This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json) Hash identifier: dRWllOyT8n1JKMRUGgOV7nUpkVutc/2nf9KOmXkkJKc= Subject key identifier: 2F:23:C4:90:93:B5:3C:84:5E:99:CB:09:23:46:88:9C:0A:FE:60:A3 Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87 Certificate serial: 019B49949FD632FAB4500DB71CFE3FFD6473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 05:00:35 +0000 Manifest this update: Tue 23 Dec 2025 05:00:35 +0000 Manifest next update: Wed 24 Dec 2025 05:00:35 +0000 Files and hashes: 1: 4EBLQiUigXa_kHRgKUQlBdf2vQs.roa (hash: jB+fJelPc+bKwLGuPQtWiTZOTzyJjm6S+9AcmCEgdhI=) 2: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=) 3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: LGn5+8RpuItbUToZhH6G3yTOD9IkMbaLv1+2jFB/xFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:9f:d6:32:fa:b4:50:0d:b7:1c:fe:3f:fd:64:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c612adfabf915df33198935808cf0df9738dca87 Validity Not Before: Dec 23 05:00:35 2025 GMT Not After : Dec 24 05:00:35 2025 GMT Subject: CN=2f23c49093b53c845e99cb092346889c0afe60a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:86:ec:df:ca:6b:95:2c:b0:b7:e6:84:a9:f6: 69:44:06:f5:19:67:fc:50:c5:d7:3a:89:72:af:a5: 8b:4b:5e:b8:d5:da:de:a2:cc:64:03:de:1e:b9:20: ab:47:d2:14:23:9a:92:3e:1f:46:78:74:0a:72:c7: 21:f7:ce:16:cb:58:82:01:40:1c:d3:51:01:af:6d: 2c:c2:2f:fa:32:ef:09:f1:7d:3f:9a:de:ff:1a:53: 16:21:95:7f:a1:91:59:3f:89:6a:49:0e:0a:ba:de: 4d:5b:3c:e7:ca:3d:00:0d:f4:e0:19:ef:22:1e:a2: b4:23:f9:0e:59:af:78:60:24:de:78:c2:26:82:a4: 04:05:b5:d2:73:f3:ba:65:fb:7d:56:d2:15:29:a7: 8d:f9:f9:51:a9:1c:6d:2f:56:e2:f8:6c:ce:22:7f: 2c:dc:c1:49:34:fd:1d:5d:24:0a:f4:b2:f1:81:43: 92:ce:22:9b:bc:5b:fd:4b:d4:95:1d:5e:11:67:7f: 7e:13:d4:be:f3:16:19:1c:83:93:e4:7b:80:ad:23: 4a:cc:3c:f6:e6:12:77:ff:78:d4:43:7c:0a:14:fe: 27:20:6a:99:48:77:38:27:40:5e:d9:da:6e:0b:a2: d6:55:b2:cb:3c:92:3b:20:a9:0f:64:57:b6:3c:bb: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:23:C4:90:93:B5:3C:84:5E:99:CB:09:23:46:88:9C:0A:FE:60:A3 X509v3 Authority Key Identifier: keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:be:e5:73:5f:75:59:60:76:5e:36:18:c2:d8:f9:05:73:9a: da:68:4e:46:c3:8b:83:8e:5c:07:75:88:57:c1:64:05:7c:5b: e6:aa:b2:18:65:83:bb:ad:5b:bf:7b:82:26:46:e7:96:45:a8: 4c:b7:b5:af:55:fe:f2:84:ac:ef:c0:58:82:05:70:00:58:99: b0:e5:d8:29:90:38:a1:1a:0c:73:c7:9a:47:ba:4b:99:d2:2c: aa:f5:e1:5c:58:08:39:84:10:54:36:35:c3:ed:de:22:e5:94: ce:ce:25:33:10:20:db:70:1b:91:3a:bf:d7:ae:d9:37:75:71: 91:30:08:78:64:9e:c2:56:a9:77:ed:b4:f4:68:bc:16:59:d2: c0:92:75:4f:12:51:02:9f:61:e7:9d:97:89:a0:30:0a:37:77: d5:cc:a8:7f:a6:4f:4c:7e:39:86:b5:89:da:32:ad:8f:20:82: 8e:d4:85:b7:82:c2:ca:0d:b8:54:53:72:96:80:45:74:6b:ba: 4d:8c:b4:ba:79:42:6e:ba:37:b4:eb:93:b5:08:7b:d8:90:8d: c9:90:0a:4c:ae:52:c2:90:b0:1b:fb:6f:ec:34:16:9a:bf:b1: 54:ed:e4:3c:04:5c:a6:60:a4:5a:46:0a:1e:74:bf:bc:ad:4e: e3:a6:17:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlJ/WMvq0UA23HP4//WRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4 ZGNhODcwHhcNMjUxMjIzMDUwMDM1WhcNMjUxMjI0MDUwMDM1WjAzMTEwLwYDVQQD EygyZjIzYzQ5MDkzYjUzYzg0NWU5OWNiMDkyMzQ2ODg5YzBhZmU2MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ibs38prlSywt+aEqfZpRAb1GWf8 UMXXOolyr6WLS1641dreosxkA94euSCrR9IUI5qSPh9GeHQKcsch984Wy1iCAUAc 01EBr20swi/6Mu8J8X0/mt7/GlMWIZV/oZFZP4lqSQ4Kut5NWzznyj0ADfTgGe8i HqK0I/kOWa94YCTeeMImgqQEBbXSc/O6Zft9VtIVKaeN+flRqRxtL1bi+GzOIn8s 3MFJNP0dXSQK9LLxgUOSziKbvFv9S9SVHV4RZ39+E9S+8xYZHIOT5HuArSNKzDz2 5hJ3/3jUQ3wKFP4nIGqZSHc4J0Be2dpuC6LWVbLLPJI7IKkPZFe2PLsYCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8jxJCTtTyEXpnLCSNGiJwK/mCjMB8GA1UdIwQY MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALL7lc191 WWB2XjYYwtj5BXOa2mhORsOLg45cB3WIV8FkBXxb5qqyGGWDu61bv3uCJkbnlkWo TLe1r1X+8oSs78BYggVwAFiZsOXYKZA4oRoMc8eaR7pLmdIsqvXhXFgIOYQQVDY1 w+3eIuWUzs4lMxAg23AbkTq/167ZN3VxkTAIeGSewlapd+209Gi8FlnSwJJ1TxJR Ap9h552XiaAwCjd31cyof6ZPTH45hrWJ2jKtjyCCjtSFt4LCyg24VFNyloBFdGu6 TYy0unlCbro3tOuTtQh72JCNyZAKTK5SwpCwG/tv7DQWmr+xVO3kPARcpmCkWkYK HnS/vK1O46YXTw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:51:10 2025 by rpki-client