This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json) Hash identifier: /7F1L3jTTt5vIAKQNDbn/sGWRWFr0Mw5rUUTuqIeTOY= Subject key identifier: EC:A7:F3:F1:63:0D:D9:D0:76:19:2F:80:E4:0E:4A:3E:EE:54:3A:52 Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Certificate serial: 019B5B64F9231A14449A2B2730D0C0346D26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft Manifest number: 17A7 Signing time: Fri 26 Dec 2025 16:01:42 +0000 Manifest this update: Fri 26 Dec 2025 16:01:42 +0000 Manifest next update: Sat 27 Dec 2025 16:01:42 +0000 Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=) 2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: ovvLWKwKO2jPJMc0KrTY6WfXnwRgwh292WZuVbKVNEw=) 3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:f9:23:1a:14:44:9a:2b:27:30:d0:c0:34:6d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Validity Not Before: Dec 26 16:01:42 2025 GMT Not After : Dec 27 16:01:42 2025 GMT Subject: CN=eca7f3f1630dd9d076192f80e40e4a3eee543a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:76:f1:18:e7:77:75:d6:e7:da:d9:77:4b: 0d:b5:29:99:6f:72:9b:01:7b:05:d2:8c:a7:08:34: a5:2b:8f:4f:c3:d3:2e:d5:83:6b:99:d2:5b:28:19: 74:bc:3f:23:2f:77:02:eb:dc:f9:a7:78:67:33:f3: 4c:f4:77:63:d9:51:e9:97:89:92:07:e8:cc:2a:c6: 2e:a0:fc:be:e6:41:d0:60:e4:4c:84:02:bd:8a:5c: 7e:35:c0:e9:1c:58:c2:cc:84:4d:54:40:06:87:83: ff:b6:ef:5a:b2:0a:ee:21:03:02:aa:ec:67:a0:40: 40:27:95:11:92:5a:a0:3a:7a:ca:78:ba:f6:47:49: a2:5f:52:ae:3f:c4:bd:65:57:01:b9:8a:78:d4:a2: 1f:98:d8:c6:df:cd:af:ee:fa:71:40:65:0b:f5:30: a8:fc:3e:d7:f0:d1:54:47:25:cb:c9:11:a0:0d:df: b5:c5:2b:8a:a6:a6:d9:fc:5c:b4:d8:a3:57:cb:f8: ee:56:dc:5d:1c:83:a8:4a:fd:14:97:93:7b:41:1f: 6a:95:78:4a:17:30:98:4c:21:d9:30:21:5d:02:0b: 56:3e:4b:9b:fa:65:43:7e:1c:03:e3:13:46:b5:9a: 0e:bb:17:59:6d:5b:07:a5:88:c7:ad:a8:a2:57:82: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A7:F3:F1:63:0D:D9:D0:76:19:2F:80:E4:0E:4A:3E:EE:54:3A:52 X509v3 Authority Key Identifier: keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:50:f5:f1:17:bb:2d:5c:f8:d0:bb:f9:b7:ad:c6:2d:b9:fe: 1a:d5:ea:d7:41:bf:90:1d:fd:14:ac:47:37:9b:a9:27:59:9c: d5:46:c8:46:30:f7:4c:34:be:e2:15:19:30:ff:9a:c4:19:27: b6:ec:f5:4f:7d:c1:b3:14:8c:fc:af:47:7b:46:2e:dc:04:82: 8a:5e:f7:50:4d:7e:4c:ea:51:86:bd:ad:69:a0:56:46:62:7a: 31:9e:6c:20:ad:bb:f8:ab:a2:58:50:45:30:d5:b6:d6:f5:fc: e1:1a:9c:e0:c1:a9:29:dc:99:62:2d:9d:4f:b2:f6:b3:bb:50: d1:c1:3b:96:b0:b3:8d:c4:b2:0e:5c:2c:31:83:7d:40:96:8f: 65:12:fa:5a:99:61:05:86:00:b0:49:74:af:10:7a:d0:75:d6: ec:be:8c:6b:06:2b:73:39:fb:d3:a1:f6:f2:66:9d:84:7c:61: a2:8d:46:d3:47:8c:b0:ec:ba:d4:69:69:bf:2c:19:1f:2e:17: 07:54:29:2c:ca:04:a8:c5:eb:b2:8a:aa:5a:8d:e0:fc:23:ea: 0d:35:4b:b8:a1:eb:1d:41:f5:f4:46:2c:3d:c1:97:e7:b8:e9: 84:18:24:7c:f0:8e:4a:09:ef:40:df:ab:cf:a5:10:e3:b2:e6: 5b:1e:63:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZPkjGhREmisnMNDANG0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDZiZjFmZjgxNmJlMGJhNGM2MjE3MTIzNDIzMzBhOWZh ZDhiZGEwHhcNMjUxMjI2MTYwMTQyWhcNMjUxMjI3MTYwMTQyWjAzMTEwLwYDVQQD EyhlY2E3ZjNmMTYzMGRkOWQwNzYxOTJmODBlNDBlNGEzZWVlNTQzYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2t28Rjnd3XW59rZd0sNtSmZb3Kb AXsF0oynCDSlK49Pw9Mu1YNrmdJbKBl0vD8jL3cC69z5p3hnM/NM9Hdj2VHpl4mS B+jMKsYuoPy+5kHQYORMhAK9ilx+NcDpHFjCzIRNVEAGh4P/tu9asgruIQMCquxn oEBAJ5URklqgOnrKeLr2R0miX1KuP8S9ZVcBuYp41KIfmNjG382v7vpxQGUL9TCo /D7X8NFURyXLyRGgDd+1xSuKpqbZ/Fy02KNXy/juVtxdHIOoSv0Ul5N7QR9qlXhK FzCYTCHZMCFdAgtWPkub+mVDfhwD4xNGtZoOuxdZbVsHpYjHraiiV4KefQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyn8/FjDdnQdhkvgOQOSj7uVDpSMB8GA1UdIwQY MBaAFF5Gvx/4Fr4LpMYhcSNCMwqfrYvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUt YjhkYjE1YjUzMWEyLzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUtYjhkYjE1YjUzMWEy LzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlD18Re7 LVz40Lv5t63GLbn+GtXq10G/kB39FKxHN5upJ1mc1UbIRjD3TDS+4hUZMP+axBkn tuz1T33BsxSM/K9He0Yu3ASCil73UE1+TOpRhr2taaBWRmJ6MZ5sIK27+KuiWFBF MNW21vX84Rqc4MGpKdyZYi2dT7L2s7tQ0cE7lrCzjcSyDlwsMYN9QJaPZRL6Wplh BYYAsEl0rxB60HXW7L6MawYrczn706H28madhHxhoo1G00eMsOy61GlpvywZHy4X B1QpLMoEqMXrsoqqWo3g/CPqDTVLuKHrHUH19EYsPcGX57jphBgkfPCOSgnvQN+r z6UQ47LmWx5jfw== -----END CERTIFICATE-----Generated at Fri Dec 26 22:48:06 2025 by rpki-client