This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json) Hash identifier: GwJLMu7XjRfjJOV3lhHCmC48WDcKF+bTfx0CaQ1Esbc= Subject key identifier: 32:90:E4:F6:AF:4C:26:22:73:50:8B:ED:50:57:EF:CB:F6:A0:DA:31 Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac Certificate serial: 019B4C2865BA6591CCD6112D1B5D239CF8FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 17:01:14 +0000 Manifest this update: Tue 23 Dec 2025 17:01:14 +0000 Manifest next update: Wed 24 Dec 2025 17:01:14 +0000 Files and hashes: 1: TWq28Ae0YWlnL9QMmIL7aFBiUGw.roa (hash: +h8RDHE7R4Fi6gqXkHnd/C2ymQ77DKFkbRcxLwhFxSk=) 2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: KlmXfwKFige93jRNopC/0q+mqddCwxWOEqNiYSkFkXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:65:ba:65:91:cc:d6:11:2d:1b:5d:23:9c:f8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac Validity Not Before: Dec 23 17:01:14 2025 GMT Not After : Dec 24 17:01:14 2025 GMT Subject: CN=3290e4f6af4c262273508bed5057efcbf6a0da31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:00:7d:bc:31:8c:ec:ea:9e:41:9d:ff:15:a6: 1e:13:76:d3:4b:4b:bd:f8:b4:31:62:b2:fe:8e:ad: e1:ce:88:79:d7:22:4c:2c:1a:35:70:28:62:bd:20: da:0f:dc:8a:0d:66:fb:1f:09:bf:af:a0:17:e9:ae: 90:6f:cb:35:1f:fa:55:af:aa:93:b5:18:86:df:21: 3a:ad:52:24:08:08:30:a1:af:6e:55:2f:8f:83:f6: c8:00:f7:84:7e:b3:7f:43:28:3b:ea:31:2a:63:03: aa:bb:b6:68:34:01:49:96:cb:6c:5b:e8:82:63:0d: 84:8e:e9:da:38:b4:20:78:d2:aa:52:5f:c4:ad:db: 47:6a:c4:64:78:87:a7:b1:55:05:9f:d6:97:c9:c8: 9e:73:e4:3e:b7:b0:22:06:4e:15:e2:2b:fc:31:0b: 39:c3:34:86:8f:5f:ad:42:38:c5:47:df:e6:19:80: d0:aa:45:2d:c2:f3:15:7e:fc:0d:29:c3:4a:9a:1b: 4c:8c:d9:5f:7d:17:4e:89:53:01:5f:b5:8a:9f:6e: cf:3d:f6:f0:6a:00:74:1b:24:96:f6:c7:dc:4f:9b: 92:2f:f2:af:2d:96:e5:27:a7:4a:71:6c:d8:03:69: 41:25:7c:f5:19:c9:b1:a2:3c:8d:a7:70:16:c0:f8: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:E4:F6:AF:4C:26:22:73:50:8B:ED:50:57:EF:CB:F6:A0:DA:31 X509v3 Authority Key Identifier: keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fa:7c:4c:22:3b:80:48:ec:d1:10:26:ec:e5:2d:7a:d0:c0: ae:96:af:9b:2e:3c:12:56:23:35:11:92:10:ca:58:25:fb:76: 0a:5b:16:9f:40:c3:7a:a4:37:31:6a:a3:d7:9c:7b:a9:fb:b4: 30:c1:54:d0:5b:9e:1c:44:60:50:a7:72:05:b5:b0:0a:43:2b: 2c:24:5a:91:08:e1:b3:6e:9d:b2:13:82:34:e6:9e:8f:90:aa: 18:ca:9e:e7:c1:2b:ec:f0:a5:f6:c7:14:32:34:0a:0a:1f:ab: aa:78:7f:38:a5:7d:ce:57:3d:a6:41:d1:8a:3f:15:ce:f8:c5: 28:45:b8:3c:20:19:5a:0b:b9:fe:f8:33:c3:a5:a8:4a:10:b4: 60:af:d0:b3:af:97:24:72:ac:c5:7a:46:cc:37:a5:46:31:93: 3e:29:00:c4:9e:79:5d:75:21:94:f9:4f:1b:d1:0c:56:5f:25: b5:eb:25:13:d0:a8:97:2c:36:f4:2d:57:ee:6e:06:39:bb:53: 9d:cb:bc:c5:b0:76:7f:f7:db:0c:ed:b9:bb:bc:94:d1:8f:61: bd:c5:2c:a2:f1:95:bc:93:bb:0a:2a:4a:52:f2:cf:5f:eb:e3: 3c:d0:6c:c4:b6:1f:32:83:f5:3e:a3:92:20:4e:01:c8:60:59: 48:7b:2c:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKGW6ZZHM1hEtG10jnPj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmE1ZjJiNDY4ZGIzNWViNTYyYmQzN2UxZjM2ZWNlYTgx M2NjYWMwHhcNMjUxMjIzMTcwMTE0WhcNMjUxMjI0MTcwMTE0WjAzMTEwLwYDVQQD EygzMjkwZTRmNmFmNGMyNjIyNzM1MDhiZWQ1MDU3ZWZjYmY2YTBkYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AB9vDGM7OqeQZ3/FaYeE3bTS0u9 +LQxYrL+jq3hzoh51yJMLBo1cChivSDaD9yKDWb7Hwm/r6AX6a6Qb8s1H/pVr6qT tRiG3yE6rVIkCAgwoa9uVS+Pg/bIAPeEfrN/Qyg76jEqYwOqu7ZoNAFJlstsW+iC Yw2EjunaOLQgeNKqUl/ErdtHasRkeIensVUFn9aXyciec+Q+t7AiBk4V4iv8MQs5 wzSGj1+tQjjFR9/mGYDQqkUtwvMVfvwNKcNKmhtMjNlffRdOiVMBX7WKn27PPfbw agB0GySW9sfcT5uSL/KvLZblJ6dKcWzYA2lBJXz1GcmxojyNp3AWwPiNaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKQ5PavTCYic1CL7VBX78v2oNoxMB8GA1UdIwQY MBaAFMZqXytGjbNetWK9N+Hzbs6oE8ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81MzFhNGMtNjUyMS00ZWY5LTg4Nzgt MzFmNGNjMTJkNjIwLzEveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81MzFhNGMtNjUyMS00ZWY5LTg4NzgtMzFmNGNjMTJkNjIw LzEveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPp8TCI7 gEjs0RAm7OUtetDArpavmy48ElYjNRGSEMpYJft2ClsWn0DDeqQ3MWqj15x7qfu0 MMFU0FueHERgUKdyBbWwCkMrLCRakQjhs26dshOCNOaej5CqGMqe58Er7PCl9scU MjQKCh+rqnh/OKV9zlc9pkHRij8VzvjFKEW4PCAZWgu5/vgzw6WoShC0YK/Qs6+X JHKsxXpGzDelRjGTPikAxJ55XXUhlPlPG9EMVl8lteslE9Colyw29C1X7m4GObtT ncu8xbB2f/fbDO25u7yU0Y9hvcUsovGVvJO7CipKUvLPX+vjPNBsxLYfMoP1PqOS IE4ByGBZSHssCA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:38:37 2025 by rpki-client