This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json) Hash identifier: OYgS2bB/gj7uEu+OEKiRLWtbK/qGp3JJSNjC1e/Qm7c= Subject key identifier: C9:5B:FF:AD:37:79:1F:32:C0:AF:11:DE:07:1A:D8:31:F3:6F:76:67 Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87 Certificate serial: 019B345665EFEB0D4E8A034BAC7ABFFFB1AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 02:00:35 +0000 Manifest this update: Fri 19 Dec 2025 02:00:35 +0000 Manifest next update: Sat 20 Dec 2025 02:00:35 +0000 Files and hashes: 1: 4EBLQiUigXa_kHRgKUQlBdf2vQs.roa (hash: jB+fJelPc+bKwLGuPQtWiTZOTzyJjm6S+9AcmCEgdhI=) 2: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=) 3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: d6pW+MueumrXl4atU1pEgkzaUpaQxXYx1z7GnnJKDMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:65:ef:eb:0d:4e:8a:03:4b:ac:7a:bf:ff:b1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c612adfabf915df33198935808cf0df9738dca87 Validity Not Before: Dec 19 02:00:35 2025 GMT Not After : Dec 20 02:00:35 2025 GMT Subject: CN=c95bffad37791f32c0af11de071ad831f36f7667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:05:03:ef:b5:85:6d:ae:47:a9:36:3d:78: cf:4d:27:eb:6d:3c:7d:4e:93:85:d9:b8:75:21:6f: 43:c6:d2:a0:ec:8f:10:13:04:e1:75:61:75:74:54: 6a:4d:12:d1:e2:96:7c:4c:03:d9:7d:2a:92:f0:e1: 90:c3:48:2b:3f:b8:e3:67:41:2f:62:e9:b5:10:ce: c9:a7:d4:69:32:ca:10:86:af:c6:b3:4f:b5:a2:65: 80:05:a2:40:06:e1:60:ad:8b:84:d6:b6:c1:d7:b6: d7:cf:b9:56:cf:33:db:bd:8f:5b:d4:8f:cd:17:05: 7c:98:27:0f:94:c3:d1:06:6d:76:f1:71:5d:a0:c7: 86:8f:13:28:16:5f:55:5a:b0:b1:ee:10:5e:7b:31: 38:35:5a:4f:95:fa:79:b1:cc:2c:f3:2f:4d:c8:32: 88:ef:55:d3:b5:a7:74:76:0f:ab:e4:d1:d7:ce:96: b1:49:b7:6c:14:4c:39:97:46:ba:0c:f4:6b:31:ef: 9f:79:5e:1f:3e:bd:9e:5c:46:f7:0e:41:31:de:63: 3d:d0:2f:ab:ed:c2:3e:00:24:87:2f:8a:6e:33:19: 63:8e:fc:17:5a:a2:ee:df:a8:fe:6a:a3:8d:9e:b2: ea:bf:63:f6:67:48:14:ab:ca:cf:21:fd:94:8e:6a: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5B:FF:AD:37:79:1F:32:C0:AF:11:DE:07:1A:D8:31:F3:6F:76:67 X509v3 Authority Key Identifier: keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d0:24:97:1a:45:f1:3a:f4:ba:71:2b:c7:85:af:ec:5c:3b: 56:4c:03:ca:b2:bf:3e:23:cf:0c:f9:99:4f:a3:dd:84:6f:48: 22:2d:a8:ae:e6:30:5f:cd:38:fa:1f:9d:8e:43:58:03:5f:59: dc:f8:36:4f:ae:98:24:25:cb:11:cb:2a:71:3d:90:52:a5:cc: 52:03:c3:7a:06:ca:28:5d:fc:58:0a:2f:1a:3d:ff:83:e0:b3: 50:f8:a7:4a:c9:ce:0f:ee:77:89:c2:51:8a:fd:2e:f6:81:10: c4:92:55:b0:45:2a:97:6e:2c:d1:ae:b9:7a:6b:d6:fc:81:95: b7:54:d1:de:66:dc:c3:e3:45:65:0b:e3:f3:47:5c:22:ae:2c: de:9e:ab:05:40:84:f1:ae:fd:0c:e5:99:55:58:f7:c5:c1:e0: e0:cb:15:7a:86:0d:81:8a:9f:b5:af:dd:cb:28:0c:61:ac:ed: 22:d9:59:99:f9:03:f5:d4:b8:97:df:f4:a2:e7:4b:1e:6f:d7: bd:22:5a:ed:d9:a5:eb:b6:a4:70:72:8e:46:3b:27:a7:4f:f8: e8:1c:73:3b:9a:4a:af:af:d3:25:ee:30:59:75:93:93:98:35: 0e:b8:17:44:47:cc:03:84:04:3f:88:f1:f0:41:62:2f:be:af: f5:83:22:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VmXv6w1OigNLrHq//7GuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4 ZGNhODcwHhcNMjUxMjE5MDIwMDM1WhcNMjUxMjIwMDIwMDM1WjAzMTEwLwYDVQQD EyhjOTViZmZhZDM3NzkxZjMyYzBhZjExZGUwNzFhZDgzMWYzNmY3NjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvoFA++1hW2uR6k2PXjPTSfrbTx9 TpOF2bh1IW9DxtKg7I8QEwThdWF1dFRqTRLR4pZ8TAPZfSqS8OGQw0grP7jjZ0Ev Yum1EM7Jp9RpMsoQhq/Gs0+1omWABaJABuFgrYuE1rbB17bXz7lWzzPbvY9b1I/N FwV8mCcPlMPRBm128XFdoMeGjxMoFl9VWrCx7hBeezE4NVpPlfp5scws8y9NyDKI 71XTtad0dg+r5NHXzpaxSbdsFEw5l0a6DPRrMe+feV4fPr2eXEb3DkEx3mM90C+r 7cI+ACSHL4puMxljjvwXWqLu36j+aqONnrLqv2P2Z0gUq8rPIf2UjmpyvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlb/603eR8ywK8R3gca2DHzb3ZnMB8GA1UdIwQY MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANAklxpF 8Tr0unErx4Wv7Fw7VkwDyrK/PiPPDPmZT6PdhG9IIi2oruYwX804+h+djkNYA19Z 3Pg2T66YJCXLEcsqcT2QUqXMUgPDegbKKF38WAovGj3/g+CzUPinSsnOD+53icJR iv0u9oEQxJJVsEUql24s0a65emvW/IGVt1TR3mbcw+NFZQvj80dcIq4s3p6rBUCE 8a79DOWZVVj3xcHg4MsVeoYNgYqfta/dyygMYaztItlZmfkD9dS4l9/0oudLHm/X vSJa7dml67akcHKORjsnp0/46BxzO5pKr6/TJe4wWXWTk5g1DrgXREfMA4QEP4jx 8EFiL76v9YMi7w== -----END CERTIFICATE-----Generated at Fri Dec 19 11:38:04 2025 by rpki-client