This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json) Hash identifier: TWhIYSACSMcXFBQ9waG9BIp3+NmDPSv48fjich+oeN4= Subject key identifier: 22:19:9D:E1:BB:7B:8E:A3:EE:B8:22:BB:04:DA:BD:00:B1:D4:8B:81 Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1 Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1 Certificate serial: 019B1BA983804AF446E21A0262383AED0B66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft Manifest number: 066C Signing time: Sun 14 Dec 2025 07:00:52 +0000 Manifest this update: Sun 14 Dec 2025 07:00:52 +0000 Manifest next update: Mon 15 Dec 2025 07:00:52 +0000 Files and hashes: 1: 9tEl5jFrNSXsCYofc7NSx1FP1cI.roa (hash: 6vzM759erZPF8I3ZTPpySL3vdchhdENpuyLGkTDqiA0=) 2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: DkRPDKXihkm9Dzex1ywJsCExERBT87TFn5lm4DAf4UE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:83:80:4a:f4:46:e2:1a:02:62:38:3a:ed:0b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1 Validity Not Before: Dec 14 07:00:52 2025 GMT Not After : Dec 15 07:00:52 2025 GMT Subject: CN=22199de1bb7b8ea3eeb822bb04dabd00b1d48b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:d7:02:05:01:9c:5f:8e:9d:d7:36:4a:98: f2:99:00:88:36:d5:fa:cc:52:71:39:cf:9a:ef:fb: b4:0b:70:e1:21:cc:79:96:17:a2:b1:6e:73:39:7e: 7c:dd:ef:0c:5a:57:87:16:c9:ce:43:0f:ff:28:24: 29:8d:5e:fe:2c:b7:60:fb:78:76:cf:e0:b1:8b:ec: ab:ba:0b:e8:84:8c:6d:bb:39:46:0b:8d:3a:9b:d6: ef:85:e2:fb:0e:d4:31:3c:62:28:f5:b7:a4:1e:95: 76:79:e5:ac:60:93:df:1e:72:91:32:b5:cc:e4:b1: 72:8a:b8:ad:46:3f:99:e3:d0:71:a3:e0:e8:d0:26: ec:9d:ef:59:37:75:ca:f1:4b:95:e5:e3:9f:49:2a: 39:26:e0:b4:17:45:46:f0:ba:97:fa:f2:4f:c2:4d: 58:60:16:89:7e:c2:82:ce:dc:83:b0:72:d9:13:7b: 96:b0:c9:53:30:2e:b6:b9:2b:70:8e:a9:fb:02:66: 80:3e:94:ff:41:99:03:4e:d3:fb:94:11:fc:93:eb: bc:db:d7:cf:4c:e8:02:90:32:54:4a:98:49:f3:57: e4:48:7e:24:e0:34:f5:86:b6:8f:de:67:71:06:1b: e8:0f:e8:e4:d1:f4:8e:4d:bc:f4:63:ee:a3:22:8a: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:19:9D:E1:BB:7B:8E:A3:EE:B8:22:BB:04:DA:BD:00:B1:D4:8B:81 X509v3 Authority Key Identifier: keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b7:94:b2:1f:f5:c7:41:b1:68:24:a6:55:4e:cb:61:5b:67: ca:8d:d6:9d:ef:3d:29:f7:a5:0c:a2:5c:ce:34:74:b0:d6:ed: 55:7d:bf:ef:f1:2f:98:14:5c:cb:ef:6a:a3:95:07:32:b2:4c: 30:30:ed:68:bc:43:42:b3:4d:d9:f1:70:23:64:c3:17:f3:07: 6c:b4:0e:09:af:b6:00:17:36:b0:12:9f:c5:61:fa:f6:4e:e0: f6:2b:6c:0d:0a:5d:c7:1f:57:c9:11:c5:e0:b1:99:4f:62:cf: 80:15:18:00:a9:02:eb:87:84:2c:15:f3:4e:04:9e:30:f9:df: 0e:05:11:7f:bd:28:28:f0:3e:18:69:4c:a7:24:56:d1:b7:a5: 66:3a:19:8c:2f:cd:09:f4:71:f2:e9:50:c3:71:54:f1:dd:61: 77:a0:01:ba:8f:9c:ca:22:26:1e:43:e1:e5:2b:09:81:65:62: db:a8:d5:31:5e:10:c3:4c:2d:e4:de:eb:d4:51:f0:48:1e:bb: 61:49:07:23:e0:be:f9:d1:a4:c6:89:0f:45:12:93:4d:f2:bf: 91:05:8c:6a:5a:85:29:87:bc:63:ce:6b:d1:e7:cc:0a:10:c3: 88:ac:67:f0:fe:46:b8:5b:a2:ba:f8:0a:12:5f:d6:64:a5:08: 72:c4:e0:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqYOASvRG4hoCYjg67QtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NzZiYTBjMDk4ZGM0NzIxODYyMjNjOTFlN2RlZjUyMTZl MjM5ZjEwHhcNMjUxMjE0MDcwMDUyWhcNMjUxMjE1MDcwMDUyWjAzMTEwLwYDVQQD EygyMjE5OWRlMWJiN2I4ZWEzZWViODIyYmIwNGRhYmQwMGIxZDQ4YjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNXXAgUBnF+Ondc2SpjymQCINtX6 zFJxOc+a7/u0C3DhIcx5lheisW5zOX583e8MWleHFsnOQw//KCQpjV7+LLdg+3h2 z+Cxi+yrugvohIxtuzlGC406m9bvheL7DtQxPGIo9bekHpV2eeWsYJPfHnKRMrXM 5LFyiritRj+Z49Bxo+Do0Cbsne9ZN3XK8UuV5eOfSSo5JuC0F0VG8LqX+vJPwk1Y YBaJfsKCztyDsHLZE3uWsMlTMC62uStwjqn7AmaAPpT/QZkDTtP7lBH8k+u829fP TOgCkDJUSphJ81fkSH4k4DT1hraP3mdxBhvoD+jk0fSOTbz0Y+6jIooewwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIZneG7e46j7rgiuwTavQCx1IuBMB8GA1UdIwQY MBaAFMV2ugwJjcRyGGIjyR5971IW4jnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMt MzJlZTQ1OGE2MzQ4LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMtMzJlZTQ1OGE2MzQ4 LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABreUsh/1 x0GxaCSmVU7LYVtnyo3Wne89KfelDKJczjR0sNbtVX2/7/EvmBRcy+9qo5UHMrJM MDDtaLxDQrNN2fFwI2TDF/MHbLQOCa+2ABc2sBKfxWH69k7g9itsDQpdxx9XyRHF 4LGZT2LPgBUYAKkC64eELBXzTgSeMPnfDgURf70oKPA+GGlMpyRW0belZjoZjC/N CfRx8ulQw3FU8d1hd6ABuo+cyiImHkPh5SsJgWVi26jVMV4Qw0wt5N7r1FHwSB67 YUkHI+C++dGkxokPRRKTTfK/kQWMalqFKYe8Y85r0efMChDDiKxn8P5GuFuiuvgK El/WZKUIcsTgGQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:46:48 2025 by rpki-client