This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json) Hash identifier: lztNxqBIYp+4sGVmljQT+ZTZgeeQNM/PQ4WFPgumMN4= Subject key identifier: A0:F6:BA:98:B5:6C:4A:4A:ED:2F:8B:79:9C:66:DE:00:8B:40:B0:C8 Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87 Certificate serial: 019B3FECB1F1814C980F0FE56C9F17289885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 08:00:35 +0000 Manifest this update: Sun 21 Dec 2025 08:00:35 +0000 Manifest next update: Mon 22 Dec 2025 08:00:35 +0000 Files and hashes: 1: 4EBLQiUigXa_kHRgKUQlBdf2vQs.roa (hash: jB+fJelPc+bKwLGuPQtWiTZOTzyJjm6S+9AcmCEgdhI=) 2: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=) 3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: 4aNwWqbTX3TmQ4bVpB9a4Z4+D5Q7/lo7KjLSHEV08HI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:b1:f1:81:4c:98:0f:0f:e5:6c:9f:17:28:98:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c612adfabf915df33198935808cf0df9738dca87 Validity Not Before: Dec 21 08:00:35 2025 GMT Not After : Dec 22 08:00:35 2025 GMT Subject: CN=a0f6ba98b56c4a4aed2f8b799c66de008b40b0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:8f:0a:6c:38:ee:ce:f6:18:49:5d:d8:b9: 76:f4:3a:ac:0f:b1:f9:76:20:18:b0:5d:57:74:52: e4:fa:dc:28:08:d8:b0:31:5a:ba:9f:fe:99:dc:8d: 20:4c:fe:e9:77:d4:ea:1e:d0:be:92:b4:5a:7a:4a: 5a:b7:80:6e:49:02:85:06:2e:27:4e:96:ef:40:ee: 98:e6:9a:b4:db:ea:23:00:5e:eb:ee:1f:22:8c:95: b5:84:4a:04:6d:19:4d:d8:d2:6d:98:97:19:78:fc: 76:13:91:72:ae:08:18:23:87:7c:74:20:90:d3:05: 4b:b6:52:f4:aa:23:c9:b4:d6:44:eb:4b:62:16:24: 9b:3d:5a:cc:9f:17:79:8c:5f:6d:f3:87:2d:41:2f: 8e:c0:e2:e4:11:9c:b7:f1:81:c3:05:2a:c4:03:9b: fc:70:38:0d:ed:ca:c8:76:d7:f9:be:67:4a:68:cf: 94:1a:1f:75:68:59:76:8b:ce:9c:c2:a3:39:8c:b2: 2f:dc:22:08:39:8e:fe:db:f7:49:bf:84:f7:c5:57: d5:6c:e6:12:2a:5f:93:2e:a7:1b:a6:ec:48:9e:a8: 01:3d:8b:96:bd:c2:4c:68:f1:15:f5:38:be:91:05: eb:f0:fc:12:d9:68:db:05:10:99:f8:71:97:38:b6: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F6:BA:98:B5:6C:4A:4A:ED:2F:8B:79:9C:66:DE:00:8B:40:B0:C8 X509v3 Authority Key Identifier: keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9e:4d:db:14:af:7d:54:e3:f7:51:2a:7c:b4:10:27:85:3c: 5d:11:2d:32:42:11:2a:77:5c:c9:29:5a:4a:ab:14:7e:31:ac: 23:cb:95:c3:be:38:42:2b:0c:95:a5:fe:bd:3c:66:66:03:e7: 9d:b1:6e:94:5b:1c:26:a7:26:e7:46:a8:b2:61:d5:7a:b2:c2: d5:33:8d:da:2f:30:8e:65:53:cb:08:52:6a:24:3b:3e:e6:d8: ff:97:90:cf:f5:45:36:a1:e9:b7:9f:5f:5e:7f:ac:a0:62:2a: 67:7e:27:e6:55:80:54:68:74:34:4a:7d:f7:1d:b1:f9:24:7a: 2b:9c:30:53:12:86:60:85:db:63:39:bf:55:cf:a9:83:24:42: 9b:ef:c5:10:96:88:b4:55:1d:06:eb:bb:3b:42:a7:d2:8a:17: e5:1e:89:ab:f5:81:b8:9b:b5:06:52:74:9a:17:25:9f:62:6b: 22:5c:a5:40:0e:1a:f3:47:97:6d:ec:b0:fb:b1:c9:a9:fc:c9: d5:52:3a:af:6f:d4:e2:c6:a8:51:b1:26:05:3b:45:98:f2:65: 29:2b:2b:5f:9b:f4:53:c9:d0:a7:4c:a7:30:88:e2:4b:66:68: 48:d4:89:21:ec:3a:99:65:40:2c:0d:50:db:45:68:4a:6f:5e: d9:97:6d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7LHxgUyYDw/lbJ8XKJiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4 ZGNhODcwHhcNMjUxMjIxMDgwMDM1WhcNMjUxMjIyMDgwMDM1WjAzMTEwLwYDVQQD EyhhMGY2YmE5OGI1NmM0YTRhZWQyZjhiNzk5YzY2ZGUwMDhiNDBiMGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCePCmw47s72GEld2Ll29DqsD7H5 diAYsF1XdFLk+twoCNiwMVq6n/6Z3I0gTP7pd9TqHtC+krRaekpat4BuSQKFBi4n TpbvQO6Y5pq02+ojAF7r7h8ijJW1hEoEbRlN2NJtmJcZePx2E5FyrggYI4d8dCCQ 0wVLtlL0qiPJtNZE60tiFiSbPVrMnxd5jF9t84ctQS+OwOLkEZy38YHDBSrEA5v8 cDgN7crIdtf5vmdKaM+UGh91aFl2i86cwqM5jLIv3CIIOY7+2/dJv4T3xVfVbOYS Kl+TLqcbpuxInqgBPYuWvcJMaPEV9Ti+kQXr8PwS2WjbBRCZ+HGXOLZblwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD2upi1bEpK7S+LeZxm3gCLQLDIMB8GA1UdIwQY MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ5N2xSv fVTj91EqfLQQJ4U8XREtMkIRKndcySlaSqsUfjGsI8uVw744QisMlaX+vTxmZgPn nbFulFscJqcm50aosmHVerLC1TON2i8wjmVTywhSaiQ7PubY/5eQz/VFNqHpt59f Xn+soGIqZ34n5lWAVGh0NEp99x2x+SR6K5wwUxKGYIXbYzm/Vc+pgyRCm+/FEJaI tFUdBuu7O0Kn0ooX5R6Jq/WBuJu1BlJ0mhcln2JrIlylQA4a80eXbeyw+7HJqfzJ 1VI6r2/U4saoUbEmBTtFmPJlKSsrX5v0U8nQp0ynMIjiS2ZoSNSJIew6mWVALA1Q 20VoSm9e2ZdtMg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:31 2025 by rpki-client