This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft File: xKMWKFZYILOlo-HPyHdz4oP7lcE.mft (raw, json) Hash identifier: PJXOfLeZDj1QD0pDGhQGHV6n7qVYqUDPh2/5Qtnw0z0= Subject key identifier: 3C:96:EE:FC:5A:80:B2:A7:AF:90:3F:C1:F7:F9:A8:66:C5:8B:3D:1F Authority key identifier: C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1 Certificate issuer: /CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1 Certificate serial: 019B43934506F45E4D27D72EC70268E50007 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft Manifest number: 0CD1 Signing time: Mon 22 Dec 2025 01:01:23 +0000 Manifest this update: Mon 22 Dec 2025 01:01:23 +0000 Manifest next update: Tue 23 Dec 2025 01:01:23 +0000 Files and hashes: 1: O7JK_R6ip6iR244uyf3DBgROHco.roa (hash: GKH7o0xxF7nZfmB+4s7mUapBQQrsXrRHoDwbM7Hh8hA=) 2: xKMWKFZYILOlo-HPyHdz4oP7lcE.crl (hash: oExxwpmI1QnJ9U/ghO52tFRuWQaHsPEi9ih+fw/toTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:45:06:f4:5e:4d:27:d7:2e:c7:02:68:e5:00:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1 Validity Not Before: Dec 22 01:01:23 2025 GMT Not After : Dec 23 01:01:23 2025 GMT Subject: CN=3c96eefc5a80b2a7af903fc1f7f9a866c58b3d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:93:b9:56:a8:f0:f3:9d:23:ee:48:36:09:2e: 30:dd:15:da:98:8b:d7:d1:ba:b3:f4:ae:2a:a1:b5: 3e:18:95:0b:95:e5:7b:2e:f0:4e:8f:54:05:62:e1: cf:57:fd:ce:0a:b2:13:d1:93:f7:15:c5:db:83:de: 7d:c1:fb:c8:97:1f:99:92:5d:8b:2e:d7:df:c6:43: c3:08:41:0d:81:83:72:0d:0b:79:9d:09:01:28:9f: 82:84:aa:26:a5:d4:54:f7:a1:31:ed:83:a9:e5:31: 52:2c:18:e7:4b:bc:30:ee:60:a7:d4:bc:eb:0b:55: d0:c3:d7:5e:70:43:34:46:6b:0b:53:6a:bb:c8:86: ce:bb:37:83:21:f1:55:b6:03:ce:ed:ac:39:c3:dc: 11:54:c7:b3:f1:0b:4e:fe:ef:fb:a4:40:7a:ad:43: 95:5f:e8:66:cb:a4:7b:95:a6:cf:7d:f1:c7:93:f6: bd:77:39:9a:09:1e:f1:95:04:01:80:c3:a0:4f:b5: 82:e9:b2:ab:01:da:66:a5:df:46:98:36:b2:aa:6e: db:ab:d9:fa:de:ce:13:a4:2b:4a:a0:1f:ad:4a:3a: 38:e5:90:90:10:40:60:ee:66:ba:32:d8:74:79:d1: 8f:da:96:07:aa:f1:54:ba:82:85:e7:1d:30:ab:26: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:EE:FC:5A:80:B2:A7:AF:90:3F:C1:F7:F9:A8:66:C5:8B:3D:1F X509v3 Authority Key Identifier: keyid:C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b7:c9:b3:ab:d2:ec:39:32:45:40:39:71:96:f9:99:f5:ef: 08:3e:0a:b9:92:d8:95:d6:a7:3f:7a:f8:5f:a5:c5:fe:09:ce: dc:ea:55:00:d4:be:b6:c9:4e:d5:26:0c:b3:8e:ec:48:ea:65: 73:44:9f:57:bd:2a:78:78:03:7d:a8:53:fc:c8:47:91:8b:2a: cf:a0:43:53:aa:c3:5c:33:da:db:14:45:9c:4d:c2:01:a9:41: 65:5f:c0:21:af:eb:f4:ac:ec:3f:ff:f0:66:f5:7b:bb:a3:c1: fd:53:22:ec:be:ce:c1:46:eb:cf:0b:b6:0d:20:35:5b:14:a0: a6:a2:3c:61:c4:70:07:2e:9a:5f:f4:8c:e3:6e:31:37:24:fa: 48:dc:7c:20:b9:49:96:95:4b:c0:a8:34:c4:4e:da:e7:23:bd: e3:6a:94:3d:b6:11:9c:a8:08:42:ca:09:74:cb:4b:f8:da:ae: 52:28:b7:23:32:19:01:31:e8:f3:86:fc:af:32:33:91:c1:fa: e5:0c:74:8b:ae:62:67:ca:b5:47:dd:db:93:81:d6:44:de:96: 98:b1:d7:94:f7:2c:7a:7a:a8:4f:d4:4d:d9:de:b6:91:d1:7f: 07:d4:1f:44:fd:b2:52:cd:22:5f:21:6a:75:a8:7b:ee:dd:a9: 79:6c:6f:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDk0UG9F5NJ9cuxwJo5QAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTMxNjI4NTY1ODIwYjNhNWEzZTFjZmM4Nzc3M2UyODNm Yjk1YzEwHhcNMjUxMjIyMDEwMTIzWhcNMjUxMjIzMDEwMTIzWjAzMTEwLwYDVQQD EygzYzk2ZWVmYzVhODBiMmE3YWY5MDNmYzFmN2Y5YTg2NmM1OGIzZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JO5Vqjw850j7kg2CS4w3RXamIvX 0bqz9K4qobU+GJULleV7LvBOj1QFYuHPV/3OCrIT0ZP3FcXbg959wfvIlx+Zkl2L LtffxkPDCEENgYNyDQt5nQkBKJ+ChKompdRU96Ex7YOp5TFSLBjnS7ww7mCn1Lzr C1XQw9decEM0RmsLU2q7yIbOuzeDIfFVtgPO7aw5w9wRVMez8QtO/u/7pEB6rUOV X+hmy6R7labPffHHk/a9dzmaCR7xlQQBgMOgT7WC6bKrAdpmpd9GmDayqm7bq9n6 3s4TpCtKoB+tSjo45ZCQEEBg7ma6Mth0edGP2pYHqvFUuoKF5x0wqya3MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyW7vxagLKnr5A/wff5qGbFiz0fMB8GA1UdIwQY MBaAFMSjFihWWCCzpaPhz8h3c+KD+5XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83YTgwYWEtMDAwYS00NzE0LWEyZmEt ZmIzMDdiYWRlYzRkLzEveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83YTgwYWEtMDAwYS00NzE0LWEyZmEtZmIzMDdiYWRlYzRk LzEveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrfJs6vS 7DkyRUA5cZb5mfXvCD4KuZLYldanP3r4X6XF/gnO3OpVANS+tslO1SYMs47sSOpl c0SfV70qeHgDfahT/MhHkYsqz6BDU6rDXDPa2xRFnE3CAalBZV/AIa/r9KzsP//w ZvV7u6PB/VMi7L7OwUbrzwu2DSA1WxSgpqI8YcRwBy6aX/SM424xNyT6SNx8ILlJ lpVLwKg0xE7a5yO942qUPbYRnKgIQsoJdMtL+NquUii3IzIZATHo84b8rzIzkcH6 5Qx0i65iZ8q1R93bk4HWRN6WmLHXlPcsenqoT9RN2d62kdF/B9QfRP2yUs0iXyFq dah77t2peWxvXg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:19:27 2025 by rpki-client