This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json) Hash identifier: Bp5K1yktK/nQE3357XBXCsaFmljXHaZHd2tJxciyU4Y= Subject key identifier: 6D:21:89:87:6D:64:92:96:D0:F9:0A:91:59:A1:73:4B:8E:80:42:3C Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Certificate serial: 019B25BF40FD4BED7A0471D02AFC25E72348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft Manifest number: 14E9 Signing time: Tue 16 Dec 2025 06:00:49 +0000 Manifest this update: Tue 16 Dec 2025 06:00:49 +0000 Manifest next update: Wed 17 Dec 2025 06:00:49 +0000 Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=) 2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: ICw5dgStsHo0r4b93QoF9hjMrsrvR7p91uxA9apWCDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:40:fd:4b:ed:7a:04:71:d0:2a:fc:25:e7:23:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Validity Not Before: Dec 16 06:00:49 2025 GMT Not After : Dec 17 06:00:49 2025 GMT Subject: CN=6d2189876d649296d0f90a9159a1734b8e80423c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:a2:a4:55:a3:d7:e6:87:22:98:af:ff:6d: e6:50:dd:fc:76:4d:52:04:1b:ff:80:27:22:c1:13: df:9b:2e:09:d2:0a:49:cb:98:d0:68:98:4f:76:18: 13:cf:5f:ad:10:12:28:ec:bc:f6:89:bf:2a:13:73: 39:1f:7a:fb:c0:d1:44:4e:9f:d4:70:a9:4e:80:d5: 50:3c:41:89:29:6b:1b:dd:4c:7e:8a:e1:2c:51:f6: 6d:d4:fd:18:a8:ed:f5:a5:43:71:1e:58:c4:07:8e: 70:ed:5e:86:ae:4f:64:9c:87:38:08:25:81:d2:81: 64:2b:65:41:74:4d:7b:ca:49:cd:89:9b:43:c9:ef: e9:fe:27:c2:75:a2:c0:2e:de:46:7b:a4:b7:ad:15: 16:b0:d4:09:a9:6c:95:d5:e2:ad:9a:f6:be:08:3d: b0:18:73:5d:82:6e:d7:9e:86:d2:d2:ee:18:61:1b: d1:b5:74:1f:98:53:49:3b:dc:77:5b:e1:55:06:29: e9:7d:fe:09:c8:1a:21:02:73:0c:60:17:87:11:0d: 0a:f0:a0:19:ef:05:27:dd:3e:9d:9e:ce:bf:6f:66: 3a:78:68:93:bc:89:d1:de:76:73:14:e8:61:5d:77: 82:c1:4f:aa:f3:08:e5:9f:3b:6f:6a:a9:16:e2:18: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:21:89:87:6D:64:92:96:D0:F9:0A:91:59:A1:73:4B:8E:80:42:3C X509v3 Authority Key Identifier: keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:38:79:70:82:47:29:03:37:e9:06:19:d9:49:21:2f:6f:88: 8c:30:26:55:a5:8d:aa:f5:8a:65:7f:f9:ef:c2:b6:69:00:21: c3:30:9d:d9:09:2b:60:f1:35:86:0c:f9:30:84:b7:c3:94:44: 12:51:92:61:ea:f9:c2:5f:31:38:6c:32:68:78:ab:94:b7:d7: 47:04:30:4f:92:af:96:98:1d:33:10:93:e9:0a:28:bc:59:1d: 38:4c:7d:5f:bb:05:53:39:93:c1:f6:88:0c:5f:21:ef:7e:f1: 52:14:23:88:31:4e:af:b7:ce:3c:c7:d9:cd:22:8b:96:e1:3f: 41:34:da:d3:e3:e6:0b:2e:c5:28:8e:7e:4c:2d:9b:e8:4e:af: 65:52:9f:a4:5b:20:9a:7d:78:f2:15:23:74:30:e9:5b:e3:cd: ed:eb:da:85:bd:ca:8f:57:e8:7f:9c:6d:ea:16:bc:7a:ce:9b: f5:e2:dd:f2:c7:e3:5e:56:b7:8a:b2:15:83:68:34:e3:8c:06: 0c:0f:ea:de:e0:37:c2:e3:b5:93:93:91:55:59:0d:dc:5d:7b: 3a:5a:cf:0f:53:c2:d8:f4:bb:80:93:b3:ea:c4:ea:70:73:51: e3:37:e8:69:0d:5c:a8:a4:bb:81:ad:a6:32:0a:59:85:72:cb: c2:43:19:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv0D9S+16BHHQKvwl5yNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm ZGQ0YzYwHhcNMjUxMjE2MDYwMDQ5WhcNMjUxMjE3MDYwMDQ5WjAzMTEwLwYDVQQD Eyg2ZDIxODk4NzZkNjQ5Mjk2ZDBmOTBhOTE1OWExNzM0YjhlODA0MjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGiipFWj1+aHIpiv/23mUN38dk1S BBv/gCciwRPfmy4J0gpJy5jQaJhPdhgTz1+tEBIo7Lz2ib8qE3M5H3r7wNFETp/U cKlOgNVQPEGJKWsb3Ux+iuEsUfZt1P0YqO31pUNxHljEB45w7V6Grk9knIc4CCWB 0oFkK2VBdE17yknNiZtDye/p/ifCdaLALt5Ge6S3rRUWsNQJqWyV1eKtmva+CD2w GHNdgm7XnobS0u4YYRvRtXQfmFNJO9x3W+FVBinpff4JyBohAnMMYBeHEQ0K8KAZ 7wUn3T6dns6/b2Y6eGiTvInR3nZzFOhhXXeCwU+q8wjlnztvaqkW4hiSnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0hiYdtZJKW0PkKkVmhc0uOgEI8MB8GA1UdIwQY MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzh5cIJH KQM36QYZ2UkhL2+IjDAmVaWNqvWKZX/578K2aQAhwzCd2QkrYPE1hgz5MIS3w5RE ElGSYer5wl8xOGwyaHirlLfXRwQwT5KvlpgdMxCT6QoovFkdOEx9X7sFUzmTwfaI DF8h737xUhQjiDFOr7fOPMfZzSKLluE/QTTa0+PmCy7FKI5+TC2b6E6vZVKfpFsg mn148hUjdDDpW+PN7evahb3Kj1fof5xt6ha8es6b9eLd8sfjXla3irIVg2g044wG DA/q3uA3wuO1k5ORVVkN3F17OlrPD1PC2PS7gJOz6sTqcHNR4zfoaQ1cqKS7ga2m MgpZhXLLwkMZ9Q== -----END CERTIFICATE-----Generated at Tue Dec 16 09:45:17 2025 by rpki-client