This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json) Hash identifier: 343uh/Ri5P0n14nnPBHtF68lMoDCD3hBJi5sQ9itnZU= Subject key identifier: 3E:FA:CE:3A:51:05:7B:FA:7A:79:08:52:3B:3B:6C:39:93:77:6C:AD Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6 Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6 Certificate serial: 019B59E4401EEBC2DC40F27B5F38B98688CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft Manifest number: 10CD Signing time: Fri 26 Dec 2025 09:01:29 +0000 Manifest this update: Fri 26 Dec 2025 09:01:29 +0000 Manifest next update: Sat 27 Dec 2025 09:01:29 +0000 Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=) 2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: 4NaJeMeJvQcaKqlU2KQzdYV84OESNanPC9yyO4aawTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:40:1e:eb:c2:dc:40:f2:7b:5f:38:b9:86:88:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6 Validity Not Before: Dec 26 09:01:29 2025 GMT Not After : Dec 27 09:01:29 2025 GMT Subject: CN=3eface3a51057bfa7a7908523b3b6c3993776cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:0a:cb:4f:f7:c9:72:b4:bf:d8:9f:65:46: 9f:78:c0:f4:03:9f:59:39:8b:95:7c:29:58:57:2f: fb:ac:02:73:80:01:22:af:3a:e0:fc:ad:4f:57:2e: d6:d7:dc:53:fa:41:77:de:c7:66:ec:fd:e6:4c:ab: 49:ec:46:bc:b9:bb:e6:5b:ef:55:02:5c:fd:3e:60: 8e:58:a5:80:93:1c:e5:e1:8b:1e:56:53:a4:6f:6e: 94:6c:c2:34:84:38:0a:11:29:c1:cc:22:26:62:4b: 08:ec:cc:78:4a:13:1f:b9:27:bf:fe:ed:28:17:64: b6:53:14:d5:bf:3a:12:23:aa:70:52:38:cc:94:9b: c3:95:ae:24:d4:59:97:98:a9:b9:c9:bd:4b:69:18: 5a:65:79:bd:0f:14:7c:a4:33:8a:fd:02:97:72:05: 5c:04:24:65:18:af:61:6e:50:59:17:af:cf:a8:a8: 54:d5:88:95:55:eb:88:d7:7c:35:70:68:c7:5b:f0: 10:ab:2b:b4:b9:a5:23:62:5c:21:b0:bf:00:6e:fc: fe:fb:af:d3:d8:de:ee:af:2b:ad:d4:55:bb:a0:a3: 27:1e:ea:8a:81:df:52:73:b9:57:b0:25:ba:d6:1a: bd:e3:a3:0c:1d:04:d5:d6:e9:10:83:76:da:b6:4f: 7e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FA:CE:3A:51:05:7B:FA:7A:79:08:52:3B:3B:6C:39:93:77:6C:AD X509v3 Authority Key Identifier: keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:04:50:26:8d:40:9e:09:05:6b:0b:51:25:d1:29:62:1b:72: f6:77:69:59:fa:fe:08:b2:8d:19:f2:00:3e:d9:02:15:4c:c1: 1a:2d:96:24:bc:6d:b4:5a:58:ac:6d:af:cc:03:6f:38:ed:a2: 36:a9:f3:fd:02:e5:9d:bc:9c:35:91:ab:4d:fa:b2:9c:50:c1: bd:a0:6d:29:91:e1:8b:6e:77:cf:3d:de:b0:d9:a3:cf:25:a0: 6c:88:a0:3f:78:8f:21:ec:82:e9:39:3b:78:f3:4a:59:26:ee: 6c:71:54:e1:59:55:ee:1d:b5:da:34:4f:3a:b7:fe:c3:e4:28: 5f:08:15:97:7d:ca:34:4c:57:07:cb:48:cb:ac:21:55:ff:d3: 53:3b:9e:9f:46:f9:68:10:0f:36:24:c3:50:b2:db:17:e7:fd: 97:4c:92:1e:d9:3b:8b:c5:5d:7a:55:2f:98:55:14:c4:67:6c: 2e:2b:16:62:7d:03:c6:3d:ff:bb:32:cd:25:fd:db:84:cc:0b: f9:1e:a0:7d:c4:b0:f6:db:ac:9d:6c:c2:50:75:9c:f1:e2:d2: 03:cc:80:e3:64:b1:1a:9d:96:22:a3:93:7c:71:11:56:bc:b7: b8:0e:70:bb:df:c6:89:80:bb:bd:cd:c4:89:cc:32:5d:40:bd: 70:ff:41:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5EAe68LcQPJ7Xzi5hojOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmY3NzJiZjNjNDY0MWE3MWJmN2Y0YmM0ZGUxMWM5M2Fk ZGZlYTYwHhcNMjUxMjI2MDkwMTI5WhcNMjUxMjI3MDkwMTI5WjAzMTEwLwYDVQQD EygzZWZhY2UzYTUxMDU3YmZhN2E3OTA4NTIzYjNiNmMzOTkzNzc2Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKoKy0/3yXK0v9ifZUafeMD0A59Z OYuVfClYVy/7rAJzgAEirzrg/K1PVy7W19xT+kF33sdm7P3mTKtJ7Ea8ubvmW+9V Alz9PmCOWKWAkxzl4YseVlOkb26UbMI0hDgKESnBzCImYksI7Mx4ShMfuSe//u0o F2S2UxTVvzoSI6pwUjjMlJvDla4k1FmXmKm5yb1LaRhaZXm9DxR8pDOK/QKXcgVc BCRlGK9hblBZF6/PqKhU1YiVVeuI13w1cGjHW/AQqyu0uaUjYlwhsL8Abvz++6/T 2N7uryut1FW7oKMnHuqKgd9Sc7lXsCW61hq946MMHQTV1ukQg3batk9+VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD76zjpRBXv6enkIUjs7bDmTd2ytMB8GA1UdIwQY MBaAFMVvdyvzxGQacb9/S8TeEck63f6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTct N2VjYTIwNWZhZmNiLzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTctN2VjYTIwNWZhZmNi LzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQRQJo1A ngkFawtRJdEpYhty9ndpWfr+CLKNGfIAPtkCFUzBGi2WJLxttFpYrG2vzANvOO2i Nqnz/QLlnbycNZGrTfqynFDBvaBtKZHhi253zz3esNmjzyWgbIigP3iPIeyC6Tk7 ePNKWSbubHFU4VlV7h212jRPOrf+w+QoXwgVl33KNExXB8tIy6whVf/TUzuen0b5 aBAPNiTDULLbF+f9l0ySHtk7i8VdelUvmFUUxGdsLisWYn0Dxj3/uzLNJf3bhMwL +R6gfcSw9tusnWzCUHWc8eLSA8yA42SxGp2WIqOTfHERVry3uA5wu9/GiYC7vc3E icwyXUC9cP9BNw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:53 2025 by rpki-client