This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json) Hash identifier: KoSaQe6Bv/xLpEfFeufZpWXbPAoT8teMrKeeZg2VC1A= Subject key identifier: 8E:96:BD:E2:BA:F5:DA:E3:94:EB:17:3B:D2:C0:1F:31:4E:5A:40:0D Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28 Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28 Certificate serial: 019B5AF6ABF1AC28FA7EDB142378C694DC96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 14:01:13 +0000 Manifest this update: Fri 26 Dec 2025 14:01:13 +0000 Manifest next update: Sat 27 Dec 2025 14:01:13 +0000 Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=) 2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: mL9Uhcz8IqL+JhFc4RnlGKchXDtz+gvfW0EWaDeaMfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:ab:f1:ac:28:fa:7e:db:14:23:78:c6:94:dc:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28 Validity Not Before: Dec 26 14:01:13 2025 GMT Not After : Dec 27 14:01:13 2025 GMT Subject: CN=8e96bde2baf5dae394eb173bd2c01f314e5a400d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:df:bd:84:e4:bc:3c:1a:1c:53:54:95:4e:e5: ef:d7:48:1a:3e:2e:f9:95:58:71:c7:28:7a:f5:8d: 96:52:1c:18:ce:f5:05:0c:70:6c:66:50:c2:bd:7d: f7:65:7f:ff:49:10:ff:da:01:a3:a4:fc:34:4a:f4: 39:da:18:48:b3:8f:ed:44:cf:ac:ae:c8:89:54:39: 8e:32:f3:b1:97:ce:79:51:5c:27:63:6f:81:ca:14: ab:48:d3:39:24:6a:93:d0:fa:58:53:56:9e:c9:a8: a1:a3:ad:bc:47:b4:c7:5e:99:0e:d2:3d:8c:f4:83: 7c:ab:46:37:8e:5d:04:6b:e4:c8:1a:25:87:6b:15: 84:18:72:57:08:33:e1:cc:4f:4f:db:40:3e:ce:f7: 14:32:98:08:f8:2e:25:73:ef:d6:03:de:ad:fc:28: d2:43:e6:5a:51:d5:1e:c8:05:cb:3e:59:22:b1:0e: 65:92:51:e2:df:a0:eb:4c:b9:88:b7:07:04:16:07: 68:ba:0b:7d:39:1f:94:19:e2:49:82:40:36:ac:24: 59:9e:91:d5:e5:f6:87:24:5a:1f:ac:60:3c:cb:fa: f1:5c:84:a0:62:5e:39:0c:51:e8:08:53:a6:57:c1: 81:52:b6:b2:7f:49:52:4a:e5:70:2e:0b:9b:6d:4d: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:96:BD:E2:BA:F5:DA:E3:94:EB:17:3B:D2:C0:1F:31:4E:5A:40:0D X509v3 Authority Key Identifier: keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ee:73:f1:eb:b8:cf:b0:a6:1c:c1:84:33:e7:c6:91:df:30: 0a:01:ec:4a:7b:7d:9d:51:f9:88:16:a9:6f:f4:40:18:d8:49: 1b:05:9d:5b:a1:4d:bd:99:2c:87:63:57:ef:e8:77:2a:c3:af: 26:fb:7b:c8:80:ec:23:97:4c:3a:cc:95:c7:ba:44:4f:80:92: 9a:63:8b:ea:d9:20:c1:b0:8b:30:ba:41:df:cb:28:74:60:fc: 21:e6:a0:47:87:6c:fd:ac:6e:5e:32:ff:6e:0d:9b:91:7e:ac: a2:64:2b:61:6d:7f:11:6d:c1:23:35:4e:ae:4d:ab:b9:24:56: d4:e7:7d:fe:74:0d:95:89:e8:43:96:88:57:8f:af:c4:8b:00: 00:a8:c6:46:62:b7:c2:f6:92:a8:aa:47:0a:7d:4f:b5:8a:4f: 02:67:c8:25:f9:a7:0c:30:7c:0a:9c:60:82:a2:f1:78:46:29: 42:2a:2d:2b:73:33:97:2a:83:3a:a8:3e:9c:01:4b:56:68:8a: 10:9b:37:a7:69:d4:44:b6:4b:cd:34:e5:da:ae:c3:f0:7d:21: 1a:8c:03:59:c7:39:6d:7d:a9:51:d8:1a:dd:22:73:45:c5:52: 4e:8b:c7:52:91:b1:b5:16:3f:4c:9e:73:56:8a:1b:45:54:51: 02:aa:e9:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9qvxrCj6ftsUI3jGlNyWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjI4N2M2ODQ1OGY5ODBjYTliN2MzNmQ2MWY2YWY1ODY0 NjRiMjgwHhcNMjUxMjI2MTQwMTEzWhcNMjUxMjI3MTQwMTEzWjAzMTEwLwYDVQQD Eyg4ZTk2YmRlMmJhZjVkYWUzOTRlYjE3M2JkMmMwMWYzMTRlNWE0MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t+9hOS8PBocU1SVTuXv10gaPi75 lVhxxyh69Y2WUhwYzvUFDHBsZlDCvX33ZX//SRD/2gGjpPw0SvQ52hhIs4/tRM+s rsiJVDmOMvOxl855UVwnY2+ByhSrSNM5JGqT0PpYU1aeyaiho628R7THXpkO0j2M 9IN8q0Y3jl0Ea+TIGiWHaxWEGHJXCDPhzE9P20A+zvcUMpgI+C4lc+/WA96t/CjS Q+ZaUdUeyAXLPlkisQ5lklHi36DrTLmItwcEFgdougt9OR+UGeJJgkA2rCRZnpHV 5faHJFofrGA8y/rxXISgYl45DFHoCFOmV8GBUrayf0lSSuVwLgubbU2+vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6WveK69drjlOsXO9LAHzFOWkANMB8GA1UdIwQY MBaAFMQih8aEWPmAypt8NtYfavWGRksoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMt YjEyZDdmODkyZjViLzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMtYjEyZDdmODkyZjVi LzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAge5z8eu4 z7CmHMGEM+fGkd8wCgHsSnt9nVH5iBapb/RAGNhJGwWdW6FNvZksh2NX7+h3KsOv Jvt7yIDsI5dMOsyVx7pET4CSmmOL6tkgwbCLMLpB38sodGD8IeagR4ds/axuXjL/ bg2bkX6somQrYW1/EW3BIzVOrk2ruSRW1Od9/nQNlYnoQ5aIV4+vxIsAAKjGRmK3 wvaSqKpHCn1PtYpPAmfIJfmnDDB8CpxggqLxeEYpQiotK3MzlyqDOqg+nAFLVmiK EJs3p2nURLZLzTTl2q7D8H0hGowDWcc5bX2pUdga3SJzRcVSTovHUpGxtRY/TJ5z VoobRVRRAqrpsA== -----END CERTIFICATE-----Generated at Fri Dec 26 21:01:55 2025 by rpki-client