This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json) Hash identifier: S9En//uI3asmBCwf56f++e5tu3sdJZb3pd8VOj8XWpU= Subject key identifier: 1F:C1:CA:00:1D:0B:12:37:57:97:D1:5A:97:5E:CB:8A:C3:E0:87:5D Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Certificate serial: 019B2176971C23AF18BB2274C96477F92FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft Manifest number: 0B10 Signing time: Mon 15 Dec 2025 10:02:58 +0000 Manifest this update: Mon 15 Dec 2025 10:02:58 +0000 Manifest next update: Tue 16 Dec 2025 10:02:58 +0000 Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=) 2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=) 3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=) 4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: hj0wmCcMyMJdp3HdKQ7C0foKdYyc+oDIvhf2sczfzs0=) 5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=) 6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=) 7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=) 8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:97:1c:23:af:18:bb:22:74:c9:64:77:f9:2f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Validity Not Before: Dec 15 10:02:58 2025 GMT Not After : Dec 16 10:02:58 2025 GMT Subject: CN=1fc1ca001d0b12375797d15a975ecb8ac3e0875d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:59:1d:0e:67:a0:1a:69:dc:57:33:63:6a: 04:be:b7:c1:b3:36:64:bf:c5:48:a6:a6:0b:c9:52: 8b:c5:21:99:86:d4:fa:d1:c5:7f:1e:09:a0:61:24: 66:02:3e:b9:d6:e0:aa:e4:78:9d:a7:38:4e:df:79: 04:51:ed:04:76:9b:b2:47:84:70:ec:bc:52:68:01: 51:67:8b:47:b9:0a:0c:84:88:f4:98:7f:04:df:02: aa:6b:17:20:dd:b6:33:46:9c:0b:0a:30:22:ab:56: 9c:89:24:86:48:76:b8:fa:93:a6:e8:57:cf:a1:9a: 75:d3:00:3f:d0:50:28:8e:53:10:ae:bf:7f:30:6b: 38:3e:11:8e:55:bc:73:94:fd:93:e8:2d:21:22:c9: f5:aa:96:39:42:54:f8:4a:06:31:91:b0:e0:45:b4: 2a:4a:48:d9:50:5b:8b:09:9b:d4:66:2d:ed:38:35: 6b:7f:1e:e6:ef:05:59:17:15:cd:b9:db:80:f2:cc: a6:09:c6:c0:0b:77:bb:9a:d2:cd:2d:bf:f8:15:ab: 93:2a:0d:38:a8:c5:a3:8b:22:1f:08:56:2d:38:b9: 9e:be:12:78:0f:bd:ec:3e:40:ae:0a:b6:07:2b:62: 5f:0c:c9:f6:4a:ec:ce:8b:28:f5:b8:07:85:f3:58: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C1:CA:00:1D:0B:12:37:57:97:D1:5A:97:5E:CB:8A:C3:E0:87:5D X509v3 Authority Key Identifier: keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a4:9f:d8:c9:5d:48:8f:c7:38:af:bc:bf:a1:ca:26:e3:bd: 71:94:e8:7b:9e:9f:03:91:fa:dc:14:8a:a1:6a:4c:62:bf:45: 22:c1:f9:3c:60:bd:04:b9:1b:a4:ef:2a:3d:2a:fc:b1:b4:fe: 26:28:26:9e:7d:88:6a:8c:5d:33:f1:1b:c2:fd:35:74:51:36: 1d:4b:6a:31:3d:7c:fc:48:01:97:6b:98:28:b6:37:2b:0b:61: 2c:58:df:8a:b8:db:7f:40:cc:30:b4:a5:95:e7:69:51:18:ba: cc:16:df:45:1d:c8:69:bc:4b:05:d2:17:f7:5e:8d:e3:c7:63: c3:79:8e:e4:8d:b0:dd:03:89:45:bf:70:78:ba:65:4f:fe:06: 7d:c8:50:37:10:de:a4:16:2b:5c:11:44:c2:aa:a4:c4:12:de: ec:79:43:6d:7e:d1:8c:1c:86:29:be:17:65:9f:66:aa:78:2a: bd:55:2b:4b:e7:84:40:22:fb:01:f4:9f:bb:b8:ca:2a:11:de: 39:3b:2a:e1:8d:cf:7b:67:70:d8:36:9c:fa:69:d9:4a:2d:56: 7b:d5:15:cd:68:38:d3:aa:39:b9:34:dd:da:18:b4:57:a5:7f: 07:02:5e:8e:b1:0f:a2:fa:65:8e:a0:04:db:47:07:f6:c9:3c: 19:f4:cf:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdpccI68YuyJ0yWR3+S+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl NmRiMGUwHhcNMjUxMjE1MTAwMjU4WhcNMjUxMjE2MTAwMjU4WjAzMTEwLwYDVQQD EygxZmMxY2EwMDFkMGIxMjM3NTc5N2QxNWE5NzVlY2I4YWMzZTA4NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBNZHQ5noBpp3FczY2oEvrfBszZk v8VIpqYLyVKLxSGZhtT60cV/HgmgYSRmAj651uCq5HidpzhO33kEUe0EdpuyR4Rw 7LxSaAFRZ4tHuQoMhIj0mH8E3wKqaxcg3bYzRpwLCjAiq1aciSSGSHa4+pOm6FfP oZp10wA/0FAojlMQrr9/MGs4PhGOVbxzlP2T6C0hIsn1qpY5QlT4SgYxkbDgRbQq SkjZUFuLCZvUZi3tODVrfx7m7wVZFxXNuduA8symCcbAC3e7mtLNLb/4FauTKg04 qMWjiyIfCFYtOLmevhJ4D73sPkCuCrYHK2JfDMn2SuzOiyj1uAeF81huUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/BygAdCxI3V5fRWpdey4rD4IddMB8GA1UdIwQY MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaSf2Mld SI/HOK+8v6HKJuO9cZToe56fA5H63BSKoWpMYr9FIsH5PGC9BLkbpO8qPSr8sbT+ Jigmnn2IaoxdM/Ebwv01dFE2HUtqMT18/EgBl2uYKLY3KwthLFjfirjbf0DMMLSl ledpURi6zBbfRR3IabxLBdIX916N48djw3mO5I2w3QOJRb9weLplT/4GfchQNxDe pBYrXBFEwqqkxBLe7HlDbX7RjByGKb4XZZ9mqngqvVUrS+eEQCL7AfSfu7jKKhHe OTsq4Y3Pe2dw2Dac+mnZSi1We9UVzWg406o5uTTd2hi0V6V/BwJejrEPovpljqAE 20cH9sk8GfTPaw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:02:15 2025 by rpki-client