This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json) Hash identifier: f43SeLOT2L4WU6rCGu2oo8mp4Kxghpyv2m4SOqskfbE= Subject key identifier: 2E:F6:29:FE:5E:E5:BA:01:15:98:A3:C6:09:95:AA:D0:81:70:4D:CE Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f Certificate serial: 019B19BC596AB3EFE73F915949F9DE9D54E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft Manifest number: 1334 Signing time: Sat 13 Dec 2025 22:02:12 +0000 Manifest this update: Sat 13 Dec 2025 22:02:12 +0000 Manifest next update: Sun 14 Dec 2025 22:02:12 +0000 Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=) 2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=) 3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: tkNCOAWlktrQix7ndDmxA5PMq9vp7SWXWHIyycRYeps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:59:6a:b3:ef:e7:3f:91:59:49:f9:de:9d:54:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f Validity Not Before: Dec 13 22:02:12 2025 GMT Not After : Dec 14 22:02:12 2025 GMT Subject: CN=2ef629fe5ee5ba011598a3c60995aad081704dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:e9:42:40:51:dd:06:ec:4d:9c:3e:01:85: e7:14:99:03:28:8d:3b:47:dc:b6:02:63:b3:85:c4: 8d:5e:1c:bf:4b:07:c6:33:ad:5b:de:88:95:eb:7b: 0d:56:30:bf:1f:40:d6:b7:a3:b6:9d:96:c1:b1:6d: cf:69:24:53:a0:4a:94:2b:17:35:3b:0b:57:17:fd: a1:08:70:d5:12:7a:bc:4b:9b:c9:77:e3:60:a8:f9: 58:48:6e:92:fd:57:15:5a:1b:e9:3d:cf:7f:24:b2: db:b9:4a:2a:68:62:22:f9:ae:95:de:ef:7b:7f:39: 45:b9:2a:20:e0:09:90:f9:0a:fa:19:3f:37:ff:8e: 65:d0:a9:17:0a:e2:65:13:43:42:17:5d:19:f6:11: 01:b5:eb:41:d0:cb:37:d7:6b:11:85:c4:a8:2a:6a: ca:d0:8f:77:9e:93:ed:e0:9b:80:ed:60:d8:c9:d7: 7a:89:ac:95:d1:c4:47:47:18:a2:42:35:00:0c:1b: a7:26:a7:43:03:2c:e1:6d:9b:ff:36:17:a8:59:f6: 0c:e5:65:8c:18:3e:d4:17:00:dc:e6:98:dc:86:17: 2f:91:78:0b:ab:c0:32:93:f7:2c:1a:64:ec:61:a0: b4:f0:34:fc:02:46:eb:fa:b5:56:a8:92:45:e6:66: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F6:29:FE:5E:E5:BA:01:15:98:A3:C6:09:95:AA:D0:81:70:4D:CE X509v3 Authority Key Identifier: keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ae:90:bf:05:8c:7e:23:12:75:a7:b3:5f:29:b5:c5:e8:80: 66:56:af:47:f3:de:a2:73:eb:ad:0e:49:b3:ad:3a:77:28:c8: e3:c9:c4:64:a0:70:6e:d3:18:c0:da:3e:97:b6:57:47:da:53: cc:e0:3b:f3:72:75:24:95:1d:5a:35:aa:9a:22:03:0d:6d:6a: 9d:6f:db:48:83:71:23:7c:c6:bc:d0:7f:e9:50:27:ed:f0:7c: 94:ef:f3:e2:1a:ef:a1:73:36:c2:92:c9:24:d3:41:1b:eb:ae: 91:4b:47:26:b9:27:33:93:b3:86:5d:2c:08:1b:92:1b:b2:f5: db:68:0b:19:0e:89:a6:12:04:34:16:b0:79:1c:57:ef:9a:21: 88:53:25:5c:f2:bf:6a:db:cb:1f:0d:96:c4:15:cd:ba:d6:8c: c0:f4:09:de:d3:51:d2:09:2e:74:49:0c:e8:c0:85:d1:f5:f1: ec:dd:29:1e:f9:6d:43:6f:61:e5:d9:2f:46:3c:5b:a5:4e:16: 94:1a:38:94:0c:dd:f0:87:57:5c:76:5f:7c:f2:2c:cf:de:1d: e9:e2:be:47:1f:b8:7c:c7:de:0d:41:da:b7:56:8e:a5:6b:c2: 7e:43:87:b9:a5:5c:cd:a6:23:dc:02:1c:5b:79:78:9d:2c:87: 56:85:37:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvFlqs+/nP5FZSfnenVToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTZiY2NiZGM5ZjJlNGJhZGMwYTA1N2VhMDhmN2M3NDgx ODhiMWYwHhcNMjUxMjEzMjIwMjEyWhcNMjUxMjE0MjIwMjEyWjAzMTEwLwYDVQQD EygyZWY2MjlmZTVlZTViYTAxMTU5OGEzYzYwOTk1YWFkMDgxNzA0ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrXpQkBR3QbsTZw+AYXnFJkDKI07 R9y2AmOzhcSNXhy/SwfGM61b3oiV63sNVjC/H0DWt6O2nZbBsW3PaSRToEqUKxc1 OwtXF/2hCHDVEnq8S5vJd+NgqPlYSG6S/VcVWhvpPc9/JLLbuUoqaGIi+a6V3u97 fzlFuSog4AmQ+Qr6GT83/45l0KkXCuJlE0NCF10Z9hEBtetB0Ms312sRhcSoKmrK 0I93npPt4JuA7WDYydd6iayV0cRHRxiiQjUADBunJqdDAyzhbZv/NheoWfYM5WWM GD7UFwDc5pjchhcvkXgLq8Ayk/csGmTsYaC08DT8Akbr+rVWqJJF5mZtMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC72Kf5e5boBFZijxgmVqtCBcE3OMB8GA1UdIwQY MBaAFMVWvMvcny5LrcCgV+oI98dIGIsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYt NDJlYTU1MTRlNzIyLzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYtNDJlYTU1MTRlNzIy LzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP66QvwWM fiMSdaezXym1xeiAZlavR/PeonPrrQ5Js606dyjI48nEZKBwbtMYwNo+l7ZXR9pT zOA783J1JJUdWjWqmiIDDW1qnW/bSINxI3zGvNB/6VAn7fB8lO/z4hrvoXM2wpLJ JNNBG+uukUtHJrknM5Ozhl0sCBuSG7L122gLGQ6JphIENBaweRxX75ohiFMlXPK/ atvLHw2WxBXNutaMwPQJ3tNR0gkudEkM6MCF0fXx7N0pHvltQ29h5dkvRjxbpU4W lBo4lAzd8IdXXHZffPIsz94d6eK+Rx+4fMfeDUHat1aOpWvCfkOHuaVczaYj3AIc W3l4nSyHVoU3sw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:12:09 2025 by rpki-client