:6b:b0:a8:eb:e7:fd:69:f2:82:bc:af:56:c3:4f:0a:a4: a5:e5:3a:50:5a:ff:0e:2f:45:fc:24:82:92:15:3d:99:97:85: aa:e1:bf:c1:11:17:03:cd:c6:a1:92:d4:d6:85:29:7f:76:45: cd:8e:9a:e8:2d:fa:0e:bc:a5:a0:00:ec:d6:d3:f3:da:ba:c5: c7:63:56:11:76:d2:f3:3d:a8:67:3c:50:37:64:3a:ad:ff:db: 4f:c3:66:8e:ed:42:3c:de:ed:47:1d:1d:07:da:b1:0e:69:81: 94:b0:8f:32:c3:6f:10:f2:dc:4f:60:d9:89:7c:96:0e:88:f1: 26:07:30:e1:3c:52:29:73:ce:2d:cc:e8:5f:60:ea:bd:e5:20: c1:37:08:43:f1:46:f7:85:f1:1e:09:7c:67:05:ba:59:be:43: 33:4e:42:8b:78:2e:88:59:68:6a:59:ca:f7:ca:74:4a:38:50: 7a:db:c6:08:7c:40:cb:15:c9:f2:bf:4d:ed:e3:70:58:c5:57: ec:8c:e2:46:54:4c:7a:20:0c:9b:8b:3b:17:b6:18:4c:54:e1: f9:6a:27:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+Tk4H7gDZSCE5B7sewXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTE0NzI0ODA2ODNjNjE5NzBmNjA1ZmIxOTllZWI2ZWFl MTIxOGIwHhcNMjUxMjE4MDEwMDQzWhcNMjUxMjE5MDEwMDQzWjAzMTEwLwYDVQQD Eyg5YzkzNTZmNGM0NTliYWE1MDE2YmEzN2YxODhmZGEzMDQ5OWZhM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveA0dbiBDHwe31WAiiMouMZC8+51 m+8oVS7JmvQi8oYyvbAYN2wdj1WxY78V46uC9YvzB9pX9eqjfXtQKd+rp1vTkMpn Cc9L57QBJ8gIH/kj3oqjEvkoVyQ2RQMksU84sCJJ8ffigu1Gzp5L4P+H+DxKFRyQ W00pWROvoKZw+VC1nkp31eYegDLH3mZJY5epJIMjgeG/SWmqYRodOFAabtXBLZQO s+P6anSqbGKfB2uwdo/V7vvqtR1FDdr5A3zZANbZ7e/3tnq+fAmZ2MFORAnADCiS WzDc3ilx+JlXrfRVyzU+galikuxn4pSdnlbB4T0i5eHOgasoM6s7Fvx/JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyTVvTEWbqlAWujfxiP2jBJn6PwMB8GA1UdIwQY MBaAFMVRRySAaDxhlw9gX7GZ7rbq4SGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzIt NTdlYjVlZjg5NmUxLzEveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zOWVmODEtZGI4NS00N2Q2LTg3YzItNTdlYjVlZjg5NmUx LzEveFZGSEpJQm9QR0dYRDJCZnNabnV0dXJoSVlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7Y+r6FQ kLiODVYenJ7bWPP3zHVVHDinp3Wv1osdxEhOcF4zyd1rsKjr5/1p8oK8r1bDTwqk peU6UFr/Di9F/CSCkhU9mZeFquG/wREXA83GoZLU1oUpf3ZFzY6a6C36DryloADs 1tPz2rrFx2NWEXbS8z2oZzxQN2Q6rf/bT8Nmju1CPN7tRx0dB9qxDmmBlLCPMsNv EPLcT2DZiXyWDojxJgcw4TxSKXPOLczoX2DqveUgwTcIQ/FG94XxHgl8ZwW6Wb5D M05Ci3guiFloalnK98p0SjhQetvGCHxAyxXJ8r9N7eNwWMVX7IziRlRMeiAMm4s7 F7YYTFTh+Wonbg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:27:36 2025 by rpki-client