This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft File: xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json) Hash identifier: UxssCaYbqhAzdzuO5Pg+OWRI5ZQRLhFJj+AYvFuFLFs= Subject key identifier: C2:6D:8D:E5:7C:6C:C6:28:F9:AC:02:BB:37:B4:D8:A8:6E:E4:9E:0C Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9 Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9 Certificate serial: 019B5A5148C7FDE734A45A93A245CED80511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft Manifest number: 0E19 Signing time: Fri 26 Dec 2025 11:00:34 +0000 Manifest this update: Fri 26 Dec 2025 11:00:34 +0000 Manifest next update: Sat 27 Dec 2025 11:00:34 +0000 Files and hashes: 1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=) 2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: yjuqgCW/ozX+X1FAkRDKRHBSOxeVHFJjnZT/hTJ8ugg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:48:c7:fd:e7:34:a4:5a:93:a2:45:ce:d8:05:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9 Validity Not Before: Dec 26 11:00:34 2025 GMT Not After : Dec 27 11:00:34 2025 GMT Subject: CN=c26d8de57c6cc628f9ac02bb37b4d8a86ee49e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:cb:c0:36:65:e4:54:67:cf:13:5b:11:5f: 2c:3a:c8:34:bc:e1:0f:b6:d6:20:c1:38:2e:1e:b9: f3:65:b5:b3:d0:aa:fe:74:73:20:8a:ff:31:79:0a: db:68:e8:29:7f:b9:9b:1e:0a:81:ac:94:d4:23:52: a4:dd:6f:92:db:5e:ae:ba:be:95:0f:2f:bb:07:d2: c3:a6:e4:37:7e:c7:61:35:97:b9:79:2e:f9:4a:59: 04:92:63:50:58:a0:83:5b:63:55:b2:7a:81:27:74: a4:b4:b8:a7:98:3c:13:62:d4:c3:77:ea:61:d2:4f: d5:27:ac:09:73:31:fd:fa:94:50:b9:aa:71:9f:eb: 5e:dc:26:b3:dc:cc:46:67:57:af:11:f6:67:7e:c0: 82:2e:c1:a3:60:ae:92:91:93:f7:09:89:9a:7d:79: 33:ad:98:da:36:17:00:b6:9b:30:43:78:e3:04:95: 42:c3:9c:5d:0f:37:91:05:58:a2:3a:f7:da:fe:17: ad:99:77:a3:95:a0:4c:71:3a:b6:96:27:f4:bf:a9: d0:48:8e:d2:39:25:6f:4b:9a:d9:d6:4b:59:a1:d2: c8:dd:09:92:e4:1f:42:f2:29:cf:98:3a:da:af:e7: cf:55:ab:b7:3f:87:e2:3c:5d:b6:c0:e0:96:67:30: 08:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6D:8D:E5:7C:6C:C6:28:F9:AC:02:BB:37:B4:D8:A8:6E:E4:9E:0C X509v3 Authority Key Identifier: keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ec:09:44:55:f9:35:7a:eb:2c:7b:ca:21:9a:f7:d4:c8:80: ef:85:f3:29:44:d7:12:d6:90:69:9d:10:c7:0b:71:89:be:3b: 08:2b:17:7f:c9:b4:b7:7b:1a:2b:c3:92:89:09:e4:fc:0e:cc: e2:3b:22:48:6a:af:8c:05:60:bf:db:03:18:b1:e4:c0:36:79: 98:a3:01:65:d7:e9:2a:94:3c:6a:42:55:58:03:79:2f:0d:7a: 9b:c4:18:c2:15:39:4c:16:b2:99:1f:d4:b0:20:d7:7d:a0:c7: 0b:3b:25:e1:25:dc:10:77:b4:bf:5b:83:e8:72:a2:95:70:69: 50:df:b5:99:7e:fd:8f:fc:36:c7:5b:31:ec:f0:e3:6b:6b:1d: ae:fb:3b:0e:99:2c:b9:fa:2e:a1:3e:58:ab:68:e8:3c:65:c0: 60:f2:25:f9:66:71:63:d5:7b:3a:2a:db:15:e4:b5:44:ed:71: 74:d1:22:d8:ce:68:4a:19:b7:f0:5e:48:d8:e1:ed:8f:2c:ed: a5:40:2c:73:0e:07:48:ae:61:5e:dc:99:99:94:8c:33:4a:0a: 62:05:b4:77:55:1f:39:81:2f:3e:23:ad:cf:42:14:ba:1a:20: 35:19:06:3e:6c:0b:e4:65:97:88:b0:d7:39:99:92:96:ca:82: 7b:8a:50:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUjH/ec0pFqTokXO2AURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NWExZTQwNTFmNjhmZThiNzIwZTgzZGRhZDMzYjc2NTFj YjdlZjkwHhcNMjUxMjI2MTEwMDM0WhcNMjUxMjI3MTEwMDM0WjAzMTEwLwYDVQQD EyhjMjZkOGRlNTdjNmNjNjI4ZjlhYzAyYmIzN2I0ZDhhODZlZTQ5ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53fLwDZl5FRnzxNbEV8sOsg0vOEP ttYgwTguHrnzZbWz0Kr+dHMgiv8xeQrbaOgpf7mbHgqBrJTUI1Kk3W+S216uur6V Dy+7B9LDpuQ3fsdhNZe5eS75SlkEkmNQWKCDW2NVsnqBJ3SktLinmDwTYtTDd+ph 0k/VJ6wJczH9+pRQuapxn+te3Caz3MxGZ1evEfZnfsCCLsGjYK6SkZP3CYmafXkz rZjaNhcAtpswQ3jjBJVCw5xdDzeRBViiOvfa/hetmXejlaBMcTq2lif0v6nQSI7S OSVvS5rZ1ktZodLI3QmS5B9C8inPmDrar+fPVau3P4fiPF22wOCWZzAIrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJtjeV8bMYo+awCuze02Khu5J4MMB8GA1UdIwQY MBaAFMVaHkBR9o/otyDoPdrTO3ZRy375MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYt MDNkYTdlNzRkY2FkLzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYtMDNkYTdlNzRkY2Fk LzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuwJRFX5 NXrrLHvKIZr31MiA74XzKUTXEtaQaZ0Qxwtxib47CCsXf8m0t3saK8OSiQnk/A7M 4jsiSGqvjAVgv9sDGLHkwDZ5mKMBZdfpKpQ8akJVWAN5Lw16m8QYwhU5TBaymR/U sCDXfaDHCzsl4SXcEHe0v1uD6HKilXBpUN+1mX79j/w2x1sx7PDja2sdrvs7Dpks ufouoT5Yq2joPGXAYPIl+WZxY9V7OirbFeS1RO1xdNEi2M5oShm38F5I2OHtjyzt pUAscw4HSK5hXtyZmZSMM0oKYgW0d1UfOYEvPiOtz0IUuhogNRkGPmwL5GWXiLDX OZmSlsqCe4pQGA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:23 2025 by rpki-client