This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: RbzS56TkCwZzp4fDK4lMVrtS7Srvd/o2tjr+OXWuh94= Subject key identifier: 58:56:48:A7:E4:8F:3F:C5:6F:C2:92:F5:D3:72:5C:AD:8A:EF:89:AE Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B05FD14B9C36C56F1900AF656D39ABCF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 17A3 Signing time: Wed 10 Dec 2025 02:00:30 +0000 Manifest this update: Wed 10 Dec 2025 02:00:30 +0000 Manifest next update: Thu 11 Dec 2025 02:00:30 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: MFsAIGGhjwkS7QqCImE8k8j0fHE.roa (hash: agrbR9N2CmVo23L0pspB3pCZ8XyUH28RrwKnFVhuak4=) 8: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 9: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 10: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 11: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: zS679lv44ExsOZC6+QNPKEnaDny9ISsrJWFWq0xx07I=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:fd:14:b9:c3:6c:56:f1:90:0a:f6:56:d3:9a:bc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Dec 10 02:00:30 2025 GMT Not After : Dec 11 02:00:30 2025 GMT Subject: CN=585648a7e48f3fc56fc292f5d3725cad8aef89ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:4f:db:1d:f3:1b:a4:11:4d:e3:ee:d3:62: 0e:1f:69:a5:54:99:d3:39:23:d2:19:57:2c:85:21: 6c:93:de:6d:06:7e:15:19:e4:4b:14:02:91:99:1b: 53:2c:03:db:a4:5d:6c:e8:d6:30:e3:2d:15:eb:a7: 2f:fb:7e:d6:3b:d1:38:ab:e1:5a:78:f0:13:c3:cf: a2:0e:7c:0c:8e:1b:8a:e5:24:cf:98:1e:57:ea:87: 72:c2:29:cf:61:80:53:a8:10:fa:fc:a8:6c:b2:2d: 18:81:aa:05:79:c3:d9:0c:bd:03:0d:1a:66:76:15: 9a:a4:b3:58:6e:62:7e:e6:7e:98:92:ec:76:fa:98: 95:21:81:0f:1f:90:c7:1e:f3:9e:c9:63:44:8f:8f: d6:57:e1:01:be:ba:31:ce:89:1c:5a:b0:d5:3b:c6: 7d:b9:d3:fb:98:cf:fe:61:5b:e0:92:d8:f0:d8:a0: eb:43:33:d7:a7:f5:d8:5d:d0:41:5b:c3:2f:11:9d: 8b:51:4d:9b:28:c3:69:5f:13:da:f8:25:bc:20:c4: 01:ea:fe:c8:75:ef:7c:f1:65:ab:e5:c4:4b:6f:64: 9c:3c:83:84:55:cc:00:76:2b:fa:f7:ef:e9:3e:e6: 58:bb:e8:ae:8a:e8:96:27:fa:1a:a8:b1:c5:10:0f: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:56:48:A7:E4:8F:3F:C5:6F:C2:92:F5:D3:72:5C:AD:8A:EF:89:AE X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fc:c2:cd:38:2c:fb:70:28:bf:01:b1:00:18:c2:8b:3f:80: 8b:f2:57:ef:c9:42:c4:fd:57:2b:5f:ef:3a:9b:a3:c8:83:36: c8:a3:a5:e0:44:ee:14:d8:45:5d:ca:f6:54:43:e6:a9:ed:e0: 8b:3e:5b:f0:b9:10:e1:11:c8:b8:b9:71:70:bc:ac:ef:60:86: 5a:07:2d:3a:b8:03:71:78:47:41:0b:95:e7:80:b0:36:ef:1d: d5:e4:a0:77:1f:38:ac:40:c1:ce:c7:52:47:19:ad:67:38:2a: 2d:e7:1d:d3:eb:b6:f5:d1:f1:74:50:e8:d1:33:f1:f1:28:0f: 67:d1:ff:a1:87:71:6a:0e:3f:c9:67:73:a4:32:5d:53:5f:e8: 90:f0:fa:2a:54:34:ae:57:b0:f7:b2:46:12:6d:be:a5:ed:7b: c3:19:c7:ea:58:a8:a1:fa:72:6d:5f:7d:b3:fc:7a:60:51:99: 6c:77:5f:3d:14:08:78:72:16:c3:23:a5:42:41:0f:72:74:71: d0:0f:79:9f:b8:0f:00:0c:e3:44:b2:b0:ee:01:42:b6:09:5a: 02:f0:43:ca:ba:64:f4:4f:61:0b:8c:32:10:e4:37:73:18:d8: 84:dd:55:9a:e8:00:af:bb:dc:de:8b:01:36:b0:2a:43:95:03: f5:29:e0:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsF/RS5w2xW8ZAK9lbTmrzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUxMjEwMDIwMDMwWhcNMjUxMjExMDIwMDMwWjAzMTEwLwYDVQQD Eyg1ODU2NDhhN2U0OGYzZmM1NmZjMjkyZjVkMzcyNWNhZDhhZWY4OWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EZP2x3zG6QRTePu02IOH2mlVJnT OSPSGVcshSFsk95tBn4VGeRLFAKRmRtTLAPbpF1s6NYw4y0V66cv+37WO9E4q+Fa ePATw8+iDnwMjhuK5STPmB5X6odywinPYYBTqBD6/Khssi0YgaoFecPZDL0DDRpm dhWapLNYbmJ+5n6Ykux2+piVIYEPH5DHHvOeyWNEj4/WV+EBvroxzokcWrDVO8Z9 udP7mM/+YVvgktjw2KDrQzPXp/XYXdBBW8MvEZ2LUU2bKMNpXxPa+CW8IMQB6v7I de988WWr5cRLb2ScPIOEVcwAdiv69+/pPuZYu+iuiuiWJ/oaqLHFEA9oHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhWSKfkjz/Fb8KS9dNyXK2K74muMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/zCzTgs +3AovwGxABjCiz+Ai/JX78lCxP1XK1/vOpujyIM2yKOl4ETuFNhFXcr2VEPmqe3g iz5b8LkQ4RHIuLlxcLys72CGWgctOrgDcXhHQQuV54CwNu8d1eSgdx84rEDBzsdS RxmtZzgqLecd0+u29dHxdFDo0TPx8SgPZ9H/oYdxag4/yWdzpDJdU1/okPD6KlQ0 rlew97JGEm2+pe17wxnH6lioofpybV99s/x6YFGZbHdfPRQIeHIWwyOlQkEPcnRx 0A95n7gPAAzjRLKw7gFCtglaAvBDyrpk9E9hC4wyEOQ3cxjYhN1VmugAr7vc3osB NrAqQ5UD9SngxA== -----END CERTIFICATE-----Generated at Wed Dec 10 10:05:17 2025 by rpki-client