This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json) Hash identifier: r2iMOCp6Adr6U62pkoENFL3Eg/WNxxUVgINw8WZiGJ0= Subject key identifier: E3:35:78:FD:B3:9C:7B:9E:1C:DA:C9:E7:4B:2A:71:29:55:D2:42:F2 Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e Certificate serial: 019B3343AF798148FF9798A04670E10F74AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft Manifest number: 100A Signing time: Thu 18 Dec 2025 21:00:32 +0000 Manifest this update: Thu 18 Dec 2025 21:00:32 +0000 Manifest next update: Fri 19 Dec 2025 21:00:32 +0000 Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=) 2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=) 3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: fALxxKKUgVZJLTC384q17BJMI1oDA/8DRhXUFcku41c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:af:79:81:48:ff:97:98:a0:46:70:e1:0f:74:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e Validity Not Before: Dec 18 21:00:32 2025 GMT Not After : Dec 19 21:00:32 2025 GMT Subject: CN=e33578fdb39c7b9e1cdac9e74b2a712955d242f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:b1:43:c5:26:36:1d:44:d5:12:73:d2:ea: 42:d2:a4:c4:2b:78:ce:aa:f8:5d:ec:82:05:c4:14: 26:7a:b7:cb:8c:55:e8:ab:65:b7:d0:f5:02:61:8c: 78:fe:d9:41:66:29:c5:4d:15:44:c1:43:29:30:29: 2f:0b:ee:91:af:75:fb:a4:01:aa:bb:8e:b9:e4:d6: 4a:3b:5e:38:58:3a:14:e0:3b:a1:7b:87:58:96:b7: ed:b6:6d:37:fe:b4:5d:e8:b9:4d:87:68:22:57:2b: c5:66:f3:f6:8b:17:a3:b9:ba:38:fb:00:f2:6d:81: b6:9e:62:37:e3:17:63:3f:b7:4e:31:ca:99:eb:89: 95:66:d5:9d:78:86:18:d6:9f:24:52:94:7e:77:9f: f8:87:c6:bc:8a:1d:74:c0:79:34:e8:2b:e9:64:0d: 9e:4a:ec:e7:27:f0:2d:99:10:84:2f:b6:bc:c7:23: ea:24:b2:1f:9c:0c:06:5d:3e:4f:7a:ec:13:c4:b5: b9:cd:48:24:a6:15:6d:1a:1b:e6:c0:70:c3:69:29: 53:5e:76:43:13:f5:ca:e2:c4:0c:86:6d:b2:2f:74: 96:3b:08:33:22:a3:26:c5:2c:f3:b0:77:46:14:7b: d1:56:1e:4e:a1:c8:12:8d:a5:85:47:d3:bb:60:79: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:35:78:FD:B3:9C:7B:9E:1C:DA:C9:E7:4B:2A:71:29:55:D2:42:F2 X509v3 Authority Key Identifier: keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:31:a8:22:6b:00:1d:08:5c:c2:8a:99:a8:75:59:ef:62:06: c1:b6:a0:3c:4c:ad:31:40:01:16:8f:8c:5a:c2:f8:93:15:7d: 9f:cf:4d:16:32:0a:2c:c4:05:64:21:ea:5f:c5:b8:b8:e8:66: fe:80:38:88:65:3b:a8:13:21:c5:00:36:30:b9:4d:3c:e5:aa: fb:92:ca:52:b2:a5:70:ce:4a:78:35:a1:d0:d4:a2:6f:5a:71: 18:3d:cf:47:dd:b6:e1:3f:50:d6:98:c2:0d:c8:39:9e:8d:06: c9:bc:79:54:6a:f7:8d:e6:d6:fa:4f:41:da:5b:87:94:28:92: 1d:4d:4a:05:58:ce:20:b6:23:39:90:0e:18:0d:de:dc:90:c4: 4a:f2:29:a7:cb:ea:a4:59:8a:c6:d3:74:5e:3b:25:4c:f3:38: e7:07:89:8a:a7:b2:90:bb:91:d2:2e:c3:b1:80:7d:3a:87:f5: 8f:c8:fb:41:55:99:bd:e4:76:79:dd:a3:8a:b6:76:8b:15:54: 63:eb:80:55:ea:56:6d:7b:91:a4:8f:3e:b3:57:8e:75:eb:e9: 57:c6:6c:1a:fe:8d:c7:f4:58:61:9e:0b:2d:14:21:6b:f3:40: 34:1d:c1:7a:b3:71:91:04:32:e4:61:fb:69:ea:fa:a9:f5:af: b2:19:05:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ695gUj/l5igRnDhD3SvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZDExYjY0ZmZlMThlZmE0MmY0M2E2Yzc2NTYzOWRlZTM4 ZDAyN2UwHhcNMjUxMjE4MjEwMDMyWhcNMjUxMjE5MjEwMDMyWjAzMTEwLwYDVQQD EyhlMzM1NzhmZGIzOWM3YjllMWNkYWM5ZTc0YjJhNzEyOTU1ZDI0MmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVCxQ8UmNh1E1RJz0upC0qTEK3jO qvhd7IIFxBQmerfLjFXoq2W30PUCYYx4/tlBZinFTRVEwUMpMCkvC+6Rr3X7pAGq u4655NZKO144WDoU4Duhe4dYlrfttm03/rRd6LlNh2giVyvFZvP2ixejubo4+wDy bYG2nmI34xdjP7dOMcqZ64mVZtWdeIYY1p8kUpR+d5/4h8a8ih10wHk06CvpZA2e SuznJ/AtmRCEL7a8xyPqJLIfnAwGXT5PeuwTxLW5zUgkphVtGhvmwHDDaSlTXnZD E/XK4sQMhm2yL3SWOwgzIqMmxSzzsHdGFHvRVh5OocgSjaWFR9O7YHlg4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM1eP2znHueHNrJ50sqcSlV0kLyMB8GA1UdIwQY MBaAFMbRG2T/4Y76QvQ6bHZWOd7jjQJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjct NjgzNTg1MjE1OGQ4LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjctNjgzNTg1MjE1OGQ4 LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjGoImsA HQhcwoqZqHVZ72IGwbagPEytMUABFo+MWsL4kxV9n89NFjIKLMQFZCHqX8W4uOhm /oA4iGU7qBMhxQA2MLlNPOWq+5LKUrKlcM5KeDWh0NSib1pxGD3PR9224T9Q1pjC Dcg5no0Gybx5VGr3jebW+k9B2luHlCiSHU1KBVjOILYjOZAOGA3e3JDESvIpp8vq pFmKxtN0XjslTPM45weJiqeykLuR0i7DsYB9Oof1j8j7QVWZveR2ed2jirZ2ixVU Y+uAVepWbXuRpI8+s1eOdevpV8ZsGv6Nx/RYYZ4LLRQha/NANB3BerNxkQQy5GH7 aer6qfWvshkFqA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:55:33 2025 by rpki-client