This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json) Hash identifier: Jfnf9gHB/uJuoP9g6dawNAVtHndg6kH3ZvXwSc6pfMg= Subject key identifier: 10:49:B9:4B:D8:A7:D7:4E:35:24:53:DD:B5:F6:71:E2:6C:6B:02:F3 Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Certificate serial: 019B23D0DE8CAB72C3FEBD5D3E9BCDFC16BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft Manifest number: 14E8 Signing time: Mon 15 Dec 2025 21:00:49 +0000 Manifest this update: Mon 15 Dec 2025 21:00:49 +0000 Manifest next update: Tue 16 Dec 2025 21:00:49 +0000 Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=) 2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: Z8nyUwfo9Yxshm2wv/RDYHyRyD9lCWMhH4QKSPHhwkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:de:8c:ab:72:c3:fe:bd:5d:3e:9b:cd:fc:16:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Validity Not Before: Dec 15 21:00:49 2025 GMT Not After : Dec 16 21:00:49 2025 GMT Subject: CN=1049b94bd8a7d74e352453ddb5f671e26c6b02f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:db:a0:4d:9d:fd:e8:ac:93:96:fd:eb:42:45: a4:a6:1e:84:db:f8:3d:b7:43:51:c9:5e:75:31:eb: 83:cd:57:23:49:9c:ff:89:7d:ce:20:b6:9d:de:dc: da:e0:6f:c9:12:86:10:2b:c9:0c:b2:d7:58:1b:ec: ad:1e:97:72:0b:3f:5a:9c:8e:28:41:35:bb:c9:3d: 65:17:ce:eb:90:3f:51:f0:1c:75:60:64:8f:49:79: 65:b6:74:f7:8e:97:0f:ba:80:78:81:b6:1c:78:c2: 64:3d:3a:c3:e5:b3:32:76:7e:18:9c:a2:6f:bc:8e: 30:df:7f:d7:3b:9f:fc:20:f5:95:d9:53:09:f2:94: 7f:0d:2e:0e:8b:16:59:88:eb:98:17:f8:ad:06:2e: cf:5e:f2:09:60:4d:7a:b5:6d:72:8d:cf:2a:26:ac: 43:33:b9:29:11:2b:d9:b4:e8:3f:62:3f:c6:da:b2: 25:4b:ef:71:9c:15:50:c7:17:2e:48:a0:6c:44:8d: 14:03:e4:b5:3e:f8:96:22:a5:f0:71:ac:a5:ab:ea: 26:2e:8b:01:f7:f3:e1:5a:a4:51:02:13:64:e5:6c: fa:9c:b9:e3:17:0a:c6:87:e6:4e:ee:c9:47:cc:6d: 34:84:ed:38:2b:fa:30:40:8e:c9:30:d3:42:dd:03: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:49:B9:4B:D8:A7:D7:4E:35:24:53:DD:B5:F6:71:E2:6C:6B:02:F3 X509v3 Authority Key Identifier: keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b0:df:9d:cd:37:a5:4e:22:d6:2e:82:8e:95:59:41:d4:07: 4a:a7:06:25:06:d1:ce:af:a6:ae:d4:98:c4:ce:ce:e0:25:e7: 7b:0d:6f:39:d7:42:a1:94:7a:43:71:ab:ca:9c:16:fb:42:07: 0c:f5:6e:85:56:75:64:13:7e:f0:d7:43:22:c1:84:ad:c9:fd: a0:9f:10:0f:96:1c:29:87:6b:f7:2f:24:59:4e:4e:5a:1a:65: c9:b9:61:a4:d1:4b:ec:f6:18:c7:b6:2d:3e:f7:70:22:29:31: 8c:e1:c5:d2:58:3b:19:9b:4d:0e:67:be:9e:74:42:f8:35:3d: b3:2d:59:05:b0:d3:02:38:60:a3:cd:c2:67:21:1d:c2:e2:09: d9:49:65:2e:39:28:40:0d:c2:8a:c1:05:2d:ea:19:0f:d2:0e: 3a:1e:a8:93:53:80:88:06:be:9e:06:22:39:a5:a2:db:f4:32: e6:12:b5:18:23:73:65:94:f1:df:29:75:d4:02:ea:5e:65:93: 41:f6:e4:ac:39:5e:77:e8:d5:d4:9d:2e:91:74:ac:ea:34:d8: 12:b7:91:3f:58:a9:e1:ec:c5:40:62:17:c3:0d:17:5a:20:75: 6f:f6:e6:43:95:ca:c2:75:d3:17:59:26:38:ff:57:b9:0e:d5: 8f:b6:b7:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0N6Mq3LD/r1dPpvN/Ba6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm ZGQ0YzYwHhcNMjUxMjE1MjEwMDQ5WhcNMjUxMjE2MjEwMDQ5WjAzMTEwLwYDVQQD EygxMDQ5Yjk0YmQ4YTdkNzRlMzUyNDUzZGRiNWY2NzFlMjZjNmIwMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79ugTZ396KyTlv3rQkWkph6E2/g9 t0NRyV51MeuDzVcjSZz/iX3OILad3tza4G/JEoYQK8kMstdYG+ytHpdyCz9anI4o QTW7yT1lF87rkD9R8Bx1YGSPSXlltnT3jpcPuoB4gbYceMJkPTrD5bMydn4YnKJv vI4w33/XO5/8IPWV2VMJ8pR/DS4OixZZiOuYF/itBi7PXvIJYE16tW1yjc8qJqxD M7kpESvZtOg/Yj/G2rIlS+9xnBVQxxcuSKBsRI0UA+S1PviWIqXwcaylq+omLosB 9/PhWqRRAhNk5Wz6nLnjFwrGh+ZO7slHzG00hO04K/owQI7JMNNC3QPt4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBJuUvYp9dONSRT3bX2ceJsawLzMB8GA1UdIwQY MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrDfnc03 pU4i1i6CjpVZQdQHSqcGJQbRzq+mrtSYxM7O4CXnew1vOddCoZR6Q3GrypwW+0IH DPVuhVZ1ZBN+8NdDIsGErcn9oJ8QD5YcKYdr9y8kWU5OWhplyblhpNFL7PYYx7Yt PvdwIikxjOHF0lg7GZtNDme+nnRC+DU9sy1ZBbDTAjhgo83CZyEdwuIJ2UllLjko QA3CisEFLeoZD9IOOh6ok1OAiAa+ngYiOaWi2/Qy5hK1GCNzZZTx3yl11ALqXmWT QfbkrDled+jV1J0ukXSs6jTYEreRP1ip4ezFQGIXww0XWiB1b/bmQ5XKwnXTF1km OP9XuQ7Vj7a3CA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:38:36 2025 by rpki-client