This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json) Hash identifier: Q1SMg36AzxRoqcwuajy8g3Xgu/puh/ZdpbVnUXDFRCM= Subject key identifier: D0:1A:57:BC:AD:B5:10:B9:79:E6:84:90:11:8B:A5:1B:DF:FF:7D:23 Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873 Certificate serial: 019B5A1A5FEA35B418F07410ACA281549AE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft Manifest number: 17A2 Signing time: Fri 26 Dec 2025 10:00:36 +0000 Manifest this update: Fri 26 Dec 2025 10:00:36 +0000 Manifest next update: Sat 27 Dec 2025 10:00:36 +0000 Files and hashes: 1: X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa (hash: tfPHTT8XE2UFNzu3VKtqQ2wZ9tqFTwpzr3+xuc/NotQ=) 2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=) 3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: PwNt8LdX/U/dj/CnfvJGvG70Cr3B7RG3DTPyNrkuf/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:5f:ea:35:b4:18:f0:74:10:ac:a2:81:54:9a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873 Validity Not Before: Dec 26 10:00:36 2025 GMT Not After : Dec 27 10:00:36 2025 GMT Subject: CN=d01a57bcadb510b979e68490118ba51bdfff7d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:72:1c:7b:3e:db:26:33:b8:63:d6:9c:a4: 46:94:ec:ad:8d:49:d9:a3:b9:2a:09:76:28:3b:c0: ef:46:9c:f1:70:8a:60:a7:07:24:4c:81:de:e7:c7: fc:27:00:37:82:75:46:b7:6c:18:32:0c:9c:d1:c8: fc:a1:c2:30:c0:ca:62:c7:15:4d:b2:ef:43:9c:0a: 07:a5:28:c9:6b:7d:93:45:9a:29:a4:52:aa:eb:c8: 6d:e0:c3:e0:07:f4:97:4a:5a:4c:81:4b:bb:9b:f1: b6:a9:26:10:53:05:7b:b6:03:6a:68:08:3b:99:a6: 46:83:64:99:d2:2b:01:b5:1a:6e:99:8d:5a:58:44: 7a:49:8c:cf:c9:28:50:43:89:e4:b0:dc:1b:fb:96: e8:db:40:81:f7:1e:c2:29:02:9b:d6:ed:fe:a7:2a: f1:d4:90:05:3d:49:27:b7:3a:b3:92:6f:88:26:6a: ab:10:16:f9:1e:6f:83:ef:c6:e0:a8:9f:d4:cd:e0: 74:da:1b:75:b1:8c:ed:f2:d6:f1:76:e8:bb:4f:e3: 4a:27:63:a7:d2:64:16:49:f6:5a:6c:ef:b0:b3:7b: b2:c0:02:32:46:7e:c8:94:58:12:aa:91:b0:ec:e4: 5d:72:41:d3:30:63:2a:07:5a:fd:31:c9:04:06:08: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1A:57:BC:AD:B5:10:B9:79:E6:84:90:11:8B:A5:1B:DF:FF:7D:23 X509v3 Authority Key Identifier: keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:14:19:42:f0:ba:bb:11:62:e6:f2:35:49:ba:fd:6e:b9:6b: 01:bc:73:3c:a1:9f:92:52:21:ae:db:e3:31:13:7c:21:f0:31: 06:34:c5:d5:61:ca:ae:70:08:dc:cc:ac:51:ac:01:2a:38:cf: 0f:aa:ab:84:06:2d:67:25:03:33:42:66:38:70:6c:ad:6f:29: a2:20:43:91:74:df:48:ed:09:62:d2:aa:a9:1c:92:39:ad:5f: 75:25:6e:fa:87:a2:35:42:44:c1:73:a5:b2:e5:27:cc:10:d6: 8f:90:d1:3a:a1:12:d4:0d:2c:b2:1b:8d:40:34:17:25:a8:5a: 7a:d7:75:68:68:22:d9:49:6d:f8:b4:7d:6e:c3:ac:b2:58:47: 6e:f0:a5:78:dd:60:aa:c7:0f:16:db:fe:20:5b:50:22:bb:77: 00:68:b6:5f:b4:1f:3d:87:e0:3a:2b:4e:83:7b:d6:e8:bc:92: 39:3f:44:77:0a:ac:80:08:15:75:e4:94:b5:ea:0f:01:66:87: fe:0e:aa:12:5b:e5:0e:c2:a2:70:89:5c:4a:76:c8:ec:24:dd: ec:77:d7:23:c6:e5:f7:01:8a:25:b8:17:bb:3d:8c:f5:08:49: d2:d2:23:41:f0:27:ed:0f:25:0b:0f:05:42:52:12:89:6c:b9: ba:d9:3c:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGl/qNbQY8HQQrKKBVJroMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2 YWU4NzMwHhcNMjUxMjI2MTAwMDM2WhcNMjUxMjI3MTAwMDM2WjAzMTEwLwYDVQQD EyhkMDFhNTdiY2FkYjUxMGI5NzllNjg0OTAxMThiYTUxYmRmZmY3ZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M5yHHs+2yYzuGPWnKRGlOytjUnZ o7kqCXYoO8DvRpzxcIpgpwckTIHe58f8JwA3gnVGt2wYMgyc0cj8ocIwwMpixxVN su9DnAoHpSjJa32TRZoppFKq68ht4MPgB/SXSlpMgUu7m/G2qSYQUwV7tgNqaAg7 maZGg2SZ0isBtRpumY1aWER6SYzPyShQQ4nksNwb+5bo20CB9x7CKQKb1u3+pyrx 1JAFPUkntzqzkm+IJmqrEBb5Hm+D78bgqJ/UzeB02ht1sYzt8tbxdui7T+NKJ2On 0mQWSfZabO+ws3uywAIyRn7IlFgSqpGw7ORdckHTMGMqB1r9MckEBghTRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAaV7yttRC5eeaEkBGLpRvf/30jMB8GA1UdIwQY MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt NDlhNjU0NTc4NmU2LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2 LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2hQZQvC6 uxFi5vI1Sbr9brlrAbxzPKGfklIhrtvjMRN8IfAxBjTF1WHKrnAI3MysUawBKjjP D6qrhAYtZyUDM0JmOHBsrW8poiBDkXTfSO0JYtKqqRySOa1fdSVu+oeiNUJEwXOl suUnzBDWj5DROqES1A0sshuNQDQXJahaetd1aGgi2Ult+LR9bsOsslhHbvCleN1g qscPFtv+IFtQIrt3AGi2X7QfPYfgOitOg3vW6LySOT9EdwqsgAgVdeSUteoPAWaH /g6qElvlDsKicIlcSnbI7CTd7HfXI8bl9wGKJbgXuz2M9QhJ0tIjQfAn7Q8lCw8F QlISiWy5utk87w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:02 2025 by rpki-client