This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json) Hash identifier: apoCm5rWyj7hNgsDlm2lBPvPPKS6Eo35PLccsPufXH4= Subject key identifier: 7C:62:B3:6D:13:C2:94:B8:FB:B6:D8:14:80:59:66:A7:3E:1C:77:8F Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f Certificate serial: 019B126FAEE45D0C429ABFB09E0843180571 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 12:01:07 +0000 Manifest this update: Fri 12 Dec 2025 12:01:07 +0000 Manifest next update: Sat 13 Dec 2025 12:01:07 +0000 Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=) 2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: QeaeoKsU1BdhCACjhvc690IJhf6egqfoHIWD9123scI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:ae:e4:5d:0c:42:9a:bf:b0:9e:08:43:18:05:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f Validity Not Before: Dec 12 12:01:07 2025 GMT Not After : Dec 13 12:01:07 2025 GMT Subject: CN=7c62b36d13c294b8fbb6d814805966a73e1c778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:27:5b:f1:b2:fa:3f:7e:aa:43:fe:11:b5: 78:ac:6a:aa:9e:4d:0b:d8:fa:1e:92:d0:ba:b4:11: bd:04:ba:32:dc:81:b9:14:7b:bf:cf:5e:40:14:34: 40:1f:84:6b:21:8a:7d:80:29:90:8f:5a:c8:63:cb: 2b:5d:36:3a:e6:fb:7a:47:7b:48:aa:60:39:66:9e: c3:b2:64:e1:f7:55:58:ce:67:68:22:d8:f4:44:d6: 03:2e:87:fc:1d:98:dc:19:00:e1:eb:5f:58:1b:12: 0e:40:42:7a:eb:88:d0:ea:26:01:1c:86:1e:31:8c: 31:9e:d9:b7:e8:72:5f:bf:de:c9:fd:2c:cb:11:b6: e9:20:dc:0f:0a:d8:a7:13:7d:9c:a9:2c:b0:59:89: 23:48:4a:f5:dc:20:f4:ca:71:60:88:e3:a9:6e:03: aa:42:b3:61:be:9e:16:d3:ba:92:87:ab:53:01:1e: 9b:89:5e:0e:73:a4:b0:29:b1:1e:48:ef:c8:6a:1b: 96:06:56:ee:dd:02:46:2f:84:cc:8b:16:58:01:45: c0:dd:ab:64:56:67:33:9a:8d:80:cc:5a:d3:b8:c0: ac:f7:6b:65:ee:b0:be:75:a7:53:65:77:3e:c9:55: 5c:69:37:4c:9f:8d:56:3d:7f:07:a6:43:d8:43:e6: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:62:B3:6D:13:C2:94:B8:FB:B6:D8:14:80:59:66:A7:3E:1C:77:8F X509v3 Authority Key Identifier: keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6c:14:24:cc:9a:10:6a:cd:bc:78:90:9b:17:9d:5f:57:35: 3f:35:d5:71:81:86:e3:97:2c:87:02:c3:37:74:8c:b7:4d:1b: 0c:ab:90:f7:3c:11:33:a1:e5:fd:ef:0b:3f:39:69:f7:dc:0c: 04:19:06:91:c8:fb:29:10:fc:81:ca:48:88:17:e1:12:ae:95: 0f:ed:bd:c3:ad:98:98:a8:85:6c:fa:5d:39:5b:ca:e8:ed:29: b8:09:d6:a7:4b:cd:c0:d5:bc:11:15:02:75:c4:c7:3b:e8:4f: 7f:17:7a:ad:c5:41:6e:44:25:b7:2c:13:4e:18:a9:09:7c:41: dc:75:5a:2b:62:b0:12:62:57:c7:37:76:fe:89:0e:16:03:fc: 38:59:1a:ca:08:49:3e:fc:3c:81:44:f5:6a:4b:28:a0:d2:84: 0d:8c:94:18:60:89:34:20:80:6e:b6:a2:67:b2:5b:e4:4f:b5: 0e:f5:3b:d6:62:ce:8a:3a:25:76:66:e1:57:8d:01:26:6d:a0: 4d:b4:aa:7f:26:5d:dd:a8:f9:bc:e4:76:01:db:50:23:8d:7b: 4e:4e:fa:23:f0:f6:16:01:ff:a6:60:4e:62:ed:98:a6:f1:af: d3:cb:e6:d6:ab:df:78:10:55:d0:79:6c:6e:77:63:3b:80:51: 23:1e:cb:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb67kXQxCmr+wnghDGAVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1 MWYyMWYwHhcNMjUxMjEyMTIwMTA3WhcNMjUxMjEzMTIwMTA3WjAzMTEwLwYDVQQD Eyg3YzYyYjM2ZDEzYzI5NGI4ZmJiNmQ4MTQ4MDU5NjZhNzNlMWM3NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9AnW/Gy+j9+qkP+EbV4rGqqnk0L 2PoektC6tBG9BLoy3IG5FHu/z15AFDRAH4RrIYp9gCmQj1rIY8srXTY65vt6R3tI qmA5Zp7DsmTh91VYzmdoItj0RNYDLof8HZjcGQDh619YGxIOQEJ664jQ6iYBHIYe MYwxntm36HJfv97J/SzLEbbpINwPCtinE32cqSywWYkjSEr13CD0ynFgiOOpbgOq QrNhvp4W07qSh6tTAR6biV4Oc6SwKbEeSO/IahuWBlbu3QJGL4TMixZYAUXA3atk Vmczmo2AzFrTuMCs92tl7rC+dadTZXc+yVVcaTdMn41WPX8HpkPYQ+b/nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxis20TwpS4+7bYFIBZZqc+HHePMB8GA1UdIwQY MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5 LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2wUJMya EGrNvHiQmxedX1c1PzXVcYGG45cshwLDN3SMt00bDKuQ9zwRM6Hl/e8LPzlp99wM BBkGkcj7KRD8gcpIiBfhEq6VD+29w62YmKiFbPpdOVvK6O0puAnWp0vNwNW8ERUC dcTHO+hPfxd6rcVBbkQltywTThipCXxB3HVaK2KwEmJXxzd2/okOFgP8OFkayghJ Pvw8gUT1aksooNKEDYyUGGCJNCCAbraiZ7Jb5E+1DvU71mLOijoldmbhV40BJm2g TbSqfyZd3aj5vOR2AdtQI417Tk76I/D2FgH/pmBOYu2YpvGv08vm1qvfeBBV0Hls bndjO4BRIx7LEQ== -----END CERTIFICATE-----Generated at Fri Dec 12 19:28:38 2025 by rpki-client