This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json) Hash identifier: 7p+HmmQVFiw1hLXa2dQujcy8bhiIC1PFK+EMtc5Owrc= Subject key identifier: 10:3E:B4:2A:D5:C4:82:32:EA:10:23:FB:D5:0C:4E:91:A6:8D:A5:8A Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20 Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720 Certificate serial: 019B5907D9AFECAF65953A532AD6DE1010CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft Manifest number: 0C01 Signing time: Fri 26 Dec 2025 05:00:45 +0000 Manifest this update: Fri 26 Dec 2025 05:00:45 +0000 Manifest next update: Sat 27 Dec 2025 05:00:45 +0000 Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=) 2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: psGgmqc9q4daEG4qfX4y5eVOPR7fQn3X1ZosqjLAArk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:d9:af:ec:af:65:95:3a:53:2a:d6:de:10:10:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720 Validity Not Before: Dec 26 05:00:45 2025 GMT Not After : Dec 27 05:00:45 2025 GMT Subject: CN=103eb42ad5c48232ea1023fbd50c4e91a68da58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:99:66:b9:c9:60:68:79:d1:0b:9d:57:96: 6d:43:67:59:5e:8c:c3:b5:00:62:1c:f0:f5:2a:6f: d9:e9:73:22:e0:93:80:13:d2:1a:33:78:4c:3f:63: a6:e4:2c:d5:ca:98:6a:43:54:63:b6:e8:d5:78:db: b0:26:e8:a8:20:7c:77:be:f1:f3:a1:48:d2:f3:43: 79:de:49:02:1c:00:97:09:2f:64:38:18:1d:fa:fd: e3:7d:f7:8d:ab:a9:a2:1b:e6:43:cc:9d:b9:39:21: 01:6e:06:bc:54:d7:e4:45:a6:96:48:61:e6:be:58: 61:1f:86:dc:83:f2:69:fc:d4:a2:f1:60:87:8f:74: 60:99:8d:64:c2:75:1f:f0:7f:a4:ed:e2:a7:75:1b: 80:5e:15:95:38:bf:f3:d1:b0:15:42:5c:02:8b:a1: b1:53:34:86:1e:f6:c1:76:00:c7:82:c7:5e:4d:bb: e3:e1:e3:86:66:c3:e1:38:9f:6f:cb:0e:57:31:aa: 25:a8:d3:74:f5:35:bb:35:99:06:99:62:44:ba:21: 84:8c:49:37:02:c0:2c:04:37:01:27:8c:d5:dc:72: 16:44:9c:c8:8e:4a:20:e9:2f:05:48:4c:c6:91:44: ef:95:f3:e7:28:a9:72:c0:d6:5a:cc:70:67:ee:b8: 68:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3E:B4:2A:D5:C4:82:32:EA:10:23:FB:D5:0C:4E:91:A6:8D:A5:8A X509v3 Authority Key Identifier: keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:30:b1:ca:45:1c:d6:04:ca:32:09:b5:ec:28:02:ae:26:d8: 1c:1b:58:9b:78:f2:00:1c:4c:bf:92:23:aa:67:84:91:4f:75: 67:7e:e3:19:2b:3e:3a:3a:c9:48:96:31:14:c8:73:13:57:06: 70:0a:68:f8:c6:f0:6e:71:8f:df:e0:4f:29:08:08:f1:b8:92: 0c:69:08:3f:8f:bb:70:73:38:43:4e:63:87:3d:95:48:27:32: 1c:c9:72:f2:df:9e:7b:2c:1c:f1:36:97:c5:4e:90:e3:60:8b: 42:23:ba:06:d7:28:9b:88:79:ab:7e:91:b7:7e:6c:5a:ce:56: 61:3a:60:f6:70:78:a8:8e:34:27:5d:76:21:34:dc:3e:a9:8d: 30:30:69:a3:7d:e4:a9:b5:bf:6f:ff:36:f9:02:74:a2:5d:31: d1:ed:4a:ee:5d:5d:d3:d7:b4:8e:92:43:86:b5:61:9e:27:3c: 04:6f:f7:0c:3d:1e:37:f1:b2:f8:f1:4b:77:cf:6a:b2:4f:5e: 76:0a:43:c6:9c:2d:89:a6:19:c6:41:d5:0d:8d:1b:e8:78:0a: 68:d6:37:5d:07:66:ab:65:f8:bc:6b:81:f0:4c:f7:2b:55:ca: 6c:d7:5c:9a:dd:de:5d:05:a0:0f:70:30:86:5d:46:d3:1e:76: c6:2a:05:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB9mv7K9llTpTKtbeEBDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyMjllNzNjZTZiYjE5NmQ2NWMwYmVmMTE5NTYwNjU3 YTM3MjAwHhcNMjUxMjI2MDUwMDQ1WhcNMjUxMjI3MDUwMDQ1WjAzMTEwLwYDVQQD EygxMDNlYjQyYWQ1YzQ4MjMyZWExMDIzZmJkNTBjNGU5MWE2OGRhNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBaZZrnJYGh50QudV5ZtQ2dZXozD tQBiHPD1Km/Z6XMi4JOAE9IaM3hMP2Om5CzVyphqQ1RjtujVeNuwJuioIHx3vvHz oUjS80N53kkCHACXCS9kOBgd+v3jffeNq6miG+ZDzJ25OSEBbga8VNfkRaaWSGHm vlhhH4bcg/Jp/NSi8WCHj3RgmY1kwnUf8H+k7eKndRuAXhWVOL/z0bAVQlwCi6Gx UzSGHvbBdgDHgsdeTbvj4eOGZsPhOJ9vyw5XMaolqNN09TW7NZkGmWJEuiGEjEk3 AsAsBDcBJ4zV3HIWRJzIjkog6S8FSEzGkUTvlfPnKKlywNZazHBn7rho9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA+tCrVxIIy6hAj+9UMTpGmjaWKMB8GA1UdIwQY MBaAFMU7Ip5zzmuxltZcC+8RlWBlejcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEt NjM3MjhiMGZhMTA4LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEtNjM3MjhiMGZhMTA4 LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDCxykUc 1gTKMgm17CgCribYHBtYm3jyABxMv5IjqmeEkU91Z37jGSs+OjrJSJYxFMhzE1cG cApo+MbwbnGP3+BPKQgI8biSDGkIP4+7cHM4Q05jhz2VSCcyHMly8t+eeywc8TaX xU6Q42CLQiO6Btcom4h5q36Rt35sWs5WYTpg9nB4qI40J112ITTcPqmNMDBpo33k qbW/b/82+QJ0ol0x0e1K7l1d09e0jpJDhrVhnic8BG/3DD0eN/Gy+PFLd89qsk9e dgpDxpwtiaYZxkHVDY0b6HgKaNY3XQdmq2X4vGuB8Ez3K1XKbNdcmt3eXQWgD3Aw hl1G0x52xioF3g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:15 2025 by rpki-client