This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json) Hash identifier: 15A1iQRcv83oJbq+h5O1zSgDCfLh75nY7HOQQvFDGro= Subject key identifier: C3:7C:9B:BE:95:6C:A4:12:70:39:3A:C2:EE:92:DB:D8:B3:83:0B:B3 Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213 Certificate serial: 019B43249A1853B1AFDF59203AF6990776D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft Manifest number: 0DA5 Signing time: Sun 21 Dec 2025 23:00:30 +0000 Manifest this update: Sun 21 Dec 2025 23:00:30 +0000 Manifest next update: Mon 22 Dec 2025 23:00:30 +0000 Files and hashes: 1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=) 2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=) 3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=) 4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: GkfrmhvtgnfkqNXg3eiQECmYDOvadPMAyp/pYGJTtQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:9a:18:53:b1:af:df:59:20:3a:f6:99:07:76:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213 Validity Not Before: Dec 21 23:00:30 2025 GMT Not After : Dec 22 23:00:30 2025 GMT Subject: CN=c37c9bbe956ca41270393ac2ee92dbd8b3830bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e4:6a:24:4b:69:b7:b7:bb:e6:2e:8d:3a:13: dc:bf:33:c1:00:4f:52:e8:e3:ea:6a:63:4c:f4:9d: ab:94:d5:c4:5b:84:14:da:80:7a:b4:9f:2d:af:08: a3:f6:17:0b:4e:db:ee:5e:60:15:04:9b:bd:e3:77: 13:b4:f8:a6:12:1e:32:a7:07:aa:88:61:d1:5f:03: 9b:84:73:2f:10:68:a4:23:38:0a:99:b7:d9:4b:04: 0e:99:0f:f8:2a:46:b6:70:cd:8b:6b:03:1f:84:60: 02:25:4d:d8:f0:a0:45:fa:d6:57:be:55:08:cb:ec: 0d:05:1f:07:3c:d0:04:81:e9:47:1f:ac:58:f5:ab: cb:02:2e:19:9b:06:82:bb:56:a2:91:c4:3b:fb:6a: db:a2:a1:ca:29:c2:c0:10:a1:ea:95:4e:30:21:86: 15:8f:a9:ca:f1:24:b0:f7:b9:87:da:59:be:cb:6f: 47:e7:9a:29:31:1d:15:0c:05:11:cf:67:73:12:e8: a6:c5:1f:72:ef:2d:57:c1:53:de:c8:d2:93:98:c2: aa:cc:2d:3b:32:3c:2b:37:31:36:e0:9d:94:65:f5: 5a:90:8a:38:3e:5d:f5:5c:14:aa:42:1c:27:29:37: 50:f8:19:1f:33:71:96:bc:21:0e:96:be:2c:8f:c0: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7C:9B:BE:95:6C:A4:12:70:39:3A:C2:EE:92:DB:D8:B3:83:0B:B3 X509v3 Authority Key Identifier: keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:80:cf:71:65:0d:a0:1d:ec:2d:ed:b8:06:39:10:2f:5e:4c: 40:c2:73:7f:20:db:3a:e9:28:b4:28:ad:96:03:e7:b5:41:03: 94:78:7e:27:e0:42:f3:62:cc:6c:b3:d5:5f:64:c9:6d:39:83: 15:0f:bb:c2:cd:30:1d:c5:d5:ee:28:3e:54:6f:4b:6e:8f:ea: cd:65:fa:ab:b1:63:41:a7:cd:cf:94:2f:e3:af:a7:47:d6:4f: 51:61:9f:8c:7d:20:8d:24:bd:7c:08:8a:dc:17:c0:d3:82:a4: 1a:b1:5b:79:7a:73:5b:95:32:15:b1:b6:80:61:95:7c:de:fb: b2:dd:90:72:d7:9c:34:ba:55:b5:90:6a:c4:36:57:a6:48:87: 9c:61:65:a9:cd:06:82:35:60:fa:1f:73:59:53:68:2d:1f:c6: 91:af:a8:e2:00:95:8d:e1:4b:f9:56:60:87:5d:df:4a:34:61: 1b:4f:e7:18:22:de:81:f9:49:b8:2f:53:9a:ff:25:6f:22:f0: a0:e7:b8:00:bf:75:9f:53:3d:c5:96:ff:07:f9:88:60:c5:bb: 99:b4:1b:b3:c8:ae:16:3d:4d:8a:66:bc:98:89:2f:ee:72:31: 05:09:c9:91:6c:de:7e:d9:15:32:c5:a0:dc:51:cd:48:a5:c2: 45:9e:8d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJJoYU7Gv31kgOvaZB3bTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1 NzcyMTMwHhcNMjUxMjIxMjMwMDMwWhcNMjUxMjIyMjMwMDMwWjAzMTEwLwYDVQQD EyhjMzdjOWJiZTk1NmNhNDEyNzAzOTNhYzJlZTkyZGJkOGIzODMwYmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eRqJEtpt7e75i6NOhPcvzPBAE9S 6OPqamNM9J2rlNXEW4QU2oB6tJ8trwij9hcLTtvuXmAVBJu943cTtPimEh4ypweq iGHRXwObhHMvEGikIzgKmbfZSwQOmQ/4Kka2cM2LawMfhGACJU3Y8KBF+tZXvlUI y+wNBR8HPNAEgelHH6xY9avLAi4ZmwaCu1aikcQ7+2rboqHKKcLAEKHqlU4wIYYV j6nK8SSw97mH2lm+y29H55opMR0VDAURz2dzEuimxR9y7y1XwVPeyNKTmMKqzC07 MjwrNzE24J2UZfVakIo4Pl31XBSqQhwnKTdQ+BkfM3GWvCEOlr4sj8APmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN8m76VbKQScDk6wu6S29izgwuzMB8GA1UdIwQY MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt YjhlYTE4ZWI3NWY0LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0 LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4DPcWUN oB3sLe24BjkQL15MQMJzfyDbOukotCitlgPntUEDlHh+J+BC82LMbLPVX2TJbTmD FQ+7ws0wHcXV7ig+VG9Lbo/qzWX6q7FjQafNz5Qv46+nR9ZPUWGfjH0gjSS9fAiK 3BfA04KkGrFbeXpzW5UyFbG2gGGVfN77st2QctecNLpVtZBqxDZXpkiHnGFlqc0G gjVg+h9zWVNoLR/Gka+o4gCVjeFL+VZgh13fSjRhG0/nGCLegflJuC9Tmv8lbyLw oOe4AL91n1M9xZb/B/mIYMW7mbQbs8iuFj1Nima8mIkv7nIxBQnJkWzeftkVMsWg 3FHNSKXCRZ6NYg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:49 2025 by rpki-client