This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json) Hash identifier: MI+j09jGrZ7NHRoBNE6OTStieKW/EyZA0Czn38MdoO8= Subject key identifier: D7:23:75:25:0E:1F:B5:E6:D3:1B:05:43:1D:17:A8:80:B7:02:D4:03 Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213 Certificate serial: 019B0558C54014345981E901D2E8FA58AF70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft Manifest number: 0D85 Signing time: Tue 09 Dec 2025 23:01:02 +0000 Manifest this update: Tue 09 Dec 2025 23:01:02 +0000 Manifest next update: Wed 10 Dec 2025 23:01:02 +0000 Files and hashes: 1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=) 2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=) 3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=) 4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: N/gW11mtn8TI51WansiqY0FhVYe3QjJEhVF75Gs7BT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:58:c5:40:14:34:59:81:e9:01:d2:e8:fa:58:af:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213 Validity Not Before: Dec 9 23:01:02 2025 GMT Not After : Dec 10 23:01:02 2025 GMT Subject: CN=d72375250e1fb5e6d31b05431d17a880b702d403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:89:3d:ca:11:d9:4a:b8:df:d5:29:ff:2d:3a: 37:20:b7:62:bd:c9:bf:5f:29:b5:b2:e5:a6:6f:cb: 3c:b2:b6:5a:93:10:6e:56:1d:f2:19:ca:5d:73:3b: 43:1d:6e:d1:66:37:2b:e0:bb:b2:43:a6:2c:66:a9: 87:8b:c2:db:8e:69:28:bf:76:b4:a0:1f:b3:5f:8a: b0:03:9f:61:cc:e9:86:2b:cc:0c:95:a3:e6:44:96: 06:00:69:3e:05:8d:66:0b:3d:c4:d3:ca:cf:b2:2f: 98:a0:74:0c:90:16:5e:f1:65:95:85:c0:d6:07:ab: cf:a8:1e:cf:0c:70:27:57:c5:c9:da:15:2d:50:a4: f1:25:89:3d:98:3a:90:0c:6c:ed:be:20:04:23:f8: 74:2e:c2:d2:2c:ee:b8:09:72:ef:b7:ce:4e:a4:49: 59:8a:61:43:8c:c3:52:2e:a6:7b:44:3f:87:cc:0d: 0d:c4:4f:f3:56:55:7d:00:6c:28:fc:bd:da:aa:7e: e8:53:05:33:ae:48:71:48:ec:c3:ce:67:d8:17:4a: b1:6a:74:22:92:3c:ea:b7:ad:ff:61:84:15:aa:88: 16:ff:d9:de:73:98:74:ae:b2:5c:ce:38:e8:c0:77: 97:5b:a3:59:21:c8:57:1b:d2:91:0f:1c:f0:60:64: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:75:25:0E:1F:B5:E6:D3:1B:05:43:1D:17:A8:80:B7:02:D4:03 X509v3 Authority Key Identifier: keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:99:5b:56:c6:04:80:fe:ba:0a:32:be:d0:6b:a8:87:c6:93: 4d:fc:50:8a:0a:74:e5:30:55:ea:fb:4b:97:be:2f:c7:e4:38: 08:ea:23:5e:2e:cc:07:24:77:61:3b:82:d8:51:2f:9f:9d:50: 4c:30:85:9d:d8:a9:6a:11:11:7d:7e:50:2e:92:62:3c:37:d2: 1d:d6:08:04:65:66:b0:c9:72:5c:44:45:92:a9:6f:b0:14:fe: 6f:31:08:aa:1d:71:ab:3a:c1:4a:da:4b:67:6e:9c:81:30:00: 47:77:d3:3f:2c:86:73:b5:a4:e1:c7:b6:59:bf:3e:fe:e8:50: 28:7b:ad:32:57:bd:e3:12:8f:7a:ce:3a:09:89:2b:fd:44:5d: a3:8c:90:54:05:4d:81:15:04:86:bb:7f:be:46:1c:5b:3b:f0: c5:64:c7:dc:5f:0b:77:3f:aa:45:80:c6:69:0f:00:d9:42:d5: 28:f4:d5:8d:b4:7b:03:5e:4d:e5:bf:5f:3f:ec:3b:ea:c5:4f: 45:3b:45:98:7d:94:b0:1f:b2:dc:1a:c0:5b:1c:65:ba:99:ef: 54:72:60:51:20:20:bf:54:0f:b4:50:80:eb:b9:1d:e6:07:bb: 3d:0b:6d:38:c0:8a:83:15:95:76:cd:0d:53:89:da:99:c6:1d: 0a:f8:4d:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFWMVAFDRZgekB0uj6WK9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1 NzcyMTMwHhcNMjUxMjA5MjMwMTAyWhcNMjUxMjEwMjMwMTAyWjAzMTEwLwYDVQQD EyhkNzIzNzUyNTBlMWZiNWU2ZDMxYjA1NDMxZDE3YTg4MGI3MDJkNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ok9yhHZSrjf1Sn/LTo3ILdivcm/ Xym1suWmb8s8srZakxBuVh3yGcpdcztDHW7RZjcr4LuyQ6YsZqmHi8Lbjmkov3a0 oB+zX4qwA59hzOmGK8wMlaPmRJYGAGk+BY1mCz3E08rPsi+YoHQMkBZe8WWVhcDW B6vPqB7PDHAnV8XJ2hUtUKTxJYk9mDqQDGztviAEI/h0LsLSLO64CXLvt85OpElZ imFDjMNSLqZ7RD+HzA0NxE/zVlV9AGwo/L3aqn7oUwUzrkhxSOzDzmfYF0qxanQi kjzqt63/YYQVqogW/9nec5h0rrJczjjowHeXW6NZIchXG9KRDxzwYGRPUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcjdSUOH7Xm0xsFQx0XqIC3AtQDMB8GA1UdIwQY MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt YjhlYTE4ZWI3NWY0LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0 LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5lbVsYE gP66CjK+0Guoh8aTTfxQigp05TBV6vtLl74vx+Q4COojXi7MByR3YTuC2FEvn51Q TDCFndipahERfX5QLpJiPDfSHdYIBGVmsMlyXERFkqlvsBT+bzEIqh1xqzrBStpL Z26cgTAAR3fTPyyGc7Wk4ce2Wb8+/uhQKHutMle94xKPes46CYkr/URdo4yQVAVN gRUEhrt/vkYcWzvwxWTH3F8Ldz+qRYDGaQ8A2ULVKPTVjbR7A15N5b9fP+w76sVP RTtFmH2UsB+y3BrAWxxlupnvVHJgUSAgv1QPtFCA67kd5ge7PQttOMCKgxWVds0N U4namcYdCvhN6Q== -----END CERTIFICATE-----Generated at Wed Dec 10 07:54:59 2025 by rpki-client