This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json) Hash identifier: gkVmP0m7o4SGg94VTJFCSnz8qpNEFBoVuB0T5jmBgtE= Subject key identifier: 41:85:62:A9:63:30:E4:4C:7F:AE:65:9F:86:6B:D7:39:53:06:63:7C Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a Certificate serial: 019B39EAD35D2C49785D174830B3A28EC495 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 04:00:49 +0000 Manifest this update: Sat 20 Dec 2025 04:00:49 +0000 Manifest next update: Sun 21 Dec 2025 04:00:49 +0000 Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: 3DUcH5UY5Uy/PRbI3ZVjcXzthIjZfflQxUniZTyHC2c=) 2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:d3:5d:2c:49:78:5d:17:48:30:b3:a2:8e:c4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a Validity Not Before: Dec 20 04:00:49 2025 GMT Not After : Dec 21 04:00:49 2025 GMT Subject: CN=418562a96330e44c7fae659f866bd7395306637c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:83:77:5f:d0:76:e2:6a:a0:2f:a9:03:10: d8:6c:bd:bd:cf:17:81:35:bd:ec:76:13:75:0f:fc: 35:25:bd:7f:f3:3d:7b:a6:33:8c:49:79:7f:50:fa: 7d:58:38:80:4f:53:ce:5a:73:ee:1d:0f:63:a6:f2: bb:11:51:57:d5:5c:c5:11:f9:c0:9a:d0:d1:15:e2: aa:dd:f2:c2:e9:4d:89:b5:55:7c:28:a9:5f:75:c2: db:f1:0b:74:44:9d:ab:a0:2b:58:66:ee:a6:d8:d7: 7f:3b:e4:c8:29:f9:21:a2:59:8d:b1:45:e5:25:f9: f0:c7:d8:46:9b:a8:4b:21:c8:a5:7e:d4:c1:4e:5a: d7:35:5f:d6:46:2c:b9:0b:a0:9d:c8:dd:d7:ba:be: 87:21:67:cb:24:cd:bb:b9:86:94:e3:45:49:17:dd: c7:78:4c:cf:b6:80:80:58:24:fa:32:14:42:19:9f: a0:88:dc:34:9c:65:57:98:1d:3d:11:74:6a:b3:04: b8:32:f0:ad:71:51:12:ad:93:ab:8d:f0:cf:79:e2: 9b:ec:b6:2a:cd:a0:fb:77:1f:ac:9a:93:a9:9c:6f: 1d:d3:f5:7d:c2:87:f0:6e:a2:d8:30:4d:86:f0:73: 6e:1e:80:a6:c3:cd:36:5a:a2:78:c3:ac:4e:0e:9a: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:62:A9:63:30:E4:4C:7F:AE:65:9F:86:6B:D7:39:53:06:63:7C X509v3 Authority Key Identifier: keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bf:97:fa:e4:60:3c:39:54:c9:58:e2:3a:fd:7b:86:b7:50: 12:81:fe:f3:8f:9e:d9:3d:b1:4a:a0:09:7c:98:3d:2d:e9:4d: f3:91:46:9b:50:40:fb:e9:06:c0:78:1e:1b:3c:c7:6c:9c:47: a4:40:15:a6:27:84:7c:fb:89:14:8a:af:52:46:b5:fb:2c:e8: ed:b2:40:5a:77:f9:d5:75:d2:e1:28:c9:2b:2b:3d:ba:32:8e: 26:d8:1f:a3:ee:2f:6c:08:30:5f:fb:ec:41:56:06:61:8d:67: 9c:ba:6a:d7:83:f9:79:8d:ee:a2:0c:09:cb:71:3c:76:bf:df: 37:6a:0c:da:1e:1b:5e:18:44:b0:47:8c:f7:06:96:ec:44:7c: e1:44:49:e1:e0:51:a2:a5:c6:29:81:8b:6d:3b:96:a7:15:df: 2f:a6:28:41:f8:52:77:ad:61:9c:67:38:4e:f8:03:96:40:dd: 3a:54:72:b8:f3:89:02:81:72:73:05:7e:69:33:aa:fa:d7:52: 69:4a:4f:01:96:4d:4a:80:47:5a:dd:2c:d4:84:bd:8a:39:23: ad:d5:d7:e1:8e:09:99:63:a5:7b:24:19:67:d7:28:1b:84:ac: d6:7f:53:22:90:a1:e5:30:2d:96:c6:16:13:ca:21:93:18:62: 2f:55:bb:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56tNdLEl4XRdIMLOijsSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWJhNDAwMDdjY2RjZDA5MzBmMWEyYmRjNGIwMmUyOTk0 NTc2N2EwHhcNMjUxMjIwMDQwMDQ5WhcNMjUxMjIxMDQwMDQ5WjAzMTEwLwYDVQQD Eyg0MTg1NjJhOTYzMzBlNDRjN2ZhZTY1OWY4NjZiZDczOTUzMDY2MzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ+Dd1/QduJqoC+pAxDYbL29zxeB Nb3sdhN1D/w1Jb1/8z17pjOMSXl/UPp9WDiAT1POWnPuHQ9jpvK7EVFX1VzFEfnA mtDRFeKq3fLC6U2JtVV8KKlfdcLb8Qt0RJ2roCtYZu6m2Nd/O+TIKfkholmNsUXl Jfnwx9hGm6hLIcilftTBTlrXNV/WRiy5C6CdyN3Xur6HIWfLJM27uYaU40VJF93H eEzPtoCAWCT6MhRCGZ+giNw0nGVXmB09EXRqswS4MvCtcVESrZOrjfDPeeKb7LYq zaD7dx+smpOpnG8d0/V9wofwbqLYME2G8HNuHoCmw802WqJ4w6xODprXAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGFYqljMORMf65ln4Zr1zlTBmN8MB8GA1UdIwQY MBaAFP8bpAAHzNzQkw8aK9xLAuKZRXZ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wNjA3MjAtNzMyMC00OWI1LTg5YWIt OGQyYTY1M2JhOTk5LzEvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8wNjA3MjAtNzMyMC00OWI1LTg5YWItOGQyYTY1M2JhOTk5 LzEvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXr+X+uRg PDlUyVjiOv17hrdQEoH+84+e2T2xSqAJfJg9LelN85FGm1BA++kGwHgeGzzHbJxH pEAVpieEfPuJFIqvUka1+yzo7bJAWnf51XXS4SjJKys9ujKOJtgfo+4vbAgwX/vs QVYGYY1nnLpq14P5eY3uogwJy3E8dr/fN2oM2h4bXhhEsEeM9waW7ER84URJ4eBR oqXGKYGLbTuWpxXfL6YoQfhSd61hnGc4TvgDlkDdOlRyuPOJAoFycwV+aTOq+tdS aUpPAZZNSoBHWt0s1IS9ijkjrdXX4Y4JmWOleyQZZ9coG4Ss1n9TIpCh5TAtlsYW E8ohkxhiL1W7sQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:25:42 2025 by rpki-client