This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json) Hash identifier: mL2GUsJhJB7d9OEcAzlBOHy4N92kIDVtjPR7s899VJk= Subject key identifier: 90:8A:1F:C3:B4:D7:11:B6:26:E2:ED:24:B0:78:82:50:85:67:6C:2E Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5 Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5 Certificate serial: 019B5A1A6637BE0BD0D9B208771AF237CBFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft Manifest number: 1018 Signing time: Fri 26 Dec 2025 10:00:38 +0000 Manifest this update: Fri 26 Dec 2025 10:00:38 +0000 Manifest next update: Sat 27 Dec 2025 10:00:38 +0000 Files and hashes: 1: BxG4JwAN57vo6NBlUISw9RdW7m0.roa (hash: roJixiQowuB4avbvI55JLdOWJ/KjfR6U+Yu2VKUFfoA=) 2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: y8euB1TqWnQA9N5BYLxXlBL6/whe8ZbIZqd3yPpJrR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:66:37:be:0b:d0:d9:b2:08:77:1a:f2:37:cb:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5 Validity Not Before: Dec 26 10:00:38 2025 GMT Not After : Dec 27 10:00:38 2025 GMT Subject: CN=908a1fc3b4d711b626e2ed24b078825085676c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:aa:59:ca:8a:2e:c5:6d:12:ab:6e:64:15: 51:65:cb:39:fc:ac:57:78:b3:94:db:dc:42:c8:c3: 4e:e2:3c:98:4f:00:89:28:f9:c2:e6:3c:f1:00:c5: 54:12:14:32:d7:c6:54:13:6b:b7:84:dd:dd:3a:f5: b6:24:cb:a3:90:83:cb:de:e5:24:8b:15:e5:72:a0: 02:42:9e:e0:bf:71:24:07:ea:57:d4:a2:bd:04:6f: 59:8f:8b:c3:99:8c:0c:d9:20:5f:a9:8e:b4:ca:fb: a3:b8:b4:bb:4e:08:15:f6:a7:bf:d3:02:4b:62:5b: 04:d3:4b:6d:70:dc:54:9c:69:83:83:21:12:de:c9: 8a:f9:e8:14:5d:b2:29:1b:7e:3a:f7:6f:42:ca:ce: 28:1c:0d:c4:63:2a:91:34:e3:25:99:0b:5c:a4:d4: 19:a8:e2:69:9e:7d:87:f3:c3:59:88:87:22:48:63: 64:08:97:74:2b:4f:4b:0b:e4:a5:74:b8:4c:4b:80: b8:e6:52:b0:fd:67:54:4f:94:25:c2:36:36:1e:fd: 1e:3a:dd:8a:1f:e9:cb:46:27:15:14:67:17:5e:2f: bb:cf:0a:52:97:61:a2:b9:33:63:37:d6:2d:78:3f: 13:e2:51:47:d0:24:de:f5:b7:51:a4:c7:3f:3a:da: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8A:1F:C3:B4:D7:11:B6:26:E2:ED:24:B0:78:82:50:85:67:6C:2E X509v3 Authority Key Identifier: keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:82:00:83:d9:db:3d:dd:65:56:11:f0:91:b1:01:44:72:59: 85:24:83:e2:7d:15:7f:55:af:b2:00:c7:9d:cf:d3:ba:e8:0f: 0a:1d:05:bf:1f:ab:52:4d:40:62:7a:7a:32:c3:ef:e0:81:03: 74:48:31:d5:c7:e6:76:ed:21:9d:1b:85:30:3c:80:66:7f:f8: 1c:13:00:6e:23:b4:6d:bd:97:57:ab:eb:2a:ac:a7:e4:8f:bb: 7c:13:0e:79:e7:6d:75:8d:36:35:c6:c2:a0:ba:18:86:2b:85: 5b:c7:ea:ad:b0:91:a0:a6:90:b7:c4:2c:a7:2b:ef:1a:6c:3b: ae:7e:ac:77:e4:e0:4e:18:0a:62:06:cc:05:2c:c7:4b:a4:cb: ff:3b:df:e1:f4:af:05:25:26:31:95:ff:6f:2a:5b:76:26:c5: f6:89:c9:23:bf:dc:a5:b5:f9:06:79:c0:44:1c:84:c6:98:bf: dd:28:5d:04:14:c2:9a:93:e8:a4:8f:f3:88:85:ce:70:95:38: d0:79:11:a7:70:5b:09:d0:b3:c6:b3:35:36:7a:07:a8:65:1a: d2:59:79:5c:47:40:bf:a3:d4:45:51:52:16:e3:3b:08:51:6d: 46:69:cc:ed:79:cb:6d:cb:a5:78:ac:aa:3e:58:23:31:44:f7: 8f:78:dd:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGmY3vgvQ2bIIdxryN8v+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2MyMjJmYWQyYzI3Y2E2MTJjOThjMjczZDRmMTY1MDZl MWIyZTUwHhcNMjUxMjI2MTAwMDM4WhcNMjUxMjI3MTAwMDM4WjAzMTEwLwYDVQQD Eyg5MDhhMWZjM2I0ZDcxMWI2MjZlMmVkMjRiMDc4ODI1MDg1Njc2YzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRuqWcqKLsVtEqtuZBVRZcs5/KxX eLOU29xCyMNO4jyYTwCJKPnC5jzxAMVUEhQy18ZUE2u3hN3dOvW2JMujkIPL3uUk ixXlcqACQp7gv3EkB+pX1KK9BG9Zj4vDmYwM2SBfqY60yvujuLS7TggV9qe/0wJL YlsE00ttcNxUnGmDgyES3smK+egUXbIpG346929Cys4oHA3EYyqRNOMlmQtcpNQZ qOJpnn2H88NZiIciSGNkCJd0K09LC+SldLhMS4C45lKw/WdUT5QlwjY2Hv0eOt2K H+nLRicVFGcXXi+7zwpSl2GiuTNjN9YteD8T4lFH0CTe9bdRpMc/OtrR2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCKH8O01xG2JuLtJLB4glCFZ2wuMB8GA1UdIwQY MBaAFMQ8Ii+tLCfKYSyYwnPU8WUG4bLlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82OGE3ZWEtZDUwYS00YTMwLTk1MTMt ZTkwOWE3N2NkYTk4LzEveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82OGE3ZWEtZDUwYS00YTMwLTk1MTMtZTkwOWE3N2NkYTk4 LzEveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyIIAg9nb Pd1lVhHwkbEBRHJZhSSD4n0Vf1WvsgDHnc/TuugPCh0Fvx+rUk1AYnp6MsPv4IED dEgx1cfmdu0hnRuFMDyAZn/4HBMAbiO0bb2XV6vrKqyn5I+7fBMOeedtdY02NcbC oLoYhiuFW8fqrbCRoKaQt8QspyvvGmw7rn6sd+TgThgKYgbMBSzHS6TL/zvf4fSv BSUmMZX/bypbdibF9onJI7/cpbX5BnnARByExpi/3ShdBBTCmpPopI/ziIXOcJU4 0HkRp3BbCdCzxrM1NnoHqGUa0ll5XEdAv6PURVFSFuM7CFFtRmnM7XnLbculeKyq PlgjMUT3j3jduA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:52 2025 by rpki-client