This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json) Hash identifier: bpi2PMJZDv+hyRm0lXTVbl7lsFiZiWPnIfT5pUns84c= Subject key identifier: 21:F9:B4:54:46:63:BD:F2:53:18:C9:5E:C8:32:9D:71:97:A3:27:B3 Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Certificate serial: 019B5A1B10B4C5DD7A3E779C909A377150C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft Manifest number: 179D Signing time: Fri 26 Dec 2025 10:01:21 +0000 Manifest this update: Fri 26 Dec 2025 10:01:21 +0000 Manifest next update: Sat 27 Dec 2025 10:01:21 +0000 Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=) 2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=) 3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: gTlTvEtAenaeVUiwayIxcA0KL8S/KByWfi7kMA9yH2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:10:b4:c5:dd:7a:3e:77:9c:90:9a:37:71:50:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Validity Not Before: Dec 26 10:01:21 2025 GMT Not After : Dec 27 10:01:21 2025 GMT Subject: CN=21f9b4544663bdf25318c95ec8329d7197a327b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:e6:9b:38:c6:48:f6:65:3b:e9:78:0f:fe: 04:21:7b:3c:d3:f4:03:9d:6f:5d:25:65:0a:ea:af: d3:2c:82:24:b7:93:53:2d:01:df:88:0b:d5:b4:9d: a1:c4:b4:71:3d:bd:7c:fe:75:27:ae:e2:c3:90:62: 3f:75:f7:21:32:02:29:b4:b9:2e:f3:0f:a3:89:30: f8:70:18:2f:5c:b4:e0:24:bb:5b:2d:fc:f9:de:e7: 25:ee:cd:76:93:c6:6d:13:92:50:c1:58:f0:43:15: 5c:67:c2:90:1d:cf:78:09:2c:82:e8:8c:bf:2c:4b: 6d:62:ab:92:6d:9d:25:79:90:d2:df:ef:f4:10:48: 48:b5:8d:f8:13:3e:e3:bd:01:16:cc:d6:3c:1d:52: fe:49:bb:4d:93:0e:6f:45:f5:83:d2:be:df:59:ce: 78:59:04:1c:fb:d2:b9:98:f1:8c:6c:69:31:a7:dd: 60:2b:57:a3:b3:15:f8:4f:fe:2f:9f:4b:4a:91:ec: 7b:32:2f:cd:52:8e:7b:e5:b9:e5:35:f1:e0:8e:9d: cd:9b:9d:a4:19:99:bb:db:1e:7a:89:b7:fe:b0:a2: 7c:24:f1:2f:77:b2:c6:9a:37:04:a1:29:8a:64:fe: 36:0a:6e:ae:72:79:01:97:b8:74:f8:e9:1a:0e:db: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F9:B4:54:46:63:BD:F2:53:18:C9:5E:C8:32:9D:71:97:A3:27:B3 X509v3 Authority Key Identifier: keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9c:15:da:4b:4a:c4:e2:ed:b4:1f:7c:2e:70:57:d1:32:60: 40:fd:70:02:a4:1a:04:e5:5f:19:c3:16:37:c7:07:b0:1f:06: 23:f8:d7:21:ea:67:89:95:79:57:1d:55:e5:ca:b6:74:50:e9: 87:cf:75:f9:c5:13:65:47:06:cc:1e:48:04:7c:29:f9:a0:93: 70:a6:6f:9b:75:c5:75:26:1c:79:7f:e3:42:d0:a9:5e:b7:60: fe:51:d7:13:51:96:12:dd:ff:72:8a:08:b5:a7:7f:71:9d:cf: d4:f7:86:bd:fd:f7:2f:4c:9d:a4:fd:9f:c6:8c:e6:ea:be:ad: d5:3d:20:bb:6d:6b:7c:37:75:fb:01:3a:3e:68:ac:67:6a:26: 83:f1:50:88:3b:95:bd:cb:89:57:f4:aa:ee:5b:ca:e6:9a:ec: e2:2f:d8:49:f4:88:df:6b:51:a9:66:9f:c2:38:64:62:26:68: 98:6d:19:2c:a9:21:16:5b:19:c9:98:aa:31:48:a1:13:e8:bf: 1e:19:bc:88:44:55:d7:17:f6:59:32:e3:8a:b9:21:a1:4f:27: f0:82:d3:a1:9c:ad:7d:37:64:0c:dd:06:61:af:3e:a2:ac:0f: 66:e0:36:b9:8e:ac:9f:63:08:6a:27:7b:c7:94:13:54:90:1e: e0:b2:4a:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGxC0xd16PneckJo3cVDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWJhMWZkZjZjNGRlMTkyYzFkM2VkZjhhODAwY2E1OTdm OTdkNjgwHhcNMjUxMjI2MTAwMTIxWhcNMjUxMjI3MTAwMTIxWjAzMTEwLwYDVQQD EygyMWY5YjQ1NDQ2NjNiZGYyNTMxOGM5NWVjODMyOWQ3MTk3YTMyN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YfmmzjGSPZlO+l4D/4EIXs80/QD nW9dJWUK6q/TLIIkt5NTLQHfiAvVtJ2hxLRxPb18/nUnruLDkGI/dfchMgIptLku 8w+jiTD4cBgvXLTgJLtbLfz53ucl7s12k8ZtE5JQwVjwQxVcZ8KQHc94CSyC6Iy/ LEttYquSbZ0leZDS3+/0EEhItY34Ez7jvQEWzNY8HVL+SbtNkw5vRfWD0r7fWc54 WQQc+9K5mPGMbGkxp91gK1ejsxX4T/4vn0tKkex7Mi/NUo575bnlNfHgjp3Nm52k GZm72x56ibf+sKJ8JPEvd7LGmjcEoSmKZP42Cm6ucnkBl7h0+OkaDtunqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH5tFRGY73yUxjJXsgynXGXoyezMB8GA1UdIwQY MBaAFMTrof32xN4ZLB0+34qADKWX+X1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYt NTEyODU2MGRiZGZjLzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYtNTEyODU2MGRiZGZj LzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpwV2ktK xOLttB98LnBX0TJgQP1wAqQaBOVfGcMWN8cHsB8GI/jXIepniZV5Vx1V5cq2dFDp h891+cUTZUcGzB5IBHwp+aCTcKZvm3XFdSYceX/jQtCpXrdg/lHXE1GWEt3/cooI tad/cZ3P1PeGvf33L0ydpP2fxozm6r6t1T0gu21rfDd1+wE6PmisZ2omg/FQiDuV vcuJV/Sq7lvK5prs4i/YSfSI32tRqWafwjhkYiZomG0ZLKkhFlsZyZiqMUihE+i/ Hhm8iERV1xf2WTLjirkhoU8n8ILToZytfTdkDN0GYa8+oqwPZuA2uY6sn2MIaid7 x5QTVJAe4LJKxw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:25 2025 by rpki-client