This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft File: xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json) Hash identifier: +qzyOU5dWnJvw1Y+35E1/e1BGBnyuuRKPKP7UmWuXpU= Subject key identifier: 05:C5:80:DE:C5:4A:E1:DF:BA:A8:84:4B:A3:AB:11:BE:0A:CB:C3:83 Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f Certificate serial: 019B5A51B993E036FCAC013308B70DFFB48D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 11:01:03 +0000 Manifest this update: Fri 26 Dec 2025 11:01:03 +0000 Manifest next update: Sat 27 Dec 2025 11:01:03 +0000 Files and hashes: 1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=) 2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: OtoJmFjxheRk4rCkc0ajcdM7W7H+GDBaMRfxbmvHJdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:b9:93:e0:36:fc:ac:01:33:08:b7:0d:ff:b4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f Validity Not Before: Dec 26 11:01:03 2025 GMT Not After : Dec 27 11:01:03 2025 GMT Subject: CN=05c580dec54ae1dfbaa8844ba3ab11be0acbc383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:7a:0b:a4:a9:6c:59:0b:2f:d6:45:42:8b: af:e0:8b:da:01:c2:35:11:38:8a:bc:b0:dc:33:a5: 4a:db:52:6b:8f:e6:e6:1a:ec:cf:01:99:4c:c9:c3: a4:24:2b:5f:b8:88:fa:9d:f9:a7:9d:1e:83:5a:65: df:91:4e:5b:67:69:7a:df:74:35:fa:55:fd:1b:a4: 49:7b:0e:ce:d4:56:71:ba:49:8c:cb:25:83:6a:cc: 7a:bf:bc:a5:e5:f8:90:fb:c7:c9:8c:6a:e3:21:de: 9d:7a:f0:bc:9e:c6:84:f2:a8:a4:d6:13:bb:b0:6d: 02:85:58:40:bd:dc:dc:0c:97:fd:8e:83:d9:4d:de: f4:70:0b:63:68:14:25:db:ba:82:35:da:c3:eb:9b: f1:6c:15:f1:27:16:3f:58:d8:ec:85:70:1f:5d:9d: 18:8a:4c:45:b7:7c:ad:66:8a:aa:c4:c4:52:00:e9: f3:b3:b8:10:e5:1a:ac:46:16:04:86:de:88:99:e1: 15:2b:ca:58:7c:3f:7d:26:1d:c4:6e:3e:5b:cb:39: 8a:83:3e:48:53:a9:a7:06:43:d6:5d:08:99:40:b2: d7:d0:fe:4f:62:26:d4:09:a0:73:49:f5:68:c1:bd: ac:6e:ee:a8:2e:ef:b5:f0:93:41:24:f3:c4:e5:c9: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C5:80:DE:C5:4A:E1:DF:BA:A8:84:4B:A3:AB:11:BE:0A:CB:C3:83 X509v3 Authority Key Identifier: keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:09:ed:7a:38:6a:7f:ac:33:3d:5c:ca:9f:e5:8b:11:fa:7f: a1:be:54:59:93:6e:ac:6a:21:9a:a4:48:79:0a:cb:dc:4d:cf: 3d:b7:f2:94:25:59:24:76:71:75:ed:04:3f:be:30:2b:3a:74: bc:13:1d:25:ea:e2:48:26:15:a6:d6:f8:86:e4:89:81:92:ea: be:4b:d9:f6:95:60:fd:09:58:93:3e:0b:a4:8e:8b:d0:a6:f8: 13:77:54:a8:9a:06:1c:ce:84:0c:95:ce:34:91:8c:43:8b:0c: f6:7a:5b:e7:f0:0a:71:d2:e4:ed:56:6e:74:c1:d6:1d:d6:89: 01:98:03:ea:e3:3b:be:8b:b5:89:9a:e7:46:16:44:22:6a:76: a9:9d:e9:87:ae:57:90:f3:93:00:c4:01:0c:98:26:a7:2c:85: 90:b9:df:d2:37:43:29:fc:c3:35:e3:62:73:42:d8:9b:ec:6a: 8f:07:29:e6:18:a3:c1:c3:49:57:19:47:82:0d:7f:19:54:fe: 63:c5:49:7e:d0:18:fb:97:5b:bf:24:33:e8:33:80:d4:c6:fb: 3c:14:c1:fb:60:d8:95:c5:c3:86:41:d1:45:6c:68:03:97:16: 33:03:7f:b6:73:c7:ec:96:9d:45:ea:5d:06:34:d9:97:dd:b9: 7c:8d:ba:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUbmT4Db8rAEzCLcN/7SNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDFhZTI2MTJkMjUyNzE2N2M4M2Y3YWZjMTZmNWU2NzRk ODhiMGYwHhcNMjUxMjI2MTEwMTAzWhcNMjUxMjI3MTEwMTAzWjAzMTEwLwYDVQQD EygwNWM1ODBkZWM1NGFlMWRmYmFhODg0NGJhM2FiMTFiZTBhY2JjMzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofB6C6SpbFkLL9ZFQouv4IvaAcI1 ETiKvLDcM6VK21Jrj+bmGuzPAZlMycOkJCtfuIj6nfmnnR6DWmXfkU5bZ2l633Q1 +lX9G6RJew7O1FZxukmMyyWDasx6v7yl5fiQ+8fJjGrjId6devC8nsaE8qik1hO7 sG0ChVhAvdzcDJf9joPZTd70cAtjaBQl27qCNdrD65vxbBXxJxY/WNjshXAfXZ0Y ikxFt3ytZoqqxMRSAOnzs7gQ5RqsRhYEht6ImeEVK8pYfD99Jh3Ebj5byzmKgz5I U6mnBkPWXQiZQLLX0P5PYibUCaBzSfVowb2sbu6oLu+18JNBJPPE5cnyHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXFgN7FSuHfuqiES6OrEb4Ky8ODMB8GA1UdIwQY MBaAFMRBriYS0lJxZ8g/evwW9eZ02IsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjkt MjRlN2U2YWRhMWUyLzEveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjktMjRlN2U2YWRhMWUy LzEveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQntejhq f6wzPVzKn+WLEfp/ob5UWZNurGohmqRIeQrL3E3PPbfylCVZJHZxde0EP74wKzp0 vBMdJeriSCYVptb4huSJgZLqvkvZ9pVg/QlYkz4LpI6L0Kb4E3dUqJoGHM6EDJXO NJGMQ4sM9npb5/AKcdLk7VZudMHWHdaJAZgD6uM7vou1iZrnRhZEImp2qZ3ph65X kPOTAMQBDJgmpyyFkLnf0jdDKfzDNeNic0LYm+xqjwcp5hijwcNJVxlHgg1/GVT+ Y8VJftAY+5dbvyQz6DOA1Mb7PBTB+2DYlcXDhkHRRWxoA5cWMwN/tnPH7JadRepd BjTZl925fI269g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:42 2025 by rpki-client